@attalabs/vinaya 0.19.0 → 0.19.2

package/dist/checks/bin/check-body-bare-digits.js

@@ -566,6 +566,12 @@ function factsFromLegacyMilestone(milestone) {
     lifecycle: milestone.state === "closed" ? "complete" : "active"
   };
 }
+function resolveLegacyFacts(milestone, labelIssues) {
+  if (milestone.state === "closed" && labelIssues.length > 0) {
+    return { goal: milestone.description ?? "", lifecycle: lifecycleFromIssues(labelIssues) };
+  }
+  return factsFromLegacyMilestone(milestone);
+}
 function lifecycleFromIssues(issues) {
   if (issues.length === 0)
     return "planned";
@@ -582,9 +588,9 @@ function goalFromMilestones(milestones, slug) {
 function findMilestoneForSlug(owner, repo, slug) {
   const milestones = ghApiGet(`repos/${owner}/${repo}/milestones?state=all&per_page=100`);
   const legacy = matchesLegacyMilestone(milestones, slug);
-  if (legacy)
-    return factsFromLegacyMilestone(legacy);
   const issues = ghIssueListByLabel(owner, repo, trancheLabel(slug));
+  if (legacy)
+    return resolveLegacyFacts(legacy, issues);
   return { goal: goalFromMilestones(milestones, slug), lifecycle: lifecycleFromIssues(issues) };
 }
 
@@ -2771,16 +2777,18 @@ function checkDeadBranchPush(input) {
 }
 // ../../packages/aeg-core/src/reader-resolvable-prose.ts
 var SHIPS_PREFIX = "aeg-root/";
-var SHIPS_ARCHIVE_PREFIX = "aeg-root/tranches/completed/";
+function shipsArchivePrefix(shipsPrefix) {
+  return `${shipsPrefix}tranches/completed/`;
+}
 function isSpecFile2(path) {
   return path.startsWith("apps/") && path.includes("/specs/") && path.endsWith(".md");
 }
 function isClaudeMdFile(path) {
   return path === "CLAUDE.md" || path.endsWith("/CLAUDE.md");
 }
-function classifyProseFile(path, readerFacingPrefix, readerFacingSuffix) {
-  if (path.startsWith(SHIPS_PREFIX)) {
-    return path.startsWith(SHIPS_ARCHIVE_PREFIX) ? "internal" : "ships";
+function classifyProseFile(path, readerFacingPrefix, readerFacingSuffix, shipsPrefix = SHIPS_PREFIX) {
+  if (path.startsWith(shipsPrefix)) {
+    return path.startsWith(shipsArchivePrefix(shipsPrefix)) ? "internal" : "ships";
   }
   if (path.startsWith(readerFacingPrefix) && path.endsWith(readerFacingSuffix)) {
     return "reader-facing";
@@ -2815,7 +2823,7 @@ function legacySlugPattern(legacySlugs) {
   const alternation = legacySlugs.map((s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|");
   return new RegExp(`(^|[^a-zA-Z0-9\\n-])(${alternation})([^a-zA-Z0-9\\n-]|$)`, "g");
 }
-function checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs = []) {
+function checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs = [], shipsPrefix = SHIPS_PREFIX) {
   const findings = [];
   const legacyPattern = legacySlugPattern(legacySlugs);
   const patterns = [
@@ -2824,7 +2832,7 @@ function checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuff
     ...legacyPattern ? [{ pattern: legacyPattern, what: "an internal tranche slug", group: 2 }] : []
   ];
   for (const file of files) {
-    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix);
+    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix, shipsPrefix);
     if (!cls || !SWEPT_CLASSES.has(cls))
       continue;
     const scrubbed = stripNonProse(file.path, file.content);
@@ -2870,10 +2878,10 @@ function definesOrLinksGlossary(content, term) {
     return true;
   return /docs\/glossary|glossary\.md/i.test(content);
