@clear-capabilities/agentic-security-scanner 0.172.0 → 0.172.1

package/CHANGELOG.md

@@ -9,6 +9,20 @@
 > make the history less accurate, not more.
 
 
+## 0.172.1 - Deterministic Context Intelligence: adversarial review fixes
+
+An adversarial review of the first release found nine problems, each demonstrated against the shipped code and each now pinned by a regression test (`scanner/test/context-intelligence/premortem.test.js`).
+
+- **False ownership protection.** A route that built SQL from `req.params.id` and merely mentioned `req.user.id` and `owner_name` in the same call reported `ownership: present` with a `complete` bundle. An owner field now counts only when it is tied to the principal in the same clause, and the principal's own name is never read as an owner field. `present` carries a `strength` (`observed` or `inferred`).
+- **Discarded guards.** `isOwner(...)` called as a bare statement no longer counts as a guard; it is `evaluated_and_ineffective`.
+- **Prompt injection through the route label.** The label sat in the instruction text outside the untrusted fence. It is now sanitised and placed inside the fence.
+- **Remote egress.** A non-loopback endpoint now needs `--allow-remote` or `review.allowRemote`; the egress policy and redaction still apply after approval.
+- **Terminal escapes.** Every line the command prints has control characters and bidirectional marks replaced.
+- **Citations.** A citation must now be about its cited lines (not only inside the bundle), spans at most 60 lines, and `no_issue_observed` must cite a control the deterministic pass also found.
+- **Unmeasured numbers.** Precision, recall, F1 and calls per true positive are withheld while the interval is unmeasured; the CSV carries a `synthetic` column.
+- **Compiler export.** A reference must name a callee that its cited line contains, or the whole import degrades.
+- **Locale.** The one locale-sensitive ordering now uses code-unit order, so manifests do not differ by host locale.
+
 ## 0.172.0 - Deterministic Context Intelligence (`context` command)
 
 An opt-in, additive subsystem. The default scan, `hunt` and every existing command are unchanged.

