@emilia-protocol/gate 0.11.0 → 0.13.0

package/dist/reports/assurance-package.d.ts

@@ -0,0 +1,197 @@
+import { RELIANCE_VERDICTS } from '@emilia-protocol/verify/reliance';
+export declare const ASSURANCE_PACKAGE_VERSION = "EP-ASSURANCE-PACKAGE-v1";
+export declare const ASSURANCE_REPERFORMANCE_VERSION = "EP-ASSURANCE-REPERFORMANCE-v1";
+export { RELIANCE_VERDICTS };
+/**
+ * The reliance control catalog: every reliance verdict maps to the control
+ * objective it exercises. A `rely` shows the control PASSING; every do_not_rely_*
+ * shows the control OPERATING (it refused a non-admissible action). Denials are
+ * the control working, not the control failing.
+ */
+export declare const RELIANCE_CONTROL_CATALOG: Readonly<{
+    'RC-1': {
+        objective: string;
+        verdicts: string[];
+    };
+    'RC-2': {
+        objective: string;
+        verdicts: string[];
+    };
+    'RC-3': {
+        objective: string;
+        verdicts: string[];
+    };
+    'RC-4': {
+        objective: string;
+        verdicts: string[];
+    };
+    'RC-5': {
+        objective: string;
+        verdicts: string[];
+    };
+    'RC-6': {
+        objective: string;
+        verdicts: string[];
+    };
+}>;
+/**
+ * Bundle N automated reliance decisions + the evidence each relied on into one
+ * portable, content-addressed assurance package. Does NOT re-perform (that is the
+ * assurer's independent step); it packages faithfully, including the verdict the
+ * org's runtime CLAIMED, so drift is checkable later.
+ *
+ * @param {Array<object>} decisions  each: { decision_id, action, receipt, quorum?,
+ *   authority_proof?, revocation_state?, consumption?, stated_verdict? }
+ * @param {object} [opts]
+ * @param {object} [opts.profile]       the pinned EP-RELIANCE-PROFILE-v1 the org operated under
+ * @param {object} [opts.organization] { id, name } (no PHI)
+ * @param {number|Function} [opts.now]
+ * @returns {object} EP-ASSURANCE-PACKAGE-v1
+ */
+export declare function buildAssurancePackage(decisions?: any[], { profile, organization, now, }?: {
+    profile?: Record<string, any> | null;
+    organization?: Record<string, any> | null;
+    now?: number | (() => number);
+}): {
+    package_digest: string;
+    '@version': string;
+    organization: any;
+    reliance_profile: any;
+    profile_hash: string | null;
+    control_catalog: Readonly<{
+        'RC-1': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-2': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-3': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-4': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-5': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-6': {
+            objective: string;
+            verdicts: string[];
+        };
+    }>;
+    decisions: {
+        decision_id: any;
+        action: any;
+        policy_hash: any;
+        stated_verdict: any;
+        evidence: {
+            receipt: any;
+            quorum: any;
+            authority_proof: any;
+            revocation_state: any;
+            consumption: any;
+        };
+    }[];
+    exception_history: {
+        decision_id: any;
+        stated_verdict: any;
+        control_id: any;
+    }[];
+    counts: {
+        decisions: number;
+        stated_admissible: number;
+        stated_refused: number;
+        stated_unknown: number;
+    };
+    assembled_at: string;
+};
+/**
+ * INDEPENDENT re-performance. Recompute every reliance verdict offline from the
+ * packaged evidence under the package's pinned profile and AUDITOR-supplied keys,
+ * trusting nothing the package asserts. Detect drift (recomputed ≠ stated), map
+ * to control objectives, and emit an auditor-style workpaper. Conclusion fields
+ * are ALWAYS null: the assurer concludes, not this tool.