 }
-function checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix) {
+function checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, shipsPrefix = SHIPS_PREFIX) {
   const findings = [];
   for (const file of files) {
-    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix);
+    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix, shipsPrefix);
     if (!cls || !SWEPT_CLASSES.has(cls))
       continue;
     const scrubbed = stripNonProse(file.path, file.content);
@@ -2892,10 +2900,10 @@ function checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, read
   }
   return findings;
 }
-function checkReaderResolvableProse(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, legacySlugs = []) {
+function checkReaderResolvableProse(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, legacySlugs = [], shipsPrefix = SHIPS_PREFIX) {
   return [
-    ...checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs),
-    ...checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix)
+    ...checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs, shipsPrefix),
+    ...checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, shipsPrefix)
   ];
 }
 function parseGlossaryTerms(glossaryContent) {
@@ -2909,6 +2917,101 @@ function parseGlossaryTerms(glossaryContent) {
   }
   return terms;
 }
+// ../../packages/aeg-core/src/retired-vocabulary.ts
+var RETIRED_PATTERNS = [
+  String.raw`\bD-[0-9]{3}\b`,
+  "D-(###|NNN|nnn|xxx)",
+  "decision (entry|logged)",
+  "decision-log entry",
+  "decision log entry",
+  "decision log(s|ged|ging)?([^a-z]|$)",
+  "decision-log",
+  "decision entr",
+  "decisions? (are |is )?logged",
+  "log entries",
+  String.raw`decisions\.md`,
+  "decisions-legacy",
+  "CONTRADICTION",
+  "assumes Tier 3",
+  "Lock: ?YES",
+  "Lock: ?NO",
+  "lock approvals?",
+  "approves locks",
+  "Conforms to lock",
+  "Challenges lock",
+  "checkDecisionNumbersFresh",
+  String.raw`roles/team-leader\.md`,
+  String.raw`\(,`,
+  String.raw`,\)`,
+  String.raw`\(\.\)`
+];
+var RETIRED_EXEMPT_SUBSTRINGS = [
+  "docs/decisions-legacy.md",
+  "apps/herald-ai/docs/",
+  "apps/vada-ai/docs/",
+  "aeg-root/tranches/completed/",
+  "packages/aeg-core/src/docs/published-prose",
+  "packages/aeg-core/src/retired-vocabulary.test.ts",
+  "packages/aeg-core/src/retired-vocabulary.ts",
+  "/fixtures/",
+  "/node_modules/",
+  "/.next/",
+  "/.turbo/"
+];
+var PATTERN_EXEMPT = {
+  [String.raw`\bD-[0-9]{3}\b`]: ["./CLAUDE.md"],
+  [String.raw`decisions\.md`]: [
+    "docs-index.md",
+    "apps/vada-ai/specs/legacy/README.md",
+    "apps/vada-ai/specs/vada-product-spec.md",
+    "apps/vada-ai/web/CLAUDE.md",
+    "apps/vada-ai/CLAUDE.md"
+  ],
+  "decisions-legacy": [
+    "packages/aeg-core/src/file-classify.ts",
+    "packages/aeg-core/src/file-classify.test.ts",
+    "packages/aeg-core/src/pr-tier.test.ts",
+    "docs-index.md",
+    ".claude/skills/database/SKILL.md",
+    ".claude/skills/vada-architecture/SKILL.md",
+    "apps/vada-ai/specs/vada-byok-principles.md",
+    "apps/vada-ai/web/CLAUDE.md",
+    "apps/vada-ai/CLAUDE.md"
+  ],
+  CONTRADICTION: ["apps/vada-ai/specs/vada-reviewers-spec.md"]
+};
+function lineNumbers(content, pattern) {
+  const out = [];
+  const lines = content.split(`
+`);
+  for (let i = 0;i < lines.length; i++) {
+    if (pattern.test(lines[i] ?? ""))
+      out.push(i + 1);
+  }
