@ecoma-io/archkeep 0.26.0 → 0.27.0

package/cli.mjs

@@ -57,7 +57,7 @@
  *      declared constraint. `check`, `fitness`, `delta` and `change` are the
  *      verbs whose verdicts carry this code, plus `rules verify` — the
  *      artifact-integrity fold, a bounded verification surface, not a fifth
- *      architecture carrier (PD-8; `docs/reference/exit-codes.md` owns the
+ *      architecture carrier (`docs/reference/exit-codes.md` owns the
  *      roster). Every other verb only ever reads.
  *   2  usage error — unknown command, unknown flag, missing argument, path
  *      outside the tree
@@ -105,7 +105,8 @@ import { containmentViolation } from "./src/containment.mjs";
 import { UsageError } from "./src/errors.mjs";
 // Verb imports route through the capability facades: each
 // `<word>-capability.mjs` module is its word's explicit verb roster — pure
-// re-exports, zero judgment (PD-18, docs/architecture/refactor/DECISIONS.md).
+// re-exports, zero judgment. The vocabulary's roster lives in
+// docs/concepts/architecture.md's "The 24 commands".
 // Non-verb helper modules keep their direct imports.
 import {
   discoverCommand,
@@ -1331,7 +1332,7 @@ async function runWaivers(options, { cwd, env }) {
  * (D-09). `check` folds the same `fail` into its own exit 1 by presence, so the
  * two faces agree; the verbs whose verdict carries that code are `check`,
  * `fitness`, `delta` and `change`, plus the `rules verify` artifact-integrity
- * fold (PD-8; `docs/reference/exit-codes.md` owns the roster).
+ * fold (`docs/reference/exit-codes.md` owns the roster).
  *
  * @param {{format: string, output: string|null, config: string|null, paths: string[]}} options
  * @param {{cwd: string, env: {out: Function, err: Function, readGraph?: Function, listFiles?: Function}}} runContext

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ecoma-io/archkeep",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Architecture authority for human and agentic software development — deterministic, evidence-backed enforcement of declared architecture.",
   "keywords": [
     "architecture",

package/src/architecture-intent/model.mjs

@@ -12,8 +12,8 @@
  * is a deterministic comparison (`./judge.mjs`). NO LLM/AI anywhere in the core.
  *
  * Which "intent" this is: one of four unrelated surfaces sharing the word —
- * PD-13 outcome (c), four surfaces, never one type
- * (`../../../../docs/architecture/refactor/DECISIONS.md`). This module is
+ * four surfaces, never one type
+ * (`../../../../docs/concepts/architecture.md`, "The 24 commands"). This module is
  * the workspace-declared law: the grammar, validation, and loading of
  * `architecture-intent.json`, judged against the observed graph by `check`
  * and `drift`. The other three: the v1.0 evidence-manifest registry

package/src/commands/analyze-capability.mjs

@@ -7,7 +7,7 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { discoverCommand, intentJsonFromProposal, intentWriteRefusal } from "./discover.mjs";

package/src/commands/change-intent.mjs

@@ -10,8 +10,8 @@
  * as the reviewable answer to "what did this change do to the architecture?".
  *
  * Which "intent" this is: one of four unrelated surfaces sharing the word —
- * PD-13 outcome (c), four surfaces, never one type
- * (`../../../../docs/architecture/refactor/DECISIONS.md`). This module is
+ * four surfaces, never one type
+ * (`../../../../docs/concepts/architecture.md`, "The 24 commands"). This module is
  * the declared-change grammar: one change's expected architectural
  * consequences, verified by the `change` command against the actual delta.
  * The other three: the workspace-declared law (`../architecture-intent/` —

