@ecoma-io/archkeep 0.26.0 → 0.27.1

package/cli.mjs

@@ -57,7 +57,7 @@
  *      declared constraint. `check`, `fitness`, `delta` and `change` are the
  *      verbs whose verdicts carry this code, plus `rules verify` — the
  *      artifact-integrity fold, a bounded verification surface, not a fifth
- *      architecture carrier (PD-8; `docs/reference/exit-codes.md` owns the
+ *      architecture carrier (`docs/reference/exit-codes.md` owns the
  *      roster). Every other verb only ever reads.
  *   2  usage error — unknown command, unknown flag, missing argument, path
  *      outside the tree
@@ -105,7 +105,8 @@ import { containmentViolation } from "./src/containment.mjs";
 import { UsageError } from "./src/errors.mjs";
 // Verb imports route through the capability facades: each
 // `<word>-capability.mjs` module is its word's explicit verb roster — pure
-// re-exports, zero judgment (PD-18, docs/architecture/refactor/DECISIONS.md).
+// re-exports, zero judgment. The vocabulary's roster lives in
+// docs/concepts/architecture.md's "The 24 commands".
 // Non-verb helper modules keep their direct imports.
 import {
   discoverCommand,
@@ -1331,7 +1332,7 @@ async function runWaivers(options, { cwd, env }) {
  * (D-09). `check` folds the same `fail` into its own exit 1 by presence, so the
  * two faces agree; the verbs whose verdict carries that code are `check`,
  * `fitness`, `delta` and `change`, plus the `rules verify` artifact-integrity
- * fold (PD-8; `docs/reference/exit-codes.md` owns the roster).
+ * fold (`docs/reference/exit-codes.md` owns the roster).
  *
  * @param {{format: string, output: string|null, config: string|null, paths: string[]}} options
  * @param {{cwd: string, env: {out: Function, err: Function, readGraph?: Function, listFiles?: Function}}} runContext

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ecoma-io/archkeep",
-  "version": "0.26.0",
+  "version": "0.27.1",
   "description": "Architecture authority for human and agentic software development — deterministic, evidence-backed enforcement of declared architecture.",
   "keywords": [
     "architecture",
@@ -73,6 +73,7 @@
     "!src/custom-rules/wasm-fixture.mjs",
     "!src/report/envelope-shape.json",
     "!src/custom-rules/evidence-golden.json",
+    "!src/fixtures/",
     "presets/",
     "LICENSE",
     "README.md"

package/src/architecture-intent/model.mjs

@@ -12,8 +12,8 @@
  * is a deterministic comparison (`./judge.mjs`). NO LLM/AI anywhere in the core.
  *
  * Which "intent" this is: one of four unrelated surfaces sharing the word —
- * PD-13 outcome (c), four surfaces, never one type
- * (`../../../../docs/architecture/refactor/DECISIONS.md`). This module is
+ * four surfaces, never one type
+ * (`../../../../docs/concepts/architecture.md`, "The 24 commands"). This module is
  * the workspace-declared law: the grammar, validation, and loading of
  * `architecture-intent.json`, judged against the observed graph by `check`
  * and `drift`. The other three: the v1.0 evidence-manifest registry

package/src/commands/README.md

@@ -54,8 +54,10 @@ the resolution order.
   introduced/resolved/unchanged/unknown (`./delta-classify.mjs`), with
   unresolvable import sites carried as their own category, never counted as
   violations. Refuses an unreadable, malformed, foreign-schema, or
-  incomplete-coverage baseline, a provider mismatch (stricter than `diff`'s
-  note — violation identity across two project models is not evidence),
+  incomplete-coverage baseline, a `command`-carrying report envelope (a graph
+  snapshot is `diff`'s input, not delta evidence), a provider mismatch
+  (stricter than `diff`'s note — violation identity across two project models
+  is not evidence),
   incomplete head coverage, and an Nx workspace with polyglot manifests but no
   plugin registration; a policy-fingerprint change is a loud coverage note, not
   a refusal. A verdict, not a description: a non-waived introduced violation is
@@ -84,8 +86,9 @@ the resolution order.
   pins); an unproven base identity or an undeterminable
   constraint is exit 3, and constraints are left unevaluated over a base the
   run cannot vouch for. Refuses a manifest that fails shape or reference
-  validation, an unreadable/malformed/incomplete baseline, a provider
-  mismatch, incomplete head coverage, and the unregistered-plugin graph.
+  validation, an unreadable/malformed/incomplete baseline, a `command`-carrying
+  report envelope in its place, a provider mismatch, incomplete head coverage,
+  and the unregistered-plugin graph.
 
