@bendyline/gilde 0.1.39 → 0.1.41

package/authoring/tactical/evals/ci-pipeline.json

@@ -0,0 +1,227 @@
+{
+  "schemaVersion": 1,
+  "title": "CI pipeline grounded in real scripts",
+  "objective": "The craftbook authors a CI workflow for a repo that has exactly two scripts (test and lint) and no typecheck. The oracle verifies a real workflow exists under .github/workflows/, runs both real scripts with checkout and node setup pinned to major versions, triggers on push and pull_request, and invents nothing — no typecheck stage, no publish job, no fabricated secrets.",
+  "tags": [
+    "code",
+    "ci",
+    "devops",
+    "tactical-fleet"
+  ],
+  "prompt": "Use the CI Pipeline from Scratch craftbook: this repo has no CI at all. Set up a pipeline that runs on every push and pull request using what the repo already has — do not add stages for tools the repo does not use. Standard GitHub Actions layout.",
+  "setup": {
+    "projectName": "Relay Notes",
+    "about": "A small Node library with two package scripts: `npm run test` (node --test) and `npm run lint` (a repo-local lint script). No typecheck, no build step, no publish configuration.",
+    "files": [
+      {
+        "path": "package.json",
+        "content": "{\n  \"name\": \"relay-notes\",\n  \"private\": true,\n  \"version\": \"1.0.0\",\n  \"type\": \"module\",\n  \"scripts\": {\n    \"test\": \"node --test\",\n    \"lint\": \"node tools/lint.mjs\"\n  }\n}\n"
+      },
+      {
+        "path": "package-lock.json",
+        "content": "{\n  \"name\": \"relay-notes\",\n  \"version\": \"1.0.0\",\n  \"lockfileVersion\": 3,\n  \"requires\": true,\n  \"packages\": {\n    \"\": {\n      \"name\": \"relay-notes\",\n      \"version\": \"1.0.0\"\n    }\n  }\n}\n"
+      },
+      {
+        "path": "src/greet.js",
+        "content": "export function greet(name) {\n  const label = String(name ?? '').trim();\n  if (label === '') return 'Hello there!';\n  return `Hello, ${label}!`;\n}\n"
+      },
+      {
+        "path": "tools/lint.mjs",
+        "content": "import { readFileSync, readdirSync } from 'node:fs';\n\nlet problems = 0;\nfor (const file of readdirSync('src')) {\n  if (!file.endsWith('.js')) continue;\n  const text = readFileSync(`src/${file}`, 'utf8');\n  if (/\\t/.test(text)) {\n    console.error(`lint: tab indentation in src/${file}`);\n    problems++;\n  }\n}\nif (problems > 0) process.exit(1);\nconsole.log('lint ok');\n"
+      },
+      {
+        "path": "tests/greet.test.mjs",
+        "content": "import assert from 'node:assert/strict';\nimport { test } from 'node:test';\nimport { greet } from '../src/greet.js';\n\ntest('greets a trimmed name', () => {\n  assert.equal(greet('  Mira '), 'Hello, Mira!');\n});\n\ntest('falls back for an empty name', () => {\n  assert.equal(greet(''), 'Hello there!');\n});\n"
+      },
+      {
+        "path": "tests/verify-ci.mjs",
+        "surface": "harness",
+        "content": "import assert from 'node:assert/strict';\nimport { readFileSync, readdirSync } from 'node:fs';\nimport { join } from 'node:path';\n\nconst dir = '.github/workflows';\nlet names = [];\ntry {\n  names = readdirSync(dir).filter((f) => /\\.ya?ml$/i.test(f));\n} catch {}\nassert.ok(names.length >= 1, 'no workflow file exists under .github/workflows/');\nconst raw = names.map((f) => readFileSync(join(dir, f), 'utf8')).join('\\n---\\n');\n// Judge only active YAML: a comment honestly noting \"no typecheck script\"\n// must never trip the anti-invention assertions below.\nconst all = raw.replace(/#[^\\n]*/g, '');\nconsole.log('CIPIPE_ORACLE workflow found');\n\n// Checkout and Node setup, pinned to major versions.\nassert.ok(/actions\\/checkout@v\\d+/.test(all), 'uses actions/checkout pinned to a major version');\nassert.ok(/actions\\/setup-node@v\\d+/.test(all), 'uses actions/setup-node pinned to a major version');\nconsole.log('CIPIPE_ORACLE actions ok');\n\n// Runs both real scripts.\nassert.ok(/\\bnpm\\s+(?:run\\s+)?test\\b/.test(all), 'the workflow runs the test script');\nassert.ok(/\\bnpm\\s+run\\s+lint\\b/.test(all), 'the workflow runs the lint script');\nconsole.log('CIPIPE_ORACLE scripts ok');\n\n// Invokes nothing the repo does not have.