package/src/commands/change.mjs

@@ -480,8 +480,8 @@ function changeFoldInputProblem(reconciliation, constraints, unprovenReasons) {
  * before any list, so a malformed one reaching it unguarded can name the
  * whole run unproven or matched for reasons the counts never supported. The
  * literals stay hand-rolled per site by decision — the carrier folds are the
- * pinned baseline INV-2 names, not a table to be converged
- * (`docs/architecture/refactor/AUTHORITY-MAP.md`).
+ * pinned baseline, not a table to be converged
+ * (`docs/reference/exit-codes.md`'s fold-site statement).
  *
  * @param {{matched: object[], unexpected: object[], missingExpected: object[]}} reconciliation
  * @param {{verdict: string}[]} constraints Judged `fitnessVerdict` rows —
@@ -1000,10 +1000,11 @@ export async function changeCommand(
   // `findings`, never in `debt`. An unproven base (F-CHG-1) or an unjudgeable
   // intent is a no-verdict: no ids are emitted, an in-band note says so, and a
   // change run never fabricates ledger ids over evidence it cannot vouch for.
-  /** @type {{introduced: string[], resolved: string[], note?: string}} */
+  /** @type {{judged: boolean, introduced: string[], resolved: string[], note?: string}} the marker is in-band on every shape: `false` on a fail-closed path, `true` from `debtChangeDiff` */
   let debt;
   if (baseEngineGraph === null) {
     debt = {
+      judged: false,
       introduced: [],
       resolved: [],
       note: "base identity unproven — no architecture debt diff can be trusted",
@@ -1013,6 +1014,7 @@ export async function changeCommand(
       const archIntent = await (loadIntentOverride ?? loadIntent)(root, { tracked });
       if (archIntent === undefined || archIntent === null) {
         debt = {
+          judged: false,
           introduced: [],
           resolved: [],
           note: `no '${INTENT_FILE}' tracked — the change event carries no architecture debt ids`,
@@ -1024,6 +1026,7 @@ export async function changeCommand(
       }
     } catch (error) {
       debt = {
+        judged: false,
         introduced: [],
         resolved: [],
         note: `architecture intent could not be judged — no debt ids emitted (${error.message})`,

package/src/commands/check-capability.mjs

@@ -5,8 +5,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { check, sortViolations } from "./check.mjs";
 export { fitness } from "./fitness.mjs";

package/src/commands/check.mjs

@@ -522,14 +522,12 @@ export async function check(
   // constraint from the edge — so suppression, waiver annotation, sorting and
   // the SARIF face all treat it as the ordinary violation it is.
   //
-  // PD-13 (2026-09-06) pins THIS fold as the documented normalization seam
-  // (`../../../../docs/architecture/refactor/DECISIONS.md`): the one place
+  // This fold is the documented normalization seam — the one place
   // `judgeEdge`'s markdown-pairing verdicts are reshaped into the exact
   // `Violation` record `violationOf` (`../rules/index.mjs`) builds — the
   // families then fold into the one verdict lane as count keys into
-  // `verdictFor` (`../verdict.mjs`). The canonical statement is the
-  // "Finding — the unowned concept" section of
-  // `../../../../docs/architecture/refactor/SEMANTIC-MODEL.md`.
+  // `verdictFor` (`../verdict.mjs`). The canonical statement is
+  // `../../../../docs/concepts/evidence.md`'s "Four finding families".
   /** @type {object[]} */
   const markdownRaw = [];
   if (config !== null && markdownTrack !== null && config.depConstraints.length > 0) {

package/src/commands/compare-capability.mjs

@@ -7,8 +7,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { diff } from "./diff.mjs";
 export { captureBaseline, delta } from "./delta.mjs";

package/src/commands/completeness.mjs

@@ -33,8 +33,8 @@
  * refusal contract (`./coverage-verdict.mjs`): `coverageVerdict` refuses
  * `no-verdict` (exit 3), and no status here is derived from it or folds
  * into it. Two models of "did we see everything", owned by different
- * waves — register R1 in `docs/architecture/refactor/SEMANTIC-MODEL.md`
- * keeps them separate.
+ * waves — register R1 in `../../../../docs/concepts/evidence.md`'s "Register
+ * R1" keeps them separate.
  *
  * @module
  */

