@event4u/agent-config 16.2.0 → 16.4.0

package/src/scripts/lint_pack_boundaries.ts

@@ -34,13 +34,45 @@
  *   this gate now matches that definition.
  * - **BROKEN deliberately:** exit code 2 is new (dead scan scope). 0 and 1
  *   keep their meanings.
+ * - **BROKEN deliberately (2026-10-01):** the always-installed set is the
+ *   hard-coded `core` PLUS every pack flagged `always_on: true`. The original
+ *   knew only `core`, so it reported a violation for a target the resolver
+ *   provably does install — the same defect shape as the direct-vs-transitive
+ *   `requires` comparison above. `config/packs.resolve_active_packs` seeds the
+ *   active set with the always-on packs before expanding any selection, and
+ *   `docs/contracts/capability-packs.md` § Always-on packs states such a pack
+ *   "cannot be deselected". One-way: a link OUT of an always-on pack into a
+ *   gated one still dangles and is still reported.
  * - **STILL HOLDS:** the CLI surface (`--format text|json`, `--quiet`, `-h`),
  *   the link regex and its fragment/query stripping, link-resolution semantics
  *   (external / absolute / out-of-tree targets ignored), the allow rule
- *   (same pack · `core` · declared `requires`), the per-violation text and
+ *   (same pack · always-installed · declared `requires`), the per-violation text and
  *   JSON shapes, the stdout/stderr split, and exit 0 clean / 1 violations.
+ * - **ADDED (2026-10-07):** a `scanned: <N>` line on every path (stdout in text
+ *   mode, stderr under `--format json` so the payload stays parseable), and
+ *   `--self-test`, which runs this CLI against planted fixture trees. Both are
+ *   what `src/config/gate-coverage.yml` asks of a gate a pull request runs.
  *
- * ## Where the `requires` graph is read from
+ * THE ADVISORY `suggests` EDGE, AND THE SIBLING GATE THAT REFUSES IT.
+ * Since D5 of `road-to-gates-a-pull-request-can-hear` (AI council 2026-10-07)
+ * this gate reads `suggests` as PERMITTING a cross-pack link: advisory,
+ * non-installing, one-hop, one-way. `lint_rule_skill_pack_reach` states in its
+ * own header that `suggests` is deliberately NOT followed. Both are correct,
+ * and the discriminator is the direction of the claim:
+ *
+ * - THAT gate asserts a route WILL RESOLVE. Counting an advisory edge would
+ *   assert resolution on installs that may not exist.
+ * - THIS gate reports a link that MAY DANGLE. An advisory edge is the author
+ *   stating they accept the dangle for a consumer who declines the companion,
+ *   so reading it downgrades a finding the author has already answered.
+ *
+ * The permit is per EDGE, not per link. The council's condition — only
+ * safely-degrading links may be permitted — was verified once, by hand, over
+ * the 203 links at the 2026-10-09 baseline; nothing re-verifies it for links
+ * added later. That is why the permitted COUNT prints on every run including
+ * `--quiet`: it is the only standing signal that the set is growing.
+ *
+ * WHERE THE `requires` GRAPH IS READ FROM.
  *
  * `src/config/discovery/packs.yml` is the source of truth for the pack
  * vocabulary and its `requires` edges — `generate_pack_manifests.ts` DERIVES
@@ -53,6 +85,7 @@
  */
 
 import * as fs from 'node:fs';
+import * as os from 'node:os';
 import * as path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { parse as parseYaml } from 'yaml';
@@ -65,7 +98,8 @@ import {
     iter_artefacts,
 } from './_lib/agent_src.js';
 import { checkRatchet } from './_lib/gate_baseline.js';
-import { DeadScopeError, assertScanned } from './_lib/scan_scope.js';
+import { runGateCli, runSelfTest } from './_lib/gate_self_test.js';
+import { DeadScopeError, reportScanned } from './_lib/scan_scope.js';
 import { parse_frontmatter } from './validate_frontmatter.js';
 
 const _HERE = path.resolve(fileURLToPath(import.meta.url));
@@ -109,12 +143,66 @@ function _set_paths_for_test(opts: { root?: string; vocab?: string }): void {
     }
 }
 