\nassert.ok(!/typecheck/i.test(all), 'no invented typecheck stage - the repo has no such script');\nconst pkg = JSON.parse(readFileSync('package.json', 'utf8'));\nfor (const m of all.matchAll(/npm\\s+run\\s+([A-Za-z0-9:_-]+)/g)) {\n  if (m[1].startsWith('-')) continue;\n  assert.ok(pkg.scripts && pkg.scripts[m[1]], `workflow invokes \"npm run ${m[1]}\" but package.json has no such script`);\n}\nconsole.log('CIPIPE_ORACLE no invented commands');\n\n// Triggers on push and pull_request.\nassert.ok(/\\bpush\\b/.test(all), 'triggers on push');\nassert.ok(/\\bpull_request\\b/.test(all), 'triggers on pull_request');\nconsole.log('CIPIPE_ORACLE triggers ok');\n\n// No invented secrets, and no publish job in a repo with no release evidence.\nfor (const m of all.matchAll(/secrets\\.([A-Za-z0-9_]+)/g)) {\n  assert.equal(m[1], 'GITHUB_TOKEN', `workflow references invented secret \"${m[1]}\"`);\n}\nassert.ok(!/npm\\s+publish/.test(all), 'no publish step - the repo shows no release configuration');\nconsole.log('CIPIPE_ORACLE nothing invented');\nconsole.log('CIPIPE_ORACLE done');\n"
+      }
+    ],
+    "craftbookParams": {
+      "workPath": "tasks/eval"
+    }
+  },
+  "success": {
+    "summary": "A real GitHub Actions workflow exists at the conventional location, runs exactly the repo's two scripts on push and pull_request with pinned actions, invents no command, secret, or publish job — and every fleet artifact exists with the workflow commands verified against quoted package.json lines.",
+    "deliverables": [
+      {
+        "path": "tasks/eval/ci-plan.md",
+        "kind": "markdown-notes",
+        "artifact": true,
+        "minBytes": 500,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/ci-plan.md",
+            "pattern": "^##\\s+Detected commands[\\s\\S]*^##\\s+Pipeline stages[\\s\\S]*^##\\s+Caching[\\s\\S]*^##\\s+Triggers",
+            "flags": "im",
+            "label": "ci-plan sections in order"
+          },
+          {
+            "kind": "contains",
+            "file": "tasks/eval/ci-plan.md",
+            "pattern": "package\\.json",
+            "label": "the plan reads the real manifest"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "tasks/eval/ci-plan.md",
+            "minCitations": 2,
+            "artifact": true
+          }
+        ]
+      },
+      {
+        "path": "tasks/eval/ci-notes.md",
+        "kind": "markdown-notes",
+        "artifact": true,
+        "minBytes": 500,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/ci-notes.md",
+            "pattern": "^##\\s+Files written[\\s\\S]*^##\\s+Stages[\\s\\S]*^##\\s+Choices explained",
+            "flags": "im",
+            "label": "ci-notes sections in order"
+          },
+          {
+            "kind": "contains",
+            "file": "tasks/eval/ci-notes.md",
+            "pattern": "\\.github/workflows/",
+            "label": "names the conventional workflow location"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "tasks/eval/ci-notes.md",
+            "minCitations": 2,
+            "artifact": true
+          }
+        ]
+      },
+      {
+        "path": "tasks/eval/verification.md",
+        "kind": "markdown-notes",
+        "artifact": true,
+        "minBytes": 500,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/verification.md",
+            "pattern": "^##\\s+Workflow files[\\s\\S]*^##\\s+Commands verified against package\\.json[\\s\\S]*^##\\s+Result",
+            "flags": "im",
+            "label": "verification sections in order"
+          }
+        ]
+      },
+      {
+        "path": "tasks/eval/review.md",
+        "kind": "markdown-report",
+        "artifact": true,
+        "minBytes": 400,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/review.md",
+            "pattern": "Verdict:\\s*(?:PASS|REVISE)",
+            "flags": "i",
+            "label": "explicit reviewer verdict"
+          }
+        ]
+      }
+    ],
+    "checks": [
+      {
+        "kind": "nodeRuns",
