@descryy/core 0.6.1 → 0.6.2

package/dist/governance/demotion-ledger.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The demotion ledger — `documents/plans/gate_loosening.md` §3.4.
+ *
+ * The question *"what did this run throw away, and which gate did it"* has had no answer.
+ * Each gate is individually defensible and the chain is conjunctive, so the cost of the
+ * composition is invisible from any one of them — §2 property 1, which nothing in the
+ * codebase computes or bounds.
+ *
+ * This computes it, and needs no new instrumentation to do so: every finding is already
+ * stored with the `G4Inputs` that graded it (`FindingRecord`), so the attribution is
+ * derivable over findings that already exist, retroactively.
+ *
+ * ## An instrument, not a second report surface
+ *
+ * §6 risk 3 is that this becomes a second uncapped list next to the first one. It is for
+ * tuning a threshold and should be judged on whether it changed one. Nothing here renders,
+ * and nothing here decides — `reportCategory` remains the only function that assigns a
+ * category, and this module only re-reads its inputs to say what the answer would have been
+ * without each cap.
+ */
+import type { EvidenceCategory, G4Inputs } from "@descryy/ir";
+/**
+ * The two gates that can lower a category below what the evidence alone read.
+ *
+ * Not a list of every gate in the pipeline — the fabrication gates (G1, G2) reject a claim
+ * outright rather than demoting one, and the funnel's cap truncates a ranked list rather than
+ * changing any finding's category. Both are real losses and neither is a *demotion*; conflating
+ * them here would make the levels-lost totals below meaningless.
+ */
+export declare const DEMOTION_GATES: readonly ["evidence-precondition", "reliability-cap"];
+export type DemotionGate = (typeof DEMOTION_GATES)[number];
+export interface Demotion {
+    readonly gate: DemotionGate;
+    /** What the observed evidence alone read, before any cap. */
+    readonly from: EvidenceCategory;
+    /** What was actually reported. */
+    readonly to: EvidenceCategory;
+    /** Rank levels lost. 1 or 2 — a demotion of 0 is not a demotion and is reported as `null`. */
+    readonly levels: number;
+}
+/**
+ * Which gate, if any, lowered this finding's category, and by how much. `null` when nothing
+ * did. Pure and total; never throws.
+ *
+ * At most one gate is reported. When G3's precondition binds, every downstream value is already
+ * `unconfirmed` and the reliability cap has nothing left to lower — so attributing the loss to
+ * both would double-count one demotion.
+ */
+export declare function attributeDemotion(inputs: G4Inputs): Demotion | null;
+/** One gate's share of the total loss. */
+export interface GateTally {
+    /** How many findings this gate demoted. */
+    readonly count: number;
+    /** Total rank levels it removed, across those findings. */
+    readonly levels: number;
+}
+export interface DemotionLedger {
+    readonly total: number;
+    /** Findings demoted by some gate. */
+    readonly demoted: number;
+    readonly byGate: Readonly<Record<DemotionGate, GateTally>>;
+    /**
+     * Findings the evidence read as `confirmed` that were reported as `unconfirmed` — the full
+     * two-level fall, and the population `gate_loosening.md` §1.1(c) is about.
+     */
+    readonly confirmedToUnconfirmed: number;
+}
+/**
+ * Aggregate the ledger over a run's findings. Order-independent and pure.
+ *
+ * Takes `G4Inputs` rather than `FindingRecord` so a caller holding either can use it — the
+ * inputs are the only part a demotion is computable from, and requiring the whole record would
+ * stop this being runnable over a stored inputs column alone.
+ */
+export declare function buildDemotionLedger(runs: readonly G4Inputs[]): DemotionLedger;
+//# sourceMappingURL=demotion-ledger.d.ts.map

package/dist/governance/demotion-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demotion-ledger.d.ts","sourceRoot":"","sources":["../../src/governance/demotion-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,uDAAwD,CAAC;AAEpF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAS3D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,kCAAkC;IAClC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC;IAC9B,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAeD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAyBnE;AAED,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,GAAG,cAAc,CAoB7E"}

