@getvda/compliance-guard 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,30 @@
+Verified Digital Agents (VDA) — Agent Control Plane
+Copyright 2026 getvda.ai
+
+This product is licensed under the Apache License, Version 2.0 (the "License");
+you may not use these files except in compliance with the License. A copy of the
+License is in the LICENSE file at the repository root and at:
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied.
+
+---
+
+What these packages do and do NOT carry
+----------------------------------------
+
+The @getvda/* packages VERIFY and ENFORCE governance. They do not carry the
+trust anchors that governance rests on:
+
+  - Bundle-signing keys (#key-3) live only in getvda's Secret Manager. These
+    packages VERIFY a bundle's signature against the public key resolved from
+    did:web:acp.getvda.ai; they cannot mint a bundle that verifies.
+  - Witness account credentials are the customer's own (customer-managed
+    custody). These packages SEAL to a Witness account the caller supplies;
+    they carry no standing credential.
+
+The code is open. The trust anchors are not in the code — and giving away the
+verifier does not give away the ability to forge what it verifies.

package/README.md

@@ -0,0 +1,69 @@
+# @getvda/compliance-guard
+
+> **Status: pre-1.0 (0.x).** Public API may change between minor versions —
+> pin an exact version if you need stability. Part of the [getvda.ai](https://getvda.ai)
+> governance suite. Honesty discipline: nothing documented here is live unless it
+> says so, boundaries (fail-static, condition-assertion) are stated where they apply,
+> and a stub is labelled a stub.
+
+> **What this carries — and what it does not.** This package *verifies and
+> enforces* governance. The trust anchors are not in it: bundle-signing keys
+> (`#key-3`) live only in getvda's Secret Manager, and Witness account
+> credentials are the caller's own (customer-managed custody). It verifies a
+> signature against the public key resolved from `did:web:acp.getvda.ai` and
+> seals to a Witness account you supply — it cannot mint a bundle that verifies,
+> and carries no standing credential. Open code, trust anchors elsewhere.
+
+The **Compliance Guard** + the **honest governance diff** (Phase 2b / 2c) — the
+layer that knows what governance files MEAN.
+
+Provider-free by design: it operates on before/after **governance sets** (file
+contents only), so the CI gate needs nothing but the files — no git, no network.
+
+## Honest diff (2c)
+
+`computeGovernanceDiff(before, after)` reports what changed in **meaning**, not
+text, each item tagged with a direction and a human headline written for a
+non-engineer approver:
+
+```
+3 MUST clauses removed                        ▼ weakens
+ISO 42001 A.9.2 citation dropped              ▼ weakens
+Capability "issue_refund" broadened — 1 condition removed   ▼ weakens
+1 MUST clause added (NIST 800-53 AU-3)        ▲ strengthens
+```
+
+`renderDiffForHuman` / `renderSummaryLine` turn it into the plain-language block
+the Phase-4 approval surface shows.
+
+## Compliance Guard (2b)
+
+`runComplianceGuard(before, after, { signOffs, policy })` is **the** single
+implementation. It blocks a change that WEAKENS governance unless a **named
+sign-off** covers the weakening:
+
+- a MUST / MUST NOT clause count dropped
+- a framework citation stripped or altered (NIST / ISO 42001 / EU AI Act / GDPR / APQC)
+- a policy-required reference removed
+- a conditioned capability broadened (new capability, or a condition removed) —
+  and reworded conditions are surfaced for review (can't prove they aren't a
+  broadening)
+
+### One rule-set, two entry points (no drift)
+
+```ts
+inlineGuard(before, after, opts); // author time — fast feedback
+ciGuard(before, after, opts); // the authoritative CI gate — report + exit code
+```
+
+Both delegate to `runComplianceGuard`; their `result` is **byte-identical** for
+identical input (asserted by test). A single definition, provably one
+implementation — the same discipline Witness used.
+
+### The sign-off seam (stub in Phase 2)
+
+`verifySignOffs` is a **stub**: it matches sign-offs to findings by id but does
+NOT authenticate the approver, check authority, or seal anything. Phase 4 swaps
+it for the real HITL gate (federated identity + Onboarding/CODEOWNERS authority +
+`hitl_decision` sealed to Witness) — drop-in, because the Guard only asks "is
+finding F covered?".

package/dist/diff.d.ts

@@ -0,0 +1,16 @@
+/**
+ * computeGovernanceDiff — the honest, structural governance diff (2c).
+ *
+ * Compares two governance sets and reports what changed in MEANING, not text:
+ * MUST/MUST NOT counts, framework citations, and conditioned capabilities. Each
+ * change item carries a human headline and a direction (weakens / strengthens /
+ * neutral). Neutral and factual — no policy verdict here (that is the Guard).
+ *
+ * This is the shape a non-engineer approver reads in Phase 4, so the headlines
+ * are written for a human ("3 MUST clauses removed", "ISO 42001 A.9.2 citation
+ * dropped"), not for a machine.
+ */
+import { type GovernanceSet } from '@getvda/governance-schema';
+import type { GovernanceDiff } from './types.js';
+export declare function computeGovernanceDiff(before: GovernanceSet, after: GovernanceSet): GovernanceDiff;
+//# sourceMappingURL=diff.d.ts.map

package/dist/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../src/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAIL,KAAK,aAAa,EAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAIV,cAAc,EAEf,MAAM,YAAY,CAAC;AAqKpB,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,GAAG,cAAc,CAUjG"}