+        "file": "tests/greet.test.mjs"
+      },
+      {
+        "kind": "nodeScriptPasses",
+        "script": "tools/lint.mjs",
+        "timeoutMs": 30000,
+        "requiredOutput": [
+          {
+            "pattern": "lint ok",
+            "label": "the repo lint still passes"
+          }
+        ]
+      },
+      {
+        "kind": "nodeScriptPasses",
+        "script": "tests/verify-ci.mjs",
+        "timeoutMs": 60000,
+        "requiredOutput": [
+          {
+            "pattern": "CIPIPE_ORACLE workflow found",
+            "label": "a workflow exists at the conventional location"
+          },
+          {
+            "pattern": "CIPIPE_ORACLE scripts ok",
+            "label": "both real scripts run in CI"
+          },
+          {
+            "pattern": "CIPIPE_ORACLE no invented commands",
+            "label": "no command invented beyond package.json"
+          },
+          {
+            "pattern": "CIPIPE_ORACLE triggers ok",
+            "label": "triggers on push and pull_request"
+          },
+          {
+            "pattern": "CIPIPE_ORACLE nothing invented",
+            "label": "no fabricated secrets or publish job"
+          }
+        ]
+      }
+    ],
+    "taskNotes": {
+      "minBytes": 120,
+      "checks": [
+        {
+          "kind": "contains",
+          "file": "task-notes.md",
+          "pattern": "\\bDONE\\b[\\s\\S]*(workflows|ci\\.yml|verification\\.md)",
+          "flags": "i",
+          "label": "DONE note names the workflow deliverable"
+        }
+      ]
+    },
+    "taskGraph": {
+      "requireCraftbookTask": true,
+      "requireTerminalStep": true
+    },
+    "unchangedFixtures": [
+      "package.json",
+      "package-lock.json",
+      "src/greet.js",
+      "tools/lint.mjs",
+      "tests/greet.test.mjs"
+    ]
+  },
+  "rubric": {
+    "artifact": {
+      "path": "tasks/eval/ci-notes.md",
+      "kind": "markdown"
+    },
+    "axes": [
+      {
+        "name": "Grounded inventory",
+        "description": "Every planned stage maps to a script that exists in package.json, quoted verbatim; no typecheck, build, or publish stage was invented for this repo."
+      },
+      {
+        "name": "Workflow quality",
+        "description": "The workflow sits at the conventional location, pins actions to major versions, orders install before lint and test, wires dependency caching, and triggers on push and pull_request."
+      },
+      {
+        "name": "Verification honesty",
+        "description": "The verify pass matched each workflow command to a quoted manifest line and is plain about what only a live CI run on the host can prove."
+      }
+    ]
+  },
+  "qualityFocus": [
+    "no invented commands or secrets",
+    "manifest-quoted verification",
+    "enforced review loop"
+  ]
+}

package/authoring/tactical/evals/codemod-sweep.json

@@ -0,0 +1,252 @@
+{
+  "schemaVersion": 1,
+  "title": "Repo-wide rename sweep with reconciled counts",
+  "objective": "The craftbook drives a complete mechanical rename of fetchUserData to loadUser across a small repo whose sites include a re-export and a template-literal log string, with a changelog legitimately excluded as history - verified mechanically by a residual scan, behavior probes on every site, and a green suite.",
+  "tags": [
+    "code",
+    "codemod",
+    "rename",
+    "tactical-fleet"
+  ],
+  "prompt": "Use the Codemod Sweep craftbook for this: rename fetchUserData to loadUser across the whole repo - the export, the re-export, every import and call site, and log strings that mention the old name. CHANGELOG.md is history and keeps the old name. The brief is in source/rename-brief.md. No behavior change.",
+  "setup": {
+    "projectName": "Profile Cards",
+    "about": "A tiny profile-rendering module with an in-memory user store. Tests run with `npm run test` (node --test).",
+    "files": [
+      {
+        "path": "package.json",
+        "content": "{\n  \"name\": \"profile-cards\",\n  \"private\": true,\n  \"version\": \"1.0.0\",\n  \"type\": \"module\",\n  \"scripts\": {\n    \"test\": \"node --test\"\n  }\n}\n"