package/dist/governance/demotion-ledger.js

@@ -0,0 +1,108 @@
+/**
+ * The demotion ledger — `documents/plans/gate_loosening.md` §3.4.
+ *
+ * The question *"what did this run throw away, and which gate did it"* has had no answer.
+ * Each gate is individually defensible and the chain is conjunctive, so the cost of the
+ * composition is invisible from any one of them — §2 property 1, which nothing in the
+ * codebase computes or bounds.
+ *
+ * This computes it, and needs no new instrumentation to do so: every finding is already
+ * stored with the `G4Inputs` that graded it (`FindingRecord`), so the attribution is
+ * derivable over findings that already exist, retroactively.
+ *
+ * ## An instrument, not a second report surface
+ *
+ * §6 risk 3 is that this becomes a second uncapped list next to the first one. It is for
+ * tuning a threshold and should be judged on whether it changed one. Nothing here renders,
+ * and nothing here decides — `reportCategory` remains the only function that assigns a
+ * category, and this module only re-reads its inputs to say what the answer would have been
+ * without each cap.
+ */
+import { existenceCategory, reportCategory } from "@descryy/ir";
+/**
+ * The two gates that can lower a category below what the evidence alone read.
+ *
+ * Not a list of every gate in the pipeline — the fabrication gates (G1, G2) reject a claim
+ * outright rather than demoting one, and the funnel's cap truncates a ranked list rather than
+ * changing any finding's category. Both are real losses and neither is a *demotion*; conflating
+ * them here would make the levels-lost totals below meaningless.
+ */
+export const DEMOTION_GATES = ["evidence-precondition", "reliability-cap"];
+/** Strongest first, matching `@descryy/ir`'s own rank so the arithmetic agrees across packages. */
+const RANK = {
+    confirmed: 2,
+    "strongly supported": 1,
+    unconfirmed: 0,
+};
+/**
+ * The evidence reading with **no** gate applied at all — not even G3's precondition.
+ *
+ * Deliberately not {@link existenceCategory}, which enforces the precondition first. The
+ * difference is the entire point of this module: without a pre-gate baseline there is nothing
+ * for G3 to be measured against, and a record where the precondition bound would look
+ * identical to one where nothing was ever observed.
+ */
+function evidenceReading(inputs) {
+    if (inputs.directMechanismEvidence)
+        return "confirmed";
+    return inputs.independentSignalTypes >= 1 ? "strongly supported" : "unconfirmed";
+}
+/**
+ * Which gate, if any, lowered this finding's category, and by how much. `null` when nothing
+ * did. Pure and total; never throws.
+ *
+ * At most one gate is reported. When G3's precondition binds, every downstream value is already
+ * `unconfirmed` and the reliability cap has nothing left to lower — so attributing the loss to
+ * both would double-count one demotion.
+ */
+export function attributeDemotion(inputs) {
+    const raw = evidenceReading(inputs);
+    // G3 — binds only on a record claiming evidence it also says it does not have. In valid data
+    // this is unreachable (both M and E are computed from the same array), which is why a hit here
+    // is worth surfacing: it means a record disagrees with itself.
+    if (!inputs.hasRuntimeEvidence && RANK[raw] > RANK.unconfirmed) {
+        return {
+            gate: "evidence-precondition",
+            from: raw,
+            to: "unconfirmed",
+            levels: RANK[raw] - RANK.unconfirmed,
+        };
+    }
+    const existence = existenceCategory(inputs);
+    const reported = reportCategory(inputs).category;
+    if (RANK[existence] <= RANK[reported])
+        return null;
+    return {
+        gate: "reliability-cap",
+        from: existence,
+        to: reported,
+        levels: RANK[existence] - RANK[reported],
+    };
+}
+/**
+ * Aggregate the ledger over a run's findings. Order-independent and pure.
+ *
+ * Takes `G4Inputs` rather than `FindingRecord` so a caller holding either can use it — the
+ * inputs are the only part a demotion is computable from, and requiring the whole record would
+ * stop this being runnable over a stored inputs column alone.
+ */
+export function buildDemotionLedger(runs) {
+    const byGate = {
+        "evidence-precondition": { count: 0, levels: 0 },
+        "reliability-cap": { count: 0, levels: 0 },
+    };
+    let demoted = 0;
+    let confirmedToUnconfirmed = 0;
+    for (const inputs of runs) {
+        const demotion = attributeDemotion(inputs);
+        if (demotion === null)
+            continue;
+        demoted += 1;
+        const tally = byGate[demotion.gate];
+        byGate[demotion.gate] = { count: tally.count + 1, levels: tally.levels + demotion.levels };
+        if (demotion.from === "confirmed" && demotion.to === "unconfirmed")
+            confirmedToUnconfirmed += 1;
+    }
+    return { total: runs.length, demoted, byGate, confirmedToUnconfirmed };
+}
+//# sourceMappingURL=demotion-ledger.js.map