package/dist/diff.js

@@ -0,0 +1,154 @@
+/**
+ * computeGovernanceDiff — the honest, structural governance diff (2c).
+ *
+ * Compares two governance sets and reports what changed in MEANING, not text:
+ * MUST/MUST NOT counts, framework citations, and conditioned capabilities. Each
+ * change item carries a human headline and a direction (weakens / strengthens /
+ * neutral). Neutral and factual — no policy verdict here (that is the Guard).
+ *
+ * This is the shape a non-engineer approver reads in Phase 4, so the headlines
+ * are written for a human ("3 MUST clauses removed", "ISO 42001 A.9.2 citation
+ * dropped"), not for a machine.
+ */
+import { GOVERNANCE_FILE_NAMES, presentFiles, } from '@getvda/governance-schema';
+function plural(n, singular) {
+    return `${n} ${singular}${n === 1 ? '' : 's'}`;
+}
+function setDiff(before, after) {
+    const b = new Set(before);
+    const a = new Set(after);
+    return {
+        removed: before.filter((x) => !a.has(x)),
+        added: after.filter((x) => !b.has(x)),
+    };
+}
+/** Pretty a citation ref "iso:A.9.2" as "ISO 42001 A.9.2" for headlines. */
+const FRAMEWORK_LABEL = {
+    nist: 'NIST 800-53',
+    iso: 'ISO 42001',
+    euAiAct: 'EU AI Act',
+    gdpr: 'GDPR',
+    apqc: 'APQC PCF',
+};
+function labelRef(ref) {
+    const [fw, ...rest] = ref.split(':');
+    const clause = rest.join(':');
+    return `${FRAMEWORK_LABEL[fw ?? ''] ?? fw}${clause ? ` ${clause}` : ''}`;
+}
+function compareFile(file, before, after) {
+    const items = [];
+    const add = (code, impact, headline, detail) => {
+        items.push(detail === undefined
+            ? { code, impact, file, headline }
+            : { code, impact, file, headline, detail });
+    };
+    if (before && !after) {
+        add('file_removed', 'weakens', `${file} removed from the governance set`);
+        return { file, status: 'removed', items };
+    }
+    if (!before && after) {
+        add('file_added', 'neutral', `${file} added to the governance set`);
+        return { file, status: 'added', items };
+    }
+    if (!before || !after) {
+        return { file, status: 'unchanged', items };
+    }
+    const bf = before.fingerprint;
+    const af = after.fingerprint;
+    // MUST / MUST NOT counts.
+    if (af.mustCount < bf.mustCount) {
+        add('must_removed', 'weakens', `${plural(bf.mustCount - af.mustCount, 'MUST clause')} removed`);
+    }
+    else if (af.mustCount > bf.mustCount) {
+        add('must_added', 'strengthens', `${plural(af.mustCount - bf.mustCount, 'MUST clause')} added`);
+    }
+    if (af.mustNotCount < bf.mustNotCount) {
+        add('must_not_removed', 'weakens', `${plural(bf.mustNotCount - af.mustNotCount, 'MUST NOT clause')} removed`);
+    }
+    else if (af.mustNotCount > bf.mustNotCount) {
+        add('must_not_added', 'strengthens', `${plural(af.mustNotCount - bf.mustNotCount, 'MUST NOT clause')} added`);
+    }
+    // Citations.
+    const cit = setDiff(bf.citationRefs, af.citationRefs);
+    for (const ref of cit.removed) {
+        add('citation_dropped', 'weakens', `${labelRef(ref)} citation dropped`, ref);
+    }
+    for (const ref of cit.added) {
+        add('citation_added', 'strengthens', `${labelRef(ref)} citation added`, ref);
+    }
+    // Conditioned capabilities (SKILL.md).
+    compareCapabilities(before, after, add);
+    // Prose-only change (wording changed, no structural metric moved).
+    if (items.length === 0 && before.source !== after.source) {
+        add('prose_changed', 'neutral', 'Wording changed with no change to clauses, citations, or capabilities');
+    }
+    const status = items.length === 0 ? 'unchanged' : 'modified';
+    return { file, status, items };
+}
+function compareCapabilities(before, after, add) {
+    const beforeCaps = new Map(before.parsed.capabilities.map((c) => [c.capability, c.conditions]));
+    const afterCaps = new Map(after.parsed.capabilities.map((c) => [c.capability, c.conditions]));
+    for (const [name, afterConds] of afterCaps) {
+        if (!beforeCaps.has(name)) {
+            add('capability_added', 'weakens', `New capability granted: "${name}"`, `conditions: ${afterConds.join('; ') || '(none)'}`);
+        }
+    }
+    for (const [name, beforeConds] of beforeCaps) {
+        const afterConds = afterCaps.get(name);
+        if (afterConds === undefined) {
+            add('capability_removed', 'strengthens', `Capability withdrawn: "${name}"`);
+            continue;
+        }
+        const { removed, added } = setDiff(beforeConds, afterConds);
+        if (removed.length > 0 && added.length === 0) {
+            add('capability_condition_removed', 'weakens', `Capability "${name}" broadened — ${plural(removed.length, 'condition')} removed`, removed.join('; '));
+        }
+        else if (added.length > 0 && removed.length === 0) {
+            add('capability_condition_added', 'strengthens', `Capability "${name}" narrowed — ${plural(added.length, 'condition')} added`, added.join('; '));
+        }
+        else if (removed.length > 0 && added.length > 0) {
+            // Can't verify a reword didn't hide a broadening — surface as altered, let
+            // the Guard require a human look.
+            add('capability_condition_altered', 'neutral', `Capability "${name}" conditions reworded`, `removed: ${removed.join('; ')} | added: ${added.join('; ')}`);
+        }
+    }
+}
+export function computeGovernanceDiff(before, after) {
+    const fileDiffs = [];
+    for (const name of GOVERNANCE_FILE_NAMES) {
+        const fd = compareFile(name, before.files[name], after.files[name]);
+        if (fd.items.length > 0)
+            fileDiffs.push(fd);
+    }
+    const items = fileDiffs.flatMap((f) => f.items);
+    const summary = summarize(items, before, after);
+    return { files: fileDiffs, items, summary, clean: items.length === 0 };
+}
+function summarize(items, before, after) {
+    const refs = (code) => items.filter((i) => i.code === code && i.detail).map((i) => i.detail);
+    const beforeFiles = new Set(presentFiles(before));
+    const afterFiles = new Set(presentFiles(after));
+    return {
+        mustRemoved: sumDeltas(items, 'must_removed'),
+        mustNotRemoved: sumDeltas(items, 'must_not_removed'),
+        mustAdded: sumDeltas(items, 'must_added'),
+        mustNotAdded: sumDeltas(items, 'must_not_added'),
+        citationsDropped: refs('citation_dropped'),
+        citationsAdded: refs('citation_added'),
+        capabilitiesBroadened: items
+            .filter((i) => i.code === 'capability_added' || i.code === 'capability_condition_removed')
+            .map((i) => i.headline),
+        filesAdded: [...afterFiles].filter((f) => !beforeFiles.has(f)),
+        filesRemoved: [...beforeFiles].filter((f) => !afterFiles.has(f)),
+    };
+}
+/** MUST/MUST NOT headlines encode "N MUST clauses removed"; recover N. */
+function sumDeltas(items, code) {
+    return items
+        .filter((i) => i.code === code)
+        .reduce((n, i) => {
+        const m = /^(\d+)\s/.exec(i.headline);
+        return n + (m ? Number.parseInt(m[1], 10) : 0);
+    }, 0);
+}
+//# sourceMappingURL=diff.js.map