+ *
+ * @param {object} pkg  an EP-ASSURANCE-PACKAGE-v1
+ * @param {object} opts
+ * @param {object} [opts.approverKeys]  auditor-pinned approver keys (out of band)
+ * @param {string|null} [opts.logPublicKey]  auditor-pinned transparency-log key
+ * @param {string|null} [opts.rpId]
+ * @param {string[]} [opts.allowedOrigins]
+ * @param {object} [opts.revokerKeys]
+ * @param {(key:object)=>boolean} [opts.isConsumed] auditor-owned consumption lookup
+ * @param {number|string|Date|Function} [opts.now]  reliance-evaluation clock (pin for determinism)
+ * @returns {object} EP-ASSURANCE-REPERFORMANCE-v1
+ */
+export declare function reperformAssurancePackage(pkg: any, { approverKeys, logPublicKey, rpId, allowedOrigins, revokerKeys, isConsumed, now, }?: {
+    approverKeys?: Record<string, any>;
+    logPublicKey?: string | null;
+    rpId?: string | null;
+    allowedOrigins?: string[];
+    revokerKeys?: Record<string, any>;
+    isConsumed?: (key: any) => boolean;
+    now?: number | (() => number);
+}): {
+    '@version': string;
+    product: string;
+    package_digest: string;
+    stated_package_digest: any;
+    package_digest_verified: boolean;
+    profile_hash: any;
+    generated_at: string;
+    honesty: {
+        reperforms: string;
+        does_not_establish: string[];
+        status: string;
+    };
+    population: {
+        decisions: any;
+        admissible: number;
+        refused: number;
+        drift: number;
+        relied_on_inadmissible_evidence: any;
+        by_recomputed_verdict: any;
+        by_control: any;
+    };
+    control_catalog: Readonly<{
+        'RC-1': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-2': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-3': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-4': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-5': {
+            objective: string;
+            verdicts: string[];
+        };
+        'RC-6': {
+            objective: string;
+            verdicts: string[];
+        };
+    }>;
+    results: any;
+    reperformance_digest: string | null;
+    conclusion: {
+        supportable: null;
+        opinion: null;
+        signed_off_by: null;
+    };
+};
+/** Render a plain-text auditor workpaper. Refuses to print a filled conclusion. */
+export declare function renderAssuranceWorkpaper(doc: any): string;
+//# sourceMappingURL=assurance-package.d.ts.map

package/dist/reports/assurance-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assurance-package.d.ts","sourceRoot":"","sources":["../../src/reports/assurance-package.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAoB,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAEvF,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AACnE,eAAO,MAAM,+BAA+B,kCAAkC,CAAC;AAE/E,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;EAOnC,CAAC;AA+CH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,GAAE,GAAG,EAAO,EAAE,EAC3D,OAAO,EAAE,YAAmB,EAAE,GAAO,GACtC,GAAE;IACD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4CL;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,KAAA,EAAE,EAC7C,YAAiB,EAAE,YAAmB,EAAE,IAAW,EAAE,cAAmB,EAAE,WAAgB,EAAE,UAAU,EAAE,GAAO,GAChH,GAAE;IACD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAkG4B,MAAM,GAAG,IAAI;;;;;;EAU9C;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,GAAG,KAAA,UA6B3C"}

package/dist/reports/assurance-package.js

@@ -0,0 +1,313 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EP-ASSURANCE-PACKAGE-v1 — the reliance assurance layer.
+ *
+ * The layer above the reliance kernel. The kernel answers "may this party rely on
+ * this action?" The assurance package answers the question an INDEPENDENT assurer
+ * (an audit firm, a regulator, an insurer) asks: "can I reproduce, test, and
+ * attest that an organization's automated actions were governed by admissible
+ * evidence under the organization's OWN pinned rule?"
+ *
+ * Two halves, mirroring the re-performance discipline of reperform.js:
+ *   buildAssurancePackage(decisions, ...)      the organization bundles its
+ *      automated decisions + the evidence each relied on into ONE portable,
+ *      content-addressed package (action, receipt, profile, authority proof,
+ *      revocation check, consumption, denial/exception history, policy hash).