package/dist/governance/demotion-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demotion-ledger.js","sourceRoot":"","sources":["../../src/governance/demotion-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGhE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,uBAAuB,EAAE,iBAAiB,CAAU,CAAC;AAIpF,mGAAmG;AACnG,MAAM,IAAI,GAA+C;IACvD,SAAS,EAAE,CAAC;IACZ,oBAAoB,EAAE,CAAC;IACvB,WAAW,EAAE,CAAC;CACf,CAAC;AAYF;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,MAAgB;IACvC,IAAI,MAAM,CAAC,uBAAuB;QAAE,OAAO,WAAW,CAAC;IACvD,OAAO,MAAM,CAAC,sBAAsB,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEpC,6FAA6F;IAC7F,+FAA+F;IAC/F,+DAA+D;IAC/D,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,GAAG;YACT,EAAE,EAAE,aAAa;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IACjD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,QAAQ;QACZ,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;KACzC,CAAC;AACJ,CAAC;AAsBD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,MAAM,MAAM,GAAoC;QAC9C,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAChD,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;KAC3C,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAEhC,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3F,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,EAAE,KAAK,aAAa;YAAE,sBAAsB,IAAI,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AACzE,CAAC"}

package/dist/governance/finding-funnel.d.ts

@@ -1,7 +1,7 @@
 /** §20.1 governance funnel — five filters ending in a hard cap; F2 (feedback-store false
  *  positives) and the cap itself were unimplemented until now. Caps are starting values (pr=5,
  *  §20.1's own 3+2 example). Never silently drops: every finding lands in reported/unconfirmed/suppressed. */
-import { type Finding } from "@descryy/ir";
+import { type Finding, type ReportCategory } from "@descryy/ir";
 import type { Trigger } from "../scoping/tiers.ts";
 /** Findings one run may report, per trigger. `pr`=5 is §20.1's own arithmetic (3+2). The rest
  *  scale to the reading surface (same shape as NODE_BUDGETS) — starting values, not measurements. */
@@ -22,6 +22,18 @@ export interface FindingFunnelOptions {
     readonly isDismissed?: (finding: Finding) => boolean;
     /** Overrides the trigger's cap. For a caller that has measured its own; not a way to opt out. */
     readonly cap?: number;
+    /**
+     * The finding's **existence** category — how strongly the evidence says the failure is real,
+     * uncapped by the structural path (`@descryy/ir`'s `existenceCategory`).
+     *
+     * Caller-supplied for the same reason `isDismissed` is: `Finding` is §20's fourteen fields and
+     * stays fourteen, so the second axis arrives as a lookup rather than a fifteenth field. Absent
+     * means "read it off `confidence`", which reproduces the pre-existing routing exactly.
+     *
+     * Routing on this is `gate_loosening.md` §3.3: a reproduced failure whose cause was never
+     * traced is capped at `unconfirmed` on attribution and belongs in front of a developer anyway.
+     */
+    readonly existenceOf?: (finding: Finding) => ReportCategory;
 }
 export interface FindingTruncation {
     readonly total: number;
@@ -37,6 +49,13 @@ export interface FindingFunnelResult {
     readonly unconfirmed: readonly Finding[];
     /** Removed by F2, kept so the run can say what it hid and why that is not a silence. */
     readonly suppressed: readonly Finding[];
+    /**
+     * Findings in `reported` whose own `confidence` would not have got them there — the failure
+     * is established, the cause is not. A renderer must label these as such: a confirmed symptom
+     * with an untraced cause is a different claim from a confirmed cause, and rule 7 forbids
+     * presenting the weaker one at the stronger one's weight. Empty when `existenceOf` is absent.
+     */
+    readonly promotedByExistence: readonly Finding[];
     readonly truncation: FindingTruncation;
 }
 /** §20.1's funnel. Pure and total — every input finding appears in exactly one output list.