package/dist/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../src/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,qBAAqB,EACrB,YAAY,GAIb,MAAM,2BAA2B,CAAC;AASnC,SAAS,MAAM,CAAC,CAAS,EAAE,QAAgB;IACzC,OAAO,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,OAAO,CAAI,MAAoB,EAAE,KAAmB;IAC3D,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,eAAe,GAA2B;IAC9C,IAAI,EAAE,aAAa;IACnB,GAAG,EAAE,WAAW;IAChB,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,UAAU;CACjB,CAAC;AACF,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAClB,IAAwB,EACxB,MAAsC,EACtC,KAAqC;IAErC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,CACV,IAAkC,EAClC,MAAoB,EACpB,QAAgB,EAChB,MAAe,EACT,EAAE;QACR,KAAK,CAAC,IAAI,CACR,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAC7C,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,IAAI,kCAAkC,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACrB,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,8BAA8B,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;IAE7B,0BAA0B;IAC1B,IAAI,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAChC,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAClG,CAAC;SAAM,IAAI,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,EAAE,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC;QACtC,GAAG,CACD,kBAAkB,EAClB,SAAS,EACT,GAAG,MAAM,CAAC,EAAE,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC,UAAU,CAC1E,CAAC;IACJ,CAAC;SAAM,IAAI,EAAE,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC;QAC7C,GAAG,CACD,gBAAgB,EAChB,aAAa,EACb,GAAG,MAAM,CAAC,EAAE,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC,QAAQ,CACxE,CAAC;IACJ,CAAC;IAED,aAAa;IACb,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC5B,GAAG,CAAC,gBAAgB,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,uCAAuC;IACvC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAExC,mEAAmE;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzD,GAAG,CACD,eAAe,EACf,SAAS,EACT,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA0B,EAC1B,KAAyB,EACzB,GAKS;IAET,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAE9F,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,GAAG,CACD,kBAAkB,EAClB,SAAS,EACT,4BAA4B,IAAI,GAAG,EACnC,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,UAAU,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,oBAAoB,EAAE,aAAa,EAAE,0BAA0B,IAAI,GAAG,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,GAAG,CACD,8BAA8B,EAC9B,SAAS,EACT,eAAe,IAAI,iBAAiB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,EACjF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACnB,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,GAAG,CACD,4BAA4B,EAC5B,aAAa,EACb,eAAe,IAAI,gBAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,EAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,2EAA2E;YAC3E,kCAAkC;YAClC,GAAG,CACD,8BAA8B,EAC9B,SAAS,EACT,eAAe,IAAI,uBAAuB,EAC1C,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAqB,EAAE,KAAoB;IAC/E,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAChB,KAAsC,EACtC,MAAqB,EACrB,KAAoB;IAEpB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAY,EAAE,CACtC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAgB,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC;QAC7C,cAAc,EAAE,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC;QACpD,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC;QACzC,YAAY,EAAE,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAChD,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;QAC1C,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC;QACtC,qBAAqB,EAAE,KAAK;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B,CAAC;aACzF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,KAAsC,EAAE,IAAY;IACrE,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACf,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,EAAE,CAAC,CAAC,CAAC;AACV,CAAC"}