+// `--self-test` drives this CLI from a CHILD process, which cannot reach the
+// setter above, so the fixture root is also readable from the environment.
+// Applied through the setter rather than at the `ROOT` declaration, so a
+// fixture run is still recognised as overridden and never judged by the
+// repo's violation ratchet.
+// Honoured only inside a self-test child, so an inherited value can never
+// redirect the production gate or switch its ratchet off.
+const _ENV_ROOT =
+    process.env['GATE_SELF_TEST_CHILD'] === '1' ? process.env['LINT_PACK_BOUNDARIES_ROOT'] : undefined;
+if (_ENV_ROOT !== undefined && _ENV_ROOT !== '') {
+    _set_paths_for_test({ root: _realpath(path.resolve(_ENV_ROOT)) });
+}
+
 // [..](target) with an optional #fragment / ?query stripped from the target.
 const LINK_RE = /\[[^\]]*\]\(([^)#?]+)(?:[#?][^)]*)?\)/g;
 
 /** A pack every install carries — a link into it can never dangle. */
 const ALWAYS_INSTALLED = 'core';
 
+/**
+ * Packs every projection carries, so a link INTO one can never dangle.
+ *
+ * `core` is the hard-coded floor. Beyond it, `always_on: true` in the pack
+ * vocabulary means exactly this: `config/packs.resolve_active_packs` seeds the
+ * active set with every always-on pack BEFORE expanding the selected profile's
+ * `requires` closure, and `docs/contracts/capability-packs.md` § Always-on
+ * packs states the pack "is never gated by the selected profile, workspace, or
+ * pack set, and it cannot be deselected".
+ *
+ * Reading only `core` was the same class of defect this file's header already
+ * records for the direct-vs-transitive `requires` comparison: the gate reported
+ * a violation for a target the resolver provably does install. The direction is
+ * one-way — a link OUT of an always-on pack into a gated one still dangles and
+ * is still a violation.
+ */
+function _always_installed_packs(): Set<string> {
+    const out = new Set<string>([ALWAYS_INSTALLED]);
+    if (_exists(VOCAB)) {
+        const vocab = parseYaml(fs.readFileSync(VOCAB, 'utf-8'), { version: '1.1' });
+        if (Array.isArray(vocab)) {
+            for (const entry of vocab) {
+                if (entry !== null && typeof entry === 'object' && !Array.isArray(entry)) {
+                    const e = entry as Record<string, unknown>;
+                    if (typeof e['id'] === 'string' && e['always_on'] === true) {
+                        out.add(e['id']);
+                    }
+                }
+            }
+        }
+    }
+    for (const dir of _pack_home_dirs()) {
+        const meta = _load_pack_meta(dir);
+        if (meta['always_on'] === true) {
+            const id = typeof meta['id'] === 'string' ? meta['id'] : path.basename(dir);
+            out.add(id);
+        }
+    }
+    return out;
+}
+
 type ViolationKind =
     /** Link crosses into a pack the source pack does not require. */
     | 'cross-pack'
@@ -130,6 +218,35 @@ interface ViolationRecord {
     link: string;
 }
 
