@cejel/cejel 0.1.4 → 0.1.5

package/README.md

@@ -20,6 +20,10 @@ certificate + badge over all of them. See "Aggregate your scanners" below.
 > monorepo — the ten-product studio it was built inside — which it currently scores
 > 3.1/4.0 ("Conditional"). We score ourselves before asking you to score yourself.
 
+The reusable Barg Labs listing mark is kept at [`brand/barg-icon.png`](./brand/barg-icon.png)
+for directories and registries that accept a custom image. GitHub Actions Marketplace uses
+GitHub's predefined `action.yml` branding icons instead.
+
 ## Install
 
 No account, no key, no signup.
@@ -27,7 +31,15 @@ No account, no key, no signup.
 **Single-file binary.** One file. No Node, no npm, no `node_modules`, nothing installed.
 
 ```bash
-curl -fsSL https://github.com/BargLabs/cejel/releases/latest/download/cejel-$(uname -s)-$(uname -m) -o cejel
+asset="cejel-$(uname -s)-$(uname -m)"
+curl -fsSL "https://github.com/BargLabs/cejel/releases/latest/download/$asset" -o "$asset"
+curl -fsSL https://github.com/BargLabs/cejel/releases/latest/download/SHA256SUMS -o SHA256SUMS
+if command -v sha256sum >/dev/null; then
+  grep "  $asset$" SHA256SUMS | sha256sum -c -
+else
+  grep "  $asset$" SHA256SUMS | shasum -a 256 -c -
+fi
+mv "$asset" cejel
 chmod +x cejel
 ./cejel .
 ```
@@ -41,15 +53,13 @@ product, and you can falsify it in ten seconds:
 docker run --rm --network=none -v "$PWD:/w" -w /w -v "$PWD/cejel:/cejel:ro" debian:stable-slim /cejel .
 ```
 
-**npm (scoped package).**
+**npm.**
 
 ```bash
-npx --yes --package @cejel/cejel cejel .
+npx @cejel/cejel .
 ```
 
-The package is published under the `@cejel` scope while the unscoped name is under npm
-registry review. The installed executable remains `cejel`. For a global install, run
-`npm install --global @cejel/cejel`, then invoke `cejel .`.
+The npm package is scoped as `@cejel/cejel`; its executable remains the short command `cejel`.
 
 **GitHub Action** — score every PR and publish the badge:
 
@@ -67,9 +77,9 @@ pnpm install && pnpm build
 node dist/index.js .
 ```
 
-Released binaries: `cejel-Darwin-arm64`, `cejel-Linux-x86_64`. A Homebrew tap and the
-remaining architectures are in progress; they are not listed here because they do not exist
-yet.
+Released binaries: `cejel-Darwin-arm64`, `cejel-Darwin-x86_64`, `cejel-Linux-aarch64`, and
+`cejel-Linux-x86_64`. The release also carries `SHA256SUMS`; each binary is executed against
+the source build and with networking denied before attachment.
 
 ## Leaderboard
 
@@ -78,7 +88,7 @@ corpus scored and published in the open — elite OSS projects, Cejel itself, an
 studio monorepo Cejel was built inside — with a per-repository evidence report for every
 row under [`leaderboard/reports/`](./leaderboard/reports/). The board is also hosted at
 [cejel.dev](https://cejel.dev). Every score on this board is produced by the same sealed
-public scorer used by `npx cejel .` — check out the source commit printed in the
+public scorer used by `npx @cejel/cejel .` — check out the source commit printed in the
 report, run the tool, and you will get this number. A required guard does exactly that for
 every corpus row and compares score, verdict, measured coverage, and evidence. No private
 domain collector contributes to any published score, ours included; nobody is exempt.
@@ -123,7 +133,8 @@ better-evidenced rows.
 Scores the current directory with sensible defaults: no flags, no signup, fully offline.
 Prints a concise terminal certificate and writes to `.cejel/`:
 
-- `report.json` — the full structured report
+- `report.json` — the full structured report; scored runs carry numeric headline scores and a
+  score-band `verdict`, while abstained runs carry `null` scores and `verdict: "insufficient_source"`
 - `attestation.json` — an unsigned in-toto statement binding the report digest, repository
   revision, rubric, and scored-or-abstained outcome; ready for an external signer
 - `certificate.html` — a self-contained HTML certificate (no external assets)
@@ -141,8 +152,9 @@ or provenance system signs it, `assurance.status` is `unsigned` and `issuer` is
 - `<path>` — repo to score (default: current directory)
 - `--out <dir>` — where to write report/certificate/badge files (default: `.cejel`;
   `--out-dir` remains available as a compatibility alias)
-- `--min-score <n>` — exit non-zero if the overall score is below `n` (0–4); used by the
-  GitHub Action's optional threshold gate
+- `--min-score <n>` — exit non-zero if the overall score is below `n` (0–4), or if Cejel
+  abstains and therefore cannot evaluate the threshold; used by the GitHub Action's optional
+  threshold gate
 - `--ingest <file|glob>` — fold another scanner's output into the score (repeatable). Accepts
   SARIF, OpenSSF Scorecard JSON, or the generic Cejel external-signal shape — format is
   auto-detected. See "Aggregate your scanners" below.
@@ -168,9 +180,10 @@ honestly rather than guessing:
 - **Not yet recognised** — other ecosystems, including COBOL, Fortran, and MATLAB. Cejel does
   not score these as "source" at all: a repository with zero
   recognised-extension files gets the `unrecognised_ecosystem` archetype, an explicit
-  `insufficient_data` status, and **no verdict** — never a confident numeric score, and never
-  the word "Unverified" for the sole reason that cejel cannot read the language. The
-  certificate states plainly which of the 11 dimensions were and were not measured.
+  `insufficient_data` criterion status, `null` headline scores, and an explicit machine verdict
+  of `insufficient_source` — never a numeric score-band verdict, and never the word
+  "Unverified" for the sole reason that cejel cannot read the language. The certificate states
+  plainly which of the 11 dimensions were and were not measured.
 
 This list will grow. It will never be "any codebase" — that claim is a promise the parser
 cannot keep, and an honest support matrix is worth more than a marketing line the code
@@ -278,7 +291,7 @@ Add it to an MCP client config:
   "mcpServers": {
     "cejel": {
       "command": "npx",
-      "args": ["-y", "--package=cejel", "cejel-mcp"]
+      "args": ["-y", "--package=@cejel/cejel", "cejel-mcp"]
     }
   }
 }
@@ -299,7 +312,7 @@ and the server writes no files.
 ## What "offline" means here
 
 Scoring a repo — `cejel .` itself, and the Action's scoring step — makes zero network
-calls: no telemetry, no signup, no model call. Fetching the `cejel` package the
+calls: no telemetry, no signup, no model call. Fetching the `@cejel/cejel` package the
 first time (like any npm-distributed CLI, including this Action's own dependency install)
 does need network; that's a one-time install cost, not part of the scoring guarantee.
 

