@getbourdon/conformance 0.7.0 → 0.9.0

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA2B;AAC3B,qBAAyC;AACzC,uBAAiC;AACjC,sBAA8B;AAH9B;AA0BA,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,eAAO,8BAAQ,+BAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,cAAU,0BAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,UAAI,+BAAW,0BAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,aAAO,0BAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,UAAM,iCAAa,0BAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,QACV,iCAAa,0BAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,aAAO,+BAAW,QAAQ,EAAE,WAAO,6BAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,QACpB,iCAAa,0BAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,eAAW,0BAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// SPDX-License-Identifier: Apache-2.0\nimport { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,yBAA2B;AAC3B,qBAAyC;AACzC,uBAAiC;AACjC,sBAA8B;AAJ9B;AA2BA,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,eAAO,8BAAQ,+BAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,cAAU,0BAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,UAAI,+BAAW,0BAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,aAAO,0BAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,UAAM,iCAAa,0BAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,QACV,iCAAa,0BAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,aAAO,+BAAW,QAAQ,EAAE,WAAO,6BAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,QACpB,iCAAa,0BAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,eAAW,0BAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}

package/dist/index.js

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAuB9B,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,WAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,MAAI,WAAW,QAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,SAAO,QAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,IACV,aAAa,QAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,SAAO,WAAW,QAAQ,EAAE,OAAO,aAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,IACpB,aAAa,QAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,WAAW,QAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// SPDX-License-Identifier: Apache-2.0\nimport { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";AACA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAuB9B,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,WAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,MAAI,WAAW,QAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,SAAO,QAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,IACV,aAAa,QAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,SAAO,WAAW,QAAQ,EAAE,OAAO,aAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,IACpB,aAAa,QAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,WAAW,QAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}

package/fixtures/leak_cases.json

@@ -3,6 +3,7 @@
   "audit_schema_version": "federation-leak-audit/v1",
   "private_tag_families": [
     "client-confidential",
+    "confidential",
     "credential",
     "family",
     "financial",
@@ -19,7 +20,7 @@
         "known_entities": [
           {
             "name": "API",
-            "summary": "the service_role key for supabase",
+            "summary": "service_role = hunter2hunter2 for supabase",
             "visibility": "team"
           }
         ]
@@ -39,7 +40,7 @@
             "date": "2026-06-20",
             "files_touched": [
               "src/app.ts",
-              "config/.env"
+              "config/.env:PASSWORD=supersecretvalue"
             ]
           }
         ]
@@ -57,7 +58,7 @@
         "agent": {
           "id": "x",
           "type": "code-assistant",
-          "role_narrative": "rotate the api_key before every deploy"
+          "role_narrative": "rotate the api_key=hunter2hunter2 before every deploy"
         }
       },
       "expected_findings": [
@@ -72,7 +73,7 @@
       "manifest": {
         "capabilities": [
           "state_db",
-          "the bearer token is read from .env"
+          "the bearer token is QXp9-not-a-real-key"
         ]
       },
       "expected_findings": [