+      },
+      {
+        "path": "src/api.js",
+        "content": "const USERS = new Map([\n  [1, { id: 1, name: 'Ada' }],\n  [2, { id: 2, name: 'Grace' }],\n]);\n\nexport function fetchUserData(id) {\n  const user = USERS.get(id);\n  if (!user) throw new Error(`no user ${id}`);\n  return { ...user };\n}\n"
+      },
+      {
+        "path": "src/index.js",
+        "content": "export { fetchUserData } from './api.js';\n"
+      },
+      {
+        "path": "src/log.js",
+        "content": "export const lines = [];\n\nexport function logLine(line) {\n  lines.push(line);\n}\n"
+      },
+      {
+        "path": "src/profile.js",
+        "content": "import { fetchUserData } from './api.js';\nimport { logLine } from './log.js';\n\nexport function profileSummary(id) {\n  const user = fetchUserData(id);\n  logLine(`fetchUserData resolved user ${user.id}`);\n  return `${user.name} (#${user.id})`;\n}\n"
+      },
+      {
+        "path": "tests/profile.test.mjs",
+        "content": "import assert from 'node:assert/strict';\nimport { test } from 'node:test';\nimport { fetchUserData } from '../src/index.js';\nimport { lines } from '../src/log.js';\nimport { profileSummary } from '../src/profile.js';\n\ntest('profileSummary renders the user line', () => {\n  assert.equal(profileSummary(1), 'Ada (#1)');\n});\n\ntest('profileSummary logs the lookup', () => {\n  profileSummary(2);\n  assert.ok(lines.some((line) => line.includes('resolved user 2')));\n});\n\ntest('the re-export serves the same function', () => {\n  assert.equal(fetchUserData(1).name, 'Ada');\n});\n"
+      },
+      {
+        "path": "CHANGELOG.md",
+        "content": "# Changelog\n\n## 1.2.0\n\n- fetchUserData now copies the record before returning it, so callers can\n  mutate the result safely.\n\n## 1.0.0\n\n- Initial release with fetchUserData and the profile summary renderer.\n"
+      },
+      {
+        "path": "source/rename-brief.md",
+        "content": "# Rename brief: fetchUserData -> loadUser\n\nThe function does not fetch anything remote any more, so the name misleads.\nRename `fetchUserData` to `loadUser` everywhere it appears: the export, the\nre-export, every import and call site, and log strings that mention the old\nname - the log lines should follow the rename too.\n\nDo not rewrite history: `CHANGELOG.md` keeps the old name, because it records\nwhat past releases were actually called.\n\nNo behavior change: same records returned, same summary strings, same number\nof log lines.\n"
+      },
+      {
+        "path": "tests/verify-sweep.mjs",
+        "surface": "harness",
+        "content": "import assert from 'node:assert/strict';\nimport { execFileSync } from 'node:child_process';\nimport { readFileSync, readdirSync, statSync } from 'node:fs';\nimport { join, relative } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nconst root = process.cwd();\n\n// 1) Residual scan: zero mentions of the old name outside the excluded\n//    history (CHANGELOG.md), the briefing material (source/), and\n//    harness-owned files.\nconst SKIP_FILES = new Set(['CHANGELOG.md', 'task-notes.md', 'task-graph.md', 'tests/verify-sweep.mjs']);\nconst SKIP_DIRS = new Set(['node_modules', 'source']);\nconst hits = [];\nfunction scan(dir) {\n  for (const entry of readdirSync(dir)) {\n    if (entry.startsWith('.')) continue;\n    const full = join(dir, entry);\n    const rel = relative(root, full).split('\\\\').join('/');\n    const stat = statSync(full);\n    if (stat.isDirectory()) {\n      if (SKIP_DIRS.has(entry)) continue;\n      scan(full);\n      continue;\n    }\n    if (SKIP_FILES.has(rel)) continue;\n    if (!/\\.(js|mjs|cjs|json|md|txt)$/.test(entry)) continue;\n    if (/\\bfetchUserData\\b/.test(readFileSync(full, 'utf8'))) hits.push(rel);\n  }\n}\nscan(root);\nassert.deepEqual(hits, [], `the old name survives outside the exclusions in: ${hits.join(', ')}`);\nconsole.log('CODEMOD_ORACLE residual scan clean');\n\n// 2) Every site behaves under the new name, including the tricky ones.