+/**
+ * Which edge permits a cross-pack link. `null` is the violation case.
+ *
+ * `suggests` is the advisory, non-installing edge added for the base-into-
+ * narrow class (D5 of `road-to-gates-a-pull-request-can-hear`, AI council
+ * 2026-10-07). It is the WEAKEST promise in the list, which is why the ranking
+ * below exists: a link that needs it is reported as needing it, never as a
+ * `requires` link that happens to also hold.
+ */
+type PermitReason = 'same-pack' | 'always-installed' | 'requires' | 'suggests' | null;
+
+/** Strength order — lower is a stronger guarantee that the target is present. */
+const PERMIT_RANK: Record<Exclude<PermitReason, null>, number> = {
+    'same-pack': 0,
+    'always-installed': 1,
+    requires: 2,
+    suggests: 3,
+};
+
+/** A link permitted only by `suggests`, kept for the `--show-permitted` report. */
+interface PermittedRecord {
+    source_pack: string;
+    target_pack: string;
+    source: string;
+    target: string;
+    link: string;
+    reason: Exclude<PermitReason, null>;
+}
+
 /** Mirror Python `Path.resolve()`: canonicalize existing prefix, append rest. */
 function _realpath(p: string): string {
     try {
@@ -275,7 +392,36 @@ function _pack_home_dirs(): string[] {
  * manifests as an overlay for pack homes the vocabulary does not list.
  */
 function _pack_requires(): Map<string, string[]> {
-    const out = new Map<string, string[]>();
+    return _pack_edges().requires;
+}
+
+/**
+ * `pack id -> direct suggests`.
+ *
+ * Deliberately NOT expanded: `suggests` is one-hop. Transitive expansion would
+ * give the advisory edge the install-forcing reach `requires` has, which is the
+ * property the base-into-narrow decision depends on it not having.
+ */
+function _pack_suggests(): Map<string, string[]> {
+    return _pack_edges().suggests;
+}
+
+/**
+ * Both edge maps, from ONE read of the vocabulary and one walk of the pack
+ * homes.
+ *
+ * One reader rather than two near-identical ones, so the VOCAB-wins precedence
+ * below exists in a single place: two copies would have to be kept in step by
+ * hand, and a `requires` map that fell out of step with a `suggests` map read
+ * from the same file is a drift nothing reports.
+ *
+ * NOTE for anyone adding an edge: a `pack.yaml` is only consulted for a pack
+ * the vocabulary does not list, so declaring `suggests` there alone has no
+ * effect on this gate. `packs.yml` is where an edge has to go.
+ */
+function _pack_edges(): { requires: Map<string, string[]>; suggests: Map<string, string[]> } {
+    const requires = new Map<string, string[]>();
+    const suggests = new Map<string, string[]>();
     const asList = (v: unknown): string[] => (Array.isArray(v) ? v.map(String) : []);
 
     if (_exists(VOCAB)) {
@@ -285,7 +431,8 @@ function _pack_requires(): Map<string, string[]> {
                 if (entry !== null && typeof entry === 'object' && !Array.isArray(entry)) {
                     const e = entry as Record<string, unknown>;
                     if (typeof e['id'] === 'string') {
-                        out.set(e['id'], asList(e['requires']));
+                        requires.set(e['id'], asList(e['requires']));
+                        suggests.set(e['id'], asList(e['suggests']));
                     }
                 }
             }
@@ -294,11 +441,12 @@ function _pack_requires(): Map<string, string[]> {
     for (const dir of _pack_home_dirs()) {
         const meta = _load_pack_meta(dir);
         const id = typeof meta['id'] === 'string' ? meta['id'] : path.basename(dir);
-        if (!out.has(id)) {
-            out.set(id, asList(meta['requires']));
+        if (!requires.has(id)) {
+            requires.set(id, asList(meta['requires']));
+            suggests.set(id, asList(meta['suggests']));
         }
     }
-    return out;
+    return { requires, suggests };
 }
 
 /** Transitive expansion of `requires`, cycle-safe. */
@@ -479,14 +627,45 @@ function _scan_file(p: string): string[] {
     return out;
 }
 