package/dist/entrypoints.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The two entry points onto the ONE Compliance Guard implementation.
+ *
+ *   inlineGuard — author-time, fast feedback. Returns the verdict + terse
+ *                 messages for an editor/CLI to show as you type.
+ *   ciGuard     — the authoritative gate. Returns the verdict + a full human
+ *                 report + a process exit code for a CI step.
+ *
+ * BOTH delegate to `runComplianceGuard`. They differ only in PRESENTATION — the
+ * `result` field is byte-identical for identical inputs (asserted by test). This
+ * is the no-drift guarantee: a single rule definition, provably one
+ * implementation, two doorways.
+ */
+import type { GovernanceSet } from '@getvda/governance-schema';
+import { type RunGuardOptions } from './guard.js';
+import type { GuardResult } from './types.js';
+export interface InlineGuardOutput {
+    readonly result: GuardResult;
+    readonly ok: boolean;
+    /** Terse, ordered messages for inline display. */
+    readonly messages: readonly string[];
+}
+export declare function inlineGuard(before: GovernanceSet, after: GovernanceSet, options?: RunGuardOptions): InlineGuardOutput;
+export interface CiGuardOutput {
+    readonly result: GuardResult;
+    /** 0 = pass, 1 = blocked. For `process.exit` in a CI step. */
+    readonly exitCode: number;
+    /** Full human report for the CI log / PR comment. */
+    readonly report: string;
+}
+export declare function ciGuard(before: GovernanceSet, after: GovernanceSet, options?: RunGuardOptions): CiGuardOutput;
+//# sourceMappingURL=entrypoints.d.ts.map

package/dist/entrypoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,eAAoB,GAC5B,iBAAiB,CAMnB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,OAAO,CACrB,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,eAAoB,GAC5B,aAAa,CAOf"}

package/dist/entrypoints.js

@@ -0,0 +1,31 @@
+/**
+ * The two entry points onto the ONE Compliance Guard implementation.
+ *
+ *   inlineGuard — author-time, fast feedback. Returns the verdict + terse
+ *                 messages for an editor/CLI to show as you type.
+ *   ciGuard     — the authoritative gate. Returns the verdict + a full human
+ *                 report + a process exit code for a CI step.
+ *
+ * BOTH delegate to `runComplianceGuard`. They differ only in PRESENTATION — the
+ * `result` field is byte-identical for identical inputs (asserted by test). This
+ * is the no-drift guarantee: a single rule definition, provably one
+ * implementation, two doorways.
+ */
+import { runComplianceGuard } from './guard.js';
+import { renderGuardResult, renderSummaryLine } from './render.js';
+export function inlineGuard(before, after, options = {}) {
+    const result = runComplianceGuard(before, after, options);
+    const messages = result.passed
+        ? [`Compliance Guard OK — ${renderSummaryLine(result.diff)}`]
+        : result.unsignedBlocking.map((f) => `BLOCK: ${f.headline} (needs sign-off)`);
+    return { result, ok: result.passed, messages };
+}
+export function ciGuard(before, after, options = {}) {
+    const result = runComplianceGuard(before, after, options);
+    return {
+        result,
+        exitCode: result.passed ? 0 : 1,
+        report: renderGuardResult(result),
+    };
+}
+//# sourceMappingURL=entrypoints.js.map

package/dist/entrypoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,kBAAkB,EAAwB,MAAM,YAAY,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASnE,MAAM,UAAU,WAAW,CACzB,MAAqB,EACrB,KAAoB,EACpB,UAA2B,EAAE;IAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM;QAC5B,CAAC,CAAC,CAAC,yBAAyB,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,mBAAmB,CAAC,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC;AAUD,MAAM,UAAU,OAAO,CACrB,MAAqB,EACrB,KAAoB,EACpB,UAA2B,EAAE;IAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/guard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * runComplianceGuard — THE Compliance Guard implementation (2b).
+ *
+ * ONE rule-set, ONE implementation. Both entry points (inline authoring-time and
+ * CI authoritative gate) call THIS function — see entrypoints.ts. Nothing
+ * re-implements the rules; drift is impossible by construction, and a test
+ * asserts the two entry points return identical verdicts (the same no-drift
+ * discipline Witness used: a single definition, provably one implementation).
+ *
+ * The Guard blocks a change when it WEAKENS governance and the weakening is not
+ * covered by a named sign-off:
+ *   - a MUST / MUST NOT clause count dropped
+ *   - a framework citation was stripped or altered
+ *   - a policy-required reference was removed
+ *   - a conditioned capability was broadened (new capability, or a condition
+ *     removed), or its conditions were reworded (can't verify → needs a look)
+ */
+import type { GovernanceSet } from '@getvda/governance-schema';
+import type { GovernanceDiff, GuardFinding, GuardPolicy, GuardResult } from './types.js';
+import { type SignOff } from './signoff.js';
+export interface RunGuardOptions {
+    readonly signOffs?: readonly SignOff[];
+    readonly policy?: GuardPolicy;
+}
+export declare function deriveFindings(diff: GovernanceDiff, policy?: GuardPolicy): GuardFinding[];
+/** The single Compliance Guard evaluation. */
+export declare function runComplianceGuard(before: GovernanceSet, after: GovernanceSet, options?: RunGuardOptions): GuardResult;
+//# sourceMappingURL=guard.d.ts.map