package/dist/1336.index.js

@@ -9069,107 +9069,107 @@ function dbg(...args) {
 // === Body ===
 
 var ASM_CONSTS = {
-  21603448: () => { return current_async_call_id; },  
- 21603482: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
- 21603543: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21603598: () => { return current_async_call_id; },  
- 21603632: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
- 21603693: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21603748: () => { return current_async_call_id; },  
- 21603782: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
- 21603843: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21603898: () => { return current_async_call_id; },  
- 21603932: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
- 21603993: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21604048: () => { return current_async_call_id; },  
- 21604082: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
- 21604143: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21604198: ($0, $1) => { resolve_async($1, $0); },  
- 21604225: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21604291: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21604342: () => { clearTimeout(threadTimeouts.shift()); },  
- 21604384: ($0, $1) => { resolve_async($1, $0); },  
- 21604411: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21604477: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21604528: () => { clearTimeout(threadTimeouts.shift()); },  
- 21604570: ($0, $1) => { resolve_async($1, $0); },  
- 21604597: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21604663: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21604714: () => { clearTimeout(threadTimeouts.shift()); },  
- 21604756: ($0, $1) => { resolve_async($1, $0); },  
- 21604783: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21604849: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21604900: () => { clearTimeout(threadTimeouts.shift()); },  
- 21604942: ($0, $1) => { resolve_async($1, $0); },  
- 21604969: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21605035: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21605086: () => { clearTimeout(threadTimeouts.shift()); },  
- 21605128: () => { return current_async_call_id; },  
- 21605162: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21605217: ($0, $1) => { resolve_async($1, UTF8ToString($0)); },  
- 21605258: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21605324: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21605375: () => { clearTimeout(threadTimeouts.shift()); },  
- 21605417: () => { return current_async_call_id; },  
- 21605451: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21605506: ($0, $1) => { resolve_async($1, $0); },  
- 21605533: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21605599: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21605650: () => { clearTimeout(threadTimeouts.shift()); },  
- 21605692: () => { return current_async_call_id; },  
- 21605726: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21605781: ($0, $1) => { resolve_async($1, $0); },  
- 21605808: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21605874: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21605925: () => { clearTimeout(threadTimeouts.shift()); },  
- 21605967: () => { return current_async_call_id; },  
- 21606001: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21606056: ($0, $1) => { resolve_async($1, $0); },  
- 21606083: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21606149: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21606200: () => { clearTimeout(threadTimeouts.shift()); },  
- 21606242: () => { return current_async_call_id; },  
- 21606276: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21606331: ($0, $1) => { resolve_async($1, $0); },  
- 21606358: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21606424: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21606475: () => { clearTimeout(threadTimeouts.shift()); },  
- 21606517: () => { return current_async_call_id; },  
- 21606551: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21606606: ($0, $1) => { resolve_async($1, $0); },  
- 21606633: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21606699: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21606750: () => { clearTimeout(threadTimeouts.shift()); },  
- 21606792: () => { return current_async_call_id; },  
- 21606826: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21606881: ($0, $1) => { resolve_async($1, $0); },  
- 21606908: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21606974: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21607025: () => { clearTimeout(threadTimeouts.shift()); },  
- 21607067: () => { return current_async_call_id; },  
- 21607101: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21607156: ($0, $1) => { resolve_async($1, $0); },  
- 21607183: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21607249: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21607300: () => { clearTimeout(threadTimeouts.shift()); },  
- 21607342: () => { return current_async_call_id; },  
- 21607376: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21607431: ($0, $1) => { resolve_async($1, $0); },  
- 21607458: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21607524: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21607575: () => { clearTimeout(threadTimeouts.shift()); },  
- 21607617: () => { return current_async_call_id; },  
- 21607651: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21607706: ($0, $1) => { resolve_async($1, $0); },  
- 21607733: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21607799: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21607850: () => { clearTimeout(threadTimeouts.shift()); },  
- 21607892: () => { return current_async_call_id; },  
- 21607926: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
- 21607981: ($0, $1) => { resolve_async($1, $0); },  
- 21608008: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
- 21608074: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
- 21608125: () => { clearTimeout(threadTimeouts.shift()); }
+  21603560: () => { return current_async_call_id; },  
+ 21603594: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
+ 21603655: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21603710: () => { return current_async_call_id; },  
+ 21603744: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
+ 21603805: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21603860: () => { return current_async_call_id; },  
+ 21603894: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
+ 21603955: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21604010: () => { return current_async_call_id; },  
+ 21604044: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
+ 21604105: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21604160: () => { return current_async_call_id; },  
+ 21604194: ($0) => { reject_async($0, new Error("Memory allocation failed")); },  
+ 21604255: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21604310: ($0, $1) => { resolve_async($1, $0); },  
+ 21604337: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21604403: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21604454: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21604496: ($0, $1) => { resolve_async($1, $0); },  
+ 21604523: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21604589: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21604640: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21604682: ($0, $1) => { resolve_async($1, $0); },  
+ 21604709: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21604775: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21604826: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21604868: ($0, $1) => { resolve_async($1, $0); },  
+ 21604895: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21604961: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21605012: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21605054: ($0, $1) => { resolve_async($1, $0); },  
+ 21605081: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21605147: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21605198: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21605240: () => { return current_async_call_id; },  
+ 21605274: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21605329: ($0, $1) => { resolve_async($1, UTF8ToString($0)); },  
+ 21605370: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21605436: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21605487: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21605529: () => { return current_async_call_id; },  
+ 21605563: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21605618: ($0, $1) => { resolve_async($1, $0); },  
+ 21605645: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21605711: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21605762: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21605804: () => { return current_async_call_id; },  
+ 21605838: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21605893: ($0, $1) => { resolve_async($1, $0); },  
+ 21605920: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21605986: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21606037: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21606079: () => { return current_async_call_id; },  
+ 21606113: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21606168: ($0, $1) => { resolve_async($1, $0); },  
+ 21606195: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21606261: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21606312: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21606354: () => { return current_async_call_id; },  
+ 21606388: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21606443: ($0, $1) => { resolve_async($1, $0); },  
+ 21606470: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21606536: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21606587: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21606629: () => { return current_async_call_id; },  
+ 21606663: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21606718: ($0, $1) => { resolve_async($1, $0); },  
+ 21606745: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21606811: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21606862: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21606904: () => { return current_async_call_id; },  
+ 21606938: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21606993: ($0, $1) => { resolve_async($1, $0); },  
+ 21607020: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21607086: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21607137: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21607179: () => { return current_async_call_id; },  
+ 21607213: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21607268: ($0, $1) => { resolve_async($1, $0); },  
+ 21607295: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21607361: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21607412: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21607454: () => { return current_async_call_id; },  
+ 21607488: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21607543: ($0, $1) => { resolve_async($1, $0); },  
+ 21607570: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21607636: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21607687: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21607729: () => { return current_async_call_id; },  
+ 21607763: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21607818: ($0, $1) => { resolve_async($1, $0); },  
+ 21607845: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21607911: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21607962: () => { clearTimeout(threadTimeouts.shift()); },  
+ 21608004: () => { return current_async_call_id; },  
+ 21608038: () => { threadTimeouts.push(setTimeout(() => {}, 600000)); },  
+ 21608093: ($0, $1) => { resolve_async($1, $0); },  
+ 21608120: ($0) => { reject_async($0, new Error('failed with unknown exception')); },  
+ 21608186: ($0, $1) => { reject_async($1, new Error(UTF8ToString($0))); },  
+ 21608237: () => { clearTimeout(threadTimeouts.shift()); }
 };
 
