@cejel/cejel 0.1.10 → 0.2.1

package/README.md

@@ -18,7 +18,10 @@ certificate + badge over all of them. See "Aggregate your scanners" below.
 
 > Dogfooded in production. Cejel is run continuously on Barg Labs' own multi-product
 > monorepo — the ten-product studio it was built inside — which it currently scores
-> 3.1/4.0 ("Conditional"). We score ourselves before asking you to score yourself.
+> 3.3/4.0 on its rubric-native certificate. That transparency snapshot opts into prospective
+> v18; the public CLI default remains calibrated v17. On the comparative board, our code sits
+> outside the ranked population and receives no verdict band. We score ourselves before
+> asking you to score yourself.
 
 ## Install
 
@@ -99,16 +102,17 @@ gh attestation verify ./cejel-Darwin-arm64 -R BargLabs/cejel
 This is cryptographically signed provenance. It is distinct from Apple Developer ID or
 Microsoft Authenticode code-signing.
 
-**Docker / OCI.** The same MCP server is published as a non-root, multi-platform image:
+**Docker / OCI.** The current container release is `0.2.0` (container releases are
+versioned independently from npm-only patches):
 
 ```bash
-docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.1.10
+docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.2.0
 ```
 
 The image defaults to `cejel-mcp` over stdio. To use the CLI instead:
 
 ```bash
-docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.1.10 .
+docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.2.0 .
 ```
 
 The OCI image carries an SBOM, maximum-mode build provenance, and a signed registry

package/dist/{chunk-EFOUXVJE.js → chunk-BR2DO4QJ.js}

@@ -4079,8 +4079,7 @@ var WITAN_RUBRIC_VERSION_V5 = "witan-rubric-v5-2026-07-18";
 var WITAN_RUBRIC_VERSION_V6 = "witan-rubric-v6-2026-07-21";
 var WITAN_RUBRIC_VERSION_V7 = "witan-rubric-v7-2026-07-21";
 var WITAN_RUBRIC_VERSION_V8 = "witan-rubric-v8-2026-07-21";
-var WITAN_RUBRIC_VERSION_V9 = "witan-rubric-v9-2026-07-22";
-var WITAN_RUBRIC_VERSION = WITAN_RUBRIC_VERSION_V9;
+var WITAN_RUBRIC_VERSION = "witan-rubric-v17-2026-07-24";
 var WITAN_TRADING_RUBRIC_VERSION_V0 = "witan-trading-rubric-v0-2026-07-01";
 var WITAN_CRITERION_IDS = [
   "A1",
@@ -4369,7 +4368,7 @@ var WitanAttestationStatementSchema = external_exports.object({
 var WITAN_NO_MEASUREMENT_REASON = "No free-core rubric criterion produced a measurable signal. Cejel abstains rather than publish a numeric zero for an entirely unmeasured repository.";
 var WITAN_AUTHENTICATED_A1_ABSENCE_SUMMARY = "Reviewable source is present, but the complete tracked inventory contains no concrete test file, configured test runner, CI test command, or coverage configuration.";
 function isWitanNoMeasurementAbstention(report) {
-  return report.verdict === "insufficient_source" && report.insufficientSourceReason === WITAN_NO_MEASUREMENT_REASON && report.criteria.every(
+  return report.verdict === "insufficient_source" && report.insufficientSourceReason.startsWith(WITAN_NO_MEASUREMENT_REASON) && report.criteria.every(
     ({ status }) => status === "not_applicable" || status === "insufficient_data"
   );
 }
@@ -5078,7 +5077,7 @@ function stripBom(text) {
 }
 
 // src/witan/rubric-version.ts
-var WITAN_RUBRIC_VERSION_V92 = "witan-rubric-v9-2026-07-22";
+var WITAN_RUBRIC_VERSION_V9 = "witan-rubric-v9-2026-07-22";
 var WITAN_RUBRIC_VERSION_V10 = "witan-rubric-v10-2026-07-23";
 var WITAN_RUBRIC_VERSION_V11 = "witan-rubric-v11-2026-07-23";
 var WITAN_RUBRIC_VERSION_V12 = "witan-rubric-v12-2026-07-23";
@@ -5087,8 +5086,12 @@ var WITAN_RUBRIC_VERSION_V14 = "witan-rubric-v14-2026-07-23";
 var WITAN_RUBRIC_VERSION_V15 = "witan-rubric-v15-2026-07-24";
 var WITAN_RUBRIC_VERSION_V16 = "witan-rubric-v16-2026-07-24";
 var WITAN_RUBRIC_VERSION_V17 = "witan-rubric-v17-2026-07-24";
+var WITAN_RUBRIC_VERSION_V18 = "witan-rubric-v18-prospective-2026-07-25";
 
