@grc-claw/continuous-trust-engine 0.8.0

package/dist/index.d.ts

@@ -0,0 +1,145 @@
+/**
+ * ContinuousTrustEngine - Real-time trust scoring for compliance posture
+ *
+ * Continuously evaluates compliance posture, evidence quality, agent behavior,
+ * and organizational trust signals to produce a dynamic trust score.
+ *
+ * This engine goes beyond static compliance checks by incorporating:
+ * - Real-time evidence freshness scoring
+ * - Agent behavioral trust signals
+ * - Control effectiveness metrics
+ * - Risk-adjusted trust calculations
+ * - Trust decay over time
+ * - Trust threshold alerts
+ */
+export interface TrustSignal {
+    id: string;
+    type: 'evidence' | 'control' | 'agent' | 'risk' | 'behavior' | 'external';
+    name: string;
+    value: number;
+    weight: number;
+    timestamp: Date;
+    metadata: Record<string, unknown>;
+}
+export interface TrustScore {
+    overall: number;
+    breakdown: {
+        evidence: number;
+        control: number;
+        agent: number;
+        risk: number;
+        behavior: number;
+        external: number;
+    };
+    trend: 'improving' | 'stable' | 'declining';
+    trendDelta: number;
+    lastUpdated: Date;
+    nextUpdate: Date;
+    alerts: TrustAlert[];
+}
+export interface TrustAlert {
+    id: string;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    type: string;
+    message: string;
+    threshold: number;
+    currentValue: number;
+    timestamp: Date;
+    acknowledged: boolean;
+}
+export interface TrustThreshold {
+    metric: string;
+    critical: number;
+    high: number;
+    medium: number;
+    low: number;
+}
+export interface TrustHistoryEntry {
+    timestamp: Date;
+    score: TrustScore;
+    signals: TrustSignal[];
+}
+export declare class ContinuousTrustEngine {
+    private readonly options;
+    private signals;
+    private history;
+    private thresholds;
+    private alerts;
+    private updateInterval;
+    private listeners;
+    constructor(options?: {
+        updateIntervalMs?: number;
+        historyRetentionDays?: number;
+        maxAlerts?: number;
+        autoAcknowledgeAfterMs?: number;
+    });
+    /**
+     * Start continuous trust monitoring
+     */
+    start(): void;
+    /**
+     * Stop continuous trust monitoring
+     */
+    stop(): void;
+    /**
+     * Register a trust signal
+     */
+    registerSignal(signal: TrustSignal): void;
+    /**
+     * Update an existing trust signal
+     */
+    updateSignal(id: string, updates: Partial<TrustSignal>): void;
+    /**
+     * Remove a trust signal
+     */
+    removeSignal(id: string): void;
+    /**
+     * Get current trust score
+     */
+    getScore(): TrustScore;
+    /**
+     * Get trust history
+     */
+    getHistory(hours?: number): TrustHistoryEntry[];
+    /**
+     * Get active alerts
+     */
+    getAlerts(acknowledged?: boolean): TrustAlert[];
+    /**
+     * Acknowledge an alert
+     */
+    acknowledgeAlert(alertId: string): void;
+    /**
+     * Subscribe to trust score updates
+     */
+    subscribe(listener: (score: TrustScore) => void): () => void;
+    /**
+     * Set custom thresholds
+     */
+    setThresholds(thresholds: TrustThreshold[]): void;
+    /**
+     * Calculate trust score from all signals
+     */
+    private calculateScore;
+    /**
+     * Calculate score and notify listeners
+     */
+    private calculateAndNotify;
+    /**
+     * Evaluate thresholds and create alerts
+     */
+    private evaluateThresholds;
+    /**
+     * Get metric value from score
+     */
+    private getMetricValue;
+    /**
+     * Create a new alert
+     */
+    private createAlert;
+    /**
+     * Initialize default thresholds
+     */
+    private initializeDefaultThresholds;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,EAAE,IAAI,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,qBAAa,qBAAqB;IAS9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAR1B,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,SAAS,CAAuC;gBAGrC,OAAO,GAAE;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KAC5B;IAaR;;OAEG;IACH,KAAK,IAAI,IAAI;IAab;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAKzC;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAQ7D;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAI9B;;OAEG;IACH,QAAQ,IAAI,UAAU;IAItB;;OAEG;IACH,UAAU,CAAC,KAAK,GAAE,MAAW,GAAG,iBAAiB,EAAE;IAKnD;;OAEG;IACH,SAAS,CAAC,YAAY,GAAE,OAAe,GAAG,UAAU,EAAE;IAItD;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAOvC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAO5D;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI;IAIjD;;OAEG;IACH,OAAO,CAAC,cAAc;IAqEtB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAkC1B;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACH,OAAO,CAAC,WAAW;IAmBnB;;OAEG;IACH,OAAO,CAAC,2BAA2B;CASpC"}

package/dist/index.js

@@ -0,0 +1,291 @@
+"use strict";
+/**
+ * ContinuousTrustEngine - Real-time trust scoring for compliance posture
+ *
+ * Continuously evaluates compliance posture, evidence quality, agent behavior,
+ * and organizational trust signals to produce a dynamic trust score.