package/src/commands/delta.mjs

@@ -479,8 +479,8 @@ function deltaFoldInputProblem(classification, custom) {
  * The input latch runs first: a bucket the fold cannot read is refused as a
  * no-verdict whose single reason names it (`refused`), never folded past as a
  * silently-empty count. The literals stay hand-rolled per site by decision —
- * the carrier folds are the pinned baseline INV-2 names, not a table to be
- * converged (`docs/architecture/refactor/AUTHORITY-MAP.md`).
+ * the carrier folds are the pinned baseline, not a table to be converged
+ * (`docs/reference/exit-codes.md`'s fold-site statement).
  *
  * Pure and exported for the fold's own tests; `deltaCommand` is its only
  * production caller.
@@ -1029,12 +1029,13 @@ export async function deltaCommand(
     // gate; the fail-closed branches are an absent intent and an unjudgeable
     // one, each emitting no ids and an in-band note rather than a fabricated
     // clean ledger.
-    /** @type {{introduced: string[], resolved: string[], note?: string}} */
+    /** @type {{judged: boolean, introduced: string[], resolved: string[], note?: string}} the marker is in-band on every shape: `false` on a fail-closed path, `true` from `debtChangeDiff` */
     let debt;
     try {
       const archIntent = await (loadIntentOverride ?? loadIntent)(root, { tracked });
       if (archIntent === undefined || archIntent === null) {
         debt = {
+          judged: false,
           introduced: [],
           resolved: [],
           note: `no '${INTENT_FILE}' tracked — the delta event carries no architecture debt ids`,
@@ -1046,6 +1047,7 @@ export async function deltaCommand(
       }
     } catch (error) {
       debt = {
+        judged: false,
         introduced: [],
         resolved: [],
         note: `architecture intent could not be judged — no debt ids emitted (${error.message})`,

package/src/commands/diff.mjs

@@ -245,8 +245,8 @@ function buildHeadSnapshot(commandContext) {
  * `edgeEvolutionIdentity` (`../governance/evolution-event.mjs`), the escaped
  * `source>target:type` string evolution events carry, and the two spellings
  * are deliberately not unified — each medium keeps exactly one identity
- * constructor (`../../../../docs/adr/0008-snapshot-identity-per-family.md`;
- * INV-6 in `../../../../docs/architecture/refactor/INVARIANTS.md`). An edge
+ * constructor (`../../../../docs/adr/0008-snapshot-identity-per-family.md`).
+ * An edge
  * crosses from a structural diff into an event as its raw
  * `{source, target, type}` triple, mapped through that function at the
  * command boundary; a `\0`-joined key written into an event record would

package/src/commands/evolution.mjs

@@ -940,6 +940,16 @@ export function buildEvolutionSummary(comparisons) {
       });
       return { verdictDeltas };
     }
+    if (axis === "debt") {
+      // The aggregate states whether the debt it unions was judged at every
+      // transition (`debtChangeDiff`'s marker) — a summary over a transition
+      // that could not judge its debt never reads as a judged clean union.
+      return {
+        judged: comparisons.every((c) => c.debt === undefined || c.debt.judged === true),
+        introduced: collect("introduced"),
+        resolved: collect("resolved"),
+      };
+    }
     return {
       introduced: collect("introduced"),
       resolved: collect("resolved"),

package/src/commands/explain-capability.mjs

@@ -5,7 +5,7 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { explain } from "./explain.mjs";

package/src/commands/fitness.mjs

@@ -122,8 +122,8 @@ export function declaresFitness(config) {
  * exit over a run the fold could not read. A verdict outside the four states
  * is refused as a no-verdict whose single reason names it (`refused`), never
  * folded past. The literals stay hand-rolled per site by decision — the
- * carrier folds are the pinned baseline INV-2 names, not a table to be
- * converged (`docs/architecture/refactor/AUTHORITY-MAP.md`).
+ * carrier folds are the pinned baseline, not a table to be
+ * converged (`docs/reference/exit-codes.md`'s fold-site statement).
  *
  * `overall.decisions` is validated for the same reason the delta fold
  * validates buckets the fold itself does not count first: `result.functions`

package/src/commands/govern-capability.mjs

@@ -5,8 +5,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { waivers } from "./waivers.mjs";
 export { report } from "./report.mjs";

package/src/commands/inspect-capability.mjs

@@ -6,8 +6,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { graph } from "./graph.mjs";
 export { impact } from "./impact.mjs";

package/src/commands/rules-capability.mjs

@@ -5,8 +5,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export {
   rulesAddCommand,