 // src/witan/repo-signals.ts
+function usesV17DetectorClosure(rubricVersion) {
+  return rubricVersion === WITAN_RUBRIC_VERSION_V17 || rubricVersion === WITAN_RUBRIC_VERSION_V18;
+}
 function buildWitanInputFromRepo(options) {
   assertRepoPathExists(options.repoPath);
   const generatedAt = options.generatedAt ?? (/* @__PURE__ */ new Date()).toISOString();
@@ -5097,26 +5100,27 @@ function buildWitanInputFromRepo(options) {
   const repoFiles = listRepoFiles(options.repoPath);
   const inventoryFiles = listRepoInventory(options.repoPath, repoFiles);
   const ignoredTargetReason = repoFiles.length === 0 ? explainIgnoredScanTarget(options.repoPath) : void 0;
-  const usesV17Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V17;
+  const usesV17Detectors = usesV17DetectorClosure(rubricVersion);
+  const usesV18NativeRls = rubricVersion === WITAN_RUBRIC_VERSION_V18;
   const structuralArchetype = classifyRepoArchetype(inventoryFiles, rubricVersion);
-  const readableArchetype = rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17 ? applyReadableSourceRepresentationGate(
+  const readableArchetype = rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion) ? applyReadableSourceRepresentationGate(
     options.repoPath,
     inventoryFiles,
     structuralArchetype,
     headSha,
     rubricVersion
   ) : structuralArchetype;
-  const gatedArchetype = rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17 ? applySemanticSourceRepresentationGate(
+  const gatedArchetype = rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion) ? applySemanticSourceRepresentationGate(
     options.repoPath,
     inventoryFiles,
     readableArchetype,
     rubricVersion
   ) : readableArchetype;
-  const usesV8Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V8 || rubricVersion === WITAN_RUBRIC_VERSION_V92 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17;
-  const usesV33Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V92 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17;
-  const usesV36Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17;
-  const usesV39Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17;
-  const usesV47Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17;
+  const usesV8Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V8 || rubricVersion === WITAN_RUBRIC_VERSION_V9 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion);
+  const usesV33Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V9 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion);
+  const usesV36Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion);
+  const usesV39Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion);
+  const usesV47Detectors = rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion);
   const reviewableSourceProof = usesV17Detectors ? buildReviewableSourceProof(options.repoPath, inventoryFiles, headSha, rubricVersion) : void 0;
   const coreSignals = collectRepoSignals(
     options.repoPath,
@@ -5127,6 +5131,7 @@ function buildWitanInputFromRepo(options) {
     usesV36Detectors,
     usesV39Detectors,
     usesV47Detectors,
+    usesV18NativeRls,
     reviewableSourceProof
   );
   const archetype = usesV17Detectors && reviewableSourceProof?.passes === true && isV17RescuableAbstention(gatedArchetype.abstentionKind) && coreSignals.some(isMeasuredCriterionSignal) ? {
@@ -5234,7 +5239,7 @@ var SOURCE_EXTENSION_PATTERN_V10 = new RegExp(
   "i"
 );
 function isRecognizedSourcePath(path, rubricVersion = WITAN_RUBRIC_VERSION) {
-  return (rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17 ? SOURCE_EXTENSION_PATTERN_V10 : SOURCE_EXTENSION_PATTERN).test(path);
+  return (rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion) ? SOURCE_EXTENSION_PATTERN_V10 : SOURCE_EXTENSION_PATTERN).test(path);
 }
 var BUNDLED_BINARY_EXTENSION_PATTERN = /\.(vsix|zip|tgz|whl|exe|dmg|pkg|msi|jar|war|apk|ipa|dll|dylib|ttf|otf|woff2?|eot|eps)$/i;
 var DOCS_OR_MEDIA_EXTENSION_PATTERN = /\.(md|mdx|rst|png|jpe?g|gif|svg|webp|ico|pdf)$/i;
@@ -5250,6 +5255,7 @@ var SOURCE_DOMINANCE_RATIO_THRESHOLD_V8 = 0.2;
 var SOURCE_DOMINANCE_RATIO_THRESHOLD_V9 = 0.8;
 var SOURCE_DOMINANCE_RATIO_THRESHOLD_V10 = 0.5;
 var SOURCE_DOMINANCE_RATIO_THRESHOLD_V11 = 0.2;
+var V17_REVIEWABLE_SOURCE_RATABLE_SHARE_THRESHOLD = 0.2;
 var GENERATED_SOURCE_MINIMUM = 8;
 var GENERATED_SOURCE_RATIO_THRESHOLD = 0.8;
 var GENERATED_AUTHORED_MAXIMUM = 3;
@@ -5293,7 +5299,7 @@ function classifyRepoArchetype(repoFiles, rubricVersion = WITAN_RUBRIC_VERSION)
       insufficientSourceReason: `${catalogSourceFiles.length} of ${sourceFileCount} source-shaped file(s) are under independent solution, exercise, challenge, or algorithm catalog paths; only ${sourceFileCount - catalogSourceFiles.length} source-shaped file(s) remain outside that catalog. Cejel abstains because the repository does not expose one cohesive product implementation to score. ${INGEST_POINTER}`
     };
   }
-  if (rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17) {
+  if (rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion)) {
     const authoredSourceFiles = sourceFiles.filter(isAuthoredProductionPath);
     const documentationFiles = repoFiles.filter(
       (file) => DOCS_OR_MEDIA_EXTENSION_PATTERN.test(file)
@@ -5311,7 +5317,7 @@ function classifyRepoArchetype(repoFiles, rubricVersion = WITAN_RUBRIC_VERSION)
       (file) => ARTIFACT_DOMINANCE_EXTENSION_PATTERN.test(file)
     );
     const materialFiles = authoredSourceFiles.length + artifactFiles.length;
-    if (artifactFiles.length >= 10 && (authoredSourceFiles.length <= 10 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17) && materialFiles > 0 && authoredSourceFiles.length / materialFiles <= 0.1) {
+    if (artifactFiles.length >= 10 && (authoredSourceFiles.length <= 10 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion)) && materialFiles > 0 && authoredSourceFiles.length / materialFiles <= 0.1) {
       return {
         archetype: "binary_only",
         sourceFileCount,