+ *   reperformAssurancePackage(pkg, ...)         the assurer RE-PERFORMS every
+ *      reliance verdict offline from that evidence, TRUSTING NOTHING the package
+ *      asserts: it recomputes each verdict with evaluateReliance, compares to the
+ *      verdict the org's runtime CLAIMED (drift = a control failure the assurer
+ *      caught), maps every verdict to a control objective, and emits an
+ *      auditor-style workpaper. It does not conclude; the assurer concludes.
+ *
+ * PCAOB AS 1105 alignment (why this is audit evidence): the source is
+ * cryptographic, the decision trail is immutable and content-addressed, the rule
+ * is a pinned profile, and the verdict is re-performable directly. This module
+ * SUPPORTS a re-performance procedure; it never issues an opinion.
+ */
+import { hashCanonical } from '../execution-binding.js';
+import { evaluateReliance, RELIANCE_VERDICTS } from '@emilia-protocol/verify/reliance';
+export const ASSURANCE_PACKAGE_VERSION = 'EP-ASSURANCE-PACKAGE-v1';
+export const ASSURANCE_REPERFORMANCE_VERSION = 'EP-ASSURANCE-REPERFORMANCE-v1';
+export { RELIANCE_VERDICTS };
+/**
+ * The reliance control catalog: every reliance verdict maps to the control
+ * objective it exercises. A `rely` shows the control PASSING; every do_not_rely_*
+ * shows the control OPERATING (it refused a non-admissible action). Denials are
+ * the control working, not the control failing.
+ */
+export const RELIANCE_CONTROL_CATALOG = Object.freeze({
+    'RC-1': { objective: 'Only a human with valid organization-bound, scoped authority for THIS exact action may authorize it', verdicts: ['do_not_rely_authority_missing', 'do_not_rely_authority_subject_mismatch', 'do_not_rely_authority_organization_mismatch', 'do_not_rely_authority_revoked', 'do_not_rely_authority_expired', 'do_not_rely_scope_mismatch', 'do_not_rely_amount_exceeded', 'do_not_rely_registry_unavailable'] },
+    'RC-2': { objective: 'Authorization uses a device-bound named-human ceremony (Class-A or quorum)', verdicts: ['do_not_rely_no_class_a', 'do_not_rely_quorum_unsatisfied'] },
+    'RC-3': { objective: 'The action conforms to a pinned, accepted policy', verdicts: ['do_not_rely_policy_mismatch'] },
+    'RC-4': { objective: 'Authorization is consumed exactly once (no replay)', verdicts: ['do_not_rely_already_consumed'] },
+    'RC-5': { objective: 'Reliance is evaluated against fresh revocation state', verdicts: ['do_not_rely_stale_revocation'] },
+    'RC-6': { objective: 'Evidence is signed by a trusted issuer and evaluated under a pinned rule', verdicts: ['do_not_rely_unsigned', 'do_not_rely_untrusted_issuer', 'do_not_rely_no_profile'] },
+});
+const VERDICT_TO_CONTROL = Object.freeze(Object.entries(RELIANCE_CONTROL_CATALOG).reduce((m, [cid, c]) => {
+    for (const v of c.verdicts)
+        m[v] = cid;
+    return m;
+}, {}));
+/** Which control objective a verdict exercises (rely passes ALL, so returns null). */
+function controlForVerdict(verdict) {
+    if (verdict === 'rely')
+        return null;
+    return VERDICT_TO_CONTROL[verdict] || null;
+}
+function toIso(now) {
+    const ms = typeof now === 'function' ? now() : now;
+    return new Date(ms == null ? 0 : ms).toISOString();
+}
+function portableJsonCopy(value, active = new Set()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value) || Object.is(value, -0)) {
+            throw new TypeError('assurance-package: value is not canonical JSON');
+        }
+        return value;
+    }
+    if (typeof value !== 'object') {
+        throw new TypeError('assurance-package: value is not JSON');
+    }
+    if (active.has(value))
+        throw new TypeError('assurance-package: cyclic value');
+    active.add(value);
+    try {
+        if (Array.isArray(value))
+            return value.map((entry) => portableJsonCopy(entry, active));
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError('assurance-package: value must use plain JSON objects');
+        }
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, portableJsonCopy(entry, active)]));
+    }
+    finally {
+        active.delete(value);
+    }
+}
+/**
+ * Bundle N automated reliance decisions + the evidence each relied on into one
+ * portable, content-addressed assurance package. Does NOT re-perform (that is the
+ * assurer's independent step); it packages faithfully, including the verdict the
+ * org's runtime CLAIMED, so drift is checkable later.