package/src/corpus/goldens/adr.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "adr",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "docs/adr",
     "provenance": null

package/src/corpus/goldens/change.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "change",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -28,7 +28,7 @@
   },
   "result": {
     "intent": {
-      "file": "/tmp/archkeep-golden-fixture/.archkeep-change.json",
+      "file": "<fixture-root>/.archkeep-change.json",
       "version": "1",
       "base": {
         "commit": "1fd51709c377d99a6139891e1200291cf08aede9"
@@ -42,10 +42,10 @@
       }
     },
     "baseline": {
-      "path": "/tmp/archkeep-golden-fixture/.archkeep-delta.json",
+      "path": "<fixture-root>/.archkeep-delta.json",
       "tool": {
         "name": "@ecoma-io/archkeep",
-        "version": "0.26.0"
+        "version": "0.27.0"
       },
       "provider": "native",
       "provenance": {
@@ -87,6 +87,7 @@
       "decisions": []
     },
     "debt": {
+      "judged": true,
       "introduced": [],
       "resolved": []
     }

package/src/corpus/goldens/change.text

@@ -1,5 +1,5 @@
-intent     /tmp/archkeep-golden-fixture/.archkeep-change.json — base 1fd51709
-baseline   /tmp/archkeep-golden-fixture/.archkeep-delta.json — 1fd51709, 2 records, 3 projects
+intent     <fixture-root>/.archkeep-change.json — base 1fd51709
+baseline   <fixture-root>/.archkeep-delta.json — 1fd51709, 2 records, 3 projects
 head       1fd51709, 3 projects
 reconciliation ✔ MATCHED — the delta is exactly the declared change
 workspace law  0 live violations under the current law — informational; archkeep check remains the authoritative verdict

package/src/corpus/goldens/check.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "check",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/context.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "context",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/debt.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "debt",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -31,10 +31,10 @@
     ]
   },
   "result": {
-    "dir": "/tmp/archkeep-golden-fixture/.archkeep-history",
+    "dir": "<fixture-root>/.archkeep-history",
     "snapshots": 1,
     "agings": false,
-    "sampleTime": "2026-09-07T06:50:29.512Z",
+    "sampleTime": "2026-09-08T10:33:14.692Z",
     "entries": [],
     "resolved": [],
     "total": 0,

package/src/corpus/goldens/debt.text

@@ -1,7 +1,7 @@
-debt  /tmp/archkeep-golden-fixture/.archkeep-history
+debt  <fixture-root>/.archkeep-history
 0 entries across 1 snapshot — ages not yet established (fewer than two snapshots)
 ✔ no architecture debt — no waivers, aspirational gaps, drift or unresolved intent
 no event store linked — lifecycle refs unavailable
 total 0 entries · byKind: waiver 0, expired-waiver 0, aspirational-gap 0, drift 0, unresolved 0 · bySeverity: high 0, medium 0, low 0
-sampled 2026-09-07T06:50:29.192Z
+sampled 2026-09-08T10:33:14.369Z
 ✔ complete (2 imports in 3 files across 3 projects)

package/src/corpus/goldens/decisions.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "decisions",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "docs/adr",
     "provenance": null

package/src/corpus/goldens/delta.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "delta",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -28,10 +28,10 @@
   },
   "result": {
     "baseline": {
-      "path": "/tmp/archkeep-golden-fixture/.archkeep-delta.json",
+      "path": "<fixture-root>/.archkeep-delta.json",
       "tool": {
         "name": "@ecoma-io/archkeep",
-        "version": "0.26.0"
+        "version": "0.27.0"
       },
       "provider": "native",
       "provenance": {

package/src/corpus/goldens/delta.text

@@ -1,4 +1,4 @@
-baseline  /tmp/archkeep-golden-fixture/.archkeep-delta.json — 1fd51709, 2 records, 3 projects
+baseline  <fixture-root>/.archkeep-delta.json — 1fd51709, 2 records, 3 projects
 head      1fd51709, 2 records, 3 projects
 ✔ no introduced violations — compared baseline 1fd51709 (2 records) against head 1fd51709 (2 records, 3 analyzed files, 3 projects)
 classifications  none