package/fixtures/manifest.json

@@ -1,18 +1,18 @@
 {
   "_doc": "Index of cross-impl parity fixtures. conformance_version bumps on any fixture change (patch=added cases, minor=new family, major=changed expected-output = a reviewed behavior change). Python is the oracle; this file is generated by tools/gen_conformance.py.",
-  "conformance_version": "2.6.0",
+  "conformance_version": "6.0.0",
   "produced_against": {
-    "bourdon_version": "0.23.0"
+    "bourdon_version": "0.25.0"
   },
   "fixtures": [
     {
       "path": "redaction_battery.json",
-      "sha256": "dc648b86445165a11f5fd25b7f8c7b7144d3abcaf6bf602ae5eceb60ffe856a2",
+      "sha256": "31f7a1903ec70659f23b3062040776adad54dadaee763c296018100cd439178e",
       "producer": "tools/gen_conformance.py::redaction_battery"
     },
     {
       "path": "leak_cases.json",
-      "sha256": "cb85515a3fbfafecf5a72e0a361a80ce5da1e8cdb5c25cdef3227029d955322f",
+      "sha256": "78580fd6e81243538af0e202ac2b84b7b4421353836119a1b8f6f516a90d134c",
       "producer": "tools/gen_conformance.py::leak_cases"
     },
     {
@@ -102,7 +102,7 @@
     },
     {
       "path": "merge_vectors.json",
-      "sha256": "9a1d105d6c2b0bc00e419b318ae4d802457241cca0cbbe87f1a87c529a11e923",
+      "sha256": "74322ae0460fb38331ee47e252d10f64e7c2c31254ae814381b852ab2510b110",
       "producer": "tools/gen_conformance.py::merge_vectors"
     },
     {
@@ -137,7 +137,7 @@
     },
     {
       "path": "tier_matrix.json",
-      "sha256": "9753ad1fd4a092bdf4110b3b24576f2bfe7001d6d6758ef55047ee5da851e25c",
+      "sha256": "92954294831c3c5b318b73ae7deae8e338fb2f8d3c4ddfac3b1dd09b9b6b7c0a",
       "producer": "tools/gen_conformance.py::tier_matrix"
     },
     {
@@ -320,6 +320,36 @@
       "sha256": "d662fd546ee6ba3315a751d68d2d096b5d21d338cf3c65970f09431f666f5e6b",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
+    {
+      "path": "mcp_snapshots/trace_entity.req.json",
+      "sha256": "543ae888dedad51fdf2872dc32a130a348deec7bfd19571a5e0ea2235cdf014e",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/trace_entity.res.json",
+      "sha256": "980c6b6fec01a06453ebc80204da03a553bdfbe3d069ae5ce6c8fa511f1c99cf",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/ingest_meeting.req.json",
+      "sha256": "7bdac92f1f2374639e1088c7f048e5c5a732c53d32a21766af3555102d420b63",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/ingest_meeting.res.json",
+      "sha256": "434ccc3f41e274ade88da857eddda5ab550e1fd8ec23328d929cc768c881b6aa",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/compile_turn.req.json",
+      "sha256": "64e17a2db8d624a4f26a8a0601f3967d1ec96d149b555bf52251d7b6200aea69",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/compile_turn.res.json",
+      "sha256": "5c35e344307a200e71ad83fef9ff6e7eaed79c1f77cb897f32b59ffa9f5ef282",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
     {
       "path": "mcp_snapshots/get_deeper_context.req.json",
       "sha256": "ca5d6f3472a3a74b1710e8ee093e5648b737bf6635656a21306ef73656fd533f",
@@ -330,6 +360,46 @@
       "sha256": "c92ec338c23f2cdc3f1215751812c7f5c2c08aa86fb3ff097288e4c831313053",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
+    {
+      "path": "mcp_snapshots/search_federation.req.json",
+      "sha256": "ec8da2fb5d95ac050afe2cd3ff3335f10b003338a5f7c832cbb78abc3e77df79",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/search_federation.res.json",
+      "sha256": "1db5bfed711a2ccba3478a26e4e189d8124edbd83921c1ecf1f87590fac60463",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/capture_clip.req.json",
+      "sha256": "e640f67b05c7465bc4dc05f3e3e884f12b41861e0cc155bd9e061e75eb100e61",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/capture_clip.res.json",
+      "sha256": "e6f2f77a7593c8de234d3f1baf50424f267634d0f45ca60b05ac833f2f28acdf",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/propose_consensus.req.json",
+      "sha256": "e63fb8dfae9b4ba6db1893cd79e0331c82dc32c0e1a57d79859f856282ad9efe",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/propose_consensus.res.json",
+      "sha256": "357ce9ab7d9ceef757900996050b7758793e6a75880c2f580e42b7a767dd4522",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/vote_consensus.req.json",
+      "sha256": "c4dcfa2af2c95cff0f97d2e49b3fe197444ede4302e63f1ef55898f3519e0ced",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/vote_consensus.res.json",
+      "sha256": "b244f65eeed1edfb9468acbbd6d6449a660388bae59bde0b6d4cb9c5d89f06b0",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
     {
       "path": "mcp_snapshots/list_memory_versions.req.json",
       "sha256": "d74a7d4ca7aaef454887f3a84e7db9d01a9141899a2d3a2e4dd43863a09c67df",
@@ -362,12 +432,12 @@
     },
     {
       "path": "mcp_snapshots/seed_library.json",
-      "sha256": "9438518dadb691feaeb44c7bebf6583958ddf55289df3d3fef8ad7b123500827",
+      "sha256": "4315d9be6b52c899d7d3f0449e243fc0a8baa31f53eec141314cd526c9d29095",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
       "path": "mcp_snapshots/_normalizer.json",
-      "sha256": "438071a3b1de83fb23083fd9ad2d4a734a27032d84faabf9d5772f14779a1721",
+      "sha256": "43db802a917f5ed286384ba175d3ec336a4a72fb48a99257ad9865b826f4c6ea",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
@@ -377,7 +447,7 @@
     },
     {
       "path": "native_stores/hermes/store/.hermes/memories/memory.md",
-      "sha256": "45c32c828e96353b409204eeeda1df7b89f75699ec46bffff32df6d3c9781804",
+      "sha256": "6a0726d27419af63b5713a3314dbaab64ef2fa5b9d310d2e2d3332f07516833c",
       "producer": "tools/gen_conformance.py::native_stores"
     },
     {
@@ -422,7 +492,7 @@
     },
     {
       "path": "native_stores/claude_code/store/knowledge_graph/memory.jsonl",
-      "sha256": "544f1d0a609272614bd351003859eec31b8beb7874324bb0b8148fac5149f885",
+      "sha256": "624f5d9ccd73456695fc7a91a5811c358b292f52cc1ea2e3ceff7674c338e3e3",
       "producer": "tools/gen_conformance.py::native_stores"
     },
     {
@@ -432,7 +502,7 @@
     },
     {
       "path": "native_stores/github_copilot/cache/github-copilot/payload.json",
-      "sha256": "2e9a1f6d19927417bd78bbdfa4260d11ea4b258f5e2a471549de460c433d3aaa",
+      "sha256": "5b922bb2d150ee05c92d92c867274e2a8569d5f2810e5c806cffb4cd0765e7f7",
       "producer": "tools/gen_conformance.py::native_stores"
     },
     {
@@ -447,7 +517,7 @@
     },
     {
       "path": "turn_compiler_vectors.json",
-      "sha256": "add466b02d93cd706c92cdd1f0a2c43b9d633efe19d7ae0319eaa2ade7530f38",
+      "sha256": "d8649a227bc4ae0d3760f76dc424a67a4402446742e5d27aa6b31113ce9d7e71",
       "producer": "tools/gen_conformance.py::turn_compiler_vectors"
     }
   ]