+  return out;
+}
+function scanRetiredVocabulary(files) {
+  const findings = [];
+  for (const file of files) {
+    if (RETIRED_EXEMPT_SUBSTRINGS.some((e) => file.path.includes(e)))
+      continue;
+    for (const pattern of RETIRED_PATTERNS) {
+      const patternExempt = PATTERN_EXEMPT[pattern] ?? [];
+      if (patternExempt.some((e) => file.path.includes(e)))
+        continue;
+      const re = new RegExp(pattern);
+      for (const line of lineNumbers(file.content, re)) {
+        findings.push({
+          file: file.path,
+          line,
+          pattern,
+          message: `claims a retired AEG mechanism is still live (matches /${pattern}/)`
+        });
+      }
+    }
+  }
+  return findings;
+}
 // ../../packages/aeg-core/src/dispatch-gate.ts
 function isHandClosedByRecognizedPrincipal(dep, principalAllowlist) {
   return dep.issueState === "closed" && dep.stateReason === "completed" && isPrincipal(dep.closedByActor ?? null, principalAllowlist);
@@ -3164,9 +3267,15 @@ function evaluateTestPlanGate(body, branch) {
 }
 // src/lib/config.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { z } from "zod";
+
+// src/lib/agent-vendors.ts
+var AGENT_VENDORS = ["skills", "claude", "gemini"];
+
+// src/lib/config.ts
 var EnvEntrySchema = z.union([
   z.literal(true),
   z.object({ optional: z.literal(true) }),
@@ -3205,6 +3314,11 @@ var CheckEntrySchema = z.object({
     }
   }
 });
+var RoleEntrySchema = z.object({
+  contract: z.string().refine((p) => p.includes("/"), {
+    message: 'must be a path (contain at least one "/"), not a bare filename'
+  })
+});
 var BRIEF_BUILTINS = [
   "tier",
   "testPlan",
@@ -3253,7 +3367,8 @@ var ManagedManifestSchema = z.object({
   version: z.number().int().positive(),
   files: z.array(SafeRepoRelPath),
   blocks: z.array(ManagedBlockRecordSchema),
-  labels: z.array(z.string())
+  labels: z.array(z.string()),
+  agents: z.array(z.enum(AGENT_VENDORS)).optional()
 });
 var VinayaConfigSchema = z.object({
   rings: z.object({
@@ -3261,16 +3376,79 @@ var VinayaConfigSchema = z.object({
     ring2_asyncAudits: z.boolean()
   }).optional(),
   checks: z.record(z.string(), CheckEntrySchema).optional(),
+  roles: z.record(z.string(), RoleEntrySchema).optional(),
   briefSchema: BriefSchemaSchema.optional(),
   managed: ManagedManifestSchema.optional(),
   principals: z.array(z.string()).min(1).optional(),
   releaseActor: z.string().min(1).optional(),
   ci: z.object({ setup: z.string().min(1) }).optional(),
-  blastRadius: z.object({ extraDomains: z.array(z.string()).optional() }).optional()
+  blastRadius: z.object({ extraDomains: z.array(z.string()).optional() }).optional(),
+  proseGates: z.object({
+    doctrineRoot: z.string().min(1).optional(),
+    readerFacingPrefix: z.string().min(1).optional(),
+    readerFacingSuffix: z.string().min(1).optional(),
+    legacySlugDir: z.string().min(1).optional()
+  }).optional()
 });
 var GLOBAL_VINAYA_HOME = join(homedir(), ".vinaya");
 var GLOBAL_CONFIG_PATH = join(GLOBAL_VINAYA_HOME, "config.json");
 var LOCAL_CONFIG_FILENAME = "vinaya.config.json";
+function findLocalConfig() {
+  let dir = process.cwd();
+  while (true) {
+    const candidate = join(dir, LOCAL_CONFIG_FILENAME);
+    if (existsSync(candidate))
+      return candidate;
+    if (existsSync(join(dir, ".git")))
+      return null;
+    const parent = dirname(dir);
+    if (parent === dir)
