@clear-capabilities/agentic-security-scanner 0.171.0 → 0.172.0

package/src/posture/artifact-registry.js

@@ -127,6 +127,8 @@ export const ARTIFACT_REGISTRY = [
   // directory-of-files shape re-keyed commit -> import.
   { name: 'runtime-observations', kind: 'dir', classification: 'generated', retentionClass: 'evidence', confidential: true, source: 'src/lineage/observation-store.js (persistObservationImport)', note: 'FR-505 requires an observation store follow artifact encryption, RETENTION, RESET, access-control and no-egress rules. That is why this is `generated` (a plain `reset` MUST be able to delete it) rather than `operator-config`, and why it carries a real retentionClass — deliberately NOT the `remediation`/`legal-holds.json` no-retention call one section down, and deliberately NOT `provenance`\'s permanent-history call. This DOES stretch `generated`\'s usual definition — a rescan does not re-derive an import, the operator re-imports it — and that stretch is disclosed here rather than hidden: FR-505\'s explicit reset requirement breaks the tie. `confidential: true` is enforced by observation-store.js calling maybeEncryptForWrite/maybeDecryptForRead itself (posture/encryption-provider.js), the same per-writer opt-in compliance-evidence.json makes — the flag alone enforces nothing.' },
   { name: 'shadow-findings.json', kind: 'file', classification: 'generated', retentionClass: 'scan' },
+  { name: 'context-intelligence', kind: 'dir', classification: 'generated', retentionClass: 'cache', source: 'src/context-intelligence/store.js (writeStoreFile)', note: 'Deterministic Context Intelligence store: context bundles (numbered source excerpts of the repository, so it holds source text and is treated like the source tree), manifests, review results, queue checkpoints, offline batch files and evaluation reports. Everything in it is regenerable by `context build` and `context review`. `context cleanup` removes unreferenced old bundles and refuses anything under a legal hold; a plain reset may delete the whole directory.' },
+  { name: 'context-intelligence.json', kind: 'file', classification: 'operator-config', source: 'src/context-intelligence/config.js (loadConfig)', note: 'Operator-authored configuration for the opt-in Deterministic Context Intelligence subsystem. Read only; reset leaves it alone.' },
   { name: 'reproducers', kind: 'dir', classification: 'operator-config', source: 'src/posture/proof-fabric/cli.js (loadReproducer)', note: 'Operator-supplied serialized reproducers read by `triage exploit --prove`. Input, never written by the scanner, so reset leaves it alone.' },
   { name: 'proofs', kind: 'dir', classification: 'generated', retentionClass: 'evidence', confidential: true, source: 'src/posture/proof-fabric/store.js (saveProof)', note: 'Universal Exploit Proof Fabric evidence: hashed records of exploit reproductions. Never holds plaintext credentials, per-run nonces or raw secrets (the runner redacts before persisting). Encrypted per the encryption policy via maybeEncryptForWrite, and purged by retention like any evidence-class artifact; a legal hold on `proofs` blocks the purge.' },
   { name: 'fleet-state.json', kind: 'file', classification: 'generated', retentionClass: 'scan', source: 'src/posture/fleet/cli.js, src/posture/fleet.js (loadFleetState/_saveFleetState)', note: 'Per-repository resume checkpoint for `fleet scan` — which fleet repositories are already complete, so a resumed run skips them. Scanner-managed; a plain reset may delete it.' },