package/fixtures/mcp_snapshots/_normalizer.json

@@ -154,6 +154,8 @@
   "float_precision": 4,
   "freeze_fields": [
     "age_s",
+    "clip_id",
+    "created_at",
     "digest",
     "generated_at",
     "generated_from",

package/fixtures/mcp_snapshots/capture_clip.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "content": "Bourdon research note",
+    "title": "Bourdon Note"
+  },
+  "tool": "capture_clip"
+}

package/fixtures/mcp_snapshots/capture_clip.res.json

@@ -0,0 +1,7 @@
+{
+  "access_level": "team",
+  "agent_id": "operator",
+  "clip_id": "<frozen>",
+  "ok": true,
+  "title": "Bourdon Note"
+}

package/fixtures/mcp_snapshots/compile_turn.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "access_level": "team",
+    "prompt": "Bourdon recognition"
+  },
+  "tool": "compile_turn"
+}

package/fixtures/mcp_snapshots/compile_turn.res.json

@@ -0,0 +1,5 @@
+{
+  "_status": "deferred",
+  "reason": "compile_turn output is environment-bound (resolves the live cwd, git repo name + remote, and repo-identity scoring) and is not a portable cross-impl parity fixture until a TS universal turn compiler lands. The req pins the tool surface + arg defaults; the res is this deferred stub.",
+  "schema_version": "bourdon.turn-brief/v1"
+}

package/fixtures/mcp_snapshots/ingest_meeting.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "access_level": "team",
+    "content": "# Weekly Sync\nDate: 2026-06-09\nAttendees: ada, grace\n\n## Decisions\n- Adopt the meetings participant\n"
+  },
+  "tool": "ingest_meeting"
+}

package/fixtures/mcp_snapshots/ingest_meeting.res.json

@@ -0,0 +1,33 @@
+{
+  "actions_count": 0,
+  "attendees": [
+    "ada",
+    "grace"
+  ],
+  "commit": {
+    "agent_id": "meetings",
+    "digest": "<frozen>",
+    "entities_added": 0,
+    "entities_updated": 0,
+    "last_updated": "<frozen>",
+    "mode": "merge",
+    "notes_added": 0,
+    "notes_updated": 0,
+    "path": "<frozen>",
+    "sessions_added": 1,
+    "sessions_updated": 0,
+    "total_entities": 0,
+    "total_notes": 0,
+    "total_sessions": 1,
+    "total_workstreams": 0,
+    "workstreams_added": 0,
+    "workstreams_updated": 0
+  },
+  "date": "2026-06-09",
+  "decisions_count": 1,
+  "entities_count": 0,
+  "notes_count": 0,
+  "status": "ingested",
+  "title": "Weekly Sync",
+  "workstreams_count": 0
+}