-function _is_allowed(source_pack: string, target_pack: string, requires: string[]): boolean {
+/**
+ * Which edge, if any, lets a link out of `source_pack` reach `target_pack`.
+ *
+ * `null` is the violation case. The reason is returned rather than a bare
+ * boolean because `suggests` is advisory: a reader who sees a permitted
+ * base-into-narrow link needs to know it was permitted by an edge that does
+ * NOT install the target, which is a different promise from `requires`.
+ */
+function _permit_reason(
+    source_pack: string,
+    target_pack: string,
+    requires: string[],
+    always_installed: ReadonlySet<string> = new Set([ALWAYS_INSTALLED]),
+    suggests: readonly string[] = [],
+): PermitReason {
     if (source_pack === target_pack) {
-        return true;
+        return 'same-pack';
     }
-    if (target_pack === ALWAYS_INSTALLED) {
-        return true;
+    if (always_installed.has(target_pack)) {
+        return 'always-installed';
     }
-    return (requires || []).includes(target_pack);
+    if ((requires || []).includes(target_pack)) {
+        return 'requires';
+    }
+    // One-hop and one-way by construction: the caller passes the SOURCE pack's
+    // own direct `suggests` list, never a closure over it. A transitive
+    // advisory edge would re-create the install-forcing reach `requires` has,
+    // which is the property this edge exists not to have.
+    return suggests.includes(target_pack) ? 'suggests' : null;
+}
+
+function _is_allowed(
+    source_pack: string,
+    target_pack: string,
+    requires: string[],
+    always_installed: ReadonlySet<string> = new Set([ALWAYS_INSTALLED]),
+    suggests: readonly string[] = [],
+): boolean {
+    return _permit_reason(source_pack, target_pack, requires, always_installed, suggests) !== null;
 }
 
 /**
@@ -501,11 +680,48 @@ function _link_allowed(
     source_packs: readonly string[],
     target_packs: readonly string[],
     closureOf: (pack: string) => Set<string>,
+    always_installed: ReadonlySet<string> = new Set([ALWAYS_INSTALLED]),
+    suggestsOf: (pack: string) => readonly string[] = () => [],
 ): boolean {
-    return source_packs.every((s) => {
+    return (
+        _link_permit_reason(source_packs, target_packs, closureOf, always_installed, suggestsOf) !==
+        null
+    );
+}
+
+/**
+ * The weakest edge the link relies on, or `null` when nothing permits it.
+ *
+ * Weakest, not first: a link permitted for one source pack by `requires` and
+ * for another only by `suggests` is reported as `suggests`, because that is
+ * the promise a consumer actually gets.
+ */
+function _link_permit_reason(
+    source_packs: readonly string[],
+    target_packs: readonly string[],
+    closureOf: (pack: string) => Set<string>,
+    always_installed: ReadonlySet<string> = new Set([ALWAYS_INSTALLED]),
+    suggestsOf: (pack: string) => readonly string[] = () => [],
+): PermitReason {
+    let weakest: PermitReason = 'same-pack';
+    for (const s of source_packs) {
         const reach = [...closureOf(s)];
-        return target_packs.some((t) => _is_allowed(s, t, reach));
-    });
+        const sug = suggestsOf(s);
+        let best: PermitReason = null;
+        for (const t of target_packs) {
+            const r = _permit_reason(s, t, reach, always_installed, sug);
+            if (r !== null && (best === null || PERMIT_RANK[r] < PERMIT_RANK[best])) {
+                best = r;
+            }
+        }
+        if (best === null) {
+            return null;
+        }
+        if (PERMIT_RANK[best] > PERMIT_RANK[weakest]) {
+            weakest = best;
+        }
+    }
+    return weakest;
 }
 
 /** Mirror Python `json.dump(obj, indent=2)` with `ensure_ascii=True`. */
@@ -528,11 +744,14 @@ function _json_dumps_ascii(obj: unknown): string {
 interface ParsedArgs {
     format: 'text' | 'json';
     quiet: boolean;
+    /** List the links permitted only by an advisory `suggests` edge. */
+    show_permitted: boolean;
 }
 
 function parse_args(argv: readonly string[]): ParsedArgs {
     let format: 'text' | 'json' = 'text';
     let quiet = false;
+    let show_permitted = false;
     for (let i = 0; i < argv.length; i++) {
         const arg = argv[i] as string;
         if (arg === '--format') {
@@ -556,16 +775,19 @@ function parse_args(argv: readonly string[]): ParsedArgs {
             format = v;
         } else if (arg === '--quiet') {
             quiet = true;
+        } else if (arg === '--show-permitted') {
+            show_permitted = true;
         } else if (arg === '-h' || arg === '--help') {
             process.stdout.write(
-                'usage: lint_pack_boundaries [-h] [--format {text,json}] [--quiet]\n',
+                'usage: lint_pack_boundaries [-h] [--format {text,json}] [--quiet] ' +
+                    '[--show-permitted] [--self-test]\n',
             );
             process.exit(0);
         } else {
             _argparse_error(`unrecognized arguments: ${arg}`);
         }
     }
-    return { format, quiet };
+    return { format, quiet, show_permitted };
 }
 
 function _argparse_error(message: string): never {
@@ -573,8 +795,161 @@ function _argparse_error(message: string): never {
     process.exit(2);
 }
 