+      return null;
+    dir = parent;
+  }
+}
+function configPath() {
+  const local = findLocalConfig();
+  if (local)
+    return local;
+  if (existsSync(GLOBAL_CONFIG_PATH))
+    return GLOBAL_CONFIG_PATH;
+  return null;
+}
+function globalChecksIgnoredWarning(path) {
+  return `${path}: "checks" registration in the global config is ignored — checks may only be registered from a repo-local vinaya.config.json.`;
+}
+function globalPrincipalsIgnoredWarning(path) {
+  return `${path}: "principals" in the global config is ignored — principals may only be declared from a repo-local vinaya.config.json.`;
+}
+function globalRolesIgnoredWarning(path) {
+  return `${path}: "roles" registration in the global config is ignored — roles may only be registered from a repo-local vinaya.config.json.`;
+}
+function globalReleaseActorIgnoredWarning(path) {
+  return `${path}: "releaseActor" in the global config is ignored — releaseActor may only be declared from a repo-local vinaya.config.json.`;
+}
+function stripGlobalOnlyKeys(config, path) {
+  if (path !== GLOBAL_CONFIG_PATH)
+    return config;
+  let result = config;
+  if (result.checks && Object.keys(result.checks).length > 0) {
+    console.error(`⚠ ${globalChecksIgnoredWarning(path)}`);
+    result = { ...result, checks: undefined };
+  }
+  if (result.roles && Object.keys(result.roles).length > 0) {
+    console.error(`⚠ ${globalRolesIgnoredWarning(path)}`);
+    result = { ...result, roles: undefined };
+  }
+  if (result.principals && result.principals.length > 0) {
+    console.error(`⚠ ${globalPrincipalsIgnoredWarning(path)}`);
+    result = { ...result, principals: undefined };
+  }
+  if (result.releaseActor) {
+    console.error(`⚠ ${globalReleaseActorIgnoredWarning(path)}`);
+    result = { ...result, releaseActor: undefined };
+  }
+  return result;
+}
 function resolvePrincipalAllowlist(config) {
   return config?.principals ?? PRINCIPAL_ALLOWLIST;
 }
@@ -3343,6 +3521,17 @@ function loadTrustAnchorConfig(fetcher = ghFetchTrustAnchorConfig) {
     return null;
   }
 }
+function loadConfig() {
+  const path = configPath();
+  if (!path)
+    return null;
+  try {
+    const raw = JSON.parse(readFileSync(path, "utf-8"));
+    return stripGlobalOnlyKeys(VinayaConfigSchema.parse(raw), path);
+  } catch {
+    return null;
+  }
+}
 
 // src/checks/contract.ts
 var CHECK_SCHEMA_VERSION = 1;

package/dist/checks/bin/check-branch-topology.js

@@ -565,6 +565,12 @@ function factsFromLegacyMilestone(milestone) {
     lifecycle: milestone.state === "closed" ? "complete" : "active"
   };
 }
+function resolveLegacyFacts(milestone, labelIssues) {
+  if (milestone.state === "closed" && labelIssues.length > 0) {
+    return { goal: milestone.description ?? "", lifecycle: lifecycleFromIssues(labelIssues) };
+  }
+  return factsFromLegacyMilestone(milestone);
+}
 function lifecycleFromIssues(issues) {
   if (issues.length === 0)
     return "planned";
@@ -581,9 +587,9 @@ function goalFromMilestones(milestones, slug) {
 function findMilestoneForSlug(owner, repo, slug) {
   const milestones = ghApiGet(`repos/${owner}/${repo}/milestones?state=all&per_page=100`);
   const legacy = matchesLegacyMilestone(milestones, slug);
-  if (legacy)
-    return factsFromLegacyMilestone(legacy);
   const issues = ghIssueListByLabel(owner, repo, trancheLabel(slug));
+  if (legacy)