 // end include: preamble.js

package/dist/7405.index.js

@@ -114,6 +114,8 @@ function metricsFor(units, protocolHash, name) {
     precision: (0,_posture_evaluation_interval_js__WEBPACK_IMPORTED_MODULE_5__/* .precisionOf */ .ij)(c), recall: (0,_posture_evaluation_interval_js__WEBPACK_IMPORTED_MODULE_5__/* .recallOf */ .HR)(c), f1: (0,_posture_evaluation_interval_js__WEBPACK_IMPORTED_MODULE_5__/* .f1Of */ .li)(c),
     precisionInterval: pn > 0 ? (0,_posture_evaluation_interval_js__WEBPACK_IMPORTED_MODULE_5__/* .wilsonInterval */ .YV)(c.tp, pn) : { status: 'unmeasured', reason: 'nothing was reported' },
     f1Interval: f1,
+    // A point estimate with no interval around it reads as a finding. It is reportable only when the interval is measured.
+    reportable: f1 && f1.status === 'measured',
   };
 }
 
@@ -149,6 +151,9 @@ function readLedger(root) {
 const pct = (x) => (x === null || x === undefined ? 'n/a' : (x * 100).toFixed(0) + '%');
 const interval = (i) => (!i || i.status !== 'measured' ? `unmeasured (${i && i.reason ? i.reason.split(',')[0] : 'no data'})` : `${pct(i.low)} to ${pct(i.high)}`);
 
+// Precision, recall and F1 are printed only when their interval is measured; otherwise the counts stand alone.
+const shown = (m, x) => (m.reportable ? pct(x) : 'withheld');
+
 function renderMarkdown(card) {
   const L = [];
   L.push('# Context Intelligence evaluation scorecard', '');
@@ -163,18 +168,20 @@ function renderMarkdown(card) {
   for (const s of card.systems) {
     if (s.status !== 'measured') { L.push(`| ${s.system} | ${s.status}: ${s.reason} | | | | | | | | | | |`); continue; }
     const m = s.metrics;
-    L.push(`| ${s.system} | measured | ${m.counts.tp} | ${m.counts.fp} | ${m.counts.fn} | ${m.counts.tn} | ${pct(m.precision)} | ${pct(m.recall)} | ${pct(m.f1)} | ${interval(m.f1Interval)} | ${s.calls} | ${s.promptChars} |`);
+    L.push(`| ${s.system} | measured | ${m.counts.tp} | ${m.counts.fp} | ${m.counts.fn} | ${m.counts.tn} | ${shown(m, m.precision)} | ${shown(m, m.recall)} | ${shown(m, m.f1)} | ${interval(m.f1Interval)} | ${s.calls} | ${s.promptChars} |`);
   }
   L.push('', '## Economics (estimated; no price supplied)', '', '| system | median ctx tokens | P95 | P99 | model calls | calls per true positive | wall ms |', '|---|---|---|---|---|---|---|');
-  for (const s of card.systems) if (s.economics) { const e = s.economics; L.push(`| ${s.system} | ${e.contextTokens.median ?? 'n/a'} | ${e.contextTokens.p95 ?? 'n/a'} | ${e.contextTokens.p99 ?? 'n/a'} | ${e.modelCalls} | ${e.callsPerTruePositive === null ? 'n/a' : e.callsPerTruePositive.toFixed(1)} | ${e.wallMs} |`); }
+  for (const s of card.systems) if (s.economics) { const e = s.economics; L.push(`| ${s.system} | ${e.contextTokens.median ?? 'n/a'} | ${e.contextTokens.p95 ?? 'n/a'} | ${e.contextTokens.p99 ?? 'n/a'} | ${e.modelCalls} | ${e.callsPerTruePositive === null || !s.metrics || !s.metrics.reportable ? 'withheld' : e.callsPerTruePositive.toFixed(1)} | ${e.wallMs} |`); }
+  L.push('', 'Precision, recall, F1 and calls per true positive are withheld while their interval is unmeasured (fewer than 10 independent groups). The counts above are what was observed; they are not an estimate of anything.');
   L.push('', `Replay: \`${card.replay}\``, '');
   if (card.leakage.length) { L.push('## Leakage hits', ...card.leakage.map(h => `- ${h.where} ${h.file || ''} ${h.term}`), ''); }
   return L.join('\n');
 }
 