package/dist/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,KAAK,EAGV,cAAc,EACd,YAAY,EACZ,WAAW,EACX,WAAW,EAEZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAoED,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,YAAY,EAAE,CAOzF;AAED,8CAA8C;AAC9C,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,eAAoB,GAC5B,WAAW,CAoBb"}

package/dist/guard.js

@@ -0,0 +1,94 @@
+/**
+ * runComplianceGuard — THE Compliance Guard implementation (2b).
+ *
+ * ONE rule-set, ONE implementation. Both entry points (inline authoring-time and
+ * CI authoritative gate) call THIS function — see entrypoints.ts. Nothing
+ * re-implements the rules; drift is impossible by construction, and a test
+ * asserts the two entry points return identical verdicts (the same no-drift
+ * discipline Witness used: a single definition, provably one implementation).
+ *
+ * The Guard blocks a change when it WEAKENS governance and the weakening is not
+ * covered by a named sign-off:
+ *   - a MUST / MUST NOT clause count dropped
+ *   - a framework citation was stripped or altered
+ *   - a policy-required reference was removed
+ *   - a conditioned capability was broadened (new capability, or a condition
+ *     removed), or its conditions were reworded (can't verify → needs a look)
+ */
+import { computeGovernanceDiff } from './diff.js';
+import { verifySignOffs } from './signoff.js';
+function slug(s) {
+    return s
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 48);
+}
+function findingId(file, code, key) {
+    return `${file}:${code}:${slug(key)}`;
+}
+/** Map a weakening (or ambiguous) diff item to a guard finding, or null. */
+function toFinding(item, policy) {
+    const guardNewCaps = policy?.guardNewCapabilities ?? true;
+    const required = new Set(policy?.requiredReferences ?? []);
+    const make = (code, severity, headline) => ({
+        code,
+        severity,
+        file: item.file,
+        headline: headline ?? item.headline,
+        ...(item.detail !== undefined ? { detail: item.detail } : {}),
+        requiresSignOff: true,
+        id: findingId(item.file, code, item.detail ?? item.headline),
+    });
+    switch (item.code) {
+        case 'must_removed':
+        case 'must_not_removed':
+        case 'file_removed':
+            return make(item.code, 'block');
+        case 'citation_dropped': {
+            // A dropped citation that is on the required list is the stronger finding.
+            if (item.detail && required.has(item.detail)) {
+                return {
+                    ...make('required_reference_removed', 'block', `Required reference removed: ${item.headline}`),
+                };
+            }
+            return make('citation_dropped', 'block');
+        }
+        case 'capability_added':
+            return guardNewCaps ? make('capability_added', 'block') : null;
+        case 'capability_condition_removed':
+            return make('capability_condition_removed', 'block');
+        case 'capability_condition_altered':
+            // Ambiguous — can't prove it isn't a broadening. Needs a human look.
+            return make('capability_condition_altered', 'review');
+        default:
+            // strengthens / neutral (must_added, citation_added, file_added, prose…)
+            return null;
+    }
+}
+export function deriveFindings(diff, policy) {
+    const findings = [];
+    for (const item of diff.items) {
+        const f = toFinding(item, policy);
+        if (f)
+            findings.push(f);
+    }
+    return findings;
+}
+/** The single Compliance Guard evaluation. */
+export function runComplianceGuard(before, after, options = {}) {
+    const diff = computeGovernanceDiff(before, after);
+    const findings = deriveFindings(diff, options.policy);
+    const coverage = verifySignOffs(findings, options.signOffs ?? []);
+    const requiresSignOff = findings.filter((f) => f.requiresSignOff);
+    const unsignedBlocking = requiresSignOff.filter((f) => !coverage.find((c) => c.finding.id === f.id)?.covered);
+    const acknowledged = requiresSignOff.filter((f) => coverage.find((c) => c.finding.id === f.id)?.covered);
+    return {
+        passed: unsignedBlocking.length === 0,
+        findings,
+        unsignedBlocking,
+        acknowledged,
+        diff,
+    };