package/fixtures/mcp_snapshots/propose_consensus.req.json

@@ -0,0 +1,11 @@
+{
+  "args": {
+    "options": [
+      "Option A",
+      "Option B"
+    ],
+    "proposal_id": "prop_snapshot",
+    "topic": "Federation Protocol"
+  },
+  "tool": "propose_consensus"
+}

package/fixtures/mcp_snapshots/propose_consensus.res.json

@@ -0,0 +1,17 @@
+{
+  "created_at": "<frozen>",
+  "metadata": {
+    "description": "",
+    "strategy": "majority"
+  },
+  "options": [
+    "Option A",
+    "Option B"
+  ],
+  "proposal_id": "prop_snapshot",
+  "proposed_by": "operator",
+  "quorum": 2,
+  "status": "active",
+  "topic": "Federation Protocol",
+  "votes": {}
+}

package/fixtures/mcp_snapshots/search_federation.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "query": "Bourdon",
+    "top_k": 5
+  },
+  "tool": "search_federation"
+}

package/fixtures/mcp_snapshots/search_federation.res.json

@@ -0,0 +1,4 @@
+{
+  "query": "Bourdon",
+  "total_matches": 0
+}

package/fixtures/mcp_snapshots/seed_library.json

@@ -5,7 +5,8 @@
     "tier": "trusted"
   },
   "deferred": [
-    "compile_codex_turn"
+    "compile_codex_turn",
+    "compile_turn"
   ],
   "drift_seed": {
     "_doc": "prepare_recognition_context_drifting.{req,res}.json were driven under this SEEDED participant drift watermark (written through the real participant_watermark.record writer, stamps then pinned), taken BEFORE the main tool loop and removed afterwards -- the plain prepare_recognition_context.res.json is therefore the healthy half of the pair, with drifting_surfaces ABSENT. The TS mirror must seed the SAME record to reproduce the drifting res.",
@@ -78,7 +79,14 @@
     "get_cross_agent_summary",
     "prepare_recognition_context",
     "compile_codex_turn",
+    "trace_entity",
+    "ingest_meeting",
+    "compile_turn",
     "get_deeper_context",
+    "search_federation",
+    "capture_clip",
+    "propose_consensus",
+    "vote_consensus",
     "list_memory_versions",
     "explain_memory_change",
     "rollback_agent_memory"

package/fixtures/mcp_snapshots/trace_entity.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "access_level": "team",
+    "entity": "Bourdon"
+  },
+  "tool": "trace_entity"
+}

package/fixtures/mcp_snapshots/trace_entity.res.json

@@ -0,0 +1,133 @@
+{
+  "aliases": [
+    "Continuo",
+    "NeuroLayer"
+  ],
+  "attributions": [
+    {
+      "agent_id": "claude-code",
+      "aliases": [
+        "Continuo",
+        "NeuroLayer"
+      ],
+      "first_seen": "2026-06-28T12:00:00Z",
+      "first_version_id": "20260628T120000000000Z-7ec802e0",
+      "matching_notes": [
+        {
+          "date": "2026-06-09",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "text": "Public release note.",
+          "visibility": "public"
+        }
+      ],
+      "matching_sessions": [
+        {
+          "cwd": "bourdon",
+          "date": "2026-06-08",
+          "files_touched": [
+            "tools/gen_conformance.py"
+          ],
+          "key_actions": [
+            "wired tier matrix fixtures"
+          ],
+          "project_focus": [
+            "Bourdon"
+          ],
+          "visibility": "public"
+        }
+      ],
+      "matching_workstreams": [
+        {
+          "last_touched": "2026-06-10",
+          "name": "Release",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "status": "active",
+          "summary": "Prepare the public Bourdon release.",
+          "tags": [
+            "launch"
+          ],
+          "visibility": "public"
+        }
+      ],
+      "provenance_count": 1,
+      "summary": "Cross-agent memory federation (granted side).",
+      "tags": [
+        "infra"
+      ],
+      "types": [
+        "project"
+      ],
+      "version_count": 1,
+      "visibility": "public"
+    },
+    {
+      "agent_id": "codex",
+      "matching_notes": [
+        {
+          "date": "2026-06-10",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "text": "Codex public release note.",
+          "visibility": "public"
+        }
+      ],
+      "matching_workstreams": [
+        {
+          "last_touched": "2026-06-11",
+          "name": "release",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "status": "paused",
+          "tags": [
+            "coordination"
+          ],
+          "visibility": "public"
+        }
+      ],
+      "provenance_count": 0,
+      "summary": "Federation, codex view.",
+      "types": [
+        "project"
+      ],
+      "version_count": 0,
+      "visibility": "public"
+    }
+  ],
+  "first_seen": "2026-06-28T12:00:00Z",
+  "known_by": [
+    "claude-code",
+    "codex"
+  ],
+  "matched": true,
+  "name": "Bourdon",
+  "schema_version": "bourdon.entity-trace/v1",
+  "tags": [
+    "infra"
+  ],
+  "timeline": [
+    {
+      "agent_id": "claude-code",
+      "description": "Bourdon",
+      "kind": "session",
+      "ref": "bourdon",
+      "timestamp": "2026-06-08"
+    },
+    {
+      "agent_id": "claude-code",
+      "description": "Entity observed in claude-code memory",
+      "kind": "entity_origin",
+      "ref": "20260628T120000000000Z-7ec802e0",
+      "timestamp": "2026-06-28T12:00:00Z"
+    }
+  ],
+  "types": [
+    "project"
+  ],
+  "visibility": "team"
+}