package/dist/governance/finding-funnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finding-funnel.d.ts","sourceRoot":"","sources":["../../src/governance/finding-funnel.ts"],"names":[],"mappings":"AAAA;;8GAE8G;AAE9G,OAAO,EAAsB,KAAK,OAAO,EAAuB,MAAM,aAAa,CAAC;AAEpF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD;qGACqG;AACrG,eAAO,MAAM,YAAY;IACvB,yFAAyF;;IAEzF,uEAAuE;;IAEvE,kCAAkC;;IAElC,oFAAoF;;CAE1C,CAAC;AAc7C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;kEAC8D;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACrD,iGAAiG;IACjG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sGAAsG;IACtG,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;IACzC,wFAAwF;IACxF,QAAQ,CAAC,UAAU,EAAE,SAAS,OAAO,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED;yGACyG;AACzG,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,oBAAoB,GAC5B,mBAAmB,CAqCrB;AAYD;8EAC8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"finding-funnel.d.ts","sourceRoot":"","sources":["../../src/governance/finding-funnel.ts"],"names":[],"mappings":"AAAA;;8GAE8G;AAE9G,OAAO,EAAsB,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAEpF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD;qGACqG;AACrG,eAAO,MAAM,YAAY;IACvB,yFAAyF;;IAEzF,uEAAuE;;IAEvE,kCAAkC;;IAElC,oFAAoF;;CAE1C,CAAC;AAc7C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;kEAC8D;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACrD,iGAAiG;IACjG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,cAAc,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sGAAsG;IACtG,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;IACzC,wFAAwF;IACxF,QAAQ,CAAC,UAAU,EAAE,SAAS,OAAO,EAAE,CAAC;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,EAAE,SAAS,OAAO,EAAE,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED;yGACyG;AACzG,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,oBAAoB,GAC5B,mBAAmB,CAqDrB;AAsBD;8EAC8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/governance/finding-funnel.js