@@ -5338,7 +5344,7 @@ function classifyRepoArchetype(repoFiles, rubricVersion = WITAN_RUBRIC_VERSION)
     const docsDistributionFiles = repoFiles.filter(
       (file) => DOCS_OR_MEDIA_EXTENSION_PATTERN.test(file) || DOC_DISTRIBUTION_COMPANION_PATTERN.test(file)
     );
-    if (docsFiles.length > 0 && (docsDistributionFiles.length === totalFileCount || (rubricVersion === WITAN_RUBRIC_VERSION_V92 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17) && unrecognisedSourceFiles.length === 0)) {
+    if (docsFiles.length > 0 && (docsDistributionFiles.length === totalFileCount || (rubricVersion === WITAN_RUBRIC_VERSION_V9 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion)) && unrecognisedSourceFiles.length === 0)) {
       return {
         archetype: "docs_only",
         sourceFileCount,
@@ -5457,6 +5463,23 @@ function isRepresentativeSourceText(contents) {
 function representativeSourceRank(rankKey, file) {
   return createHash2("sha256").update(`${rankKey}:${file}`).digest("hex");
 }
+function explainNoMeasurementSourceCoverage(repoPath, rubricVersion) {
+  if (!usesV17DetectorClosure(rubricVersion)) return void 0;
+  const repoFiles = listRepoFiles(repoPath);
+  const inventoryFiles = listRepoInventory(repoPath, repoFiles);
+  const proof = buildReviewableSourceProof(
+    repoPath,
+    inventoryFiles,
+    readGitHead(repoPath),
+    rubricVersion
+  );
+  if (proof.sourceShapedFileCount === 0) return void 0;
+  const ratableShare = proof.eligibleSourceFileCount / proof.sourceShapedFileCount;
+  if (ratableShare >= V17_REVIEWABLE_SOURCE_RATABLE_SHARE_THRESHOLD) return void 0;
+  const ratablePct = (ratableShare * 100).toFixed(1);
+  const thresholdPct = (V17_REVIEWABLE_SOURCE_RATABLE_SHARE_THRESHOLD * 100).toFixed(0);
+  return `${WITAN_NO_MEASUREMENT_REASON} Source coverage: ${proof.eligibleSourceFileCount} of ${proof.sourceShapedFileCount} source-shaped files (${ratablePct}%) are criterion-ratable, below the ${thresholdPct}% reviewable-source threshold (${inventoryFiles.length} tracked files in total).`;
+}
 function buildReviewableSourceProof(repoPath, repoFiles, headSha, rubricVersion) {
   const sourceShapedFiles = repoFiles.filter(
     (path) => isRecognizedSourcePath(path, rubricVersion) || isUnrecognisedSourcePath(path, rubricVersion) || /\.ipynb$/i.test(path)
@@ -5481,7 +5504,7 @@ function buildReviewableSourceProof(repoPath, repoFiles, headSha, rubricVersion)
     sampledFileCount: sample.length,
     readableSampledFileCount: readablePaths.length,
     ...readablePaths[0] ? { firstReadablePath: readablePaths[0] } : {},
-    passes: eligibleSourceFiles.length > 0 && ratableShare >= 0.2 && readablePaths.length > 0 && (readableShare >= 0.75 || readablePaths.length >= 8)
+    passes: eligibleSourceFiles.length > 0 && ratableShare >= V17_REVIEWABLE_SOURCE_RATABLE_SHARE_THRESHOLD && readablePaths.length > 0 && (readableShare >= 0.75 || readablePaths.length >= 8)
   };
 }
 function applyReadableSourceRepresentationGate(repoPath, repoFiles, classification, headSha, rubricVersion) {
@@ -5623,11 +5646,11 @@ function readRepresentativeSourceText(repoPath, file) {
   }
 }
 function sourceDominanceThreshold(rubricVersion) {
-  if (rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17) {
+  if (rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion)) {
     return SOURCE_DOMINANCE_RATIO_THRESHOLD_V11;
   }
   if (rubricVersion === WITAN_RUBRIC_VERSION_V10) return SOURCE_DOMINANCE_RATIO_THRESHOLD_V10;
-  if (rubricVersion === WITAN_RUBRIC_VERSION_V92) return SOURCE_DOMINANCE_RATIO_THRESHOLD_V9;
+  if (rubricVersion === WITAN_RUBRIC_VERSION_V9) return SOURCE_DOMINANCE_RATIO_THRESHOLD_V9;
   return SOURCE_DOMINANCE_RATIO_THRESHOLD_V8;
 }
 function collectUnrecognisedSourceFiles(repoFiles, rubricVersion) {
@@ -5637,7 +5660,7 @@ function isUnrecognisedSourcePath(file, rubricVersion = WITAN_RUBRIC_VERSION) {
   const base = basename(file);
   if (!/\.([a-zA-Z0-9_]+)$/.test(base)) return false;
   if (KNOWN_NON_SOURCE_EXTENSION_PATTERN.test(base)) return false;
-  if ((rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17) && V13_NON_SOURCE_EXTENSION_PATTERN.test(base)) {
+  if ((rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure(rubricVersion)) && V13_NON_SOURCE_EXTENSION_PATTERN.test(base)) {
     return false;
   }
   if (DOCS_OR_MEDIA_EXTENSION_PATTERN.test(base)) return false;
@@ -5723,7 +5746,7 @@ function buildNotApplicableSignal(criterionId, reason) {
     notApplicable: true
   };
 }
-function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, reviewableSourceProof) {
+function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, useV18NativeRls, reviewableSourceProof) {
   const signals = [];
   const mono = resolveMonorepoContext(repoPath);
   const a1Signal = collectA1TestIntegrityEvidence(
@@ -5741,7 +5764,8 @@ function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, u
     useV33Detectors,
     useV36Detectors,
     useV39Detectors,
-    useV47Detectors
+    useV47Detectors,
+    useV18NativeRls
   );
   const a3Signal = collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors);
   const a4Signal = collectA4DependencyEvidence(
@@ -6033,7 +6057,7 @@ function buildA1AuthenticatedAbsenceSignal(repoPath, proof) {
     notes: `V17 authenticated absence: ${proof.eligibleSourceFileCount} criterion-ratable of ${proof.sourceShapedFileCount} source-shaped files; sampled ${proof.sampledFileCount}; ${proof.readableSampledFileCount} representative-text files.`
   };
 }
-function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors) {
+function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, useV18NativeRls) {
   const evidence = [];
   const findings = [];
   const gitignore = repoFiles.find((file) => basename(file) === ".gitignore");
@@ -6129,19 +6153,21 @@ function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33
     evidence.push(evidenceForRelative(repoPath, dbLayerImportFile, "artifact", "DB client import"));
   }
   const v47RlsPolicyFiles = useV47Detectors ? findRlsPolicyFiles(repoPath, repoFiles) : [];