package/fixtures/mcp_snapshots/vote_consensus.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "choice": "Option A",
+    "proposal_id": "prop_snapshot"
+  },
+  "tool": "vote_consensus"
+}

package/fixtures/mcp_snapshots/vote_consensus.res.json

@@ -0,0 +1,56 @@
+{
+  "ok": true,
+  "proposal": {
+    "created_at": "<frozen>",
+    "metadata": {
+      "description": "",
+      "strategy": "majority"
+    },
+    "options": [
+      "Option A",
+      "Option B"
+    ],
+    "proposal_id": "prop_snapshot",
+    "proposed_by": "operator",
+    "quorum": 2,
+    "status": "active",
+    "topic": "Federation Protocol",
+    "votes": {
+      "operator": {
+        "agent_id": "operator",
+        "confidence": 1.0,
+        "created_at": "<frozen>",
+        "option": "Option A",
+        "rationale": ""
+      }
+    }
+  },
+  "tally": {
+    "is_tie": false,
+    "leader": "Option A",
+    "margin_weighted": 1.0,
+    "options_summary": {
+      "Option A": {
+        "voters": [
+          {
+            "agent_id": "operator",
+            "confidence": 1.0,
+            "rationale": ""
+          }
+        ],
+        "votes": 1,
+        "weighted_score": 1.0
+      },
+      "Option B": {
+        "votes": 0,
+        "weighted_score": 0.0
+      }
+    },
+    "proposal_id": "prop_snapshot",
+    "quorum": 2,
+    "quorum_reached": false,
+    "status": "active",
+    "topic": "Federation Protocol",
+    "total_votes": 1
+  }
+}

package/fixtures/merge_vectors.json

@@ -165,7 +165,7 @@
         {
           "date": "2026-08-01",
           "cwd": "/w",
-          "project_focus": "OXbeat"
+          "project_focus": "Pennant"
         }
       ],
       "expected": {
@@ -175,7 +175,7 @@
             "cwd": "/w",
             "project_focus": [
               "Bourdon",
-              "OXbeat"
+              "Pennant"
             ]
           }
         ],

package/fixtures/native_stores/claude_code/store/knowledge_graph/memory.jsonl

@@ -1,3 +1,3 @@
 {"type":"entity","name":"Zephyr","entityType":"project","observations":["File conversion app."]}
-{"type":"entity","name":"SecretCreds","entityType":"concept","observations":["the service_role key for supabase"]}
+{"type":"entity","name":"SecretCreds","entityType":"concept","observations":["service_role=hunter2hunter2 for supabase"]}
 {"type":"relation","from":"Zephyr","to":"Bourdon","relationType":"uses"}

package/fixtures/native_stores/github_copilot/cache/github-copilot/payload.json

@@ -11,7 +11,7 @@
         "repository_url": "https://api.github.com/repos/ryan/bourdon"
       },
       {
-        "title": "Rotate the service_role key in CI",
+        "title": "Rotate service_role=hunter2hunter2 in CI",
         "number": 9,
         "updated_at": "2026-06-18T10:00:00Z",
         "repository_url": "https://api.github.com/repos/ryan/bourdon"

package/fixtures/native_stores/hermes/store/.hermes/memories/memory.md

@@ -1,2 +1,2 @@
 - Project uses pytest with xdist
-- The bearer token is stored in .env
+- The bearer token is hunter2.hunter2