+/**
+ * Plant fixture trees and run this gate's real CLI against each one.
+ *
+ * Three rejecting cases cover the three exits a pull request can be failed by:
+ * an undeclared cross-pack link, an artefact with no resolvable pack, and an
+ * empty corpus. The two accepting cases pin the allow rule from the other side,
+ * so a gate that started rejecting everything fails here too.
+ */
+function selfTest(): number {
+    const plant = (name: string, files: Record<string, string>): string => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), `lpb-selftest-${name}-`));
+        for (const [rel, body] of Object.entries(files)) {
+            const p = path.join(dir, rel);
+            fs.mkdirSync(path.dirname(p), { recursive: true });
+            fs.writeFileSync(p, body, 'utf-8');
+        }
+        return dir;
+    };
+    const skill = (slug: string, packs: string, body: string): [string, string] => [
+        `skills/${slug}/SKILL.md`,
+        `---\nname: ${slug}\npacks: [${packs}]\n---\n\n${body}\n`,
+    ];
+    const run = (dir: string): number => {
+        const prev = process.env['LINT_PACK_BOUNDARIES_ROOT'];
+        process.env['LINT_PACK_BOUNDARIES_ROOT'] = dir;
+        try {
+            return runGateCli(
+                _DEFAULT_ROOT,
+                path.join('src', 'scripts', 'lint_pack_boundaries.ts'),
+                ['--quiet'],
+                _DEFAULT_ROOT,
+            );
+        } finally {
+            if (prev === undefined) {
+                delete process.env['LINT_PACK_BOUNDARIES_ROOT'];
+            } else {
+                process.env['LINT_PACK_BOUNDARIES_ROOT'] = prev;
+            }
+            fs.rmSync(dir, { recursive: true, force: true });
+        }
+    };
+    const twoPacks = '- id: alpha\n  requires: []\n- id: beta\n  requires: []\n';
+    // A reject case counts only on the exit it names: a crash or a dead-scope
+    // exit on a fixture that should yield a finding reads as NOT rejected.
+    const rejectsWith = (want: number, got: number): number => (got === want ? 1 : 0);
+
+    return runSelfTest({
+        gate: 'lint_pack_boundaries',
+        minCases: 7,
+        minRejectCases: 4,
+        cases: [
+            {
+                name: 'an undeclared cross-pack link is rejected with exit 1',
+                expect: 'reject',
+                run: () =>
+                    rejectsWith(1, run(
+                        plant('cross', {
+                            'packs.yml': twoPacks,
+                            ...Object.fromEntries([
+                                skill('a-one', 'alpha', 'reaches [b](../b-one/SKILL.md)'),
+                                skill('b-one', 'beta', 'leaf'),
+                            ]),
+                        }),
+                    )),
+            },
+            {
+                name: 'a SKILL.md with no packs is a finding (exit 1), never a silent pass',
+                expect: 'reject',
+                run: () =>
+                    rejectsWith(1, run(
+                        plant('nopack', {
+                            'packs.yml': twoPacks,
+                            'skills/nopack/SKILL.md': '---\nname: nopack\n---\n\nno packs key\n',
+                        }),
+                    )),
+            },
+            {
+                name: 'an empty corpus is a dead scope (exit 2), not "no cross-pack drift"',
+                expect: 'reject',
+                run: () => rejectsWith(2, run(plant('empty', { 'packs.yml': twoPacks }))),
+            },
+            {
+                name: 'a link declared through requires passes',
+                expect: 'accept',
+                run: () =>
+                    run(
+                        plant('declared', {
+                            'packs.yml': '- id: alpha\n  requires: [beta]\n- id: beta\n  requires: []\n',
+                            ...Object.fromEntries([
+                                skill('a-one', 'alpha', 'reaches [b](../b-one/SKILL.md)'),
+                                skill('b-one', 'beta', 'leaf'),
+                            ]),
+                        }),
+                    ),
+            },
+            {
+                name: 'a link inside one pack passes',
+                expect: 'accept',
+                run: () =>
+                    run(
+                        plant('same', {
+                            'packs.yml': twoPacks,
+                            ...Object.fromEntries([
+                                skill('a-one', 'alpha', 'reaches [two](../a-two/SKILL.md)'),
+                                skill('a-two', 'alpha', 'leaf'),
+                            ]),
+                        }),
+                    ),
+            },
+            {
+                name: 'a link an advisory `suggests` edge permits passes',
+                expect: 'accept',
+                run: () =>
+                    run(
+                        plant('suggests-permit', {
+                            'packs.yml':
+                                '- id: alpha\n  requires: []\n  suggests: [beta]\n' +
+                                '- id: beta\n  requires: []\n',
+                            ...Object.fromEntries([
+                                skill('a-one', 'alpha', 'reaches [b](../b-one/SKILL.md)'),
+                                skill('b-one', 'beta', 'leaf'),
+                            ]),
+                        }),
+                    ),
+            },
+            {
+                // The denial half. Without it the case above cannot tell a
+                // working permit from a gate that stopped reporting at all.
+                name: 'the same link without the `suggests` edge is still rejected with exit 1',
+                expect: 'reject',
+                run: () =>
+                    rejectsWith(1, run(
+                        plant('suggests-absent', {
+                            'packs.yml': twoPacks,
+                            ...Object.fromEntries([
+                                skill('a-one', 'alpha', 'reaches [b](../b-one/SKILL.md)'),
+                                skill('b-one', 'beta', 'leaf'),
+                            ]),
+                        }),
+                    )),
+            },
+        ],
+    });
+}
+
 function main(argv?: readonly string[]): number {
-    const args = parse_args(argv ?? process.argv.slice(2));
+    const rawArgv = argv ?? process.argv.slice(2);
+    if (rawArgv.includes('--self-test')) {
+        if (process.env['GATE_SELF_TEST_CHILD'] === '1') {
+            process.stderr.write('lint_pack_boundaries: --self-test does not recurse\n');
+            return 2;
+        }
+        return selfTest();
+    }
+    const args = parse_args(rawArgv);
 