-  const v47TenantStorageFiles = useV47Detectors ? findTenantStoragePremiseFiles(repoPath, repoFiles) : [];
+  const nativeRlsInventory = useV18NativeRls ? deriveRlsPolicyScopeInventory(repoPath, repoFiles) : null;
+  const tenantWithoutRlsPremiseFiles = useV18NativeRls ? findTenantStoragePremiseFiles(repoPath, repoFiles) : [];
+  const v47TenantStorageFiles = useV47Detectors && !useV18NativeRls ? findTenantStoragePremiseFiles(repoPath, repoFiles) : [];
   const rlsMigration = useV47Detectors ? v47RlsPolicyFiles[0] : migrationFiles.find((file) => fileContains(repoPath, file, RLS_PATTERN));
   const tenantScopePattern = useV39Detectors ? TENANT_SCOPE_PATTERN_V11 : useV36Detectors ? TENANT_SCOPE_PATTERN_V10 : TENANT_SCOPE_PATTERN;
-  const tenantScopedFile = useV47Detectors ? v47TenantStorageFiles[0] : migrationFiles.find((file) => fileContains(repoPath, file, tenantScopePattern));
-  const rlsPolicyCount = useV47Detectors ? v47RlsPolicyFiles.length : countPatternMatches(
+  const tenantScopedFile = useV18NativeRls ? nativeRlsInventory?.storageFiles[0] : useV47Detectors ? v47TenantStorageFiles[0] : migrationFiles.find((file) => fileContains(repoPath, file, tenantScopePattern));
+  const rlsPolicyCount = useV18NativeRls ? nativeRlsInventory?.policyCount ?? 0 : useV47Detectors ? v47RlsPolicyFiles.length : countPatternMatches(
     repoPath,
     migrationFiles,
     /create policy|enable row level security|force row level security/gi
   );
-  const tenantScopedMigrationFileCount = useV47Detectors ? v47TenantStorageFiles.length : countFilesContaining(repoPath, migrationFiles, tenantScopePattern);
+  const tenantScopedMigrationFileCount = useV18NativeRls ? nativeRlsInventory?.storageFiles.length ?? 0 : useV47Detectors ? v47TenantStorageFiles.length : countFilesContaining(repoPath, migrationFiles, tenantScopePattern);
   const gitignoreEnvFile = gitignore && fileContains(repoPath, gitignore, /^\.env(\*|\b)|\.env\./m) ? gitignore : null;
   const envHandlingDepth = (envExamples.length > 0 ? 1 : 0) + (gitignoreEnvFile ? 1 : 0) + (countFilesContaining(repoPath, repoFiles.filter(isImplementationFile), ENV_READ_PATTERN) > 0 ? 1 : 0);
-  const isMultiTenant = tenantScopedMigrationFileCount > 0;
+  const isMultiTenant = useV18NativeRls ? (nativeRlsInventory?.policyCount ?? 0) > 0 && (nativeRlsInventory?.scopeIdentifiers.length ?? 0) > 0 : tenantScopedMigrationFileCount > 0;
   if (gitignoreEnvFile) {
     evidence.push(
       evidenceForRelative(repoPath, gitignoreEnvFile, "secret_scan", ".env files are gitignored")
@@ -6157,7 +6183,12 @@ function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33
   }
   if (tenantScopedFile) {
     evidence.push(
-      evidenceForRelative(repoPath, tenantScopedFile, "artifact", "Tenant scoping signal")
+      evidenceForRelative(
+        repoPath,
+        tenantScopedFile,
+        "artifact",
+        useV18NativeRls ? `Repository-native RLS scope (${nativeRlsInventory?.scopeIdentifiers.join(", ")})` : "Tenant scoping signal"
+      )
     );
   }
   if (committedSecret) {
@@ -6215,8 +6246,9 @@ function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33
       evidence: historySecretScan.envPathEvidence
     });
   }
-  if (isMultiTenant && rlsPolicyCount === 0) {
-    const gapEvidence = rlsMigration ?? tenantScopedFile;
+  const hasTenantWithoutRlsGap = rlsPolicyCount === 0 && (useV18NativeRls ? tenantWithoutRlsPremiseFiles.length > 0 : isMultiTenant);
+  if (hasTenantWithoutRlsGap) {
+    const gapEvidence = rlsMigration ?? tenantScopedFile ?? tenantWithoutRlsPremiseFiles[0];
     if (gapEvidence) {
       findings.push({
         severity: "warning",
@@ -6259,20 +6291,20 @@ function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33
       "rls_policy_count",
       "RLS policy count",
       rlsPolicyCount,
-      Math.max(tenantScopedMigrationFileCount * 3, 3),
+      useV18NativeRls ? Math.max(tenantScopedMigrationFileCount, 1) : Math.max(tenantScopedMigrationFileCount * 3, 3),
       0.4,
       "policies",
-      "Counts static row-level-security enables, forced-RLS statements, and policy definitions.",
+      useV18NativeRls ? "Counts CREATE POLICY definitions with repository-native USING/WITH CHECK clauses against the repository-native scoped data-layer surface." : "Counts static row-level-security enables, forced-RLS statements, and policy definitions.",
       "saturating_count"
     ),
     metric(
       "tenant_scope_ratio",
       "Tenant-scoped schema ratio",
-      countFilesContaining(repoPath, migrationFiles, tenantScopePattern),
+      useV18NativeRls ? tenantScopedMigrationFileCount : countFilesContaining(repoPath, migrationFiles, tenantScopePattern),
       Math.max(migrationFiles.length, 1),
       0.25,
       "ratio",
-      "Measures tenant/studio/workspace scoping evidence across data-layer files."
+      useV18NativeRls ? `Measures repository-native RLS scope identifiers (${nativeRlsInventory?.scopeIdentifiers.join(", ")}) across data-layer files.` : "Measures tenant/studio/workspace scoping evidence across data-layer files."
     )
   ] : [];
   const cryptoMetrics = cryptoHygiene.hasSurface ? [
@@ -6291,7 +6323,7 @@ function collectA2IsolationEvidence(repoPath, repoFiles, useV27Detectors, useV33
     positiveEvidence: evidence,
     findings,
     metrics: [...baseMetrics, ...isolationMetrics, ...cryptoMetrics],
-    notes: "History secret scanning covers all reachable git history for credential-pattern paths unless the explicit credential-blob safety valve is reported."
+    notes: useV18NativeRls ? "History secret scanning covers all reachable git history for credential-pattern paths unless the explicit credential-blob safety valve is reported. Positive multi-tenancy credit is derived only from this repository\u2019s own CREATE POLICY USING/WITH CHECK clauses; no fixed tenant-token vocabulary can create isolation credit. A conservative schema premise is retained only to fail closed when a tenant-shaped schema has zero RLS policies." : "History secret scanning covers all reachable git history for credential-pattern paths unless the explicit credential-blob safety valve is reported."