package/fixtures/redaction_battery.json

@@ -19,28 +19,42 @@
     },
     {
       "fragments": [
-        "uses a bearer token to authenticate"
+        "password: correcthorsebatterystaple"
       ],
       "expect_redacted": "[redacted credential-like text]",
       "expect_contains_secret": true
     },
     {
       "fragments": [
-        "the service_role key for supabase"
+        "client_secret=hunter2hunter2"
       ],
       "expect_redacted": "[redacted credential-like text]",
       "expect_contains_secret": true
     },
     {
       "fragments": [
-        "stripe secret rotated today"
+        "\"password\": \"hunter2hunter2\""
       ],
       "expect_redacted": "[redacted credential-like text]",
       "expect_contains_secret": true
     },
     {
       "fragments": [
-        "the keystore password lives in .env"
+        "--password=hunter2hunter2"
+      ],
+      "expect_redacted": "[redacted credential-like text]",
+      "expect_contains_secret": true
+    },
+    {
+      "fragments": [
+        "PASSWORD=supersecretvalue"
+      ],
+      "expect_redacted": "[redacted credential-like text]",
+      "expect_contains_secret": true
+    },
+    {
+      "fragments": [
+        "SUPABASE_SERVICE_KEY=hunter2hunter2"
       ],
       "expect_redacted": "[redacted credential-like text]",
       "expect_contains_secret": true
@@ -195,6 +209,61 @@
       "text": "Bourdon recognition-first runtime layer is the core promise",
       "expect_redacted": "Bourdon recognition-first runtime layer is the core promise",
       "expect_contains_secret": false
+    },
+    {
+      "text": "uses a bearer token to authenticate",
+      "expect_redacted": "uses a bearer token to authenticate",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "the service_role key for supabase",
+      "expect_redacted": "the service_role key for supabase",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "stripe secret rotated today",
+      "expect_redacted": "stripe secret rotated today",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "the keystore password lives in .env",
+      "expect_redacted": "the keystore password lives in .env",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "Add password reset to the console",
+      "expect_redacted": "Add password reset to the console",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "Fixed the password reset email template",
+      "expect_redacted": "Fixed the password reset email template",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "Updated .env with the new port",
+      "expect_redacted": "Updated .env with the new port",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "Rotated the keystore for the Android release",
+      "expect_redacted": "Rotated the keystore for the Android release",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "Reviewed the service_role RLS policy",
+      "expect_redacted": "Reviewed the service_role RLS policy",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "Shipped api_key rotation tooling",
+      "expect_redacted": "Shipped api_key rotation tooling",
+      "expect_contains_secret": false
+    },
+    {
+      "text": "the password is rotated monthly",
+      "expect_redacted": "the password is rotated monthly",
+      "expect_contains_secret": false
     }
   ],
   "case_variants": [

package/fixtures/tier_matrix.json

@@ -164,6 +164,39 @@
       "decision": "allow",
       "denial": null
     },
+    {
+      "tool": "trace_entity",
+      "tier": "trusted",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "entity": "Bourdon"
+      },
+      "decision": "allow",
+      "denial": null
+    },
+    {
+      "tool": "compile_turn",
+      "tier": "trusted",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "prompt": "what about Bourdon"
+      },
+      "decision": "allow",
+      "denial": null
+    },
+    {
+      "tool": "ingest_meeting",
+      "tier": "trusted",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "content": "# Weekly Sync\nDate: 2026-06-09\nAttendees: ada, grace\n\n## Decisions\n- Adopt the meetings participant\n"
+      },
+      "decision": "allow",
+      "denial": null
+    },
     {
       "tool": "query_agent_memory",
       "tier": "quarantined",
@@ -393,6 +426,57 @@
         "tier": "quarantined",
         "detail": "tier 'quarantined' may not call this tool"
       }
+    },
+    {
+      "tool": "trace_entity",
+      "tier": "quarantined",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "entity": "Bourdon"
+      },
+      "decision": "deny",
+      "denial": {
+        "error": "access denied",
+        "op": "trace_entity",
+        "agent": "openclaw",
+        "tier": "quarantined",
+        "detail": "tier 'quarantined' may not call this tool"
+      }
+    },
+    {
+      "tool": "compile_turn",
+      "tier": "quarantined",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "prompt": "what about Bourdon"
+      },
+      "decision": "deny",
+      "denial": {
+        "error": "access denied",
+        "op": "compile_turn",
+        "agent": "openclaw",
+        "tier": "quarantined",
+        "detail": "tier 'quarantined' may not call this tool"
+      }
+    },
+    {
+      "tool": "ingest_meeting",
+      "tier": "quarantined",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "content": "# Weekly Sync\nDate: 2026-06-09\nAttendees: ada, grace\n\n## Decisions\n- Adopt the meetings participant\n"
+      },
+      "decision": "deny",
+      "denial": {
+        "error": "access denied",
+        "op": "ingest_meeting",
+        "agent": "openclaw",
+        "tier": "quarantined",
+        "detail": "tier 'quarantined' may not call this tool"
+      }
     }
   ]
 }