 function renderCsv(card) {
-  const rows = [['system', 'case', 'variant', 'vulnerable', 'flagged', 'outcome', 'calls', 'promptChars']];
-  for (const s of card.systems) for (const u of (s.units || [])) rows.push([s.system, u.caseId, u.variant, u.vulnerable, u.flagged, u.outcome, u.calls, u.promptChars]);
+  // The marker is a column, not a banner: a CSV is the format that gets pasted into a spreadsheet without its header text.
+  const rows = [['system', 'case', 'variant', 'vulnerable', 'flagged', 'outcome', 'calls', 'promptChars', 'synthetic']];
+  for (const s of card.systems) for (const u of (s.units || [])) rows.push([s.system, u.caseId, u.variant, u.vulnerable, u.flagged, u.outcome, u.calls, u.promptChars, card.synthetic === false ? false : true]);
   return rows.map(r => r.join(',')).join('\n') + '\n';
 }
 
@@ -625,6 +632,16 @@ function stripUntrustedKeepUser(t) { return stripUntrusted(t).replace(/""/g, '""
 
 function cite(l, role, claim) { return { role, file: l.file, startLine: l.n, endLine: l.n, claim }; }
 
+/** A reader that cites a line says what is on it: the claim quotes the cited text, as a careful model would. */
+function quoteCited(obj, blocks) {
+  const text = (c) => {
+    for (const b of blocks) if (b.file === c.file) { const l = b.lines.find(x => x.n === c.startLine); if (l) return l.text.trim().slice(0, 100); }
+    return '';
+  };
+  const fix = (list) => (Array.isArray(list) ? list.map(c => ({ ...c, claim: `${c.claim}: ${text(c)}` })) : list);
+  return { ...obj, evidence: fix(obj.evidence), observedMitigations: fix(obj.observedMitigations) };
+}
+
 /** The decision for a pack, from the observations. Returns the review JSON object. */
 function decide(packId, obs, ctx) {
   const base = { observedMitigations: [], attackerControl: [], uncertainties: [], likelihood: 'low' };
@@ -673,7 +690,7 @@ function scriptedReader() {
   const invoke = async (prompt) => {
     if (/^QUESTION PACK: /m.test(prompt)) {
       const packId = /^QUESTION PACK: ([\w-]+)\//m.exec(prompt)[1];
-      const label = /^ENTRY POINT 1: (.*?) \(id /m.exec(prompt)[1];
+      const label = (/^ENTRY POINT LABEL \(data\): (.*)$/m.exec(prompt) || [])[1] || '';
       const { blocks, unresolved, notIncluded, limit } = blocksFromReviewPrompt(prompt);
       const routes = findRoutes(blocks);
       const [method, ...rest] = label.split(' ');
@@ -682,7 +699,7 @@ function scriptedReader() {
       if (!route) return JSON.stringify({ evidence: [], observedMitigations: [], conclusion: 'insufficient_evidence', invariant: 'unspecified', uncertainties: ['the registration is not in the provided context'] });
       const obs = analyseRoute(route, blocks);
       const complete = !unresolved && !notIncluded && !limit;
-      return JSON.stringify(decide(packId, obs, { complete, unresolved }));
+      return JSON.stringify(quoteCited(decide(packId, obs, { complete, unresolved }), blocks));
     }
     // hunt prompt: report the candidates for the lens, with a location
     const lens = /Your lens is ([\w ]+)\./.exec(prompt);