   };
 }
 function collectCryptoHygieneEvidence(repoPath, implFiles, useV39Detectors = false) {
@@ -7187,7 +7219,7 @@ var TEST_DIRECTORY_SOURCE_PATTERN_V17 = new RegExp(
   "i"
 );
 function isTestFile(file, rubricVersion = WITAN_RUBRIC_VERSION) {
-  return rubricVersion === WITAN_RUBRIC_VERSION_V17 && (TEST_DIRECTORY_SOURCE_PATTERN_V17.test(file) || /\.tftest\.hcl$/i.test(file) || /\.bats$/i.test(file) || /(^|\/)test[^/]*\.m$/i.test(file) || /_test\.m$/i.test(file)) || TEST_DIRECTORY_SOURCE_PATTERN.test(file) || // AVA's default discovery includes test.js and test-*.js at the scanned package root.
+  return usesV17DetectorClosure(rubricVersion) && (TEST_DIRECTORY_SOURCE_PATTERN_V17.test(file) || /\.tftest\.hcl$/i.test(file) || /\.bats$/i.test(file) || /(^|\/)test[^/]*\.m$/i.test(file) || /_test\.m$/i.test(file)) || TEST_DIRECTORY_SOURCE_PATTERN.test(file) || // AVA's default discovery includes test.js and test-*.js at the scanned package root.
   // Keep this root-anchored: nested files need an existing test-directory/suffix convention.
   /^test(?:-[^/]+)?\.[cm]?[jt]sx?$/.test(file) || /\.(test|spec)\.[cm]?[jt]sx?$/.test(file) || /(^|\/)test_.*\.py$/.test(file) || /_test\.go$/.test(file) || /(^|\/)test_.*\.(cpp|cc|cxx)$/.test(file) || /_(test|tests)\.(cpp|cc|cxx)$/.test(file) || /Tests?\.(java|kt)$/.test(file) || /(_test|_spec)\.(rs|rb|php|swift|kt)$/.test(file);
 }
@@ -7858,6 +7890,138 @@ function findRlsPolicyFiles(repoPath, repoFiles) {
     )
   );
 }
+var RLS_CLAUSE_SQL_WORDS = /* @__PURE__ */ new Set([
+  "all",
+  "and",
+  "any",
+  "as",
+  "asc",
+  "between",
+  "by",
+  "case",
+  "cast",
+  "current",
+  "desc",
+  "distinct",
+  "else",
+  "end",
+  "exists",
+  "false",
+  "from",
+  "in",
+  "is",
+  "join",
+  "like",
+  "limit",
+  "not",
+  "null",
+  "on",
+  "or",
+  "order",
+  "select",
+  "then",
+  "text",
+  "true",
+  "uuid",
+  "varchar",
+  "when",
+  "where"
+]);
+function extractBalancedSqlClause(statement, keyword) {
+  const clauses = [];
+  const keywordPattern = keyword === "using" ? /\busing\s*\(/gi : /\bwith\s+check\s*\(/gi;
+  for (const match of statement.matchAll(keywordPattern)) {
+    const openingParen = (match.index ?? 0) + match[0].lastIndexOf("(");
+    let depth = 0;
+    let quote = null;
+    for (let index = openingParen; index < statement.length; index += 1) {
+      const character = statement[index];
+      if (quote) {
+        if (character === quote && statement[index - 1] !== "\\") quote = null;
+        continue;
+      }
+      if (character === "'" || character === '"') {
+        quote = character;
+      } else if (character === "(") {
+        depth += 1;
+      } else if (character === ")") {
+        depth -= 1;
+        if (depth === 0) {
+          clauses.push(statement.slice(openingParen + 1, index));
+          break;
+        }
+      }
+    }
+  }
+  return clauses;
+}
+function extractRlsScopeIdentifiers(clause) {
+  const scrubbed = clause.replace(/'(?:''|[^'])*'/g, " ").replace(/"(?:""|[^"])*"/g, " ");
+  const identifiers = /* @__PURE__ */ new Set();
+  const identifierPattern = /\b[A-Za-z_][A-Za-z0-9_$]*(?:\.[A-Za-z_][A-Za-z0-9_$]*)*\b/g;
+  for (const match of scrubbed.matchAll(identifierPattern)) {
+    const token = match[0];
+    const segments = token.split(".").map((segment) => segment.toLowerCase());
+    const lastSegment = segments.at(-1);
+    if (!lastSegment || lastSegment.length < 2 || RLS_CLAUSE_SQL_WORDS.has(lastSegment)) continue;
+    if (["app", "auth", "jwt", "request", "session"].includes(segments[0] ?? "")) continue;
+    const remainder = scrubbed.slice((match.index ?? 0) + token.length);
+    if (/^\s*\(/.test(remainder)) continue;
+    if (["auth", "current_setting", "jwt", "pg_catalog", "public", "uid"].includes(lastSegment)) {
+      continue;
+    }
+    identifiers.add(lastSegment);
+  }
+  return [...identifiers].sort();
+}
+function deriveRlsPolicyScopeInventory(repoPath, repoFiles) {
+  const candidatePolicyFiles = findRlsPolicyFiles(repoPath, repoFiles);
+  const policyFiles = /* @__PURE__ */ new Set();
+  const scopeIdentifiers = /* @__PURE__ */ new Set();
+  let policyCount = 0;
+  for (const file of candidatePolicyFiles) {
+    let content;
+    try {
+      content = readFileSync(join(repoPath, file), "utf8");
+    } catch {
+      continue;
+    }
+    for (const match of content.matchAll(/\bcreate\s+policy\b[\s\S]*?(?:;|$)/gi)) {
+      const statement = match[0];
+      const clauses = [
+        ...extractBalancedSqlClause(statement, "using"),
+        ...extractBalancedSqlClause(statement, "with check")
+      ];
+      if (clauses.length === 0) continue;
+      policyCount += 1;
+      policyFiles.add(file);
+      for (const clause of clauses) {
+        for (const identifier of extractRlsScopeIdentifiers(clause)) {
+          scopeIdentifiers.add(identifier);
+        }
+      }
+    }
+  }
+  const identifiers = [...scopeIdentifiers].sort();
+  const dataLayerFiles = repoFiles.filter(
+    (file) => /(^|\/)(?:migrations?|drizzle|prisma)\/|\.(?:sql|prisma)$/i.test(file)
+  );
+  const storageFiles = identifiers.length === 0 ? [] : dataLayerFiles.filter(
+    (file) => identifiers.some(
+      (identifier) => fileContains(
+        repoPath,
+        file,
+        new RegExp(`\\b${identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`, "i")
+      )
+    )
+  );
+  return {
+    policyFiles: [...policyFiles].sort(),
+    policyCount,
+    scopeIdentifiers: identifiers,
+    storageFiles
+  };
+}
 function findDeployableServicePremiseFiles(repoPath, repoFiles, strictOperationalBoundary = false) {
   const explicitTargets = repoFiles.filter(
     (file) => isAuthoredProductionPath(file) && isExplicitDeployTarget(file) && (!strictOperationalBoundary || isV47OperationalApplicationPath(file))
@@ -9606,6 +9770,9 @@ var WITAN_RUBRIC = [
 ];
 