+ *
+ * @param {Array<object>} decisions  each: { decision_id, action, receipt, quorum?,
+ *   authority_proof?, revocation_state?, consumption?, stated_verdict? }
+ * @param {object} [opts]
+ * @param {object} [opts.profile]       the pinned EP-RELIANCE-PROFILE-v1 the org operated under
+ * @param {object} [opts.organization] { id, name } (no PHI)
+ * @param {number|Function} [opts.now]
+ * @returns {object} EP-ASSURANCE-PACKAGE-v1
+ */
+export function buildAssurancePackage(decisions = [], { profile, organization = null, now = 0, } = {}) {
+    if (!Array.isArray(decisions))
+        throw new Error('assurance-package: decisions must be an array');
+    const items = decisions.map((d, i) => {
+        const source = portableJsonCopy(d ?? {});
+        const decision_id = source.decision_id ?? `decision-${i}`;
+        return {
+            decision_id,
+            action: source.action ?? null,
+            policy_hash: source.action?.policy_hash ?? null,
+            stated_verdict: typeof source.stated_verdict === 'string' ? source.stated_verdict : null,
+            evidence: {
+                receipt: source.receipt ?? null,
+                quorum: source.quorum ?? null,
+                authority_proof: source.authority_proof ?? null,
+                revocation_state: source.revocation_state ?? null,
+                consumption: source.consumption ?? null,
+            },
+        };
+    });
+    // Denial/exception history = the decisions the org itself recorded as refused.
+    const exceptions = items.filter((it) => it.stated_verdict && it.stated_verdict !== 'rely')
+        .map((it) => ({ decision_id: it.decision_id, stated_verdict: it.stated_verdict, control_id: controlForVerdict(it.stated_verdict) }));
+    const profileCopy = profile == null ? null : portableJsonCopy(profile);
+    const body = {
+        '@version': ASSURANCE_PACKAGE_VERSION,
+        organization: organization == null ? null : portableJsonCopy(organization),
+        reliance_profile: profileCopy,
+        profile_hash: profileCopy ? hashCanonical(profileCopy) : null,
+        control_catalog: RELIANCE_CONTROL_CATALOG,
+        decisions: items,
+        exception_history: exceptions,
+        counts: {
+            decisions: items.length,
+            stated_admissible: items.filter((it) => it.stated_verdict === 'rely').length,
+            stated_refused: items.filter((it) => it.stated_verdict && it.stated_verdict !== 'rely').length,
+            stated_unknown: items.filter((it) => !it.stated_verdict).length,
+        },
+        assembled_at: toIso(now),
+    };
+    // Content address over everything EXCEPT the timestamp (so the same evidence
+    // yields the same digest regardless of when it was packaged).
+    const { assembled_at: _t, ...digestScope } = body;
+    return { ...body, package_digest: hashCanonical(digestScope) };
+}
+/**
+ * INDEPENDENT re-performance. Recompute every reliance verdict offline from the
+ * packaged evidence under the package's pinned profile and AUDITOR-supplied keys,
+ * trusting nothing the package asserts. Detect drift (recomputed ≠ stated), map
+ * to control objectives, and emit an auditor-style workpaper. Conclusion fields
+ * are ALWAYS null: the assurer concludes, not this tool.