package/dist/{chunk-SQNTNX5U.js → chunk-A7NZKJ5H.js}

@@ -29,450 +29,6 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// src/witan/external-findings.ts
-var EXTERNAL_FINDINGS_DISPLAY_LIMIT = 10;
-var SEVERITY_RANK = {
-  critical: 0,
-  warning: 1,
-  info: 2
-};
-function formatExternalSourceLabel(source) {
-  return source.startsWith("sarif:") ? source.slice("sarif:".length) : source;
-}
-function summarizeExternalSources(consumedSignals) {
-  const bySource = /* @__PURE__ */ new Map();
-  for (const signal of consumedSignals) {
-    const entry = bySource.get(signal.source) ?? { findingCount: 0, dimensions: /* @__PURE__ */ new Set() };
-    entry.findingCount += signal.findingCount;
-    entry.dimensions.add(signal.dimension);
-    bySource.set(signal.source, entry);
-  }
-  return Array.from(bySource.entries()).map(([source, { findingCount, dimensions }]) => ({
-    source,
-    label: formatExternalSourceLabel(source),
-    findingCount,
-    dimensions: Array.from(dimensions).sort()
-  })).sort((a, b) => a.source.localeCompare(b.source));
-}
-function formatExternalSourceLine(summary) {
-  const noun = summary.findingCount === 1 ? "finding" : "findings";
-  return `${summary.label}: ${summary.findingCount} ${noun} ingested (folded into ${summary.dimensions.join(", ")})`;
-}
-function collectExternalFindings(consumedSignals) {
-  const findings = [];
-  for (const signal of consumedSignals) {
-    for (const finding of signal.findings) {
-      findings.push({
-        source: signal.source,
-        label: formatExternalSourceLabel(signal.source),
-        dimension: signal.dimension,
-        severity: finding.severity,
-        ruleId: finding.ruleId,
-        message: finding.message,
-        ...finding.location ? { location: finding.location } : {}
-      });
-    }
-  }
-  return findings.sort((a, b) => {
-    const bySeverity = SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity];
-    if (bySeverity !== 0) return bySeverity;
-    const bySource = a.source.localeCompare(b.source);
-    if (bySource !== 0) return bySource;
-    return a.ruleId.localeCompare(b.ruleId);
-  });
-}
-
-// src/witan/html.ts
-function renderWitanHtmlReport(report) {
-  const codeCriteria = criteriaByCategory(report, "code_trust");
-  const processCriteria = criteriaByCategory(report, "process_trust");
-  const verifiedEvidence = report.criteria.flatMap(
-    (criterion) => criterion.status === "verified" ? criterion.evidence.map((evidence) => renderEvidenceListItem(criterion, evidence)) : []
-  );
-  const openItems = report.criteria.flatMap(renderOpenItems);
-  const contributingSources = renderContributingSources(report.consumedSignals ?? []);
-  const externalSourceSummaries = summarizeExternalSources(report.consumedSignals ?? []);
-  const externalFindings = collectExternalFindings(report.consumedSignals ?? []);
-  return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Cejel Trust Certificate - ${escapeHtml(report.productDisplayName)}</title>
-  <style>${CERTIFICATE_CSS}</style>
-</head>
-<body>
-  <main class="certificate">
-    <header class="hero">
-      <div class="brand">
-        <span class="brand-mark" aria-hidden="true">C</span>
-        <span class="brand-name">Cejel</span>
-      </div>
-      <div class="hero-grid">
-        <section>
-          <p class="eyebrow">Trust Certificate</p>
-          <h1>${escapeHtml(report.productDisplayName)}</h1>
-          <dl class="meta">
-            <div><dt>Date</dt><dd>${escapeHtml(formatDate(report.generatedAt))}</dd></div>
-            <div><dt>Run</dt><dd>${escapeHtml(renderRepo(report))}</dd></div>
-            <div><dt>Rubric</dt><dd>${escapeHtml(report.rubricVersion)}</dd></div>
-            ${contributingSources.length > 0 ? `<div><dt>Sources</dt><dd>Incorporates findings from: ${escapeHtml(contributingSources.join(", "))}<ul class="source-counts">${externalSourceSummaries.map((s) => `<li>${escapeHtml(formatExternalSourceLine(s))}</li>`).join("")}</ul></dd></div>` : ""}
-          </dl>
-        </section>
-        <aside class="score-panel" aria-label="Summary trust score">
-          <div class="score-badge">Summary</div>
-          ${report.insufficientSourceReason ? `<div class="verdict">Insufficient source</div>
-          <p class="insufficient-note">${escapeHtml(report.insufficientSourceReason)}</p>` : `<div class="score">${formatScore(report.overallScore)}</div>
-          <div class="score-unit">/ 4.0 overall</div>
-          <div class="verdict">${escapeHtml(renderVerdict(report.overallScore))}</div>
-          <div class="subscores">
-            <span>Code ${formatScore(report.codeTrustScore)}</span>
-            <span>Process ${formatScore(report.processTrustScore)}</span>
-          </div>`}
-        </aside>
-      </div>
-    </header>
-
-    <section class="trust-grid" aria-label="Rubric criteria">
-      ${renderCriterionColumn("Code trust", codeCriteria)}
-      ${renderCriterionColumn("Process trust", processCriteria)}
-    </section>
-
-    <section class="evidence-grid" aria-label="Evidence and gaps">
-      <article class="evidence-section">
-        <h2>Verified evidence</h2>
-        <ul>${verifiedEvidence.length > 0 ? verifiedEvidence.join("") : "<li>No verified evidence supplied.</li>"}</ul>
-      </article>
-      <article class="evidence-section">
-        <h2>Open / unverified</h2>
-        <ul>${openItems.length > 0 ? openItems.join("") : "<li>No open or unverified criteria supplied.</li>"}</ul>
-      </article>
-    </section>
-
-    ${externalFindings.length > 0 ? `<section class="external-findings-section" aria-label="External findings">
-      <article class="evidence-section">
-        <h2>External findings</h2>
-        <p class="external-note">Findings surfaced by ingested external scanners, attributed to the tool and the cejel criterion they were folded into \u2014 distinct from cejel's own findings above.</p>
-        <ul>${renderExternalFindingItems(externalFindings).join("")}</ul>
-      </article>
-    </section>` : ""}
-  </main>
-</body>
-</html>
-`;
-}
-function renderContributingSources(signals) {
-  return Array.from(new Set(signals.map((s) => s.source))).sort();
-}
-function renderExternalFindingItems(findings) {
-  const shown = findings.slice(0, EXTERNAL_FINDINGS_DISPLAY_LIMIT);
-  const items = shown.map(
-    (f) => `<li><strong>${escapeHtml(f.label)} \u2192 ${escapeHtml(f.dimension)}</strong><span>${escapeHtml(f.severity)}: ${escapeHtml(f.ruleId)} \u2014 ${escapeHtml(f.message)}${f.location ? ` (${escapeHtml(f.location)})` : ""}</span></li>`
-  );
-  const remaining = findings.length - shown.length;
-  if (remaining > 0) {
-    items.push(`<li><em>...and ${remaining} more \u2014 see report.json for the full list.</em></li>`);
-  }
-  return items;
-}
-function criteriaByCategory(report, category) {
-  return report.criteria.filter((criterion) => criterion.category === category);
-}
-function renderCriterionColumn(title, criteria) {
-  const applicable = criteria.filter((criterion) => criterion.status !== "not_applicable");
-  const notApplicable = criteria.filter((criterion) => criterion.status === "not_applicable");
-  return `<section class="criteria-column">
-        <h2>${escapeHtml(title)}</h2>
-        <div class="criteria-list">
-          ${applicable.map(renderCriterionCard).join("")}
-        </div>
-        ${notApplicable.length > 0 ? renderNotApplicableGroup(notApplicable) : ""}
-      </section>`;
-}
-function renderNotApplicableGroup(criteria) {
-  return `<div class="na-group">
-          <h3 class="na-heading">Not applicable to this repository</h3>
-          <ul class="na-list">
-            ${criteria.map(renderNotApplicableItem).join("")}
-          </ul>
-        </div>`;
-}
-function renderNotApplicableItem(criterion) {
-  const reason = criterion.notes ?? "Not applicable to this repository.";
-  return `<li><span class="na-id">${escapeHtml(criterion.id)}</span> ${escapeHtml(criterion.title)} \u2014 <span class="na-reason">${escapeHtml(reason)}</span></li>`;
-}
-function renderCriterionCard(criterion) {
-  const evidence = [
-    ...criterion.evidence.map(renderEvidencePointer),
-    ...criterion.findings.map((finding) => renderFindingEvidence(finding))
-  ];
-  const metrics = criterion.metrics.map(renderMetric);
-  return `<article class="criterion">
-            <div class="criterion-top">
-              <div>
-                <div class="criterion-id">${escapeHtml(criterion.id)}</div>
-                <h3>${escapeHtml(criterion.title)}</h3>
-              </div>
-              ${renderStatusChip(criterion.status)}
-            </div>
-            <div class="criterion-score">${criterion.status === "not_applicable" ? "N/A" : criterion.status === "insufficient_data" ? "No data" : formatScore(criterion.score)}</div>
-            <ul class="criterion-metrics">