 - **`impact`** (`./impact.mjs`'s `impactCommand`) — reverse reachability from
   the project graph: given a project name, lists every project that transitively

package/src/commands/analyze-capability.mjs

@@ -7,7 +7,7 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { discoverCommand, intentJsonFromProposal, intentWriteRefusal } from "./discover.mjs";

package/src/commands/change-intent.mjs

@@ -10,8 +10,8 @@
  * as the reviewable answer to "what did this change do to the architecture?".
  *
  * Which "intent" this is: one of four unrelated surfaces sharing the word —
- * PD-13 outcome (c), four surfaces, never one type
- * (`../../../../docs/architecture/refactor/DECISIONS.md`). This module is
+ * four surfaces, never one type
+ * (`../../../../docs/concepts/architecture.md`, "The 24 commands"). This module is
  * the declared-change grammar: one change's expected architectural
  * consequences, verified by the `change` command against the actual delta.
  * The other three: the workspace-declared law (`../architecture-intent/` —

package/src/commands/change.mjs

@@ -76,8 +76,9 @@
  * exit 3, a `coverage` block naming every file and site the run could not
  * judge — where a parser and `--output` can read it; the rest are throws →
  * exit 3 upstream: a manifest that fails shape or reference validation, an
- * unreadable/malformed/foreign-schema baseline, incomplete baseline coverage,
- * a provider mismatch, an unregistered-plugin graph over polyglot manifests,
+ * unreadable/malformed/foreign-schema baseline, a `command`-carrying report
+ * envelope in its place, incomplete baseline coverage, a provider mismatch,
+ * an unregistered-plugin graph over polyglot manifests,
  * and a run with no boundary law (constraints and the law fingerprint need
  * one).
  *
@@ -480,8 +481,8 @@ function changeFoldInputProblem(reconciliation, constraints, unprovenReasons) {
  * before any list, so a malformed one reaching it unguarded can name the
  * whole run unproven or matched for reasons the counts never supported. The
  * literals stay hand-rolled per site by decision — the carrier folds are the
- * pinned baseline INV-2 names, not a table to be converged
- * (`docs/architecture/refactor/AUTHORITY-MAP.md`).
+ * pinned baseline, not a table to be converged
+ * (`docs/reference/exit-codes.md`'s fold-site statement).
  *
  * @param {{matched: object[], unexpected: object[], missingExpected: object[]}} reconciliation
  * @param {{verdict: string}[]} constraints Judged `fitnessVerdict` rows —
@@ -1000,10 +1001,11 @@ export async function changeCommand(
   // `findings`, never in `debt`. An unproven base (F-CHG-1) or an unjudgeable
   // intent is a no-verdict: no ids are emitted, an in-band note says so, and a
   // change run never fabricates ledger ids over evidence it cannot vouch for.
-  /** @type {{introduced: string[], resolved: string[], note?: string}} */
+  /** @type {{judged: boolean, introduced: string[], resolved: string[], note?: string}} the marker is in-band on every shape: `false` on a fail-closed path, `true` from `debtChangeDiff` */
   let debt;
   if (baseEngineGraph === null) {
     debt = {
+      judged: false,
       introduced: [],
       resolved: [],
       note: "base identity unproven — no architecture debt diff can be trusted",
@@ -1013,6 +1015,7 @@ export async function changeCommand(
       const archIntent = await (loadIntentOverride ?? loadIntent)(root, { tracked });
       if (archIntent === undefined || archIntent === null) {
         debt = {
+          judged: false,
           introduced: [],
           resolved: [],
           note: `no '${INTENT_FILE}' tracked — the change event carries no architecture debt ids`,
@@ -1024,6 +1027,7 @@ export async function changeCommand(
       }
     } catch (error) {
       debt = {
+        judged: false,
         introduced: [],
         resolved: [],
         note: `architecture intent could not be judged — no debt ids emitted (${error.message})`,

package/src/commands/check-capability.mjs

@@ -5,8 +5,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { check, sortViolations } from "./check.mjs";
 export { fitness } from "./fitness.mjs";