package/src/corpus/goldens/diff.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "diff",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -30,10 +30,10 @@
   },
   "result": {
     "baseline": {
-      "path": "/tmp/archkeep-golden-fixture/.archkeep-graph.json",
+      "path": "<fixture-root>/.archkeep-graph.json",
       "projects": 3,
       "edges": 2,
-      "toolVersion": "0.26.0",
+      "toolVersion": "0.27.0",
       "provenance": {
         "commit": "1fd51709c377d99a6139891e1200291cf08aede9",
         "remote": null,

package/src/corpus/goldens/diff.text

@@ -1,4 +1,4 @@
-baseline  /tmp/archkeep-golden-fixture/.archkeep-graph.json — 3 projects, 2 edges
+baseline  <fixture-root>/.archkeep-graph.json — 3 projects, 2 edges
 head      3 projects, 2 edges
 ✔ no boundary-rule impact
 ✔ no changes between baseline and head (2 imports in 3 files across 3 projects; per-edge rule-impact covers only depConstraints (3 of 15 violation types; standing edges adjacent to a tags-changed project are re-judged under both sides' tags). A dependency with no rule-impact may still violate npm-ban, circular-dependency, lazy-load, or other rules that require import-site details. Run check for the complete verdict.)

package/src/corpus/goldens/discover.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "discover",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/drift.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "drift",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/evolution.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "evolution",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -228,6 +228,7 @@
             "unknown": []
           },
           "debt": {
+            "judged": true,
             "introduced": [],
             "resolved": []
           },
@@ -309,6 +310,7 @@
         "unknown": []
       },
       "debt": {
+        "judged": true,
         "introduced": [],
         "resolved": []
       },

package/src/corpus/goldens/explain.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "explain",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/fitness.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "fitness",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/graph.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "graph",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/health.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "health",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/history.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "history",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -29,7 +29,7 @@
     ]
   },
   "result": {
-    "dir": "/tmp/archkeep-golden-fixture/.archkeep-history",
+    "dir": "<fixture-root>/.archkeep-history",
     "captured": null,
     "snapshots": [
       {

package/src/corpus/goldens/history.text

@@ -1,4 +1,4 @@
-history  /tmp/archkeep-golden-fixture/.archkeep-history
+history  <fixture-root>/.archkeep-history
 1 snapshot, 0 transitions (2 imports in 3 files across 3 projects)
 0  0001-71341a04.json  71341a04
 ✔ one snapshot, no transitions yet — capture again after an architectural change

package/src/corpus/goldens/impact.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "impact",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/provenance.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "provenance",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/reconcile.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "reconcile",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/report.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "report",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/report.text

@@ -1,7 +1,7 @@
 architecture governance report — every surface reached a verdict
 
 provenance
-  root        /tmp/archkeep-golden-fixture
+  root        <fixture-root>
   provider    native (archkeep.json)
   policy      module-boundaries.config.mjs
   commit      1fd51709c377d99a6139891e1200291cf08aede9

package/src/corpus/goldens/scenario.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "scenario",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/trajectory.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "trajectory",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -30,7 +30,7 @@
     ]
   },
   "result": {
-    "dir": "/tmp/archkeep-golden-fixture/.archkeep-history",
+    "dir": "<fixture-root>/.archkeep-history",
     "observations": {
       "count": 1,
       "basis": "graph_snapshots",

package/src/corpus/goldens/trajectory.text

@@ -1,4 +1,4 @@
-trajectory  /tmp/archkeep-golden-fixture/.archkeep-history
+trajectory  <fixture-root>/.archkeep-history
 1 observation (graph_snapshots), 0 transitions
 ✖ insufficient_history: a trajectory needs at least two observations — derived values are unavailable, not zero
 signals  architecture 0 · policy 0 · provider 0 · code drift 0 · incomparable 0 · unchanged 0

package/src/corpus/goldens/waivers.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.0"
   },
   "command": "waivers",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/go-work.mjs