 // src/witan/scoring.ts
+function usesV17DetectorClosure2(rubricVersion) {
+  return rubricVersion === WITAN_RUBRIC_VERSION_V17 || rubricVersion === WITAN_RUBRIC_VERSION_V18;
+}
 var MAX_SIGNAL_ADJUSTMENT = 0.8;
 function createWitanReport(input, inputSignals, rubric = WITAN_RUBRIC) {
   const parsedInput = WitanReportInputSchema.parse(input);
@@ -9689,7 +9856,7 @@ function createWitanReport(input, inputSignals, rubric = WITAN_RUBRIC) {
   const isFreeCoreRubric = rubric.length === WITAN_RUBRIC.length && rubric.every(
     ({ id, category }, index) => id === WITAN_RUBRIC[index]?.id && category === WITAN_RUBRIC[index]?.category
   );
-  const noMeasurementAbstention = (parsedInput.rubricVersion === WITAN_RUBRIC_VERSION_V16 || parsedInput.rubricVersion === WITAN_RUBRIC_VERSION_V17) && isFreeCoreRubric && !hasMeasuredCriterion;
+  const noMeasurementAbstention = (parsedInput.rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure2(parsedInput.rubricVersion)) && isFreeCoreRubric && !hasMeasuredCriterion;
   const insufficientSourceReason = parsedInput.insufficientSourceReason ?? (noMeasurementAbstention ? WITAN_NO_MEASUREMENT_REASON : void 0);
   const abstained = insufficientSourceReason != null;
   return WitanReportSchema.parse({
@@ -9757,7 +9924,7 @@ function statusForScore(score) {
 }
 function statusAfterInputAdjustment(nativeStatus, nativeScore, adjustment, rubricVersion) {
   if (adjustment === 0) return nativeStatus;
-  if (rubricVersion !== WITAN_RUBRIC_VERSION_V8 && rubricVersion !== WITAN_RUBRIC_VERSION_V92 && rubricVersion !== WITAN_RUBRIC_VERSION_V10 && rubricVersion !== WITAN_RUBRIC_VERSION_V11 && rubricVersion !== WITAN_RUBRIC_VERSION_V12 && rubricVersion !== WITAN_RUBRIC_VERSION_V13 && rubricVersion !== WITAN_RUBRIC_VERSION_V14 && rubricVersion !== WITAN_RUBRIC_VERSION_V15 && rubricVersion !== WITAN_RUBRIC_VERSION_V16 && rubricVersion !== WITAN_RUBRIC_VERSION_V17) {
+  if (rubricVersion !== WITAN_RUBRIC_VERSION_V8 && rubricVersion !== WITAN_RUBRIC_VERSION_V9 && rubricVersion !== WITAN_RUBRIC_VERSION_V10 && rubricVersion !== WITAN_RUBRIC_VERSION_V11 && rubricVersion !== WITAN_RUBRIC_VERSION_V12 && rubricVersion !== WITAN_RUBRIC_VERSION_V13 && rubricVersion !== WITAN_RUBRIC_VERSION_V14 && rubricVersion !== WITAN_RUBRIC_VERSION_V15 && rubricVersion !== WITAN_RUBRIC_VERSION_V16 && rubricVersion !== WITAN_RUBRIC_VERSION_V17 && rubricVersion !== WITAN_RUBRIC_VERSION_V18) {
     return statusForScore(roundScore(Math.max(0, nativeScore - adjustment)));
   }
   const statusFloor = {
@@ -9801,7 +9968,7 @@ function mergeSignalsByCriterion(signals) {
   return merged;
 }
 function usesMetricScoring(rubricVersion) {
-  return rubricVersion === WITAN_RUBRIC_VERSION_V1 || rubricVersion === WITAN_RUBRIC_VERSION_V2 || rubricVersion === WITAN_RUBRIC_VERSION_V3 || rubricVersion === WITAN_RUBRIC_VERSION_V4 || rubricVersion === WITAN_RUBRIC_VERSION_V5 || rubricVersion === WITAN_RUBRIC_VERSION_V6 || rubricVersion === WITAN_RUBRIC_VERSION_V7 || rubricVersion === WITAN_RUBRIC_VERSION_V8 || rubricVersion === WITAN_RUBRIC_VERSION_V92 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17 || rubricVersion === WITAN_TRADING_RUBRIC_VERSION_V0;
+  return rubricVersion === WITAN_RUBRIC_VERSION_V1 || rubricVersion === WITAN_RUBRIC_VERSION_V2 || rubricVersion === WITAN_RUBRIC_VERSION_V3 || rubricVersion === WITAN_RUBRIC_VERSION_V4 || rubricVersion === WITAN_RUBRIC_VERSION_V5 || rubricVersion === WITAN_RUBRIC_VERSION_V6 || rubricVersion === WITAN_RUBRIC_VERSION_V7 || rubricVersion === WITAN_RUBRIC_VERSION_V8 || rubricVersion === WITAN_RUBRIC_VERSION_V9 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17 || rubricVersion === WITAN_RUBRIC_VERSION_V18 || rubricVersion === WITAN_TRADING_RUBRIC_VERSION_V0;
 }
 function unmeasuredStatus(rubricVersion) {
   return rubricVersion === WITAN_TRADING_RUBRIC_VERSION_V0 ? "unverified" : "insufficient_data";
@@ -9932,7 +10099,7 @@ function scoreMetrics(metrics) {
 function capScoreForFindings(score, findings, rubricVersion, criterionId) {
   if (findings.some((finding) => finding.severity === "critical")) {
     const criticalFindings = findings.filter(({ severity }) => severity === "critical");
-    const authenticatedA1Absence = rubricVersion === WITAN_RUBRIC_VERSION_V17 && criterionId === "A1" && criticalFindings.length === 1 && criticalFindings[0]?.summary === WITAN_AUTHENTICATED_A1_ABSENCE_SUMMARY;