\nconst api = await import(pathToFileURL(join(root, 'src/api.js')).href);\nassert.equal(typeof api.loadUser, 'function', 'src/api.js must export loadUser');\nassert.equal(api.fetchUserData, undefined, 'src/api.js still exports the old name');\nconst index = await import(pathToFileURL(join(root, 'src/index.js')).href);\nassert.equal(typeof index.loadUser, 'function', 'src/index.js must re-export loadUser');\nassert.equal(index.fetchUserData, undefined, 'src/index.js still re-exports the old name');\nassert.equal(index.loadUser(1).name, 'Ada', 'the re-exported loadUser must return the same records');\nconst { profileSummary } = await import(pathToFileURL(join(root, 'src/profile.js')).href);\nconst { lines } = await import(pathToFileURL(join(root, 'src/log.js')).href);\nassert.equal(profileSummary(1), 'Ada (#1)', 'profileSummary behavior must be unchanged');\nassert.ok(\n  lines.some((line) => line.includes('loadUser resolved user 1')),\n  'the log string must follow the rename',\n);\nassert.ok(\n  !lines.some((line) => line.includes('fetchUserData')),\n  'a log string still mentions the old name',\n);\nconsole.log('CODEMOD_ORACLE behavior ok');\n\n// 3) History kept: the excluded changelog still records the old name.\nassert.ok(\n  /\\bfetchUserData\\b/.test(readFileSync(join(root, 'CHANGELOG.md'), 'utf8')),\n  'CHANGELOG.md must keep the historical name',\n);\nconsole.log('CODEMOD_ORACLE history kept');\n\n// 4) The suite is green after the sweep, and the seeded test file survives.\nreadFileSync(join(root, 'tests/profile.test.mjs'));\nfunction runSuite(cwd) {\n  try {\n    execFileSync(process.execPath, ['--test'], { cwd, stdio: 'pipe', timeout: 30000 });\n    return 0;\n  } catch (err) {\n    return typeof err.status === 'number' ? err.status : 1;\n  }\n}\nassert.equal(runSuite(root), 0, 'the suite must be green after the sweep');\nconsole.log('CODEMOD_ORACLE suite green');\nconsole.log('CODEMOD_ORACLE done');\n"
+      }
+    ],
+    "craftbookParams": {
+      "workPath": "tasks/eval",
+      "scope": "Rename fetchUserData to loadUser everywhere, including log strings that mention it; CHANGELOG.md keeps the historical name; no behavior change. See source/rename-brief.md."
+    }
+  },
+  "success": {
+    "summary": "Zero references to the old name remain outside the excluded changelog and brief, every site (including the re-export and the log string) behaves under the new name, the suite is green, and every fleet artifact exists with counts that reconcile.",
+    "deliverables": [
+      {
+        "path": "tasks/eval/sites.md",
+        "kind": "markdown-notes",
+        "artifact": true,
+        "minBytes": 500,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/sites.md",
+            "pattern": "^##\\s+Pattern[\\s\\S]*^##\\s+Sites found[\\s\\S]*^##\\s+Exclusions",
+            "flags": "im",
+            "label": "sites sections in order"
+          },
+          {
+            "kind": "contains",
+            "file": "tasks/eval/sites.md",
+            "pattern": "src/index\\.js",
+            "label": "found the re-export site"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "tasks/eval/sites.md",
+            "minCitations": 2,
+            "artifact": true
+          }
+        ]
+      },
+      {
+        "path": "tasks/eval/change-notes.md",
+        "kind": "markdown-notes",
+        "artifact": true,
+        "minBytes": 500,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/change-notes.md",
+            "pattern": "^##\\s+Sites changed[\\s\\S]*^##\\s+Files touched[\\s\\S]*^##\\s+Invariants held",
+            "flags": "im",
+            "label": "change-notes sections in order"
+          },
+          {
+            "kind": "citationsResolve",
+            "file": "tasks/eval/change-notes.md",
+            "minCitations": 2,
+            "artifact": true
+          }
+        ]
+      },
+      {
+        "path": "tasks/eval/verification.md",
+        "kind": "markdown-notes",
+        "artifact": true,
+        "minBytes": 450,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/verification.md",