@@ -276,13 +276,12 @@ function useDirectory(usePath, workspaceRoot) {
  * - **`goWorkOutsideUse`** — a `use` entry above the workspace root. Whatever
  *   it builds, no run over this workspace can cover it.
  *
- * One of the FOUR finding families — PD-13 (2026-09-06) outcome (c): no
+ * One of the FOUR finding families: no
  * Finding supertype exists, and the relationship pin lives on
- * `./rules/index.mjs`'s `violationOf` header. These findings stay this
+ * `./rules/index.mjs`'s `violationOf` header (stated in
+ * `../../../docs/concepts/evidence.md`'s "Four finding families"). These findings stay this
  * family's own shape and fold into the one verdict lane as count keys into
- * `verdictFor` (`./verdict.mjs`). The canonical statement is the
- * "Finding — the unowned concept" section of
- * `../../../docs/architecture/refactor/SEMANTIC-MODEL.md`.
+ * `verdictFor` (`./verdict.mjs`).
  *
  * @param {{ uses: { path: string, line: number, column: number }[],
  *   workspaceRoot: string,

package/src/governance/debt-ledger.mjs

@@ -208,7 +208,10 @@ export function driftFactOf(finding) {
  *
  * @param {object} baseVerdict A `judgeIntent` result over the base graph.
  * @param {object} headVerdict A `judgeIntent` result over the head graph.
- * @returns {{introduced: string[], resolved: string[]}} Stable debt ids.
+ * @returns {{judged: true, introduced: string[], resolved: string[]}} Stable
+ *   debt ids, marked judged — the in-band complement of `judged: false`, so a
+ *   consumer can always distinguish "no debt existed" from "debt could not be
+ *   judged" (see `../../AGENTS.md`'s invariant).
  */
 export function debtChangeDiff(baseVerdict, headVerdict) {
   const driftOf = (v) => (v.findings ?? []).map((f) => debtFactId("drift", driftFactOf(f)));
@@ -218,7 +221,7 @@ export function debtChangeDiff(baseVerdict, headVerdict) {
   const headIds = new Set([...driftOf(headVerdict), ...gapOf(headVerdict)]);
   const introduced = [...headIds].filter((id) => !baseIds.has(id)).sort();
   const resolved = [...baseIds].filter((id) => !headIds.has(id)).sort();
-  return { introduced, resolved };
+  return { judged: true, introduced, resolved };
 }
 /**
  * Reduces an `opts.events` value to a loaded event array, or `null` when no

package/src/governance/evolution-event.mjs

@@ -198,8 +198,7 @@ export function escapeIdentityField(value) {
  * index maps, `trajectory`'s persistence sets — and is never stored. Different
  * media, one law: each family keeps exactly one identity constructor, and
  * consumers consume a constructor's output rather than re-deriving a second
- * spelling of it (`../../../../docs/adr/0008-snapshot-identity-per-family.md`,
- * INV-6 in `../../../../docs/architecture/refactor/INVARIANTS.md`). An edge
+ * spelling of it (`../../../../docs/adr/0008-snapshot-identity-per-family.md`). An edge
  * reaches this module only as its raw triple, never as a pre-built string
  * from either spelling (`evolutionBoundary` below refuses one), and a
  * `\0`-joined diff key written into an event would give one edge two