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAUlD,OAAO,EAAE,cAAc,EAAgB,MAAM,cAAc,CAAC;AAO5D,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC;SACL,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAgB,EAAE,GAAW;IAC5D,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAChB,IAA0B,EAC1B,MAA+B;IAE/B,MAAM,YAAY,GAAG,MAAM,EAAE,oBAAoB,IAAI,IAAI,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,CAAC,IAAgB,EAAE,QAAuB,EAAE,QAAiB,EAAgB,EAAE,CAAC,CAAC;QAC5F,IAAI;QACJ,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;QACnC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,eAAe,EAAE,IAAI;QACrB,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC;KAC7D,CAAC,CAAC;IAEH,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,kBAAkB,CAAC;QACxB,KAAK,cAAc;YACjB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAElC,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,2EAA2E;YAC3E,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACL,GAAG,IAAI,CACL,4BAA4B,EAC5B,OAAO,EACP,+BAA+B,IAAI,CAAC,QAAQ,EAAE,CAC/C;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,kBAAkB;YACrB,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEjE,KAAK,8BAA8B;YACjC,OAAO,IAAI,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC;QAEvD,KAAK,8BAA8B;YACjC,qEAAqE;YACrE,OAAO,IAAI,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;QAExD;YACE,yEAAyE;YACzE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAoB,EAAE,MAAoB;IACvE,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,kBAAkB,CAChC,MAAqB,EACrB,KAAoB,EACpB,UAA2B,EAAE;IAE7B,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAElE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAC7D,CAAC;IACF,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAC5D,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,gBAAgB,CAAC,MAAM,KAAK,CAAC;QACrC,QAAQ;QACR,gBAAgB;QAChB,YAAY;QACZ,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @getvda/compliance-guard — the Compliance Guard + honest governance diff.
+ *
+ * Provider-free rule engine over governance change (before → after governance
+ * sets). Runs the SAME rule-set inline (author time) and in CI (the gate). No
+ * git dependency — the CI step needs only the file contents.
+ */
+export type { ChangeImpact, ChangeCode, GovernanceChangeItem, FileDiff, GovernanceDiff, GovernanceDiffSummary, GuardSeverity, GuardFinding, GuardPolicy, GuardResult, } from './types.js';
+export { computeGovernanceDiff } from './diff.js';
+export { runComplianceGuard, deriveFindings, type RunGuardOptions } from './guard.js';
+export { inlineGuard, ciGuard, type InlineGuardOutput, type CiGuardOutput } from './entrypoints.js';
+export { verifySignOffs, SIGNOFF_MODE, type SignOff, type SignOffCoverage } from './signoff.js';
+export { renderDiffForHuman, renderGuardResult, renderSummaryLine } from './render.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACV,YAAY,EACZ,UAAU,EACV,oBAAoB,EACpB,QAAQ,EACR,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/**
+ * @getvda/compliance-guard — the Compliance Guard + honest governance diff.
+ *
+ * Provider-free rule engine over governance change (before → after governance
+ * sets). Runs the SAME rule-set inline (author time) and in CI (the gate). No
+ * git dependency — the CI step needs only the file contents.
+ */
+export { computeGovernanceDiff } from './diff.js';
+export { runComplianceGuard, deriveFindings } from './guard.js';
+export { inlineGuard, ciGuard } from './entrypoints.js';
+export { verifySignOffs, SIGNOFF_MODE } from './signoff.js';
+export { renderDiffForHuman, renderGuardResult, renderSummaryLine } from './render.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAwB,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,OAAO,EAA8C,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAsC,MAAM,cAAc,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Human rendering of the diff + guard verdict.
+ *
+ * This is the raw material the Phase-4 non-engineer approval surface presents: a
+ * governance change described in plain terms, not a code diff. Kept as pure
+ * string builders so the same content can back a CLI report, a CI comment, or a
+ * UI later.
+ */
+import type { GovernanceDiff, GuardResult } from './types.js';
+/** A plain-language rendering of what changed in meaning. */
+export declare function renderDiffForHuman(diff: GovernanceDiff): string;
+/** One-line headline summary, e.g. for a PR title or notification. */
+export declare function renderSummaryLine(diff: GovernanceDiff): string;
+/** The Guard verdict as a human report. */
+export declare function renderGuardResult(result: GuardResult): string;
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9D,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAe/D;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAa9D;AAED,2CAA2C;AAC3C,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqB7D"}