package/src/commands/check.mjs

@@ -522,14 +522,12 @@ export async function check(
   // constraint from the edge — so suppression, waiver annotation, sorting and
   // the SARIF face all treat it as the ordinary violation it is.
   //
-  // PD-13 (2026-09-06) pins THIS fold as the documented normalization seam
-  // (`../../../../docs/architecture/refactor/DECISIONS.md`): the one place
+  // This fold is the documented normalization seam — the one place
   // `judgeEdge`'s markdown-pairing verdicts are reshaped into the exact
   // `Violation` record `violationOf` (`../rules/index.mjs`) builds — the
   // families then fold into the one verdict lane as count keys into
-  // `verdictFor` (`../verdict.mjs`). The canonical statement is the
-  // "Finding — the unowned concept" section of
-  // `../../../../docs/architecture/refactor/SEMANTIC-MODEL.md`.
+  // `verdictFor` (`../verdict.mjs`). The canonical statement is
+  // `../../../../docs/concepts/evidence.md`'s "Four finding families".
   /** @type {object[]} */
   const markdownRaw = [];
   if (config !== null && markdownTrack !== null && config.depConstraints.length > 0) {

package/src/commands/compare-capability.mjs

@@ -7,8 +7,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { diff } from "./diff.mjs";
 export { captureBaseline, delta } from "./delta.mjs";

package/src/commands/completeness.mjs

@@ -33,8 +33,8 @@
  * refusal contract (`./coverage-verdict.mjs`): `coverageVerdict` refuses
  * `no-verdict` (exit 3), and no status here is derived from it or folds
  * into it. Two models of "did we see everything", owned by different
- * waves — register R1 in `docs/architecture/refactor/SEMANTIC-MODEL.md`
- * keeps them separate.
+ * waves — register R1 in `../../../../docs/concepts/evidence.md`'s "Register
+ * R1" keeps them separate.
  *
  * @module
  */

package/src/commands/delta-snapshot.mjs

@@ -320,6 +320,10 @@ export function readEvidenceSnapshot(path, io = {}) {
  *
  * Refusals, each loud:
  * - unreadable/malformed JSON — named with the path and the parse error;
+ * - a `command` field — that marker belongs to a report envelope (the graph
+ *   family), so the document is not delta evidence at all; the family is
+ *   decided before the schemaVersion refusals, whose "newer version" advice
+ *   would be false for a file this binary itself wrote;
  * - a `schemaVersion` that is not the integer this format uses — a FUTURE
  *   version refuses too: a reader that half-understood a newer format would
  *   classify over evidence it misread;
@@ -360,6 +364,19 @@ export function parseEvidenceSnapshot(text, path) {
     );
   }
 
+  // A `command` field marks a report envelope — the graph family's document,
+  // not delta evidence. The family decides before the schemaVersion refusals
+  // below: that number is the OTHER format's version, so its "newer version;
+  // upgrade" advice would be false for a file this binary itself wrote (#810).
+  if (typeof parsed.command === "string") {
+    const pointer = parsed.command === "graph" ? " For graph snapshots use 'diff <baseline>'." : "";
+    throw new Error(
+      `archkeep: the evidence snapshot '${path}' has a 'command' field — it is not a delta ` +
+        `evidence snapshot, it is a '${parsed.command}' envelope. delta requires an evidence ` +
+        `snapshot (from 'delta --capture').${pointer}`,
+    );
+  }
+
   const problems = [];
   if (!Number.isInteger(parsed.schemaVersion)) {
     problems.push(