-              ${metrics.length > 0 ? metrics.map((item) => `<li>${item}</li>`).join("") : "<li>No measured depth metrics supplied.</li>"}
-            </ul>
-            <ul class="criterion-evidence">
-              ${evidence.length > 0 ? evidence.map((item) => `<li>${item}</li>`).join("") : "<li>No concrete evidence supplied.</li>"}
-            </ul>
-          </article>`;
-}
-function renderMetric(metric2) {
-  const max = metric2.max ? `/${formatMetricValue(metric2.max)}` : "";
-  const unit = metric2.unit ? ` ${escapeHtml(metric2.unit)}` : "";
-  return `<strong>${escapeHtml(metric2.label)}</strong><span>${formatMetricValue(metric2.value)}${max}${unit}</span>`;
-}
-function renderStatusChip(status) {
-  return `<span class="status" data-status="${status}">${status}</span>`;
-}
-function renderEvidenceListItem(criterion, evidence) {
-  return `<li><strong>${escapeHtml(criterion.id)} - ${escapeHtml(criterion.title)}</strong><span>${renderEvidencePointer(evidence)}</span></li>`;
-}
-function renderOpenItems(criterion) {
-  const findingItems = criterion.findings.map(
-    (finding) => `<li><strong>${escapeHtml(criterion.id)} - ${escapeHtml(criterion.title)}</strong><span>${escapeHtml(finding.severity)}: ${escapeHtml(finding.summary)} (${renderEvidencePointer(finding.evidence)})</span></li>`
-  );
-  if ((criterion.status === "unverified" || criterion.status === "insufficient_data") && criterion.evidence.length === 0 && criterion.findings.length === 0) {
-    const message = criterion.status === "insufficient_data" ? "Insufficient data \u2014 no measurable signal; excluded from composite (unmeasured, not inapplicable)." : "No concrete evidence supplied.";
-    return [
-      `<li><strong>${escapeHtml(criterion.id)} - ${escapeHtml(criterion.title)}</strong><span>${escapeHtml(message)}</span></li>`
-    ];
-  }
-  if (criterion.status === "verified") return [];
-  return findingItems;
-}
-function renderFindingEvidence(finding) {
-  return `${escapeHtml(finding.severity)}: ${escapeHtml(finding.summary)} (${renderEvidencePointer(
-    finding.evidence
-  )})`;
-}
-function renderEvidencePointer(evidence) {
-  const target = evidence.url ?? renderPathEvidenceTarget(evidence);
-  const label = escapeHtml(evidence.label);
-  if (evidence.url) {
-    return `<a href="${escapeAttribute(evidence.url)}">${label}</a>`;
-  }
-  return [label, target ? `<code>${escapeHtml(target)}</code>` : void 0].filter(Boolean).join(" ");
-}
-function renderPathEvidenceTarget(evidence) {
-  const pathTarget = evidence.path ? `${evidence.path}${evidence.line ? `:${evidence.line}` : ""}` : void 0;
-  const hashTarget = evidence.contentHash ? `sha256:${evidence.contentHash.slice(0, 12)}` : void 0;
-  return [pathTarget, hashTarget].filter(Boolean).join(" \xB7 ");
-}
-function renderRepo(report) {
-  const repo = report.repo.path ?? report.repo.url ?? "unknown";
-  return report.repo.headSha ? `${repo} @ ${report.repo.headSha}` : repo;
-}
-function renderVerdict(score) {
-  if (score >= 3.5) return "Verified";
-  if (score >= 2.5) return "Conditional";
-  if (score >= 1.5) return "At risk";
-  return "Unverified";
-}
-function renderReportVerdict(report) {
-  if (report.insufficientSourceReason) return "Insufficient source";
-  return renderVerdict(report.overallScore);
-}
-function formatScore(score) {
-  return score.toFixed(1);
-}
-function formatMetricValue(value) {
-  return Number.isInteger(value) ? value.toString() : value.toFixed(2);
-}
-function formatDate(value) {
-  return value.slice(0, 10);
-}
-function escapeHtml(value) {
-  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
-}
-function escapeAttribute(value) {
-  return escapeHtml(value);
-}
-var CERTIFICATE_CSS = `
-:root {
-  color-scheme: dark;
-  --steel: #16212a;
-  --surface: #1d2b35;
-  --surface-2: #273946;
-  --line: rgba(238, 244, 247, .13);
-  --line-strong: rgba(238, 244, 247, .22);
-  --text: #eef4f7;
-  --muted: #b7c5cc;
-  --faint: #8799a4;
-  --teal: #2fc8a6;
-  --teal-weak: rgba(47, 200, 166, .14);
-  --periwinkle: #93a6da;
-  --periwinkle-weak: rgba(147, 166, 218, .16);
-  --warn: #e7bf72;
-  --warn-weak: rgba(231, 191, 114, .16);
-  --danger: #f09a8f;
-  --danger-weak: rgba(240, 154, 143, .14);
-  --quiet: rgba(238, 244, 247, .08);
-  --serif: "Instrument Serif", Georgia, "Times New Roman", serif;
-  --sans: Inter, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
-  --mono: "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
-}
-* { box-sizing: border-box; }
-body {
-  margin: 0;
-  background: var(--steel);
-  color: var(--text);
-  font-family: var(--sans);
-  line-height: 1.55;
-  -webkit-font-smoothing: antialiased;
-}
-.certificate { max-width: 1120px; margin: 0 auto; padding: 44px 32px 64px; }
-.hero { border-bottom: 1px solid var(--line); padding-bottom: 38px; }
-.brand { display: flex; align-items: center; gap: 12px; margin-bottom: 44px; }
-.brand-mark {
-  display: inline-flex; align-items: center; justify-content: center;
-  width: 34px; height: 34px; border-radius: 8px;
-  background: var(--teal); color: #06231d; font-family: var(--serif); font-size: 24px;
-}
-.brand-name { font-family: var(--serif); font-size: 24px; }
-.hero-grid { display: grid; grid-template-columns: minmax(0, 1fr) 300px; gap: 36px; align-items: end; }
-.eyebrow {
-  margin: 0 0 14px; color: var(--teal); font-family: var(--mono);
-  font-size: 11px; letter-spacing: .18em; text-transform: uppercase;
-}
-h1, h2, h3, p { margin-top: 0; }
-h1 { margin-bottom: 24px; font-family: var(--serif); font-size: 64px; line-height: 1; font-weight: 400; letter-spacing: 0; }
-.meta { display: grid; gap: 10px; margin: 0; max-width: 780px; }
-.meta div { display: grid; grid-template-columns: 86px minmax(0, 1fr); gap: 16px; }
-dt { color: var(--faint); font-family: var(--mono); font-size: 11px; text-transform: uppercase; letter-spacing: .12em; }
-dd { margin: 0; color: var(--muted); overflow-wrap: anywhere; }
-.score-panel { border: 1px solid var(--line-strong); border-radius: 8px; padding: 24px; background: var(--surface); }
-.score-badge {
-  display: inline-flex; margin-bottom: 14px; border: 1px solid rgba(147, 166, 218, .38);
-  border-radius: 999px; padding: 5px 10px; color: var(--periwinkle);
-  background: var(--periwinkle-weak); font-family: var(--mono); font-size: 12px;
-}
-.score { display: inline; font-family: var(--mono); font-size: 56px; line-height: 1; color: var(--teal); }
-.score-unit { display: inline; margin-left: 6px; color: var(--faint); font-family: var(--mono); }
-.verdict { margin-top: 12px; font-family: var(--serif); font-size: 30px; color: var(--periwinkle); }
-.insufficient-note { margin-top: 10px; color: var(--muted); font-size: 13px; line-height: 1.5; }
-.subscores { display: flex; gap: 12px; flex-wrap: wrap; margin-top: 18px; color: var(--muted); font-family: var(--mono); font-size: 12px; }
-.source-counts { margin: 8px 0 0; padding-left: 18px; font-family: var(--mono); font-size: 12px; color: var(--muted); }
-.trust-grid, .evidence-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 18px; margin-top: 28px; }
-.external-findings-section { margin-top: 18px; }
-.external-note { margin: 0 0 14px; color: var(--muted); font-size: 13px; }
-.criteria-column, .evidence-section { border: 1px solid var(--line); border-radius: 8px; background: var(--surface); padding: 22px; }
-h2 { font-family: var(--serif); font-size: 30px; font-weight: 400; letter-spacing: 0; margin-bottom: 18px; }
-.criteria-list { display: grid; gap: 12px; }
-.na-group { margin-top: 16px; padding-top: 14px; border-top: 1px dashed var(--line-strong); }
-.na-heading { font-family: var(--sans); font-size: 12px; font-weight: 650; letter-spacing: .04em; text-transform: uppercase; color: var(--faint); margin: 0 0 10px; }
-.na-list { display: grid; gap: 8px; font-size: 13px; }
-.na-list li { margin: 0; color: var(--muted); }
-.na-id { color: var(--faint); font-family: var(--mono); font-size: 11px; margin-right: 6px; }
-.na-reason { color: var(--muted); }
-.criterion { border: 1px solid var(--line); border-radius: 8px; padding: 16px; background: var(--surface-2); }
-.criterion-top { display: flex; justify-content: space-between; align-items: flex-start; gap: 14px; }
-.criterion-id { color: var(--periwinkle); font-family: var(--mono); font-size: 12px; margin-bottom: 4px; }
-h3 { font-size: 15px; line-height: 1.35; font-weight: 600; margin-bottom: 0; }
-.criterion-score { margin-top: 12px; color: var(--text); font-family: var(--mono); font-size: 24px; }
-.criterion-metrics { display: grid; gap: 7px; margin-top: 10px; padding: 0; list-style: none; font-size: 12px; }
-.criterion-metrics li { display: flex; justify-content: space-between; gap: 12px; border-bottom: 1px solid rgba(238, 244, 247, .08); padding-bottom: 6px; }
-.criterion-metrics strong { color: var(--text); font-weight: 650; }