package/dist/render.js

@@ -0,0 +1,76 @@
+/**
+ * Human rendering of the diff + guard verdict.
+ *
+ * This is the raw material the Phase-4 non-engineer approval surface presents: a
+ * governance change described in plain terms, not a code diff. Kept as pure
+ * string builders so the same content can back a CLI report, a CI comment, or a
+ * UI later.
+ */
+const IMPACT_MARK = {
+    weakens: '▼ weakens',
+    strengthens: '▲ strengthens',
+    neutral: '• neutral',
+};
+/** A plain-language rendering of what changed in meaning. */
+export function renderDiffForHuman(diff) {
+    if (diff.clean)
+        return 'No governance meaning changed.';
+    const lines = [];
+    lines.push(renderSummaryLine(diff));
+    lines.push('');
+    for (const file of diff.files) {
+        lines.push(`${file.file} (${file.status}):`);
+        for (const item of file.items) {
+            const mark = IMPACT_MARK[item.impact] ?? item.impact;
+            lines.push(`  ${mark}  ${item.headline}`);
+            if (item.detail)
+                lines.push(`             ${item.detail}`);
+        }
+    }
+    return lines.join('\n');
+}
+/** One-line headline summary, e.g. for a PR title or notification. */
+export function renderSummaryLine(diff) {
+    const s = diff.summary;
+    const parts = [];
+    if (s.mustRemoved)
+        parts.push(`${s.mustRemoved} MUST removed`);
+    if (s.mustNotRemoved)
+        parts.push(`${s.mustNotRemoved} MUST NOT removed`);
+    if (s.citationsDropped.length)
+        parts.push(`${s.citationsDropped.length} citation(s) dropped`);
+    if (s.capabilitiesBroadened.length)
+        parts.push(`${s.capabilitiesBroadened.length} capability broadening(s)`);
+    if (s.mustAdded)
+        parts.push(`${s.mustAdded} MUST added`);
+    if (s.citationsAdded.length)
+        parts.push(`${s.citationsAdded.length} citation(s) added`);
+    if (s.filesRemoved.length)
+        parts.push(`${s.filesRemoved.length} file(s) removed`);
+    if (s.filesAdded.length)
+        parts.push(`${s.filesAdded.length} file(s) added`);
+    return parts.length ? parts.join(', ') : 'wording only';
+}
+/** The Guard verdict as a human report. */
+export function renderGuardResult(result) {
+    const lines = [];
+    lines.push(result.passed ? '✓ Compliance Guard: PASS' : '✗ Compliance Guard: BLOCKED');
+    lines.push('');
+    lines.push(renderDiffForHuman(result.diff));
+    if (result.unsignedBlocking.length) {
+        lines.push('');
+        lines.push('Blocked — the following weakenings require a named sign-off:');
+        for (const f of result.unsignedBlocking) {
+            lines.push(`  ✗ [${f.severity}] ${f.headline}  (sign-off id: ${f.id})`);
+        }
+    }
+    if (result.acknowledged.length) {
+        lines.push('');
+        lines.push('Acknowledged by sign-off:');
+        for (const f of result.acknowledged) {
+            lines.push(`  ✓ ${f.headline}`);
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,GAA2B;IAC1C,OAAO,EAAE,WAAW;IACpB,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE,WAAW;CACrB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,gCAAgC,CAAC;IAExD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACvB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,MAAM,sBAAsB,CAAC,CAAC;IAC9F,IAAI,CAAC,CAAC,qBAAqB,CAAC,MAAM;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,MAAM,2BAA2B,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,oBAAoB,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;AAC1D,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/signoff.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The sign-off seam.
+ *
+ * The Guard blocks a weakening unless a NAMED sign-off covers it. Phase 2 ships
+ * the SEAM + a stub: a sign-off is just an assertion that a named party
+ * acknowledged specific findings. It is NOT verified here — Phase 4 replaces
+ * `verifySignOffs` with the real HITL gate that authenticates the approver
+ * (federated identity), checks their authority (Onboarding/CODEOWNERS), and
+ * seals a hitl_decision to Witness.
+ *
+ * The seam is designed so that swap is drop-in: the Guard only asks "is finding
+ * F covered by a valid sign-off?" — how validity is established is behind this
+ * module.
+ */
+import type { GuardFinding } from './types.js';
+export interface SignOff {
+    /** The approver's identity (name / id). In Phase 4 this is authenticated. */
+    readonly approver: string;
+    /**
+     * Which findings this sign-off covers. `'*'` covers all blocking findings
+     * (a blanket sign-off); otherwise a list of finding ids (see GuardFinding.id).
+     */
+    readonly covers: readonly string[] | '*';
+    readonly note?: string;
+    /** When it was given (ISO-8601). Informational in Phase 2. */
+    readonly at?: string;
+}
+export interface SignOffCoverage {
+    readonly finding: GuardFinding;
+    readonly covered: boolean;
+    readonly by?: string;
+}
+/**
+ * STUB verifier (Phase 2). Treats every provided sign-off as valid and matches
+ * it to findings by id (or '*'). No authentication, no authority check, no
+ * sealing — those are Phase 4. Documented as a stub so nothing mistakes this for
+ * a real gate.
+ */
+export declare function verifySignOffs(findings: readonly GuardFinding[], signOffs: readonly SignOff[]): SignOffCoverage[];
+/** Marker so callers/logs can assert the Guard is running against the stub. */
+export declare const SIGNOFF_MODE: "stub";
+//# sourceMappingURL=signoff.d.ts.map

package/dist/signoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signoff.d.ts","sourceRoot":"","sources":["../src/signoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,OAAO;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,eAAe,EAAE,CAOnB;AAED,+EAA+E;AAC/E,eAAO,MAAM,YAAY,EAAG,MAAe,CAAC"}

package/dist/signoff.js

@@ -0,0 +1,29 @@
+/**
+ * The sign-off seam.
+ *
+ * The Guard blocks a weakening unless a NAMED sign-off covers it. Phase 2 ships
+ * the SEAM + a stub: a sign-off is just an assertion that a named party
+ * acknowledged specific findings. It is NOT verified here — Phase 4 replaces
+ * `verifySignOffs` with the real HITL gate that authenticates the approver
+ * (federated identity), checks their authority (Onboarding/CODEOWNERS), and
+ * seals a hitl_decision to Witness.
+ *
+ * The seam is designed so that swap is drop-in: the Guard only asks "is finding
+ * F covered by a valid sign-off?" — how validity is established is behind this
+ * module.
+ */
+/**
+ * STUB verifier (Phase 2). Treats every provided sign-off as valid and matches
+ * it to findings by id (or '*'). No authentication, no authority check, no
+ * sealing — those are Phase 4. Documented as a stub so nothing mistakes this for
+ * a real gate.
+ */
+export function verifySignOffs(findings, signOffs) {
+    return findings.map((finding) => {
+        const match = signOffs.find((s) => s.covers === '*' || (Array.isArray(s.covers) && s.covers.includes(finding.id)));
+        return match ? { finding, covered: true, by: match.approver } : { finding, covered: false };
+    });
+}
+/** Marker so callers/logs can assert the Guard is running against the stub. */
+export const SIGNOFF_MODE = 'stub';
+//# sourceMappingURL=signoff.js.map