package/src/commands/delta.mjs

@@ -29,8 +29,10 @@
  * status "no-verdict", exit 3, a `coverage` block naming every file and site
  * the run could not judge — where a parser and `--output` can read it; the
  * rest are throws, exit 3 upstream:
- * - a baseline that cannot be read, parsed, or holds a foreign schemaVersion
- *   (`./delta-snapshot.mjs`'s loader owns those);
+ * - a baseline that cannot be read, parsed, or holds a foreign schemaVersion,
+ *   or a report envelope — a document carrying a `command` field (a graph
+ *   snapshot is `diff`'s input), refused as the wrong family before any
+ *   schemaVersion reading (`./delta-snapshot.mjs`'s loader owns those);
  * - a provider mismatch between baseline and this run (`providerMismatch`) —
  *   a THROW here where `diff` settles for a note, because violation IDENTITY
  *   across two different project models is not trustworthy: the same tree
@@ -479,8 +481,8 @@ function deltaFoldInputProblem(classification, custom) {
  * The input latch runs first: a bucket the fold cannot read is refused as a
  * no-verdict whose single reason names it (`refused`), never folded past as a
  * silently-empty count. The literals stay hand-rolled per site by decision —
- * the carrier folds are the pinned baseline INV-2 names, not a table to be
- * converged (`docs/architecture/refactor/AUTHORITY-MAP.md`).
+ * the carrier folds are the pinned baseline, not a table to be converged
+ * (`docs/reference/exit-codes.md`'s fold-site statement).
  *
  * Pure and exported for the fold's own tests; `deltaCommand` is its only
  * production caller.
@@ -1029,12 +1031,13 @@ export async function deltaCommand(
     // gate; the fail-closed branches are an absent intent and an unjudgeable
     // one, each emitting no ids and an in-band note rather than a fabricated
     // clean ledger.
-    /** @type {{introduced: string[], resolved: string[], note?: string}} */
+    /** @type {{judged: boolean, introduced: string[], resolved: string[], note?: string}} the marker is in-band on every shape: `false` on a fail-closed path, `true` from `debtChangeDiff` */
     let debt;
     try {
       const archIntent = await (loadIntentOverride ?? loadIntent)(root, { tracked });
       if (archIntent === undefined || archIntent === null) {
         debt = {
+          judged: false,
           introduced: [],
           resolved: [],
           note: `no '${INTENT_FILE}' tracked — the delta event carries no architecture debt ids`,
@@ -1046,6 +1049,7 @@ export async function deltaCommand(
       }
     } catch (error) {
       debt = {
+        judged: false,
         introduced: [],
         resolved: [],
         note: `architecture intent could not be judged — no debt ids emitted (${error.message})`,

package/src/commands/diff.mjs

@@ -245,8 +245,8 @@ function buildHeadSnapshot(commandContext) {
  * `edgeEvolutionIdentity` (`../governance/evolution-event.mjs`), the escaped
  * `source>target:type` string evolution events carry, and the two spellings
  * are deliberately not unified — each medium keeps exactly one identity
- * constructor (`../../../../docs/adr/0008-snapshot-identity-per-family.md`;
- * INV-6 in `../../../../docs/architecture/refactor/INVARIANTS.md`). An edge
+ * constructor (`../../../../docs/adr/0008-snapshot-identity-per-family.md`).
+ * An edge
  * crosses from a structural diff into an event as its raw
  * `{source, target, type}` triple, mapped through that function at the
  * command boundary; a `\0`-joined key written into an event record would

package/src/commands/evolution.mjs

@@ -940,6 +940,16 @@ export function buildEvolutionSummary(comparisons) {
       });
       return { verdictDeltas };
     }
+    if (axis === "debt") {
+      // The aggregate states whether the debt it unions was judged at every
+      // transition (`debtChangeDiff`'s marker) — a summary over a transition
+      // that could not judge its debt never reads as a judged clean union.
+      return {
+        judged: comparisons.every((c) => c.debt === undefined || c.debt.judged === true),
+        introduced: collect("introduced"),
+        resolved: collect("resolved"),
+      };
+    }
     return {
       introduced: collect("introduced"),
       resolved: collect("resolved"),

package/src/commands/explain-capability.mjs

@@ -5,7 +5,7 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { explain } from "./explain.mjs";

package/src/commands/fitness.mjs

@@ -122,8 +122,8 @@ export function declaresFitness(config) {
  * exit over a run the fold could not read. A verdict outside the four states
  * is refused as a no-verdict whose single reason names it (`refused`), never
  * folded past. The literals stay hand-rolled per site by decision — the
- * carrier folds are the pinned baseline INV-2 names, not a table to be
- * converged (`docs/architecture/refactor/AUTHORITY-MAP.md`).
+ * carrier folds are the pinned baseline, not a table to be
+ * converged (`docs/reference/exit-codes.md`'s fold-site statement).
  *
  * `overall.decisions` is validated for the same reason the delta fold
  * validates buckets the fold itself does not count first: `result.functions`

package/src/commands/govern-capability.mjs

@@ -5,8 +5,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { waivers } from "./waivers.mjs";
 export { report } from "./report.mjs";