+    const authenticatedA1Absence = usesV17DetectorClosure2(rubricVersion) && criterionId === "A1" && criticalFindings.length === 1 && criticalFindings[0]?.summary === WITAN_AUTHENTICATED_A1_ABSENCE_SUMMARY;
     return authenticatedA1Absence ? Math.min(score, 1.4) : 1.4;
   }
   if (findings.some((finding) => finding.severity === "warning")) return Math.min(score, 2.4);
@@ -9941,8 +10108,8 @@ function capScoreForFindings(score, findings, rubricVersion, criterionId) {
 }
 function statusForScoreAndFindings(criterionId, score, findings, metrics, rubricVersion) {
   if (findings.some((finding) => finding.severity === "critical")) return "critical";
-  if (rubricVersion === WITAN_RUBRIC_VERSION_V8 || rubricVersion === WITAN_RUBRIC_VERSION_V92 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17) {
-    const calibrated = rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || rubricVersion === WITAN_RUBRIC_VERSION_V17 ? calibratedCriterionStateV11(criterionId, metrics) : rubricVersion === WITAN_RUBRIC_VERSION_V92 || rubricVersion === WITAN_RUBRIC_VERSION_V10 ? calibratedCriterionStateV9(criterionId, metrics) : calibratedCriterionStateV8(criterionId, metrics);
+  if (rubricVersion === WITAN_RUBRIC_VERSION_V8 || rubricVersion === WITAN_RUBRIC_VERSION_V9 || rubricVersion === WITAN_RUBRIC_VERSION_V10 || rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure2(rubricVersion)) {
+    const calibrated = rubricVersion === WITAN_RUBRIC_VERSION_V11 || rubricVersion === WITAN_RUBRIC_VERSION_V12 || rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure2(rubricVersion) ? calibratedCriterionStateV11(criterionId, metrics) : rubricVersion === WITAN_RUBRIC_VERSION_V9 || rubricVersion === WITAN_RUBRIC_VERSION_V10 ? calibratedCriterionStateV9(criterionId, metrics) : calibratedCriterionStateV8(criterionId, metrics);
     if (calibrated && calibrated !== "verified") return calibrated;
     if (calibrated === "verified" && !findings.some((finding) => finding.severity === "warning")) {
       return "verified";
@@ -10168,7 +10335,7 @@ function calibratedCriterionStateV11(criterionId, metrics) {
   return void 0;
 }
 function ensureFindingsExplainStatus(criterionId, score, status, findings, evidence, rubricVersion) {
-  if (rubricVersion !== WITAN_RUBRIC_VERSION_V8 && rubricVersion !== WITAN_RUBRIC_VERSION_V92 && rubricVersion !== WITAN_RUBRIC_VERSION_V10 && rubricVersion !== WITAN_RUBRIC_VERSION_V11 && rubricVersion !== WITAN_RUBRIC_VERSION_V12 && rubricVersion !== WITAN_RUBRIC_VERSION_V13 && rubricVersion !== WITAN_RUBRIC_VERSION_V14 && rubricVersion !== WITAN_RUBRIC_VERSION_V15 && rubricVersion !== WITAN_RUBRIC_VERSION_V16 && rubricVersion !== WITAN_RUBRIC_VERSION_V17 && findings.length > 0) {
+  if (rubricVersion !== WITAN_RUBRIC_VERSION_V8 && rubricVersion !== WITAN_RUBRIC_VERSION_V9 && rubricVersion !== WITAN_RUBRIC_VERSION_V10 && rubricVersion !== WITAN_RUBRIC_VERSION_V11 && rubricVersion !== WITAN_RUBRIC_VERSION_V12 && rubricVersion !== WITAN_RUBRIC_VERSION_V13 && rubricVersion !== WITAN_RUBRIC_VERSION_V14 && rubricVersion !== WITAN_RUBRIC_VERSION_V15 && rubricVersion !== WITAN_RUBRIC_VERSION_V16 && rubricVersion !== WITAN_RUBRIC_VERSION_V17 && rubricVersion !== WITAN_RUBRIC_VERSION_V18 && findings.length > 0) {
     return [...findings];
   }
   if (status !== "critical" && status !== "warning") return [...findings];
@@ -10213,7 +10380,18 @@ function scoreRepoWithPublicCejel(options) {
     ...options.rubricVersion ? { rubricVersion: options.rubricVersion } : {}
   });
   const inputSignals = resolvePublicIngestSignals(options);
-  return createWitanReport(input, inputSignals.length > 0 ? inputSignals : void 0);
+  const report = createWitanReport(input, inputSignals.length > 0 ? inputSignals : void 0);
+  if (report.verdict !== "insufficient_source" || !isWitanNoMeasurementAbstention(report)) {
+    return report;
+  }
+  const contextualReason = explainNoMeasurementSourceCoverage(
+    options.repoPath,
+    report.rubricVersion
+  );
+  return contextualReason ? {
+    ...report,
+    insufficientSourceReason: contextualReason
+  } : report;
 }
 function resolvePublicIngestSignals(options) {
   const seen = /* @__PURE__ */ new Set();