+ *
+ * @param {object} pkg  an EP-ASSURANCE-PACKAGE-v1
+ * @param {object} opts
+ * @param {object} [opts.approverKeys]  auditor-pinned approver keys (out of band)
+ * @param {string|null} [opts.logPublicKey]  auditor-pinned transparency-log key
+ * @param {string|null} [opts.rpId]
+ * @param {string[]} [opts.allowedOrigins]
+ * @param {object} [opts.revokerKeys]
+ * @param {(key:object)=>boolean} [opts.isConsumed] auditor-owned consumption lookup
+ * @param {number|string|Date|Function} [opts.now]  reliance-evaluation clock (pin for determinism)
+ * @returns {object} EP-ASSURANCE-REPERFORMANCE-v1
+ */
+export function reperformAssurancePackage(pkg, { approverKeys = {}, logPublicKey = null, rpId = null, allowedOrigins = [], revokerKeys = {}, isConsumed, now = 0, } = {}) {
+    if (!pkg || pkg['@version'] !== ASSURANCE_PACKAGE_VERSION)
+        throw new Error('assurance-reperform: not an EP-ASSURANCE-PACKAGE-v1');
+    const profile = pkg.reliance_profile;
+    const evalOpts = { approverKeys, logPublicKey, rpId, allowedOrigins, revokerKeys, ...(typeof isConsumed === 'function' ? { isConsumed } : {}) };
+    const relianceNow = typeof now === 'function' ? now() : now;
+    const results = (Array.isArray(pkg.decisions) ? pkg.decisions : []).map((it) => {
+        const ev = it.evidence || {};
+        const input = {
+            action: it.action || {},
+            receipt: ev.receipt,
+            quorum: ev.quorum || undefined,
+            authority_proof: ev.authority_proof || undefined,
+            revocation_state: ev.revocation_state || undefined,
+            consumption: ev.consumption || undefined,
+            relying_party_profile: profile,
+            now: relianceNow,
+        };
+        let recomputed;
+        try {
+            recomputed = evaluateReliance(input, evalOpts);
+        }
+        catch (err) {
+            const message = err?.message;
+            recomputed = { verdict: 'do_not_rely_unsigned', rely: false, reasons: [`reperform_error:${message || 'threw'}`] };
+        }
+        const recomputed_verdict = recomputed.verdict;
+        const stated_verdict = it.stated_verdict ?? null;
+        // Drift: the org's runtime claimed one outcome, independent re-performance
+        // computed another. A claimed `rely` that recomputes to a refusal is the
+        // material finding — the org relied on evidence that does not support reliance.
+        const drift = stated_verdict !== null && stated_verdict !== recomputed_verdict;
+        return {
+            decision_id: it.decision_id,
+            action_type: it.action?.action_type ?? null,
+            stated_verdict,
+            recomputed_verdict,
+            admissible: recomputed_verdict === 'rely',
+            drift,
+            drift_severity: drift ? (stated_verdict === 'rely' ? 'relied_on_inadmissible_evidence' : 'refused_admissible_or_reclassified') : null,
+            control_id: controlForVerdict(recomputed_verdict),
+            reasons: recomputed.reasons || [],
+        };
+    });
+    const byVerdict = Object.create(null);
+    const byControl = Object.create(null);
+    let admissible = 0;
+    let refused = 0;
+    let drift = 0;
+    for (const r of results) {
+        byVerdict[r.recomputed_verdict] = (byVerdict[r.recomputed_verdict] || 0) + 1;
+        if (r.admissible)
+            admissible += 1;
+        else
+            refused += 1;
+        if (r.drift)
+            drift += 1;
+        if (r.control_id)
+            byControl[r.control_id] = (byControl[r.control_id] || 0) + 1;
+    }
+    // Recompute the package digest from the package's OWN contents rather than
+    // trusting pkg.package_digest. "No value the package asserts is trusted" has to
+    // include the digest: copying the stated one verbatim would let a tampered
+    // package carry a lying content-address through re-performance unchecked. Mirror
+    // buildAssurancePackage's digestScope exactly (body minus assembled_at and the
+    // digest field itself), then compare.