     const { index: artefact_pack, unassigned, scanned } = _build_artefact_index();
 
@@ -582,12 +957,17 @@ function main(argv?: readonly string[]): number {
     // clean. That was this gate's shipped state until 2026-08-02 — it walked
     // the deleted `packages/` tree and skipped green forever.
     try {
-        assertScanned({
-            gate: 'lint_pack_boundaries',
-            scanned,
-            units: 'artefact(s)',
-            roots: _scan_roots().map((r) => _relPosix(r, ROOT) || '.'),
-        });
+        reportScanned(
+            {
+                gate: 'lint_pack_boundaries',
+                scanned,
+                units: 'artefact(s)',
+                roots: _scan_roots().map((r) => _relPosix(r, ROOT) || '.'),
+            },
+            args.format === 'json'
+                ? process.stderr.write.bind(process.stderr)
+                : process.stdout.write.bind(process.stdout),
+        );
     } catch (exc) {
         if (!(exc instanceof DeadScopeError)) {
             throw exc;
@@ -596,7 +976,9 @@ function main(argv?: readonly string[]): number {
         return 2;
     }
 
-    const pack_requires = _pack_requires();
+    const { requires: pack_requires, suggests: pack_suggests } = _pack_edges();
+    const suggestsOf = (pack: string): readonly string[] => pack_suggests.get(pack) ?? [];
+    const always_installed = _always_installed_packs();
     const closureCache = new Map<string, Set<string>>();
     const closureOf = (pack: string): Set<string> => {
         let c = closureCache.get(pack);
@@ -608,6 +990,7 @@ function main(argv?: readonly string[]): number {
     };
 
     const violations: ViolationRecord[] = [];
+    const permitted: PermittedRecord[] = [];
 