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-EFOUXVJE.js";
+} from "./chunk-BR2DO4QJ.js";
 
 // src/index.ts
 import { createHash } from "crypto";

package/dist/mcp/index.js

@@ -10,7 +10,7 @@ import {
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
   runCejelScan
-} from "../chunk-EFOUXVJE.js";
+} from "../chunk-BR2DO4QJ.js";
 
 // node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.1.10",
+  "version": "0.2.1",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {
@@ -44,6 +44,16 @@
   "engines": {
     "node": ">=18"
   },
+  "scripts": {
+    "build": "tsup",
+    "build:sea-js": "tsup --config tsup.public-sea.config.ts",
+    "validate:distribution": "node scripts/validate-distribution-metadata.mjs",
+    "prepublishOnly": "pnpm run build",
+    "prepack": "pnpm run build",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vitest run"
+  },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@types/node": "^25.9.1",
@@ -53,13 +63,5 @@
     "typescript": "^5.5.0",
     "vitest": "^2.0.0",
     "zod": "^3.23.0"
-  },
-  "scripts": {
-    "build": "tsup",
-    "build:sea-js": "tsup --config tsup.public-sea.config.ts",
-    "validate:distribution": "node scripts/validate-distribution-metadata.mjs",
-    "dev": "tsx src/index.ts",
-    "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "vitest run"
   }
-}
+}