+            "pattern": "^##\\s+Residual scan[\\s\\S]*^##\\s+Counts reconciled[\\s\\S]*^##\\s+Suite[\\s\\S]*^##\\s+Result",
+            "flags": "im",
+            "label": "verification sections in order"
+          }
+        ]
+      },
+      {
+        "path": "tasks/eval/review.md",
+        "kind": "markdown-report",
+        "artifact": true,
+        "minBytes": 400,
+        "checks": [
+          {
+            "kind": "contains",
+            "file": "tasks/eval/review.md",
+            "pattern": "Verdict:\\s*(?:PASS|REVISE)",
+            "flags": "i",
+            "label": "explicit reviewer verdict"
+          }
+        ]
+      }
+    ],
+    "checks": [
+      {
+        "kind": "notContains",
+        "file": "src/api.js",
+        "pattern": "\\bfetchUserData\\b",
+        "label": "the old name is gone from the definition site"
+      },
+      {
+        "kind": "notContains",
+        "file": "src/index.js",
+        "pattern": "\\bfetchUserData\\b",
+        "label": "the old name is gone from the re-export site"
+      },
+      {
+        "kind": "notContains",
+        "file": "src/profile.js",
+        "pattern": "\\bfetchUserData\\b",
+        "label": "the old name is gone from the call site and its log string"
+      },
+      {
+        "kind": "notContains",
+        "file": "tests/profile.test.mjs",
+        "pattern": "\\bfetchUserData\\b",
+        "label": "the old name is gone from the test call sites"
+      },
+      {
+        "kind": "contains",
+        "file": "CHANGELOG.md",
+        "pattern": "\\bfetchUserData\\b",
+        "label": "the excluded changelog keeps the historical name"
+      },
+      {
+        "kind": "sourceParses",
+        "file": "src/api.js"
+      },
+      {
+        "kind": "sourceParses",
+        "file": "src/profile.js"
+      },
+      {
+        "kind": "nodeRuns",
+        "file": "tests/profile.test.mjs"
+      },
+      {
+        "kind": "nodeScriptPasses",
+        "script": "tests/verify-sweep.mjs",
+        "timeoutMs": 60000,
+        "requiredOutput": [
+          {
+            "pattern": "CODEMOD_ORACLE residual scan clean",
+            "label": "zero un-excluded sites remain"
+          },
+          {
+            "pattern": "CODEMOD_ORACLE behavior ok",
+            "label": "every site behaves under the new name"
+          },
+          {
+            "pattern": "CODEMOD_ORACLE suite green",
+            "label": "suite green after the sweep"
+          }
+        ]
+      }
+    ],
+    "taskNotes": {
+      "minBytes": 120,
+      "checks": [
+        {
+          "kind": "contains",
+          "file": "task-notes.md",
+          "pattern": "\\bDONE\\b[\\s\\S]*(npm\\s+run\\s+test|node\\s+--test)",
+          "flags": "i",
+          "label": "DONE note names the real test command"
+        }
+      ]
+    },
+    "taskGraph": {
+      "requireCraftbookTask": true,
+      "requireTerminalStep": true
+    },
+    "unchangedFixtures": [
+      "CHANGELOG.md",
+      "source/rename-brief.md",
+      "package.json",
+      "src/log.js"
+    ]
+  },
+  "rubric": {
+    "artifact": {
+      "path": "tasks/eval/verification.md",
+      "kind": "markdown"
+    },
+    "axes": [
+      {
+        "name": "Enumeration completeness",
+        "description": "Every site was found by real searches before any edit - the definition, the re-export, the imports and call sites, and the log string - with the changelog excluded for a stated reason rather than missed."
+      },
+      {
+        "name": "Invariant discipline",
+        "description": "The change stayed mechanical: nothing changed beyond the declared rename, the excluded files are untouched, and behavior is identical."
+      },
+      {
+        "name": "Reconciled verification",
+        "description": "The residual re-scan is quoted with its result, the found/changed/excluded counts add up exactly, and the suite run backing the green claim is real."
+      }
+    ]
+  },
+  "qualityFocus": [
+    "sweep completeness",
+    "count reconciliation",
+    "behavior invariants"
+  ]
+}