-.criterion-metrics span { white-space: nowrap; color: var(--muted); }
-.status { flex: none; border-radius: 999px; padding: 4px 9px; font-family: var(--mono); font-size: 11px; border: 1px solid var(--line-strong); }
-.status[data-status="verified"] { color: var(--teal); background: var(--teal-weak); border-color: rgba(47, 200, 166, .42); }
-.status[data-status="info"] { color: var(--periwinkle); background: var(--periwinkle-weak); border-color: rgba(147, 166, 218, .4); }
-.status[data-status="warning"] { color: var(--warn); background: var(--warn-weak); border-color: rgba(231, 191, 114, .44); }
-.status[data-status="critical"] { color: var(--danger); background: var(--danger-weak); border-color: rgba(240, 154, 143, .46); }
-.status[data-status="unverified"] { color: var(--muted); background: var(--quiet); }
-.status[data-status="insufficient_data"] { color: var(--muted); background: var(--quiet); border-style: dashed; }
-ul { margin: 0; padding-left: 18px; }
-li { margin: 8px 0; color: var(--muted); }
-.criterion-evidence { margin-top: 12px; font-size: 13px; }
-.evidence-section li strong { display: block; color: var(--text); font-size: 14px; }
-.evidence-section li span { display: block; margin-top: 2px; font-size: 13px; }
-code { color: var(--periwinkle); font-family: var(--mono); font-size: .92em; overflow-wrap: anywhere; }
-a { color: var(--teal); text-decoration: none; }
-a:hover { text-decoration: underline; text-underline-offset: 2px; }
-@media (max-width: 840px) {
-  .certificate { padding: 28px 18px 48px; }
-  .hero-grid, .trust-grid, .evidence-grid { grid-template-columns: 1fr; }
-  h1 { font-size: 46px; }
-}
-`;
-
-// src/witan/badge.ts
-var VERDICT_COLOR = {
-  Verified: "brightgreen",
-  Conditional: "yellow",
-  "At risk": "orange",
-  Unverified: "red",
-  "Insufficient source": "lightgrey"
-};
-var VERDICT_SVG_FILL = {
-  Verified: "#2fc86a",
-  Conditional: "#dfb92f",
-  "At risk": "#e08a3c",
-  Unverified: "#d64545",
-  "Insufficient source": "#8c8c8c"
-};
-function badgeMessage(report, verdict) {
-  if (report.insufficientSourceReason) return "unrated: no source";
-  return `${formatScore2(report.overallScore)}/4.0 ${verdict.toLowerCase()}`;
-}
-function renderWitanBadgeEndpoint(report) {
-  const verdict = renderReportVerdict(report);
-  return {
-    schemaVersion: 1,
-    label: "cejel trust",
-    message: badgeMessage(report, verdict),
-    color: VERDICT_COLOR[verdict] ?? "lightgrey"
-  };
-}
-function renderWitanBadgeSvg(report) {
-  const verdict = renderReportVerdict(report);
-  const label = "cejel trust";
-  const message = badgeMessage(report, verdict);
-  const fill = VERDICT_SVG_FILL[verdict] ?? "#8c8c8c";
-  const charWidth = 6.5;
-  const padding = 10;
-  const labelWidth = Math.round(label.length * charWidth + padding);
-  const messageWidth = Math.round(message.length * charWidth + padding);
-  const totalWidth = labelWidth + messageWidth;
-  const height = 20;
-  return `<svg xmlns="http://www.w3.org/2000/svg" width="${totalWidth}" height="${height}" role="img" aria-label="${escapeXml(label)}: ${escapeXml(message)}">
-  <title>${escapeXml(label)}: ${escapeXml(message)}</title>
-  <linearGradient id="witan-badge-smooth" x2="0" y2="100%">
-    <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
-    <stop offset="1" stop-opacity=".1"/>
-  </linearGradient>
-  <clipPath id="witan-badge-round">
-    <rect width="${totalWidth}" height="${height}" rx="3" fill="#fff"/>
-  </clipPath>
-  <g clip-path="url(#witan-badge-round)">
-    <rect width="${labelWidth}" height="${height}" fill="#555"/>
-    <rect x="${labelWidth}" width="${messageWidth}" height="${height}" fill="${fill}"/>
-    <rect width="${totalWidth}" height="${height}" fill="url(#witan-badge-smooth)"/>
-  </g>
-  <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" font-size="11">
-    <text x="${labelWidth / 2}" y="14">${escapeXml(label)}</text>
-    <text x="${labelWidth + messageWidth / 2}" y="14">${escapeXml(message)}</text>
-  </g>
-</svg>
-`;
-}
-function formatScore2(score) {
-  return score.toFixed(1);
-}
-function escapeXml(value) {
-  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-
-// src/witan/attestation.ts
-import { createHash } from "crypto";
-
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -4686,30 +4242,70 @@ var WitanConsumedSignalSummarySchema = external_exports.object({
   // this field always carries every finding.
   findings: external_exports.array(WitanInputSignalFindingSchema).default([])
 }).strict();
-var WitanReportSchema = external_exports.object({
+var WitanScoredVerdictSchema = external_exports.enum([
+  "verified",
+  "conditional",
+  "at_risk",
+  "unverified"
+]);
+var WitanReportVerdictSchema = external_exports.union([
+  WitanScoredVerdictSchema,
+  external_exports.literal("insufficient_source")
+]);
+function witanVerdictForScore(score) {
+  if (score >= 3.5) return "verified";
+  if (score >= 2.5) return "conditional";
+  if (score >= 1.5) return "at_risk";
+  return "unverified";
+}
+var WitanReportCommonSchema = external_exports.object({
   productSlug: external_exports.string().regex(/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/),
   productDisplayName: external_exports.string().min(1).max(120),
   repo: WitanRepoRefSchema,
   generatedAt: external_exports.string().datetime({ offset: true }),
   rubricVersion: external_exports.string().min(1).max(120),
-  codeTrustScore: external_exports.number().min(0).max(4),
-  processTrustScore: external_exports.number().min(0).max(4),
-  overallScore: external_exports.number().min(0).max(4),
   // Rubric-driven: length matches whatever rubric produced this report, not a fixed enum.
   criteria: external_exports.array(WitanCriterionScoreSchema).min(1),
   consumedSignals: external_exports.array(WitanConsumedSignalSummarySchema).optional(),
+  archetype: WitanRepoArchetypeSchema.optional()
+});
+var WitanScoredReportSchema = WitanReportCommonSchema.extend({
+  verdict: WitanScoredVerdictSchema,
+  codeTrustScore: external_exports.number().min(0).max(4),
+  processTrustScore: external_exports.number().min(0).max(4),
+  overallScore: external_exports.number().min(0).max(4),
   // Present only when the rubric has more than two criterion categories — the legacy
   // codeTrustScore/processTrustScore pair can't losslessly represent 3+ category buckets.
   categoryScores: external_exports.record(external_exports.string(), external_exports.number().min(0).max(4)).optional(),
-  // Repo-archetype metadata (see WitanRepoArchetypeSchema above). Both fields are omitted for
-  // callers that don't classify an archetype (e.g. the trading rubric). insufficientSourceReason
-  // is present only for the non-source archetypes ('docs_only' | 'binary_only' |
-  // 'unrecognised_ecosystem' | 'empty') — its presence is what presentation layers
-  // (badge/terminal/verdict) key off to show an explicit insufficient-source verdict instead of
-  // a confident numeric score.
-  archetype: WitanRepoArchetypeSchema.optional(),
-  insufficientSourceReason: external_exports.string().min(1).max(2e3).optional()
+  insufficientSourceReason: external_exports.never().optional()
 }).strict();
+var WitanAbstainedReportSchema = WitanReportCommonSchema.extend({
+  verdict: external_exports.literal("insufficient_source"),
+  // Null is deliberate and explicit: omission is ambiguous, while zero is a real score.
+  codeTrustScore: external_exports.null(),
+  processTrustScore: external_exports.null(),
+  overallScore: external_exports.null(),
+  categoryScores: external_exports.never().optional(),
+  insufficientSourceReason: external_exports.string().min(1).max(2e3)
+}).strict();
+var StrictWitanReportSchema = external_exports.union([WitanScoredReportSchema, WitanAbstainedReportSchema]).superRefine((report, context) => {
+  if (report.verdict !== "insufficient_source" && report.verdict !== witanVerdictForScore(report.overallScore)) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["verdict"],
+      message: `verdict does not match overallScore ${report.overallScore}`
+    });
+  }
+});
+var WitanReportSchema = external_exports.preprocess((value) => {
+  if (typeof value === "object" && value !== null && !Array.isArray(value) && !("verdict" in value) && !("insufficientSourceReason" in value) && typeof value.overallScore === "number") {
+    return {
+      ...value,
+      verdict: witanVerdictForScore(value.overallScore)
+    };
+  }
+  return value;
+}, StrictWitanReportSchema);
 var WITAN_ATTESTATION_STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
 var WITAN_ATTESTATION_PREDICATE_TYPE = "https://cejel.dev/attestations/scan/v1";
 var WitanAttestationOutcomeSchema = external_exports.discriminatedUnion("status", [
@@ -4761,7 +4357,459 @@ var WitanAttestationStatementSchema = external_exports.object({
   }).strict()
 }).strict();
 