+    const { assembled_at: _statedAt, package_digest: _statedDigest, ...digestScope } = pkg;
+    const recomputedPackageDigest = hashCanonical(digestScope);
+    const packageDigestVerified = pkg.package_digest != null && recomputedPackageDigest === pkg.package_digest;
+    const doc = {
+        '@version': ASSURANCE_REPERFORMANCE_VERSION,
+        product: 'EMILIA Reliance Assurance',
+        package_digest: recomputedPackageDigest,
+        stated_package_digest: pkg.package_digest ?? null,
+        package_digest_verified: packageDigestVerified,
+        profile_hash: pkg.profile_hash ?? null,
+        generated_at: toIso(now),
+        honesty: {
+            reperforms: 'Independent recomputation of every reliance verdict from the packaged evidence, under the package\'s pinned '
+                + 'EP-RELIANCE-PROFILE-v1 and auditor-supplied keys, using the offline reliance kernel. No value the package '
+                + 'asserts (including the stated verdict) is trusted; the stated verdict is compared, never relied on.',
+            does_not_establish: [
+                'Completeness of the decision population: decisions withheld before packaging are not detectable from the package alone. Bind the population to an externally anchored count to close this.',
+                'Runtime freshness or one-time consumption AT THE MOMENT OF DECISION: those were live properties; re-performance checks the evidence as packaged, not the runtime state that existed then.',
+                'Issuer, approver, and registrar key custody, enrollment, or identity proofing, which remain external trust roots the auditor supplies out of band.',
+                'The business correctness or wisdom of any authorized action.',
+            ],
+            status: 'Support for an audit re-performance procedure. This document does not conclude, opine, or certify; any conclusion is the auditor\'s.',
+        },
+        population: {
+            decisions: results.length,
+            admissible,
+            refused,
+            drift,
+            relied_on_inadmissible_evidence: results.filter((r) => r.drift_severity === 'relied_on_inadmissible_evidence').length,
+            by_recomputed_verdict: byVerdict,
+            by_control: byControl,
+        },
+        control_catalog: RELIANCE_CONTROL_CATALOG,
+        results,
+        reperformance_digest: null, // filled below
+        // Conclusion fields are ALWAYS null: a machine may support re-performance, it
+        // may never fill in the auditor's sign-off. A renderer must refuse to print a
+        // non-null conclusion here.
+        conclusion: { supportable: null, opinion: null, signed_off_by: null },
+    };
+    // Deterministic re-performance digest over the recomputed results + population
+    // (excludes timestamps), so a second assurer reproduces it byte-for-byte.
+    doc.reperformance_digest = hashCanonical({ package_digest: doc.package_digest, population: doc.population, results });
+    return doc;
+}
+/** Render a plain-text auditor workpaper. Refuses to print a filled conclusion. */
+export function renderAssuranceWorkpaper(doc) {
+    if (!doc || doc['@version'] !== ASSURANCE_REPERFORMANCE_VERSION)
+        throw new Error('render: not an EP-ASSURANCE-REPERFORMANCE-v1');
+    if (doc.conclusion && (doc.conclusion.supportable !== null || doc.conclusion.opinion !== null || doc.conclusion.signed_off_by !== null)) {
+        throw new Error('render refused: conclusion fields must be null (the auditor concludes, not the tool)');
+    }
+    const p = doc.population;
+    const lines = [];
+    lines.push(`EMILIA Reliance Assurance — re-performance workpaper (${doc['@version']})`);
+    lines.push(`package_digest:       ${doc.package_digest} (recomputed)`);
+    lines.push(`package_digest match: ${doc.package_digest_verified ? 'YES — recomputed digest equals the package\'s stated digest' : 'NO — stated digest does NOT match recomputed contents (tamper or drift)'}`);
+    lines.push(`reperformance_digest: ${doc.reperformance_digest}`);
+    lines.push('');