     // Fail-safe: a unit-defining artefact with no resolvable pack cannot be
     // boundary-checked, so it is a finding rather than a silent exclusion.
@@ -635,7 +1018,27 @@ function main(argv?: readonly string[]): number {
             if (target_packs === undefined) {
                 continue; // docs/, scripts/, root files, unassigned — not pack-scoped
             }
-            if (_link_allowed(src_packs, target_packs, closureOf)) {
+            const reason = _link_permit_reason(
+                src_packs,
+                target_packs,
+                closureOf,
+                always_installed,
+                suggestsOf,
+            );
+            if (reason !== null) {
+                // Only the advisory edge is worth reporting: the other three
+                // mean the target is installed, so there is nothing a reader
+                // has to weigh.
+                if (reason === 'suggests') {
+                    permitted.push({
+                        source_pack: src_packs.join('+'),
+                        target_pack: target_packs.join('+'),
+                        source: rel_path,
+                        target: target_rel,
+                        link: raw,
+                        reason,
+                    });
+                }
                 continue;
             }
             violations.push({
@@ -665,6 +1068,7 @@ function main(argv?: readonly string[]): number {
                 count: violations.length,
                 scanned,
                 unassigned: unassigned.length,
+                permitted_by_suggests: permitted,
                 ratchet:
                     verdict === null ? null : { status: verdict.status, baseline: verdict.baseline },
             }) + '\n',
@@ -678,6 +1082,32 @@ function main(argv?: readonly string[]): number {
                 `${pack_requires.size} packs (${unassigned.length} outside pack scope)\n`,
         );
     }
+    // Two different questions, so two different defaults.
+    //
+    // HOW MANY links an advisory edge is carrying prints on EVERY run,
+    // `--quiet` included. The permit is granted per EDGE, not per link: once an
+    // edge is declared, every future link on it is permitted without anyone
+    // re-checking that it degrades safely. An adversarial review demonstrated
+    // that by planting a link on a declared edge and watching this gate exit 0
+    // where it would previously have failed the pull request. `--quiet` is what
+    // CI passes, so a count visible only without it would miss the one log that
+    // matters.
+    //
+    // WHICH links they are stays behind `--show-permitted`. A permit is not a
+    // finding, and printing dozens of lines beside the violations reads as one.
+    process.stdout.write(
+        `${permitted.length} link(s) permitted by an advisory \`suggests\` edge` +
+            (args.show_permitted ? '' : ' (--show-permitted lists them)') +
+            '\n',
+    );
+    if (args.show_permitted) {
+        for (const p of permitted) {
+            process.stdout.write(
+                `  ~ ${p.source_pack} -> ${p.target_pack} : ${p.source} \u2192 ${p.target} ` +
+                    `(link: ${p.link}) — permitted by \`${p.reason}\`\n`,
+            );
+        }
+    }
     for (const v of violations) {
         if (v.kind === 'unresolved-pack') {
             process.stdout.write(
@@ -693,8 +1123,8 @@ function main(argv?: readonly string[]): number {
     }
     if (violations.length > 0) {
         process.stdout.write(
-            `\n${violations.length} cross-pack violation(s) — declare 'requires' in ` +
-                'pack.yaml or move the artefact\n',
+            `\n${violations.length} cross-pack violation(s) — declare 'requires' or an ` +
+                "advisory 'suggests' edge in packs.yml, or move the artefact\n",
         );
         if (verdict !== null) {
             if (verdict.ok) {
@@ -743,9 +1173,15 @@ export {
     _build_artefact_index,
     _resolve_link,
     _scan_file,
+    _always_installed_packs,
+    type PermitReason,
     _is_allowed,
     _link_allowed,
+    _link_permit_reason,
+    _pack_suggests,
+    _permit_reason,
     _load_pack_meta,
+    _pack_edges,
     _pack_requires,
     _requires_closure,
     _packs_of,