package/src/intent/intent-manifest.json

@@ -52,7 +52,7 @@
           "type": "source-evidence",
           "path": "cli.mjs",
           "assertion": "Exit codes 0/1/3 distinguish clean/findings/cannot-look",
-          "sha256": "2b6590f4039464d3569727d0a73db61dd86c18648a519ee034ebcc2d845ecfc7"
+          "sha256": "536fef05cdf8d6ec8a5c364819d2dcbf61cdcf75b638463e98b89d6073e27851"
         }
       ],
       "status": "proven"
@@ -66,13 +66,13 @@
           "type": "behavioral-test",
           "path": "src/intent/intent.test.mjs",
           "assertion": "analysis output conforms to the frozen contract schema (no extra verdict/policy fields); analysis output is invariant under project tag changes (three workspaces differing only in project tag fields compared byte-for-byte)",
-          "sha256": "749414363ef9991ae3697fc00ab5969751666867792d4bb4dbe528ec47ccd740"
+          "sha256": "8c481f1230ae8700469816018fba99017a0014920b12bebdf262ceb241cba745"
         },
         {
           "type": "architecture-test",
           "path": "src/intent/intent.test.mjs",
           "assertion": "the gate walks every production analysis module and fails when judging vocabulary (judge/forbid/permit/allow/ban) appears in code",
-          "sha256": "749414363ef9991ae3697fc00ab5969751666867792d4bb4dbe528ec47ccd740"
+          "sha256": "8c481f1230ae8700469816018fba99017a0014920b12bebdf262ceb241cba745"
         },
         {
           "type": "source-evidence",
@@ -84,7 +84,7 @@
           "type": "source-evidence",
           "path": "AGENTS.md",
           "assertion": "src/graph/ is a lossy view of analysis, on purpose; src/analysis/ never judges",
-          "sha256": "552b54c1956370f024ffeecec95c0e0941a0c66d4a14094045b444a25a27f913"
+          "sha256": "6ab8eef7a1ec2a8bde81393880cc6d29b1f089b01ffec403b31846c5d3a1a830"
         }
       ],
       "status": "proven"
@@ -136,7 +136,7 @@
           "type": "source-evidence",
           "path": "src/commands/diff.mjs",
           "assertion": "parseBaseline validates schemaVersion; refuses unknown versions",
-          "sha256": "4d44eea475cd4b06122a405718203d2e0018a163c1d42b17324400e7e4de5eea"
+          "sha256": "59e6e8f1cb0535cbec241f6daf99c10f5a679c798e66fcc1f4afb5329bc6497a"
         }
       ],
       "status": "proven"
@@ -156,7 +156,7 @@
           "type": "source-evidence",
           "path": "src/commands/diff.mjs",
           "assertion": "computeDiff returns structural diff; policyMismatch detected via fingerprint; computeRuleImpact for depConstraints-only context",
-          "sha256": "4d44eea475cd4b06122a405718203d2e0018a163c1d42b17324400e7e4de5eea"
+          "sha256": "59e6e8f1cb0535cbec241f6daf99c10f5a679c798e66fcc1f4afb5329bc6497a"
         }
       ],
       "status": "proven"
@@ -236,7 +236,7 @@
           "type": "behavioral-test",
           "path": "src/intent/intent.test.mjs",
           "assertion": "depConstraints verdicts from judgeEdge agree with evaluate in both directions (violating edge found by both, legal edge reported by neither); explain includes the same violations as evaluate at a given site",
-          "sha256": "749414363ef9991ae3697fc00ab5969751666867792d4bb4dbe528ec47ccd740"
+          "sha256": "8c481f1230ae8700469816018fba99017a0014920b12bebdf262ceb241cba745"
         },
         {
           "type": "behavioral-test",
@@ -266,7 +266,7 @@
           "type": "source-evidence",
           "path": "src/commands/diff.mjs",
           "assertion": "coverage.notes warns when ruleImpact is computed (depConstraints only, 3 of 15)",
-          "sha256": "4d44eea475cd4b06122a405718203d2e0018a163c1d42b17324400e7e4de5eea"
+          "sha256": "59e6e8f1cb0535cbec241f6daf99c10f5a679c798e66fcc1f4afb5329bc6497a"
         },
         {
           "type": "documentation",

package/src/providers/nx-static.mjs

@@ -2,10 +2,10 @@
  * The Nx provider's static acquisition — the graph built from the tree's own
  * tracked `project.json` files, with no Nx process asked.
  *
- * This is the acquisition `../lsp/workspace-index.mjs` composed inline until
- * the Phase 7 collapse: a language server is spawned by an editor, in a
- * directory, with nothing else — no `nx` binary to resolve, and a spawn per
- * index build would put `nx graph` on every file save. So beside
+ * This is the acquisition `../lsp/workspace-index.mjs` composes: a language
+ * server is spawned by an editor, in a directory, with nothing else — no `nx`
+ * binary to resolve, and a spawn per index build would put `nx graph` on
+ * every file save. So beside
  * `./nx.mjs`'s `readProjectGraph` (which asks Nx itself and is what
  * `../../cli.mjs`'s `check` runs) this module builds the same `{nodes,
  * dependencies}`-shaped starting point — here just the nodes; the caller