package/fixtures/turn_compiler_vectors.json

@@ -67,6 +67,24 @@
           "visibility": "public"
         }
       ]
+    },
+    "fable.l5.yaml": {
+      "spec_version": "0.1",
+      "agent": {
+        "id": "fable",
+        "type": "code-assistant"
+      },
+      "last_updated": "2026-06-29T12:00:00+00:00",
+      "recent_sessions": [
+        {
+          "date": "2026-06-27",
+          "cwd": "/projects/atlas",
+          "key_actions": [
+            "- **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session"
+          ],
+          "visibility": "public"
+        }
+      ]
     }
   },
   "codex_cases": [
@@ -132,7 +150,7 @@
             ],
             "evidence": [
               "session date 2026-06-28",
-              "cwd /projects/bourdon",
+              "cwd bourdon",
               "files touched: core/codex_turn_compiler.py"
             ]
           },
@@ -179,7 +197,7 @@
                 ],
                 "evidence": [
                   "session date 2026-06-28",
-                  "cwd /projects/bourdon",
+                  "cwd bourdon",
                   "files touched: core/codex_turn_compiler.py"
                 ]
               },
@@ -281,6 +299,166 @@
         }
       }
     },
+    {
+      "name": "codex_long_action_title",
+      "prompt": "what happened with Atlas ingest",
+      "cwd": "/projects/atlas",
+      "access_level": "team",
+      "recognition_confidence": "low",
+      "item_scores": [
+        {
+          "rank": 1,
+          "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+          "kind": "session",
+          "source": "l6_federation",
+          "score": 67.0
+        }
+      ],
+      "brief": {
+        "schema_version": "codex-turn-brief/v1",
+        "prompt": "what happened with Atlas ingest",
+        "cwd": "/projects/atlas",
+        "repo": {
+          "name": "atlas",
+          "root": null,
+          "remote": null
+        },
+        "health": {
+          "native_stage1": "unknown",
+          "strategy": "turn_compiled"
+        },
+        "routing": {
+          "mode": "inject",
+          "primary_surface": "explicit_pre_turn",
+          "surfaces": [
+            "explicit_pre_turn",
+            "mcp",
+            "repo_overlay_candidate"
+          ],
+          "confidence": "low",
+          "reason": "top anchor scored 67.0; source mix spans 1 surface(s); repo identity available as atlas",
+          "suppressed_surfaces": [
+            "memory_md",
+            "fallback_file"
+          ],
+          "next_action": "prepend delivery.explicit_text before the Codex turn"
+        },
+        "items": [
+          {
+            "rank": 1,
+            "score": 67.0,
+            "kind": "session",
+            "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+            "summary": "- **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session",
+            "reason": "prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence",
+            "source": "l6_federation",
+            "source_agents": [
+              "fable"
+            ],
+            "evidence": [
+              "session date 2026-06-27",
+              "cwd atlas"
+            ]
+          }
+        ],
+        "delivery": {
+          "explicit_text": "Bourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence",
+          "mcp_payload": {
+            "schema_version": "codex-turn-brief/v1",
+            "strategy": "turn_compiled",
+            "native_stage1": "unknown",
+            "repo": {
+              "name": "atlas",
+              "root": null,
+              "remote": null
+            },
+            "items": [
+              {
+                "rank": 1,
+                "score": 67.0,
+                "kind": "session",
+                "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+                "summary": "- **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session",
+                "reason": "prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence",
+                "source": "l6_federation",
+                "source_agents": [
+                  "fable"
+                ],
+                "evidence": [
+                  "session date 2026-06-27",
+                  "cwd atlas"
+                ]
+              }
+            ],
+            "prompt_context": "Bourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence"
+          },
+          "memory_md_block": "<!-- BEGIN BOURDON TURN BRIEF -->\nBourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence\n<!-- END BOURDON TURN BRIEF -->",
+          "fallback_block": "<!-- BEGIN Bourdon Turn Brief -->\nBourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence\n<!-- END Bourdon Turn Brief -->",
+          "repo_overlay_block": "<!-- BEGIN BOURDON REPO OVERLAY CANDIDATE -->\nRepo overlay candidate for atlas\nUse only as an explicit, human-reviewed overlay candidate.\n\nBourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence\n<!-- END BOURDON REPO OVERLAY CANDIDATE -->"
+        },
+        "trace": {
+          "routing_decision": {
+            "primary_surface": "explicit_pre_turn",
+            "confidence": "low",
+            "reason": "top anchor scored 67.0; source mix spans 1 surface(s); repo identity available as atlas"
+          },
+          "surface_health": {
+            "native_stage1": "unknown",
+            "repo_identity": "available",
+            "candidate_count": 1
+          },
+          "source_mix": {
+            "candidates": {
+              "l6_federation": 1
+            },
+            "selected": {
+              "l6_federation": 1
+            },
+            "ignored": {}
+          },
+          "selected_items": [
+            {
+              "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+              "kind": "session",
+              "score": 67.0,
+              "dominant_components": [
+                "cwd_repo",
+                "prompt",
+                "recency"
+              ],
+              "reason": "prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence"
+            }
+          ]
+        },
+        "diagnostics": {
+          "scoring_components": {
+            "Atlas ingest review: walked the phase 1.7 ingest plan end to end…": {
+              "prompt": 24.0,
+              "cwd_repo": 25.0,
+              "recency": 12.0,
+              "cross_agent": 0.0,
+              "continuity": 6.0,
+              "penalty": 0.0
+            }
+          },
+          "candidate_count": 1,
+          "delivery": "all",
+          "max_items": 6,
+          "max_chars": 1800,
+          "stage1_jobs": {
+            "total": 0,
+            "by_status": {},
+            "error_classes": {}
+          },
+          "exhausted_paths": [
+            "native_stage1_primary",
+            "static_fallback_primary",
+            "l5_export_only",
+            "sync_native_only"
+          ]
+        }
+      }
+    },
     {
       "name": "codex_prompt_only",
       "prompt": "tell me about the Roadmap",