+ *
+ * This engine goes beyond static compliance checks by incorporating:
+ * - Real-time evidence freshness scoring
+ * - Agent behavioral trust signals
+ * - Control effectiveness metrics
+ * - Risk-adjusted trust calculations
+ * - Trust decay over time
+ * - Trust threshold alerts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContinuousTrustEngine = void 0;
+class ContinuousTrustEngine {
+    options;
+    signals = new Map();
+    history = [];
+    thresholds = [];
+    alerts = [];
+    updateInterval = null;
+    listeners = [];
+    constructor(options = {}) {
+        this.options = options;
+        this.options = {
+            updateIntervalMs: 60000, // 1 minute
+            historyRetentionDays: 90,
+            maxAlerts: 1000,
+            autoAcknowledgeAfterMs: 86400000, // 24 hours
+            ...options
+        };
+        this.initializeDefaultThresholds();
+    }
+    /**
+     * Start continuous trust monitoring
+     */
+    start() {
+        if (this.updateInterval) {
+            return; // Already running
+        }
+        this.updateInterval = setInterval(() => {
+            this.calculateAndNotify();
+        }, this.options.updateIntervalMs);
+        // Initial calculation
+        this.calculateAndNotify();
+    }
+    /**
+     * Stop continuous trust monitoring
+     */
+    stop() {
+        if (this.updateInterval) {
+            clearInterval(this.updateInterval);
+            this.updateInterval = null;
+        }
+    }
+    /**
+     * Register a trust signal
+     */
+    registerSignal(signal) {
+        this.signals.set(signal.id, signal);
+        this.evaluateThresholds();
+    }
+    /**
+     * Update an existing trust signal
+     */
+    updateSignal(id, updates) {
+        const existing = this.signals.get(id);
+        if (existing) {
+            this.signals.set(id, { ...existing, ...updates, timestamp: new Date() });
+            this.evaluateThresholds();
+        }
+    }
+    /**
+     * Remove a trust signal
+     */
+    removeSignal(id) {
+        this.signals.delete(id);
+    }
+    /**
+     * Get current trust score
+     */
+    getScore() {
+        return this.calculateScore();
+    }
+    /**
+     * Get trust history
+     */
+    getHistory(hours = 24) {
+        const cutoff = new Date(Date.now() - hours * 60 * 60 * 1000);
+        return this.history.filter(entry => entry.timestamp >= cutoff);
+    }
+    /**
+     * Get active alerts
+     */
+    getAlerts(acknowledged = false) {
+        return this.alerts.filter(alert => alert.acknowledged === acknowledged);
+    }
+    /**
+     * Acknowledge an alert
+     */
+    acknowledgeAlert(alertId) {
+        const alert = this.alerts.find(a => a.id === alertId);
+        if (alert) {
+            alert.acknowledged = true;
+        }
+    }
+    /**
+     * Subscribe to trust score updates
+     */
+    subscribe(listener) {
+        this.listeners.push(listener);
+        return () => {
+            this.listeners = this.listeners.filter(l => l !== listener);
+        };
+    }
+    /**
+     * Set custom thresholds
+     */
+    setThresholds(thresholds) {
+        this.thresholds = thresholds;
+    }
+    /**
+     * Calculate trust score from all signals
+     */
+    calculateScore() {
+        const signalArray = Array.from(this.signals.values());
+        // Group signals by type
+        const byType = {
+            evidence: signalArray.filter(s => s.type === 'evidence'),
+            control: signalArray.filter(s => s.type === 'control'),
+            agent: signalArray.filter(s => s.type === 'agent'),
+            risk: signalArray.filter(s => s.type === 'risk'),
+            behavior: signalArray.filter(s => s.type === 'behavior'),
+            external: signalArray.filter(s => s.type === 'external')
+        };
+        // Calculate weighted average for each type
+        const calculateTypeScore = (signals) => {
+            if (signals.length === 0)
+                return 100; // Default to 100 if no signals
+            const totalWeight = signals.reduce((sum, s) => sum + s.weight, 0);
+            if (totalWeight === 0)
+                return 100;
+            return signals.reduce((sum, s) => sum + (s.value * s.weight), 0) / totalWeight;
+        };
+        const breakdown = {
+            evidence: calculateTypeScore(byType.evidence),
+            control: calculateTypeScore(byType.control),
+            agent: calculateTypeScore(byType.agent),
+            risk: calculateTypeScore(byType.risk),
+            behavior: calculateTypeScore(byType.behavior),
+            external: calculateTypeScore(byType.external)
+        };
+        // Overall score with weights
+        const weights = { evidence: 0.25, control: 0.25, agent: 0.15, risk: 0.15, behavior: 0.1, external: 0.1 };
+        const overall = (breakdown.evidence * weights.evidence +
+            breakdown.control * weights.control +
+            breakdown.agent * weights.agent +
+            breakdown.risk * weights.risk +
+            breakdown.behavior * weights.behavior +
+            breakdown.external * weights.external);
+        // Calculate trend
+        const previousScore = this.history.length > 0