+// src/witan/external-findings.ts
+var EXTERNAL_FINDINGS_DISPLAY_LIMIT = 10;
+var SEVERITY_RANK = {
+  critical: 0,
+  warning: 1,
+  info: 2
+};
+function formatExternalSourceLabel(source) {
+  return source.startsWith("sarif:") ? source.slice("sarif:".length) : source;
+}
+function summarizeExternalSources(consumedSignals) {
+  const bySource = /* @__PURE__ */ new Map();
+  for (const signal of consumedSignals) {
+    const entry = bySource.get(signal.source) ?? { findingCount: 0, dimensions: /* @__PURE__ */ new Set() };
+    entry.findingCount += signal.findingCount;
+    entry.dimensions.add(signal.dimension);
+    bySource.set(signal.source, entry);
+  }
+  return Array.from(bySource.entries()).map(([source, { findingCount, dimensions }]) => ({
+    source,
+    label: formatExternalSourceLabel(source),
+    findingCount,
+    dimensions: Array.from(dimensions).sort()
+  })).sort((a, b) => a.source.localeCompare(b.source));
+}
+function formatExternalSourceLine(summary) {
+  const noun = summary.findingCount === 1 ? "finding" : "findings";
+  return `${summary.label}: ${summary.findingCount} ${noun} ingested (folded into ${summary.dimensions.join(", ")})`;
+}
+function collectExternalFindings(consumedSignals) {
+  const findings = [];
+  for (const signal of consumedSignals) {
+    for (const finding of signal.findings) {
+      findings.push({
+        source: signal.source,
+        label: formatExternalSourceLabel(signal.source),
+        dimension: signal.dimension,
+        severity: finding.severity,
+        ruleId: finding.ruleId,
+        message: finding.message,
+        ...finding.location ? { location: finding.location } : {}
+      });
+    }
+  }
+  return findings.sort((a, b) => {
+    const bySeverity = SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity];
+    if (bySeverity !== 0) return bySeverity;
+    const bySource = a.source.localeCompare(b.source);
+    if (bySource !== 0) return bySource;
+    return a.ruleId.localeCompare(b.ruleId);
+  });
+}
+
+// src/witan/html.ts
+function renderWitanHtmlReport(report) {
+  const codeCriteria = criteriaByCategory(report, "code_trust");
+  const processCriteria = criteriaByCategory(report, "process_trust");
+  const verifiedEvidence = report.criteria.flatMap(
+    (criterion) => criterion.status === "verified" ? criterion.evidence.map((evidence) => renderEvidenceListItem(criterion, evidence)) : []
+  );
+  const openItems = report.criteria.flatMap(renderOpenItems);
+  const contributingSources = renderContributingSources(report.consumedSignals ?? []);
+  const externalSourceSummaries = summarizeExternalSources(report.consumedSignals ?? []);
+  const externalFindings = collectExternalFindings(report.consumedSignals ?? []);
+  return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Cejel Trust Certificate - ${escapeHtml(report.productDisplayName)}</title>
+  <style>${CERTIFICATE_CSS}</style>
+</head>
+<body>
+  <main class="certificate">
+    <header class="hero">
+      <div class="brand">
+        <span class="brand-mark" aria-hidden="true">C</span>
+        <span class="brand-name">Cejel</span>
+      </div>
+      <div class="hero-grid">
+        <section>
+          <p class="eyebrow">Trust Certificate</p>
+          <h1>${escapeHtml(report.productDisplayName)}</h1>
+          <dl class="meta">
+            <div><dt>Date</dt><dd>${escapeHtml(formatDate(report.generatedAt))}</dd></div>
+            <div><dt>Run</dt><dd>${escapeHtml(renderRepo(report))}</dd></div>
+            <div><dt>Rubric</dt><dd>${escapeHtml(report.rubricVersion)}</dd></div>
+            ${contributingSources.length > 0 ? `<div><dt>Sources</dt><dd>Incorporates findings from: ${escapeHtml(contributingSources.join(", "))}<ul class="source-counts">${externalSourceSummaries.map((s) => `<li>${escapeHtml(formatExternalSourceLine(s))}</li>`).join("")}</ul></dd></div>` : ""}
+          </dl>
+        </section>
+        <aside class="score-panel" aria-label="Summary trust score">
+          <div class="score-badge">Summary</div>
+          ${report.verdict === "insufficient_source" ? `<div class="verdict">Insufficient source</div>
+          <p class="insufficient-note">${escapeHtml(report.insufficientSourceReason)}</p>` : `<div class="score">${formatScore(report.overallScore)}</div>
+          <div class="score-unit">/ 4.0 overall</div>
+          <div class="verdict">${escapeHtml(renderVerdict(report.overallScore))}</div>
+          <div class="subscores">
+            <span>Code ${formatScore(report.codeTrustScore)}</span>
+            <span>Process ${formatScore(report.processTrustScore)}</span>
+          </div>`}
+        </aside>
+      </div>
+    </header>
+
+    <section class="trust-grid" aria-label="Rubric criteria">
+      ${renderCriterionColumn("Code trust", codeCriteria)}
+      ${renderCriterionColumn("Process trust", processCriteria)}
+    </section>
+
+    <section class="evidence-grid" aria-label="Evidence and gaps">
+      <article class="evidence-section">
+        <h2>Verified evidence</h2>
+        <ul>${verifiedEvidence.length > 0 ? verifiedEvidence.join("") : "<li>No verified evidence supplied.</li>"}</ul>
+      </article>
+      <article class="evidence-section">
+        <h2>Open / unverified</h2>
+        <ul>${openItems.length > 0 ? openItems.join("") : "<li>No open or unverified criteria supplied.</li>"}</ul>
+      </article>
+    </section>
+
+    ${externalFindings.length > 0 ? `<section class="external-findings-section" aria-label="External findings">
+      <article class="evidence-section">
+        <h2>External findings</h2>
+        <p class="external-note">Findings surfaced by ingested external scanners, attributed to the tool and the cejel criterion they were folded into \u2014 distinct from cejel's own findings above.</p>
+        <ul>${renderExternalFindingItems(externalFindings).join("")}</ul>
+      </article>
+    </section>` : ""}
+  </main>
+</body>
+</html>
+`;
+}
+function renderContributingSources(signals) {
+  return Array.from(new Set(signals.map((s) => s.source))).sort();
+}
+function renderExternalFindingItems(findings) {
+  const shown = findings.slice(0, EXTERNAL_FINDINGS_DISPLAY_LIMIT);
+  const items = shown.map(
+    (f) => `<li><strong>${escapeHtml(f.label)} \u2192 ${escapeHtml(f.dimension)}</strong><span>${escapeHtml(f.severity)}: ${escapeHtml(f.ruleId)} \u2014 ${escapeHtml(f.message)}${f.location ? ` (${escapeHtml(f.location)})` : ""}</span></li>`
+  );
+  const remaining = findings.length - shown.length;
+  if (remaining > 0) {
+    items.push(`<li><em>...and ${remaining} more \u2014 see report.json for the full list.</em></li>`);
+  }
+  return items;
+}
+function criteriaByCategory(report, category) {
+  return report.criteria.filter((criterion) => criterion.category === category);
+}
+function renderCriterionColumn(title, criteria) {
+  const applicable = criteria.filter((criterion) => criterion.status !== "not_applicable");
+  const notApplicable = criteria.filter((criterion) => criterion.status === "not_applicable");
+  return `<section class="criteria-column">
+        <h2>${escapeHtml(title)}</h2>
+        <div class="criteria-list">
+          ${applicable.map(renderCriterionCard).join("")}
+        </div>
+        ${notApplicable.length > 0 ? renderNotApplicableGroup(notApplicable) : ""}
+      </section>`;
+}
+function renderNotApplicableGroup(criteria) {
+  return `<div class="na-group">
+          <h3 class="na-heading">Not applicable to this repository</h3>
+          <ul class="na-list">
+            ${criteria.map(renderNotApplicableItem).join("")}
+          </ul>
+        </div>`;
+}
+function renderNotApplicableItem(criterion) {
+  const reason = criterion.notes ?? "Not applicable to this repository.";
+  return `<li><span class="na-id">${escapeHtml(criterion.id)}</span> ${escapeHtml(criterion.title)} \u2014 <span class="na-reason">${escapeHtml(reason)}</span></li>`;
+}
+function renderCriterionCard(criterion) {
+  const evidence = [
+    ...criterion.evidence.map(renderEvidencePointer),
+    ...criterion.findings.map((finding) => renderFindingEvidence(finding))
+  ];
+  const metrics = criterion.metrics.map(renderMetric);
+  return `<article class="criterion">
+            <div class="criterion-top">
+              <div>
+                <div class="criterion-id">${escapeHtml(criterion.id)}</div>
+                <h3>${escapeHtml(criterion.title)}</h3>
+              </div>
+              ${renderStatusChip(criterion.status)}
+            </div>
+            <div class="criterion-score">${criterion.status === "not_applicable" ? "N/A" : criterion.status === "insufficient_data" ? "No data" : formatScore(criterion.score)}</div>
+            <ul class="criterion-metrics">
+              ${metrics.length > 0 ? metrics.map((item) => `<li>${item}</li>`).join("") : "<li>No measured depth metrics supplied.</li>"}
+            </ul>
+            <ul class="criterion-evidence">
+              ${evidence.length > 0 ? evidence.map((item) => `<li>${item}</li>`).join("") : "<li>No concrete evidence supplied.</li>"}
+            </ul>
+          </article>`;
+}
+function renderMetric(metric2) {
+  const max = metric2.max ? `/${formatMetricValue(metric2.max)}` : "";
+  const unit = metric2.unit ? ` ${escapeHtml(metric2.unit)}` : "";
+  return `<strong>${escapeHtml(metric2.label)}</strong><span>${formatMetricValue(metric2.value)}${max}${unit}</span>`;
+}
+function renderStatusChip(status) {
+  return `<span class="status" data-status="${status}">${status}</span>`;
+}
+function renderEvidenceListItem(criterion, evidence) {
+  return `<li><strong>${escapeHtml(criterion.id)} - ${escapeHtml(criterion.title)}</strong><span>${renderEvidencePointer(evidence)}</span></li>`;
+}
+function renderOpenItems(criterion) {
+  const findingItems = criterion.findings.map(
+    (finding) => `<li><strong>${escapeHtml(criterion.id)} - ${escapeHtml(criterion.title)}</strong><span>${escapeHtml(finding.severity)}: ${escapeHtml(finding.summary)} (${renderEvidencePointer(finding.evidence)})</span></li>`
+  );
+  if ((criterion.status === "unverified" || criterion.status === "insufficient_data") && criterion.evidence.length === 0 && criterion.findings.length === 0) {
+    const message = criterion.status === "insufficient_data" ? "Insufficient data \u2014 no measurable signal; excluded from composite (unmeasured, not inapplicable)." : "No concrete evidence supplied.";
+    return [
+      `<li><strong>${escapeHtml(criterion.id)} - ${escapeHtml(criterion.title)}</strong><span>${escapeHtml(message)}</span></li>`
+    ];
+  }
+  if (criterion.status === "verified") return [];
+  return findingItems;
+}
+function renderFindingEvidence(finding) {
+  return `${escapeHtml(finding.severity)}: ${escapeHtml(finding.summary)} (${renderEvidencePointer(
+    finding.evidence
+  )})`;
+}
+function renderEvidencePointer(evidence) {
+  const target = evidence.url ?? renderPathEvidenceTarget(evidence);
+  const label = escapeHtml(evidence.label);
+  if (evidence.url) {
+    return `<a href="${escapeAttribute(evidence.url)}">${label}</a>`;
+  }
+  return [label, target ? `<code>${escapeHtml(target)}</code>` : void 0].filter(Boolean).join(" ");
+}
+function renderPathEvidenceTarget(evidence) {
+  const pathTarget = evidence.path ? `${evidence.path}${evidence.line ? `:${evidence.line}` : ""}` : void 0;
+  const hashTarget = evidence.contentHash ? `sha256:${evidence.contentHash.slice(0, 12)}` : void 0;
+  return [pathTarget, hashTarget].filter(Boolean).join(" \xB7 ");
+}
+function renderRepo(report) {
+  const repo = report.repo.path ?? report.repo.url ?? "unknown";
+  return report.repo.headSha ? `${repo} @ ${report.repo.headSha}` : repo;
+}
+function renderVerdict(score) {
+  return renderMachineVerdict(witanVerdictForScore(score));
+}
+function renderReportVerdict(report) {
+  return renderMachineVerdict(report.verdict);
+}
+function renderMachineVerdict(verdict) {
+  switch (verdict) {
+    case "verified":
+      return "Verified";
+    case "conditional":
+      return "Conditional";
+    case "at_risk":
+      return "At risk";
+    case "unverified":
+      return "Unverified";
+    case "insufficient_source":
+      return "Insufficient source";
+  }
+}
+function formatScore(score) {
+  return score.toFixed(1);
+}
+function formatMetricValue(value) {
+  return Number.isInteger(value) ? value.toString() : value.toFixed(2);
+}
+function formatDate(value) {
+  return value.slice(0, 10);
+}
+function escapeHtml(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+}
+function escapeAttribute(value) {
+  return escapeHtml(value);
+}
+var CERTIFICATE_CSS = `
+:root {
+  color-scheme: dark;
+  --steel: #16212a;
+  --surface: #1d2b35;
+  --surface-2: #273946;
+  --line: rgba(238, 244, 247, .13);
+  --line-strong: rgba(238, 244, 247, .22);
+  --text: #eef4f7;
+  --muted: #b7c5cc;