@@ -28,27 +28,40 @@ const NOT_CONFIDENT = new Set(["unconfirmed", "not analysable", "unsupported"]);
  *  Deterministic ordering (replay guarantee, §9 layer 6): ties break on fingerprint, not input order. */
 export function runFindingFunnel(findings, options) {
     const isDismissed = options.isDismissed ?? (() => false);
+    const existenceOf = options.existenceOf ?? ((finding) => finding.confidence);
     const suppressed = [];
     const confident = [];
     const unconfirmed = [];
+    const promotedByExistence = [];
     for (const finding of findings) {
         if (isDismissed(finding)) {
             suppressed.push(finding);
             continue;
         }
-        if (NOT_CONFIDENT.has(finding.confidence))
-            unconfirmed.push(finding);
-        else
-            confident.push(finding);
+        // The stronger of the two axes decides routing: attribution says how well the cause is
+        // known, existence says whether the failure is real, and a developer needs the second one
+        // to decide whether to look at all.
+        const existence = existenceOf(finding);
+        const effective = CATEGORY_RANK[existence] > CATEGORY_RANK[finding.confidence] ? existence : finding.confidence;
+        if (NOT_CONFIDENT.has(effective))
+            unconfirmed.push({ finding, effective });
+        else {
+            confident.push({ finding, effective });
+            // Rule 7 cuts both ways: a finding that reached the reported set on evidence its
+            // attribution could not support is disclosed, never quietly upgraded.
+            if (NOT_CONFIDENT.has(finding.confidence))
+                promotedByExistence.push(finding);
+        }
     }
-    const ranked = [...confident].sort(compareFindings);
+    const ranked = confident.sort(compareRanked).map((r) => r.finding);
     const cap = Math.max(0, Math.floor(options.cap ?? FINDING_CAPS[options.trigger]));
     const reported = ranked.slice(0, cap);
     const dropped = ranked.length - reported.length;
     return {
         reported,
-        unconfirmed: [...unconfirmed].sort(compareFindings),
+        unconfirmed: unconfirmed.sort(compareRanked).map((r) => r.finding),
         suppressed,
+        promotedByExistence,
         truncation: {
             total: ranked.length,
             shown: reported.length,
@@ -61,16 +74,21 @@ export function runFindingFunnel(findings, options) {
         },
     };
 }
-function compareFindings(a, b) {
-    const byCategory = CATEGORY_RANK[b.confidence] - CATEGORY_RANK[a.confidence];
+function compareRanked(a, b) {
+    // Effective category first: is this real, however well the cause is known.
+    const byEffective = CATEGORY_RANK[b.effective] - CATEGORY_RANK[a.effective];
+    if (byEffective !== 0)
+        return byEffective;
+    // Then attribution, so a finding whose cause is also known outranks one whose cause is not.
+    const byCategory = CATEGORY_RANK[b.finding.confidence] - CATEGORY_RANK[a.finding.confidence];
     if (byCategory !== 0)
         return byCategory;
     // Then by how well the code beneath it was understood — rule 3's axis.
-    const byResolution = Number(b.resolutionLevel) - Number(a.resolutionLevel);
+    const byResolution = Number(b.finding.resolutionLevel) - Number(a.finding.resolutionLevel);
     if (byResolution !== 0)
         return byResolution;
     // A stable, content-derived tiebreak, so replay reproduces the order.
-    return findingFingerprint(a) < findingFingerprint(b) ? -1 : 1;
+    return findingFingerprint(a.finding) < findingFingerprint(b.finding) ? -1 : 1;
 }
 /** Re-exported so a caller wiring the funnel and ledger imports one module — implementation
  *  lives in @descryy/ir's identity module (DEC-NEXT-edge-id-prefix-split). */