package/dist/signoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signoff.js","sourceRoot":"","sources":["../src/signoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuBH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAiC,EACjC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACtF,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,MAAe,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Types for the honest diff (2c) and the Compliance Guard (2b).
+ *
+ * Separation of concerns:
+ *   - The DIFF is neutral and factual: what changed in MEANING, and in which
+ *     direction (weakens / strengthens / neutral). It carries no policy verdict.
+ *   - The GUARD is the policy layer: it takes the diff, decides which weakenings
+ *     require a named sign-off, checks sign-offs, and returns a pass/block
+ *     verdict. One diff, one guard reading of it.
+ */
+import type { GovernanceFileName } from '@getvda/governance-schema';
+/** Direction of a change relative to governance strength. */
+export type ChangeImpact = 'weakens' | 'strengthens' | 'neutral';
+/** Machine codes for the change kinds the diff distinguishes. */
+export type ChangeCode = 'file_added' | 'file_removed' | 'must_removed' | 'must_added' | 'must_not_removed' | 'must_not_added' | 'citation_dropped' | 'citation_added' | 'required_reference_removed' | 'capability_added' | 'capability_removed' | 'capability_condition_removed' | 'capability_condition_added' | 'capability_condition_altered' | 'prose_changed';
+export interface GovernanceChangeItem {
+    readonly code: ChangeCode;
+    readonly impact: ChangeImpact;
+    readonly file: GovernanceFileName;
+    /** Human one-liner, e.g. "3 MUST clauses removed". For the approver surface. */
+    readonly headline: string;
+    /** Optional supporting detail (which citation, which capability, etc.). */
+    readonly detail?: string;
+}
+export interface FileDiff {
+    readonly file: GovernanceFileName;
+    readonly status: 'added' | 'removed' | 'modified' | 'unchanged';
+    readonly items: readonly GovernanceChangeItem[];
+}
+export interface GovernanceDiffSummary {
+    readonly mustRemoved: number;
+    readonly mustNotRemoved: number;
+    readonly mustAdded: number;
+    readonly mustNotAdded: number;
+    readonly citationsDropped: readonly string[];
+    readonly citationsAdded: readonly string[];
+    readonly capabilitiesBroadened: readonly string[];
+    readonly filesAdded: readonly GovernanceFileName[];
+    readonly filesRemoved: readonly GovernanceFileName[];
+}
+export interface GovernanceDiff {
+    readonly files: readonly FileDiff[];
+    /** All change items flattened, in file order. */
+    readonly items: readonly GovernanceChangeItem[];
+    readonly summary: GovernanceDiffSummary;
+    /** True iff nothing of meaning changed. */
+    readonly clean: boolean;
+}
+export type GuardSeverity = 'block' | 'review';
+/** A guard finding — a weakening the Guard cares about. */
+export interface GuardFinding {
+    readonly code: ChangeCode;
+    readonly severity: GuardSeverity;
+    readonly file: GovernanceFileName;
+    readonly headline: string;
+    readonly detail?: string;
+    /** Whether a named sign-off is required to let this change through. */
+    readonly requiresSignOff: boolean;
+    /** Stable id a sign-off references to acknowledge THIS finding. */
+    readonly id: string;
+}
+/** Optional policy input — the declared invariants the Guard enforces. */
+export interface GuardPolicy {
+    /**
+     * References (citation refs like "iso:A.9.2", or free identifiers) that MUST
+     * remain present. Removing one is a hard finding. If omitted, the Guard falls
+     * back to protecting every baseline citation (any drop needs sign-off).
+     */
+    readonly requiredReferences?: readonly string[];
+    /**
+     * If true, adding a brand-new conditioned capability requires sign-off (a new
+     * permission broadens the agent's authority). Default true.
+     */
+    readonly guardNewCapabilities?: boolean;
+}
+export interface GuardResult {
+    /** true iff the change may proceed (no unsigned blocking findings). */
+    readonly passed: boolean;
+    readonly findings: readonly GuardFinding[];
+    /** Findings that block and are NOT covered by a sign-off. */
+    readonly unsignedBlocking: readonly GuardFinding[];
+    /** Findings that block but ARE covered by a sign-off (acknowledged). */
+    readonly acknowledged: readonly GuardFinding[];
+    /** The diff the verdict was computed from. */
+    readonly diff: GovernanceDiff;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMpE,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAEjE,iEAAiE;AACjE,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,cAAc,GACd,cAAc,GACd,YAAY,GACZ,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,4BAA4B,GAC5B,kBAAkB,GAClB,oBAAoB,GACpB,8BAA8B,GAC9B,4BAA4B,GAC5B,8BAA8B,GAC9B,eAAe,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAMD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,mEAAmE;IACnE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,6DAA6D;IAC7D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,YAAY,EAAE,CAAC;IACnD,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/C,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B"}

package/dist/types.js

@@ -0,0 +1,12 @@
+/**
+ * Types for the honest diff (2c) and the Compliance Guard (2b).
+ *
+ * Separation of concerns:
+ *   - The DIFF is neutral and factual: what changed in MEANING, and in which
+ *     direction (weakens / strengthens / neutral). It carries no policy verdict.
+ *   - The GUARD is the policy layer: it takes the diff, decides which weakenings
+ *     require a named sign-off, checks sign-offs, and returns a pass/block
+ *     verdict. One diff, one guard reading of it.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@getvda/compliance-guard",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "The Compliance Guard — provider-free rule engine over governance changes. Honest structural diff + weakening detection (MUST counts, citations, required refs, conditioned capabilities). One rule-set, two entry points (inline + CI).",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc --build",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@getvda/governance-schema": "^0.2.0"
+  },
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/getvda-ai/acp-agent.git",
+    "directory": "packages/compliance-guard"
+  },
+  "homepage": "https://getvda.ai"
+}