+  --faint: #8799a4;
+  --teal: #2fc8a6;
+  --teal-weak: rgba(47, 200, 166, .14);
+  --periwinkle: #93a6da;
+  --periwinkle-weak: rgba(147, 166, 218, .16);
+  --warn: #e7bf72;
+  --warn-weak: rgba(231, 191, 114, .16);
+  --danger: #f09a8f;
+  --danger-weak: rgba(240, 154, 143, .14);
+  --quiet: rgba(238, 244, 247, .08);
+  --serif: "Instrument Serif", Georgia, "Times New Roman", serif;
+  --sans: Inter, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
+  --mono: "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  background: var(--steel);
+  color: var(--text);
+  font-family: var(--sans);
+  line-height: 1.55;
+  -webkit-font-smoothing: antialiased;
+}
+.certificate { max-width: 1120px; margin: 0 auto; padding: 44px 32px 64px; }
+.hero { border-bottom: 1px solid var(--line); padding-bottom: 38px; }
+.brand { display: flex; align-items: center; gap: 12px; margin-bottom: 44px; }
+.brand-mark {
+  display: inline-flex; align-items: center; justify-content: center;
+  width: 34px; height: 34px; border-radius: 8px;
+  background: var(--teal); color: #06231d; font-family: var(--serif); font-size: 24px;
+}
+.brand-name { font-family: var(--serif); font-size: 24px; }
+.hero-grid { display: grid; grid-template-columns: minmax(0, 1fr) 300px; gap: 36px; align-items: end; }
+.eyebrow {
+  margin: 0 0 14px; color: var(--teal); font-family: var(--mono);
+  font-size: 11px; letter-spacing: .18em; text-transform: uppercase;
+}
+h1, h2, h3, p { margin-top: 0; }
+h1 { margin-bottom: 24px; font-family: var(--serif); font-size: 64px; line-height: 1; font-weight: 400; letter-spacing: 0; }
+.meta { display: grid; gap: 10px; margin: 0; max-width: 780px; }
+.meta div { display: grid; grid-template-columns: 86px minmax(0, 1fr); gap: 16px; }
+dt { color: var(--faint); font-family: var(--mono); font-size: 11px; text-transform: uppercase; letter-spacing: .12em; }
+dd { margin: 0; color: var(--muted); overflow-wrap: anywhere; }
+.score-panel { border: 1px solid var(--line-strong); border-radius: 8px; padding: 24px; background: var(--surface); }
+.score-badge {
+  display: inline-flex; margin-bottom: 14px; border: 1px solid rgba(147, 166, 218, .38);
+  border-radius: 999px; padding: 5px 10px; color: var(--periwinkle);
+  background: var(--periwinkle-weak); font-family: var(--mono); font-size: 12px;
+}
+.score { display: inline; font-family: var(--mono); font-size: 56px; line-height: 1; color: var(--teal); }
+.score-unit { display: inline; margin-left: 6px; color: var(--faint); font-family: var(--mono); }
+.verdict { margin-top: 12px; font-family: var(--serif); font-size: 30px; color: var(--periwinkle); }
+.insufficient-note { margin-top: 10px; color: var(--muted); font-size: 13px; line-height: 1.5; }
+.subscores { display: flex; gap: 12px; flex-wrap: wrap; margin-top: 18px; color: var(--muted); font-family: var(--mono); font-size: 12px; }
+.source-counts { margin: 8px 0 0; padding-left: 18px; font-family: var(--mono); font-size: 12px; color: var(--muted); }
+.trust-grid, .evidence-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 18px; margin-top: 28px; }
+.external-findings-section { margin-top: 18px; }
+.external-note { margin: 0 0 14px; color: var(--muted); font-size: 13px; }
+.criteria-column, .evidence-section { border: 1px solid var(--line); border-radius: 8px; background: var(--surface); padding: 22px; }
+h2 { font-family: var(--serif); font-size: 30px; font-weight: 400; letter-spacing: 0; margin-bottom: 18px; }
+.criteria-list { display: grid; gap: 12px; }
+.na-group { margin-top: 16px; padding-top: 14px; border-top: 1px dashed var(--line-strong); }
+.na-heading { font-family: var(--sans); font-size: 12px; font-weight: 650; letter-spacing: .04em; text-transform: uppercase; color: var(--faint); margin: 0 0 10px; }
+.na-list { display: grid; gap: 8px; font-size: 13px; }
+.na-list li { margin: 0; color: var(--muted); }
+.na-id { color: var(--faint); font-family: var(--mono); font-size: 11px; margin-right: 6px; }
+.na-reason { color: var(--muted); }
+.criterion { border: 1px solid var(--line); border-radius: 8px; padding: 16px; background: var(--surface-2); }
+.criterion-top { display: flex; justify-content: space-between; align-items: flex-start; gap: 14px; }
+.criterion-id { color: var(--periwinkle); font-family: var(--mono); font-size: 12px; margin-bottom: 4px; }
+h3 { font-size: 15px; line-height: 1.35; font-weight: 600; margin-bottom: 0; }
+.criterion-score { margin-top: 12px; color: var(--text); font-family: var(--mono); font-size: 24px; }
+.criterion-metrics { display: grid; gap: 7px; margin-top: 10px; padding: 0; list-style: none; font-size: 12px; }
+.criterion-metrics li { display: flex; justify-content: space-between; gap: 12px; border-bottom: 1px solid rgba(238, 244, 247, .08); padding-bottom: 6px; }
+.criterion-metrics strong { color: var(--text); font-weight: 650; }
+.criterion-metrics span { white-space: nowrap; color: var(--muted); }
+.status { flex: none; border-radius: 999px; padding: 4px 9px; font-family: var(--mono); font-size: 11px; border: 1px solid var(--line-strong); }
+.status[data-status="verified"] { color: var(--teal); background: var(--teal-weak); border-color: rgba(47, 200, 166, .42); }
+.status[data-status="info"] { color: var(--periwinkle); background: var(--periwinkle-weak); border-color: rgba(147, 166, 218, .4); }
+.status[data-status="warning"] { color: var(--warn); background: var(--warn-weak); border-color: rgba(231, 191, 114, .44); }
+.status[data-status="critical"] { color: var(--danger); background: var(--danger-weak); border-color: rgba(240, 154, 143, .46); }
+.status[data-status="unverified"] { color: var(--muted); background: var(--quiet); }
+.status[data-status="insufficient_data"] { color: var(--muted); background: var(--quiet); border-style: dashed; }
+ul { margin: 0; padding-left: 18px; }
+li { margin: 8px 0; color: var(--muted); }
+.criterion-evidence { margin-top: 12px; font-size: 13px; }
+.evidence-section li strong { display: block; color: var(--text); font-size: 14px; }
+.evidence-section li span { display: block; margin-top: 2px; font-size: 13px; }
+code { color: var(--periwinkle); font-family: var(--mono); font-size: .92em; overflow-wrap: anywhere; }
+a { color: var(--teal); text-decoration: none; }
+a:hover { text-decoration: underline; text-underline-offset: 2px; }
+@media (max-width: 840px) {
+  .certificate { padding: 28px 18px 48px; }
+  .hero-grid, .trust-grid, .evidence-grid { grid-template-columns: 1fr; }
+  h1 { font-size: 46px; }
+}
+`;
+
+// src/witan/badge.ts
+var VERDICT_COLOR = {
+  Verified: "brightgreen",
+  Conditional: "yellow",
+  "At risk": "orange",
+  Unverified: "red",
+  "Insufficient source": "lightgrey"
+};
+var VERDICT_SVG_FILL = {
+  Verified: "#2fc86a",
+  Conditional: "#dfb92f",
+  "At risk": "#e08a3c",
+  Unverified: "#d64545",
+  "Insufficient source": "#8c8c8c"
+};
+function badgeMessage(report, verdict) {
+  if (report.verdict === "insufficient_source") return "unrated: no source";
+  return `${formatScore2(report.overallScore)}/4.0 ${verdict.toLowerCase()}`;
+}
+function renderWitanBadgeEndpoint(report) {
+  const verdict = renderReportVerdict(report);
+  return {
+    schemaVersion: 1,
+    label: "cejel trust",
+    message: badgeMessage(report, verdict),
+    color: VERDICT_COLOR[verdict] ?? "lightgrey"
+  };
+}
+function renderWitanBadgeSvg(report) {
+  const verdict = renderReportVerdict(report);
+  const label = "cejel trust";
+  const message = badgeMessage(report, verdict);
+  const fill = VERDICT_SVG_FILL[verdict] ?? "#8c8c8c";
+  const charWidth = 6.5;
+  const padding = 10;
+  const labelWidth = Math.round(label.length * charWidth + padding);
+  const messageWidth = Math.round(message.length * charWidth + padding);
+  const totalWidth = labelWidth + messageWidth;
+  const height = 20;
+  return `<svg xmlns="http://www.w3.org/2000/svg" width="${totalWidth}" height="${height}" role="img" aria-label="${escapeXml(label)}: ${escapeXml(message)}">
+  <title>${escapeXml(label)}: ${escapeXml(message)}</title>
+  <linearGradient id="witan-badge-smooth" x2="0" y2="100%">
+    <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
+    <stop offset="1" stop-opacity=".1"/>
+  </linearGradient>
+  <clipPath id="witan-badge-round">
+    <rect width="${totalWidth}" height="${height}" rx="3" fill="#fff"/>
+  </clipPath>
+  <g clip-path="url(#witan-badge-round)">
+    <rect width="${labelWidth}" height="${height}" fill="#555"/>
+    <rect x="${labelWidth}" width="${messageWidth}" height="${height}" fill="${fill}"/>
+    <rect width="${totalWidth}" height="${height}" fill="url(#witan-badge-smooth)"/>
+  </g>
+  <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" font-size="11">
+    <text x="${labelWidth / 2}" y="14">${escapeXml(label)}</text>
+    <text x="${labelWidth + messageWidth / 2}" y="14">${escapeXml(message)}</text>
+  </g>
+</svg>
+`;
+}
+function formatScore2(score) {
+  return score.toFixed(1);
+}
+function escapeXml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+
 // src/witan/attestation.ts
+import { createHash } from "crypto";
 var ATTESTATION_LIMITATIONS = [
   "Cejel measures observable repository signals; it is not a security or compliance guarantee.",
   "This statement is self-generated and unsigned until an external signer binds their identity to it."
@@ -4774,7 +4822,7 @@ function hashWitanReport(report) {
 }
 function createWitanAttestation(report, options) {
   const reportSha256 = hashWitanReport(report);
-  const outcome = report.insufficientSourceReason ? {
+  const outcome = report.verdict === "insufficient_source" ? {
     status: "abstained",
     reason: report.insufficientSourceReason
   } : {
@@ -7755,20 +7803,22 @@ function createWitanReport(input, inputSignals, rubric = WITAN_RUBRIC) {
   const overallScore = roundScore(
     categoryOrder.reduce((sum, category) => sum + (categoryScoreMap[category] ?? 0), 0) / Math.max(categoryOrder.length, 1)
   );
+  const abstained = parsedInput.insufficientSourceReason != null;
   return WitanReportSchema.parse({
     productSlug: parsedInput.productSlug,
     productDisplayName: parsedInput.productDisplayName,
     repo: parsedInput.repo,
     generatedAt: parsedInput.generatedAt,
     rubricVersion: parsedInput.rubricVersion,
-    codeTrustScore,
-    processTrustScore,
-    overallScore,
+    verdict: abstained ? "insufficient_source" : witanVerdictForScore(overallScore),
+    codeTrustScore: abstained ? null : codeTrustScore,
+    processTrustScore: abstained ? null : processTrustScore,
+    overallScore: abstained ? null : overallScore,
     criteria,
     ...consumedSignals.length > 0 ? { consumedSignals } : {},
     // Only surface the full per-category map for rubrics with more than two buckets —
     // the default two-category rubric is fully represented by codeTrustScore/processTrustScore.
-    ...categoryOrder.length > 2 ? { categoryScores: categoryScoreMap } : {},
+    ...!abstained && categoryOrder.length > 2 ? { categoryScores: categoryScoreMap } : {},
     // Pass through repo-archetype metadata verbatim — createWitanReport does not compute or
     // alter it (see classifyRepoArchetype in repo-signals.ts); per-criterion scoring above is
     // unaffected by archetype, only presentation layers (badge/terminal/verdict) key off it.
@@ -8084,21 +8134,33 @@ function buildWitanCliSummary(report) {
   ).sort();
   const externalSources = summarizeExternalSources(report.consumedSignals ?? []);
   const allExternalFindings = collectExternalFindings(report.consumedSignals ?? []);
-  return {
+  const common = {
     productSlug: report.productSlug,
     productDisplayName: report.productDisplayName,
     generatedAt: report.generatedAt,
-    overallScore: report.overallScore,
-    codeTrustScore: report.codeTrustScore,
-    processTrustScore: report.processTrustScore,
-    verdict: renderReportVerdict(report),
     findingCount: allFindings.length,
     topFindings: sorted.slice(0, TOP_FINDINGS_LIMIT),
     contributingSources,
     externalSources,
     externalFindingCount: allExternalFindings.length,
-    topExternalFindings: allExternalFindings.slice(0, EXTERNAL_FINDINGS_DISPLAY_LIMIT),
-    ...report.insufficientSourceReason ? { insufficientSourceReason: report.insufficientSourceReason } : {}
+    topExternalFindings: allExternalFindings.slice(0, EXTERNAL_FINDINGS_DISPLAY_LIMIT)
+  };
+  if (report.verdict === "insufficient_source") {
+    return {
+      ...common,
+      overallScore: null,
+      codeTrustScore: null,
+      processTrustScore: null,
+      verdict: "Insufficient source",
+      insufficientSourceReason: report.insufficientSourceReason
+    };
+  }
+  return {
+    ...common,
+    overallScore: report.overallScore,
+    codeTrustScore: report.codeTrustScore,
+    processTrustScore: report.processTrustScore,
+    verdict: renderReportVerdict(report)
   };
 }
 