package/dist/governance/finding-funnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"finding-funnel.js","sourceRoot":"","sources":["../../src/governance/finding-funnel.ts"],"names":[],"mappings":"AAAA;;8GAE8G;AAE9G,OAAO,EAAE,kBAAkB,EAAqC,MAAM,aAAa,CAAC;AAIpF;qGACqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,yFAAyF;IACzF,WAAW,EAAE,CAAC;IACd,uEAAuE;IACvE,UAAU,EAAE,CAAC;IACb,kCAAkC;IAClC,EAAE,EAAE,CAAC;IACL,oFAAoF;IACpF,OAAO,EAAE,EAAE;CAC+B,CAAC;AAE7C,yEAAyE;AACzE,MAAM,aAAa,GAAmC;IACpD,SAAS,EAAE,CAAC;IACZ,oBAAoB,EAAE,CAAC;IACvB,WAAW,EAAE,CAAC;IACd,gBAAgB,EAAE,CAAC;IACnB,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,8FAA8F;AAC9F,MAAM,aAAa,GAAgC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;AA6B7G;yGACyG;AACzG,MAAM,UAAU,gBAAgB,CAC9B,QAA4B,EAC5B,OAA6B;IAE7B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAc,EAAE,CAAC;IAChC,MAAM,WAAW,GAAc,EAAE,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YAChE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAEhD,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QACnD,UAAU;QACV,UAAU,EAAE;YACV,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,OAAO;YACP,UAAU,EACR,OAAO,KAAK,CAAC;gBACX,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,GAAG,OAAO,mBAAmB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,8BAA8B;oBACnF,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,wCAAwC,GAAG,cAAc;oBAC1F,0CAA0C;SACjD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAU,EAAE,CAAU;IAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7E,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACxC,uEAAuE;IACvE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC3E,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC5C,sEAAsE;IACtE,OAAO,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;8EAC8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"finding-funnel.js","sourceRoot":"","sources":["../../src/governance/finding-funnel.ts"],"names":[],"mappings":"AAAA;;8GAE8G;AAE9G,OAAO,EAAE,kBAAkB,EAAqC,MAAM,aAAa,CAAC;AAIpF;qGACqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,yFAAyF;IACzF,WAAW,EAAE,CAAC;IACd,uEAAuE;IACvE,UAAU,EAAE,CAAC;IACb,kCAAkC;IAClC,EAAE,EAAE,CAAC;IACL,oFAAoF;IACpF,OAAO,EAAE,EAAE;CAC+B,CAAC;AAE7C,yEAAyE;AACzE,MAAM,aAAa,GAAmC;IACpD,SAAS,EAAE,CAAC;IACZ,oBAAoB,EAAE,CAAC;IACvB,WAAW,EAAE,CAAC;IACd,gBAAgB,EAAE,CAAC;IACnB,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,8FAA8F;AAC9F,MAAM,aAAa,GAAgC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;AAgD7G;yGACyG;AACzG,MAAM,UAAU,gBAAgB,CAC9B,QAA4B,EAC5B,OAA6B;IAE7B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEtF,MAAM,UAAU,GAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,mBAAmB,GAAc,EAAE,CAAC;IAE1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,uFAAuF;QACvF,0FAA0F;QAC1F,oCAAoC;QACpC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,SAAS,GACb,aAAa,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAEhG,IAAI,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;aACtE,CAAC;YACJ,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACvC,iFAAiF;YACjF,sEAAsE;YACtE,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAEhD,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,UAAU;QACV,mBAAmB;QACnB,UAAU,EAAE;YACV,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,OAAO;YACP,UAAU,EACR,OAAO,KAAK,CAAC;gBACX,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,GAAG,OAAO,mBAAmB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,8BAA8B;oBACnF,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,wCAAwC,GAAG,cAAc;oBAC1F,0CAA0C;SACjD;KACF,CAAC;AACJ,CAAC;AAQD,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,WAAW,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC1C,4FAA4F;IAC5F,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7F,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACxC,uEAAuE;IACvE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3F,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC5C,sEAAsE;IACtE,OAAO,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;8EAC8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/governance/index.d.ts

@@ -8,4 +8,6 @@ export { ESCALATION_TRIGGERS, checkEscalation } from "./escalation.ts";
 export type { EscalationCheckInput, EscalationTrigger } from "./escalation.ts";
 export { runFindingFunnel, findingFingerprint, FINDING_CAPS } from "./finding-funnel.ts";
 export type { FindingFunnelOptions, FindingFunnelResult, FindingTruncation, } from "./finding-funnel.ts";
+export { DEMOTION_GATES, attributeDemotion, buildDemotionLedger } from "./demotion-ledger.ts";
+export type { Demotion, DemotionGate, DemotionLedger, GateTally } from "./demotion-ledger.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/governance/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAErI,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEnG,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,cAAc,EACd,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzF,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAErI,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEnG,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,cAAc,EACd,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzF,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC9F,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/governance/index.js

@@ -3,4 +3,5 @@ export { checkCandidateBoundary } from "./candidate-boundary.js";
 export { BUDGET_CAP_NAMES, DEFAULT_INVESTIGATION_BUDGET, checkRunBudget, hypothesisRoundLimitReached, } from "./budget.js";
 export { ESCALATION_TRIGGERS, checkEscalation } from "./escalation.js";
 export { runFindingFunnel, findingFingerprint, FINDING_CAPS } from "./finding-funnel.js";
+export { DEMOTION_GATES, attributeDemotion, buildDemotionLedger } from "./demotion-ledger.js";
 //# sourceMappingURL=index.js.map

package/dist/governance/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,cAAc,EACd,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,cAAc,EACd,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAOzF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descryy/core",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "type": "module",
   "description": "Descry graph engine: storage, graph builder, query layer, traversal, diff scoping, git source, MCP server.",
   "license": "MIT",
@@ -33,6 +33,6 @@
     "build": "tsc -b"
   },
   "dependencies": {
-    "@descryy/ir": "0.6.1"
+    "@descryy/ir": "0.6.2"
   }
 }