package/src/commands/inspect-capability.mjs

@@ -6,8 +6,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export { graph } from "./graph.mjs";
 export { impact } from "./impact.mjs";

package/src/commands/rules-capability.mjs

@@ -5,8 +5,8 @@
  * Pure surface module: no judgment, no defaults, no logic — every export is
  * a re-export of a command module. `cli.mjs` routes its verb imports through
  * the facade so the vocabulary's code referent is visible to the import
- * graph, not just to a comment (PD-18,
- * ../../../../docs/architecture/refactor/DECISIONS.md).
+ * graph, not just to a comment — the vocabulary's roster lives in
+ * ../../../../docs/concepts/architecture.md's "The 24 commands".
  */
 export {
   rulesAddCommand,

package/src/commands/scenario-evaluation.mjs

@@ -152,11 +152,13 @@ function cloneGraph(graph) {
  *
  * @param {object} graph The base graph to apply changes to.
  * @param {DependencyChange[]} changes The hypothetical changes.
- * @returns {{graph: object, applied: string[], refused: string[]}}
+ * @returns {{graph: object, applied: string[],
+ *   mutations: {type: string, source: string, target: string}[], refused: string[]}}
  */
 function applyChanges(graph, changes) {
   const cloned = cloneGraph(graph);
   const applied = [];
+  const mutations = [];
   const refused = [];
 
   for (const change of changes) {
@@ -203,6 +205,7 @@ function applyChanges(graph, changes) {
         source: change.source,
       });
       applied.push(`added dependency: ${change.source} → ${change.target} (${change.edgeType})`);
+      mutations.push({ type: "dependency_added", source: change.source, target: change.target });
     }
 
     if (change.type === "dependency_removed") {
@@ -238,6 +241,7 @@ function applyChanges(graph, changes) {
       existing.splice(idx, 1);
       const typeLabel = change.edgeType ? ` (${change.edgeType})` : "";
       applied.push(`removed dependency: ${change.source} → ${change.target}${typeLabel}`);
+      mutations.push({ type: "dependency_removed", source: change.source, target: change.target });
     }
   }
   // Clean up empty dependency arrays
@@ -247,7 +251,7 @@ function applyChanges(graph, changes) {
     }
   }
 
-  return { graph: cloned, applied, refused };
+  return { graph: cloned, applied, mutations, refused };
 }
 
 /**
@@ -410,6 +414,50 @@ function resolveBaseRevision(root, userBase) {
   };
 }
 
+/**
+ * Merges constraint-impact rows for the named project's own changed edges
+ * into one side's rows (#809), preserving the row shape the primitive
+ * returns — no new fields, no second judgment.
+ *
+ * One row per project: when the side already carries a row for the project,
+ * the edge, constraint-row and violation lists union without duplicates
+ * (constraint rows match by identity — they are the config's own row
+ * objects; violations by value, since `judgeEdge` builds fresh objects);
+ * otherwise the row is appended. Appending keeps every pre-existing row
+ * byte-identical and the order deterministic, because it follows the
+ * input changes' order.
+ *
+ * @param {{project: string, edges: object[], constraintRows: object[],
+ *   violations: object[]}[]} rows The side's constraint impact, mutated in place.
+ * @param {{project: string, edges: object[], constraintRows: object[],
+ *   violations: object[]}[]} merged Rows computed for the changed edge.
+ */
+function mergeConstraintImpact(rows, merged) {
+  for (const row of merged) {
+    const existing = rows.find((r) => r.project === row.project);
+    if (!existing) {
+      rows.push(row);
+      continue;
+    }
+    for (const edge of row.edges) {
+      if (!existing.edges.some((e) => e.target === edge.target && e.type === edge.type)) {
+        existing.edges.push(edge);
+      }
+    }
+    for (const constraintRow of row.constraintRows) {
+      if (!existing.constraintRows.includes(constraintRow)) {
+        existing.constraintRows.push(constraintRow);
+      }
+    }
+    for (const violation of row.violations) {
+      const identity = JSON.stringify(violation);
+      if (!existing.violations.some((v) => JSON.stringify(v) === identity)) {
+        existing.violations.push(violation);
+      }
+    }
+  }
+}
+
 /**
  * Evaluates a scenario against the current workspace.
  *
@@ -452,7 +500,12 @@ export function evaluateScenario(
   }
 