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   renderWitanHtmlReport,
   runCejelScan,
   serializeWitanReport
-} from "./chunk-SQNTNX5U.js";
+} from "./chunk-A7NZKJ5H.js";
 
 // src/index.ts
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
@@ -16,11 +16,15 @@ import { pathToFileURL } from "url";
 
 // src/terminal.ts
 function renderTerminalCertificate(summary) {
-  const lines = summary.insufficientSourceReason ? [
+  const abstained = summary.verdict === "Insufficient source";
+  if (!abstained && (summary.overallScore === null || summary.codeTrustScore === null || summary.processTrustScore === null)) {
+    throw new Error("A scored Cejel summary must carry numeric headline scores.");
+  }
+  const lines = abstained ? [
     `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
     "",
     "Insufficient source to certify.",
-    `  ${summary.insufficientSourceReason}`,
+    `  ${summary.insufficientSourceReason ?? "No ratable source was found."}`,
     ""
   ] : [
     `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
@@ -37,7 +41,7 @@ function renderTerminalCertificate(summary) {
     }
     lines.push("");
   }
-  if (summary.insufficientSourceReason) {
+  if (abstained) {
     lines.push("See report.json / certificate.html for the full per-criterion detail.");
   } else if (summary.topFindings.length === 0) {
     lines.push("No evidence-backed findings.");
@@ -51,7 +55,7 @@ function renderTerminalCertificate(summary) {
       lines.push(`  ...and ${remaining} more \u2014 see the written report for the full list.`);
     }
   }
-  if (!summary.insufficientSourceReason && summary.externalFindingCount > 0) {
+  if (!abstained && summary.externalFindingCount > 0) {
     lines.push(
       "",
       `External findings (${summary.externalFindingCount} total, attributed to tool + criterion):`
@@ -70,6 +74,7 @@ function renderTerminalCertificate(summary) {
 `;
 }
 function formatScore(score) {
+  if (score === null) throw new Error("A scored Cejel summary must carry numeric scores.");
   return score.toFixed(1);
 }
 