package/fixtures.pin.json

@@ -1,5 +1,5 @@
 {
   "_doc": "The recorded fixture pin. CI and the package tests assert the vendored fixtures/manifest.json hashes to exactly this value, so the fixture set in any build is provably the reviewed one. Refresh via the re-pin ritual in README.md.",
-  "conformance_version": "2.6.0",
-  "manifest_sha256": "0e5f12493974729e203cfeda4a04be39e55af2468510aaced80d3c40a38d3b06"
+  "conformance_version": "6.0.0",
+  "manifest_sha256": "73bd51d8a6d2a82b32b0b249a6e6c16c6491f9dc0148d020e9e020efb1eb49eb"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getbourdon/conformance",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Language-neutral cross-implementation parity fixtures for Bourdon. Python (pip install bourdon) is the oracle; the @getbourdon/* TypeScript mirror asserts against these exact bytes.",
   "license": "Apache-2.0",
   "type": "module",

package/fixtures/fed_seed_library/agents/lovable.l5.yaml

@@ -1,65 +0,0 @@
-spec_version: '0.1'
-agent:
-  id: lovable
-  type: code-assistant
-  instance: cloud
-  role_narrative: Cloud app-building agent. Ships full-stack web apps from chat.
-last_updated: '2026-08-26T12:00:00+00:00'
-capabilities:
-- app-building
-- full-stack-generation
-- deploy-preview
-known_entities:
-- name: Acme Site
-  type: project
-  aliases:
-  - acme.example
-  summary: Marketing site for Acme, an automation and AI systems studio.
-  tags:
-  - lovable
-  - client
-  visibility: team
-- name: Bourdon
-  type: project
-  summary: Recognition-first memory federation (granted side, Lovable view).
-  tags:
-  - infra
-  visibility: public
-- name: Client Billing Export
-  type: concept
-  summary: Unpublished billing integration details.
-  tags:
-  - client-confidential
-  visibility: private
-recent_sessions:
-- date: '2026-08-25'
-  project_focus:
-  - Acme Site
-  key_actions:
-  - rebuilt hero section
-  files_touched:
-  - src/routes/index.tsx
-  visibility: team
-- date: '2026-08-24'
-  project_focus:
-  - Bourdon
-  key_actions:
-  - drafted participant adapter
-  visibility: public
-- date: '2026-08-23'
-  project_focus:
-  - Client Billing Export
-  key_actions:
-  - private review
-  visibility: private
-visibility_policy:
-  default: team
-  private_tags:
-  - personal
-  - credential
-  - secret
-  - client-confidential
-  team_tags:
-  - lovable
-  - project
-  - client