+    lines.push(`Population: ${p.decisions} decisions | admissible(rely): ${p.admissible} | refused: ${p.refused} | drift: ${p.drift}`);
+    lines.push(`Relied on INADMISSIBLE evidence (claimed rely, recomputed refusal): ${p.relied_on_inadmissible_evidence}`);
+    lines.push('');
+    lines.push('By recomputed verdict:');
+    for (const [v, n] of Object.entries(p.by_recomputed_verdict))
+        lines.push(`  ${v}: ${n}`);
+    lines.push('');
+    lines.push('Control objectives exercised (denials are the control operating):');
+    for (const [cid, n] of Object.entries(p.by_control))
+        lines.push(`  ${cid} (${RELIANCE_CONTROL_CATALOG[cid].objective}): ${n}`);
+    lines.push('');
+    const drifts = doc.results.filter((r) => r.drift);
+    if (drifts.length) {
+        lines.push('DRIFT (independent re-performance disagrees with the runtime\'s stated verdict):');
+        for (const r of drifts)
+            lines.push(`  ${r.decision_id}: stated=${r.stated_verdict} recomputed=${r.recomputed_verdict} [${r.drift_severity}]`);
+        lines.push('');
+    }
+    lines.push('Conclusion: NULL by construction. The auditor concludes; this workpaper only supports the procedure.');
+    return lines.join('\n');
+}
+//# sourceMappingURL=assurance-package.js.map

package/dist/reports/assurance-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assurance-package.js","sourceRoot":"","sources":["../../src/reports/assurance-package.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAEvF,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AACnE,MAAM,CAAC,MAAM,+BAA+B,GAAG,+BAA+B,CAAC;AAE/E,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,EAAE,SAAS,EAAE,qGAAqG,EAAE,QAAQ,EAAE,CAAC,+BAA+B,EAAE,wCAAwC,EAAE,6CAA6C,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,kCAAkC,CAAC,EAAE;IACra,MAAM,EAAE,EAAE,SAAS,EAAE,4EAA4E,EAAE,QAAQ,EAAE,CAAC,wBAAwB,EAAE,gCAAgC,CAAC,EAAE;IAC3K,MAAM,EAAE,EAAE,SAAS,EAAE,kDAAkD,EAAE,QAAQ,EAAE,CAAC,6BAA6B,CAAC,EAAE;IACpH,MAAM,EAAE,EAAE,SAAS,EAAE,oDAAoD,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE;IACvH,MAAM,EAAE,EAAE,SAAS,EAAE,sDAAsD,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE;IACzH,MAAM,EAAE,EAAE,SAAS,EAAE,0EAA0E,EAAE,QAAQ,EAAE,CAAC,sBAAsB,EAAE,8BAA8B,EAAE,wBAAwB,CAAC,EAAE;CAChM,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CACtC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC,EAAE,EAAE,CAAC,CACP,CAAC;AAEF,sFAAsF;AACtF,SAAS,iBAAiB,CAAC,OAAO;IAChC,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,kBAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,KAAK,CAAC,GAAG;IAChB,MAAM,EAAE,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CACpF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAmB,EAAE,EAAE,EAC3D,OAAO,EAAE,YAAY,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,MAKnC,EAAE;IACJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,IAAI,IAAI;YAC/C,cAAc,EAAE,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;YACxF,QAAQ,EAAE;gBACR,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;gBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;gBAC/C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;gBACjD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;aACxC;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,+EAA+E;IAC/E,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,IAAI,EAAE,CAAC,cAAc,KAAK,MAAM,CAAC;SACvF,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAEvI,MAAM,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,yBAAyB;QACrC,YAAY,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAC1E,gBAAgB,EAAE,WAAW;QAC7B,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7D,eAAe,EAAE,wBAAwB;QACzC,SAAS,EAAE,KAAK;QAChB,iBAAiB,EAAE,UAAU;QAC7B,MAAM,EAAE;YACN,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,MAAM;YAC5E,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,IAAI,EAAE,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,MAAM;YAC9F,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,MAAM;SAChE;QACD,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC;KACzB,CAAC;IACF,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IAClD,OAAO,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAG,EAAE,EAC7C,YAAY,GAAG,EAAE,EAAE,YAAY,