@@ -117,6 +122,9 @@ var CLI_FLAG_KIND_BY_TOKEN = new Map(
   CLI_FLAG_SPECS.flatMap((spec) => spec.tokens.map((token) => [token, spec.kind]))
 );
 function cliVersion() {
+  if (typeof __CEJEL_SEA_VERSION__ === "string" && __CEJEL_SEA_VERSION__.length > 0) {
+    return __CEJEL_SEA_VERSION__;
+  }
   const manifest = JSON.parse(
     readFileSync(new URL("../package.json", import.meta.url), "utf8")
   );
@@ -191,12 +199,21 @@ Wrote:
 `
     );
   }
-  if (options.minScore != null && report.overallScore < options.minScore) {
-    process.stderr.write(
-      `Cejel: overall score ${report.overallScore.toFixed(1)}/4.0 is below the required minimum ${options.minScore.toFixed(1)}/4.0
+  if (options.minScore != null) {
+    if (report.verdict === "insufficient_source") {
+      process.stderr.write(
+        `Cejel: cannot evaluate the required minimum ${options.minScore.toFixed(1)}/4.0 because this repository has insufficient source.
 `
-    );
-    return 1;
+      );
+      return 1;
+    }
+    if (report.overallScore < options.minScore) {
+      process.stderr.write(
+        `Cejel: overall score ${report.overallScore.toFixed(1)}/4.0 is below the required minimum ${options.minScore.toFixed(1)}/4.0
+`
+      );
+      return 1;
+    }
   }
   return 0;
 }

package/dist/mcp/index.js

@@ -10,7 +10,7 @@ import {
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
   runCejelScan
-} from "../chunk-SQNTNX5U.js";
+} from "../chunk-A7NZKJ5H.js";
 
 // node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS({
@@ -17061,7 +17061,7 @@ function createCejelMcpServer(identity) {
   });
   server.tool(
     "scan",
-    `Score a repository's engineering-trust signals (tests, secrets, isolation, claim-vs-reality, CI discipline) with the ${identity.packageName} trust-certificate scan \u2014 the exact same offline, deterministic scoring as running the ${identity.packageName} CLI on the path. Returns the trust cert as JSON: overall + code/process sub-scores (0-4), verdict band, and top findings. No network, no telemetry, no signup. After a scan, the full HTML certificate and SVG badge are readable as the resources ${certificateUri} and ${badgeUri}.`,
+    `Score a repository's engineering-trust signals (tests, secrets, isolation, claim-vs-reality, CI discipline) with the ${identity.packageName} trust-certificate scan \u2014 the exact same offline, deterministic scoring as running the ${identity.packageName} CLI on the path. Returns the trust cert as JSON: overall + code/process sub-scores (0-4) for a scored repository, or null scores with an insufficient-source verdict when Cejel cannot read it; plus the verdict and top findings. No network, no telemetry, no signup. After a scan, the full HTML certificate and SVG badge are readable as the resources ${certificateUri} and ${badgeUri}.`,
     {
       path: external_exports.string().min(1).describe("Path to the repository to score (absolute, or relative to the server CWD)"),
       format: external_exports.enum(["summary", "json"]).optional().describe(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -22,7 +22,7 @@
   ],
   "license": "AGPL-3.0-only",
   "author": "Barg Labs",
-  "homepage": "https://github.com/BargLabs/cejel",
+  "homepage": "https://cejel.dev",
   "bugs": {
     "url": "https://github.com/BargLabs/cejel/issues"
   },
@@ -45,6 +45,7 @@
   },
   "scripts": {
     "build": "tsup",
+    "build:sea-js": "tsup --config tsup.public-sea.config.ts",
     "prepublishOnly": "pnpm run build",
     "prepack": "pnpm run build",
     "dev": "tsx src/index.ts",
@@ -54,6 +55,7 @@
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@types/node": "^25.9.1",
+    "postject": "^1.0.0-alpha.6",
     "tsup": "^8.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.5.0",