   // Step 3: Apply scenario changes to the graph
-  const { graph: scenarioGraph, applied, refused } = applyChanges(graph, scenarioInput.changes);
+  const {
+    graph: scenarioGraph,
+    applied,
+    mutations,
+    refused,
+  } = applyChanges(graph, scenarioInput.changes);
 
   // Step 4: Compute scenario impact
   const scenarioImpact = computeImpact(projectName, scenarioGraph);
@@ -468,6 +521,47 @@ export function evaluateScenario(
     );
   }
 
+  // Step 4b: the named project's own changed edges (#809).
+  //
+  // `computeImpactConstraints` judges edges INTO the target from its
+  // dependents, so a change whose SOURCE is the named project never enters
+  // that frame — an edge pointing out of the target is invisible to it, and
+  // the source-named run reported `unchanged` where the target-named run of
+  // the same change reported the violation. The rows for the changed edge
+  // are computed here by the same primitive — never a second judgment — and
+  // merged into the frame the edge actually belongs to: additions into the
+  // scenario side (the edge exists only there), removals into the current
+  // side (it exists only there).
+  if (config && config.depConstraints) {
+    for (const mutation of mutations) {
+      if (mutation.source !== projectName) continue;
+      if (mutation.type === "dependency_added") {
+        mergeConstraintImpact(
+          scenarioConstraintImpact,
+          computeImpactConstraints(
+            mutation.target,
+            [mutation.source],
+            scenarioGraph.nodes,
+            scenarioGraph.dependencies,
+            config.depConstraints,
+          ),
+        );
+      }
+      if (mutation.type === "dependency_removed") {
+        mergeConstraintImpact(
+          currentConstraintImpact,
+          computeImpactConstraints(
+            mutation.target,
+            [mutation.source],
+            graph.nodes,
+            graph.dependencies,
+            config.depConstraints,
+          ),
+        );
+      }
+    }
+  }
+
   // Step 5: Build decision impact for both sides
   const currentDecisionImpact = buildDecisionImpact(root, currentConstraintImpact, config);
   const scenarioDecisionImpact = buildDecisionImpact(root, scenarioConstraintImpact, config);

package/src/corpus/goldens/adr.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.1"
   },
   "command": "adr",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "docs/adr",
     "provenance": null

package/src/corpus/goldens/change.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.1"
   },
   "command": "change",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {
@@ -28,7 +28,7 @@
   },
   "result": {
     "intent": {
-      "file": "/tmp/archkeep-golden-fixture/.archkeep-change.json",
+      "file": "<fixture-root>/.archkeep-change.json",
       "version": "1",
       "base": {
         "commit": "1fd51709c377d99a6139891e1200291cf08aede9"
@@ -42,10 +42,10 @@
       }
     },
     "baseline": {
-      "path": "/tmp/archkeep-golden-fixture/.archkeep-delta.json",
+      "path": "<fixture-root>/.archkeep-delta.json",
       "tool": {
         "name": "@ecoma-io/archkeep",
-        "version": "0.26.0"
+        "version": "0.27.1"
       },
       "provider": "native",
       "provenance": {
@@ -87,6 +87,7 @@
       "decisions": []
     },
     "debt": {
+      "judged": true,
       "introduced": [],
       "resolved": []
     }

package/src/corpus/goldens/change.text

@@ -1,5 +1,5 @@
-intent     /tmp/archkeep-golden-fixture/.archkeep-change.json — base 1fd51709
-baseline   /tmp/archkeep-golden-fixture/.archkeep-delta.json — 1fd51709, 2 records, 3 projects
+intent     <fixture-root>/.archkeep-change.json — base 1fd51709
+baseline   <fixture-root>/.archkeep-delta.json — 1fd51709, 2 records, 3 projects
 head       1fd51709, 3 projects
 reconciliation ✔ MATCHED — the delta is exactly the declared change
 workspace law  0 live violations under the current law — informational; archkeep check remains the authoritative verdict

package/src/corpus/goldens/check.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.1"
   },
   "command": "check",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {

package/src/corpus/goldens/context.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "tool": {
     "name": "@ecoma-io/archkeep",
-    "version": "0.26.0"
+    "version": "0.27.1"
   },
   "command": "context",
   "workspace": {
-    "root": "/tmp/archkeep-golden-fixture",
+    "root": "<fixture-root>",
     "provider": "native",
     "marker": "archkeep.json",
     "provenance": {