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,cAAc,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,MAS7G,EAAE;IACJ,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAClI,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACrC,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChJ,MAAM,WAAW,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAE5D,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC7E,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE;YACvB,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;YAC9B,eAAe,EAAE,EAAE,CAAC,eAAe,IAAI,SAAS;YAChD,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,SAAS;YAClD,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;YACxC,qBAAqB,EAAE,OAAO;YAC9B,GAAG,EAAE,WAAW;SACjB,CAAC;QACF,IAAI,UAAU,CAAC;QACf,IAAI,CAAC;YACH,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAgD,EAAE,OAAO,CAAC;YAC3E,UAAU,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,mBAAmB,OAAO,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC;QAC9C,MAAM,cAAc,GAAG,EAAE,CAAC,cAAc,IAAI,IAAI,CAAC;QACjD,2EAA2E;QAC3E,yEAAyE;QACzE,gFAAgF;QAChF,MAAM,KAAK,GAAG,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,kBAAkB,CAAC;QAC/E,OAAO;YACL,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,IAAI,IAAI;YAC3C,cAAc;YACd,kBAAkB;YAClB,UAAU,EAAE,kBAAkB,KAAK,MAAM;YACzC,KAAK;YACL,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,IAAI;YACrI,UAAU,EAAE,iBAAiB,CAAC,kBAAkB,CAAC;YACjD,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,EAAE;SAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,UAAU;YAAE,UAAU,IAAI,CAAC,CAAC;;YAAM,OAAO,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,KAAK;YAAE,KAAK,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,UAAU;YAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC;IAED,2EAA2E;IAC3E,gFAAgF;IAChF,2EAA2E;IAC3E,iFAAiF;IACjF,+EAA+E;IAC/E,sCAAsC;IACtC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,GAAG,GAAG,CAAC;IACvF,MAAM,uBAAuB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,qBAAqB,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,IAAI,uBAAuB,KAAK,GAAG,CAAC,cAAc,CAAC;IAE3G,MAAM,GAAG,GAAG;QACV,UAAU,EAAE,+BAA+B;QAC3C,OAAO,EAAE,2BAA2B;QACpC,cAAc,EAAE,uBAAuB;QACvC,qBAAqB,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QACjD,uBAAuB,EAAE,qBAAqB;QAC9C,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,EAAE;YACP,UAAU,EACR,8GAA8G;kBAC5G,4GAA4G;kBAC5G,qGAAqG;YACzG,kBAAkB,EAAE;gBAClB,4LAA4L;gBAC5L,2LAA2L;gBAC3L,oJAAoJ;gBACpJ,8DAA8D;aAC/D;YACD,MAAM,EAAE,sIAAsI;SAC/I;QACD,UAAU,EAAE;YACV,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,UAAU;YACV,OAAO;YACP,KAAK;YACL,+BAA+B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,iCAAiC,CAAC,CAAC,MAAM;YACrH,qBAAqB,EAAE,SAAS;YAChC,UAAU,EAAE,SAAS;SACtB;QACD,eAAe,EAAE,wBAAwB;QACzC,OAAO;QACP,oBAAoB,EAAE,IAAqB,EAAE,eAAe;QAC5D,8EAA8E;QAC9E,8EAA8E;QAC9E,4BAA4B;QAC5B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KACtE,CAAC;IACF,+EAA+E;IAC/E,0EAA0E;IAC1E,GAAG,CAAC,oBAAoB,GAAG,aAAa,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACtH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAC,GAAG;IAC1C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,+BAA+B;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjI,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,KAAK,IAAI,CAAC,EAAE,CAAC;QACxI,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yDAAyD,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,cAAc,eAAe,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,yEAAyE,EAAE,CAAC,CAAC;IAC/M,KAAK,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,kCAAkC,CAAC,CAAC,UAAU,eAAe,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACnI,KAAK,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC,+BAA+B,EAAE,CAAC,CAAC;IACvH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,wBAAwB,CAAC,GAAG,CAAC,CAAC,SAAS,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/H,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QAC/F,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,cAAc,eAAe,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;QAC9I,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAC;IACnH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}