+    return resolveLegacyFacts(legacy, issues);
   return { goal: goalFromMilestones(milestones, slug), lifecycle: lifecycleFromIssues(issues) };
 }
 
@@ -2770,16 +2776,18 @@ function checkDeadBranchPush(input) {
 }
 // ../../packages/aeg-core/src/reader-resolvable-prose.ts
 var SHIPS_PREFIX = "aeg-root/";
-var SHIPS_ARCHIVE_PREFIX = "aeg-root/tranches/completed/";
+function shipsArchivePrefix(shipsPrefix) {
+  return `${shipsPrefix}tranches/completed/`;
+}
 function isSpecFile2(path) {
   return path.startsWith("apps/") && path.includes("/specs/") && path.endsWith(".md");
 }
 function isClaudeMdFile(path) {
   return path === "CLAUDE.md" || path.endsWith("/CLAUDE.md");
 }
-function classifyProseFile(path, readerFacingPrefix, readerFacingSuffix) {
-  if (path.startsWith(SHIPS_PREFIX)) {
-    return path.startsWith(SHIPS_ARCHIVE_PREFIX) ? "internal" : "ships";
+function classifyProseFile(path, readerFacingPrefix, readerFacingSuffix, shipsPrefix = SHIPS_PREFIX) {
+  if (path.startsWith(shipsPrefix)) {
+    return path.startsWith(shipsArchivePrefix(shipsPrefix)) ? "internal" : "ships";
   }
   if (path.startsWith(readerFacingPrefix) && path.endsWith(readerFacingSuffix)) {
     return "reader-facing";
@@ -2814,7 +2822,7 @@ function legacySlugPattern(legacySlugs) {
   const alternation = legacySlugs.map((s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|");
   return new RegExp(`(^|[^a-zA-Z0-9\\n-])(${alternation})([^a-zA-Z0-9\\n-]|$)`, "g");
 }
-function checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs = []) {
+function checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs = [], shipsPrefix = SHIPS_PREFIX) {
   const findings = [];
   const legacyPattern = legacySlugPattern(legacySlugs);
   const patterns = [
@@ -2823,7 +2831,7 @@ function checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuff
     ...legacyPattern ? [{ pattern: legacyPattern, what: "an internal tranche slug", group: 2 }] : []
   ];
   for (const file of files) {
-    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix);
+    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix, shipsPrefix);
     if (!cls || !SWEPT_CLASSES.has(cls))
       continue;
     const scrubbed = stripNonProse(file.path, file.content);
@@ -2869,10 +2877,10 @@ function definesOrLinksGlossary(content, term) {
     return true;
   return /docs\/glossary|glossary\.md/i.test(content);
 }
-function checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix) {
+function checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, shipsPrefix = SHIPS_PREFIX) {
   const findings = [];
   for (const file of files) {
-    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix);
+    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix, shipsPrefix);
     if (!cls || !SWEPT_CLASSES.has(cls))
       continue;
     const scrubbed = stripNonProse(file.path, file.content);
@@ -2891,10 +2899,10 @@ function checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, read
   }
   return findings;
 }
-function checkReaderResolvableProse(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, legacySlugs = []) {
+function checkReaderResolvableProse(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, legacySlugs = [], shipsPrefix = SHIPS_PREFIX) {
   return [
-    ...checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs),
-    ...checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix)