package/src/rules/edge-constraints.mjs

@@ -66,14 +66,13 @@ import {
  * table — it does NOT mean the edge is free of all boundary violations (see
  * this module's header for what is not checked).
  *
- * One of the FOUR finding families — PD-13 (2026-09-06) outcome (c): no
+ * One of the FOUR finding families: no
  * Finding supertype exists, and the relationship pin lives on `./index.mjs`'s
- * `violationOf` header. These verdicts are NOT `Violation` records: the
+ * `violationOf` header (stated in `../../../../docs/concepts/evidence.md`'s
+ * "Four finding families"). These verdicts are NOT `Violation` records: the
  * markdown-pairing fold in `../commands/check.mjs` reshapes each into the
  * exact record `violationOf` builds, and the families fold into the one
- * verdict lane as count keys into `verdictFor` (`../verdict.mjs`). The
- * canonical statement is the "Finding — the unowned concept" section of
- * `../../../../docs/architecture/refactor/SEMANTIC-MODEL.md`.
+ * verdict lane as count keys into `verdictFor` (`../verdict.mjs`).
  *
  * @param {{source: string, target: string}} edge The graph edge to judge.
  * @param {object} nodes The project graph's `nodes` map (carries `data.tags`).

package/src/rules/index.mjs

@@ -425,20 +425,18 @@ export function exemptResolvedFile(site, exemptedFiles) {
 }
 
 /**
- * Builds one `Violation` — the rules lane's canonical violation record (PD-13
- * (2026-09-06) in `../../../../docs/architecture/refactor/DECISIONS.md`: the
- * Violation concept ruled outcome (a), this constructor its one home).
+ * Builds one `Violation` — the rules lane's canonical violation record (the
+ * relationship pin below, stated in `docs/concepts/evidence.md`).
  *
  * This is also one of the FOUR finding families — `violationOf` here,
  * `judgeEdge` (`./edge-constraints.mjs`), `compareGoWork` (`../go-work.mjs`)
  * and `judgeTsconfigPaths` (`../tsconfig-paths.mjs`) — and no Finding
- * supertype exists (PD-13 outcome (c)): what binds the four is the
- * relationship pin. Each family folds into the one verdict lane as count
- * keys into `verdictFor` (`../verdict.mjs`), and `../commands/check.mjs`'s
- * markdown fold is the documented seam where `judgeEdge`'s verdicts are
- * reshaped into the exact record this function builds. The canonical
- * statement is the "Finding — the unowned concept" section of
- * `../../../../docs/architecture/refactor/SEMANTIC-MODEL.md`.
+ * supertype exists: what binds the four is the relationship pin, stated in
+ * `../../../../docs/concepts/evidence.md`'s "Four finding families". Each
+ * family folds into the one verdict lane as count keys into `verdictFor`
+ * (`../verdict.mjs`), and `../commands/check.mjs`'s markdown fold is the
+ * documented seam where `judgeEdge`'s verdicts are reshaped into the exact
+ * record this function builds.
  */
 function violationOf(site, sourceProject, targetProject, messageId, data = {}, constraint = null) {
   return {

package/src/tsconfig-paths.mjs

@@ -114,13 +114,12 @@ function probeDirectory(target, base, root) {
  * need no filesystem: the table and its base come from the resolver's own
  * parsed context, and existence arrives as a predicate.
  *
- * One of the FOUR finding families — PD-13 (2026-09-06) outcome (c): no
+ * One of the FOUR finding families: no
  * Finding supertype exists, and the relationship pin lives on
- * `./rules/index.mjs`'s `violationOf` header. These findings stay this
+ * `./rules/index.mjs`'s `violationOf` header (stated in
+ * `../../../docs/concepts/evidence.md`'s "Four finding families"). These findings stay this
  * family's own shape and fold into the one verdict lane as count keys into
- * `verdictFor` (`./verdict.mjs`). The canonical statement is the
- * "Finding — the unowned concept" section of
- * `../../../docs/architecture/refactor/SEMANTIC-MODEL.md`.
+ * `verdictFor` (`./verdict.mjs`).
  *
  * @param {{ paths: Record<string, unknown>,
  *   base: string,