+    ...checkUnresolvableReferences(files, readerFacingPrefix, readerFacingSuffix, legacySlugs, shipsPrefix),
+    ...checkUndefinedVocabulary(files, glossaryTerms, readerFacingPrefix, readerFacingSuffix, shipsPrefix)
   ];
 }
 function parseGlossaryTerms(glossaryContent) {
@@ -2908,6 +2916,101 @@ function parseGlossaryTerms(glossaryContent) {
   }
   return terms;
 }
+// ../../packages/aeg-core/src/retired-vocabulary.ts
+var RETIRED_PATTERNS = [
+  String.raw`\bD-[0-9]{3}\b`,
+  "D-(###|NNN|nnn|xxx)",
+  "decision (entry|logged)",
+  "decision-log entry",
+  "decision log entry",
+  "decision log(s|ged|ging)?([^a-z]|$)",
+  "decision-log",
+  "decision entr",
+  "decisions? (are |is )?logged",
+  "log entries",
+  String.raw`decisions\.md`,
+  "decisions-legacy",
+  "CONTRADICTION",
+  "assumes Tier 3",
+  "Lock: ?YES",
+  "Lock: ?NO",
+  "lock approvals?",
+  "approves locks",
+  "Conforms to lock",
+  "Challenges lock",
+  "checkDecisionNumbersFresh",
+  String.raw`roles/team-leader\.md`,
+  String.raw`\(,`,
+  String.raw`,\)`,
+  String.raw`\(\.\)`
+];
+var RETIRED_EXEMPT_SUBSTRINGS = [
+  "docs/decisions-legacy.md",
+  "apps/herald-ai/docs/",
+  "apps/vada-ai/docs/",
+  "aeg-root/tranches/completed/",
+  "packages/aeg-core/src/docs/published-prose",
+  "packages/aeg-core/src/retired-vocabulary.test.ts",
+  "packages/aeg-core/src/retired-vocabulary.ts",
+  "/fixtures/",
+  "/node_modules/",
+  "/.next/",
+  "/.turbo/"
+];
+var PATTERN_EXEMPT = {
+  [String.raw`\bD-[0-9]{3}\b`]: ["./CLAUDE.md"],
+  [String.raw`decisions\.md`]: [
+    "docs-index.md",
+    "apps/vada-ai/specs/legacy/README.md",
+    "apps/vada-ai/specs/vada-product-spec.md",
+    "apps/vada-ai/web/CLAUDE.md",
+    "apps/vada-ai/CLAUDE.md"
+  ],
+  "decisions-legacy": [
+    "packages/aeg-core/src/file-classify.ts",
+    "packages/aeg-core/src/file-classify.test.ts",
+    "packages/aeg-core/src/pr-tier.test.ts",
+    "docs-index.md",
+    ".claude/skills/database/SKILL.md",
+    ".claude/skills/vada-architecture/SKILL.md",
+    "apps/vada-ai/specs/vada-byok-principles.md",
+    "apps/vada-ai/web/CLAUDE.md",
+    "apps/vada-ai/CLAUDE.md"
+  ],
+  CONTRADICTION: ["apps/vada-ai/specs/vada-reviewers-spec.md"]
+};
+function lineNumbers(content, pattern) {
+  const out = [];
+  const lines = content.split(`
+`);
+  for (let i = 0;i < lines.length; i++) {
+    if (pattern.test(lines[i] ?? ""))
+      out.push(i + 1);
+  }
+  return out;
+}
+function scanRetiredVocabulary(files) {
+  const findings = [];
+  for (const file of files) {
+    if (RETIRED_EXEMPT_SUBSTRINGS.some((e) => file.path.includes(e)))
+      continue;
+    for (const pattern of RETIRED_PATTERNS) {
+      const patternExempt = PATTERN_EXEMPT[pattern] ?? [];
+      if (patternExempt.some((e) => file.path.includes(e)))
+        continue;
+      const re = new RegExp(pattern);
+      for (const line of lineNumbers(file.content, re)) {
+        findings.push({
+          file: file.path,
+          line,
+          pattern,
+          message: `claims a retired AEG mechanism is still live (matches /${pattern}/)`
+        });
+      }
+    }
+  }
+  return findings;
+}
 // ../../packages/aeg-core/src/dispatch-gate.ts
 function isHandClosedByRecognizedPrincipal(dep, principalAllowlist) {
   return dep.issueState === "closed" && dep.stateReason === "completed" && isPrincipal(dep.closedByActor ?? null, principalAllowlist);