+            ? this.history[this.history.length - 1].score.overall
+            : overall;
+        const trendDelta = overall - previousScore;
+        const trend = trendDelta > 2 ? 'improving' : trendDelta < -2 ? 'declining' : 'stable';
+        // Filter active alerts
+        const activeAlerts = this.alerts.filter(a => !a.acknowledged);
+        return {
+            overall: Math.round(overall * 100) / 100,
+            breakdown: {
+                evidence: Math.round(breakdown.evidence * 100) / 100,
+                control: Math.round(breakdown.control * 100) / 100,
+                agent: Math.round(breakdown.agent * 100) / 100,
+                risk: Math.round(breakdown.risk * 100) / 100,
+                behavior: Math.round(breakdown.behavior * 100) / 100,
+                external: Math.round(breakdown.external * 100) / 100
+            },
+            trend,
+            trendDelta: Math.round(trendDelta * 100) / 100,
+            lastUpdated: new Date(),
+            nextUpdate: new Date(Date.now() + this.options.updateIntervalMs),
+            alerts: activeAlerts
+        };
+    }
+    /**
+     * Calculate score and notify listeners
+     */
+    calculateAndNotify() {
+        const score = this.calculateScore();
+        // Store in history
+        this.history.push({
+            timestamp: new Date(),
+            score,
+            signals: Array.from(this.signals.values())
+        });
+        // Trim history
+        const cutoff = new Date(Date.now() - this.options.historyRetentionDays * 24 * 60 * 60 * 1000);
+        this.history = this.history.filter(entry => entry.timestamp >= cutoff);
+        // Notify listeners
+        this.listeners.forEach(listener => listener(score));
+    }
+    /**
+     * Evaluate thresholds and create alerts
+     */
+    evaluateThresholds() {
+        const score = this.calculateScore();
+        for (const threshold of this.thresholds) {
+            const value = this.getMetricValue(score, threshold.metric);
+            if (value === null)
+                continue;
+            let severity = null;
+            if (value <= threshold.critical) {
+                severity = 'critical';
+            }
+            else if (value <= threshold.high) {
+                severity = 'high';
+            }
+            else if (value <= threshold.medium) {
+                severity = 'medium';
+            }
+            else if (value <= threshold.low) {
+                severity = 'low';
+            }
+            if (severity) {
+                this.createAlert({
+                    id: `threshold-${threshold.metric}-${Date.now()}`,
+                    severity,
+                    type: 'threshold',
+                    message: `${threshold.metric} score (${value}) below ${severity} threshold`,
+                    threshold: threshold[severity],
+                    currentValue: value,
+                    timestamp: new Date(),
+                    acknowledged: false
+                });
+            }
+        }
+    }
+    /**
+     * Get metric value from score
+     */
+    getMetricValue(score, metric) {
+        switch (metric) {
+            case 'overall': return score.overall;
+            case 'evidence': return score.breakdown.evidence;
+            case 'control': return score.breakdown.control;
+            case 'agent': return score.breakdown.agent;
+            case 'risk': return score.breakdown.risk;
+            case 'behavior': return score.breakdown.behavior;
+            case 'external': return score.breakdown.external;
+            default: return null;
+        }
+    }
+    /**
+     * Create a new alert
+     */
+    createAlert(alert) {
+        this.alerts.push(alert);
+        // Trim alerts
+        if (this.alerts.length > this.options.maxAlerts) {
+            this.alerts = this.alerts.slice(-this.options.maxAlerts);
+        }
+        // Auto-acknowledge old alerts
+        if (this.options.autoAcknowledgeAfterMs) {
+            const cutoff = new Date(Date.now() - this.options.autoAcknowledgeAfterMs);
+            this.alerts.forEach(a => {
+                if (a.timestamp < cutoff && !a.acknowledged) {
+                    a.acknowledged = true;
+                }
+            });
+        }
+    }
+    /**
+     * Initialize default thresholds
+     */
+    initializeDefaultThresholds() {
+        this.thresholds = [
+            { metric: 'overall', critical: 30, high: 50, medium: 70, low: 85 },
+            { metric: 'evidence', critical: 20, high: 40, medium: 60, low: 80 },
+            { metric: 'control', critical: 25, high: 45, medium: 65, low: 85 },
+            { metric: 'agent', critical: 30, high: 50, medium: 70, low: 85 },
+            { metric: 'risk', critical: 20, high: 40, medium: 60, low: 80 }
+        ];
+    }
+}
+exports.ContinuousTrustEngine = ContinuousTrustEngine;
+// trigger publish
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAsDH,MAAa,qBAAqB;IASb;IARX,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC9C,OAAO,GAAwB,EAAE,CAAC;IAClC,UAAU,GAAqB,EAAE,CAAC;IAClC,MAAM,GAAiB,EAAE,CAAC;IAC1B,cAAc,GAA0B,IAAI,CAAC;IAC7C,SAAS,GAAoC,EAAE,CAAC;IAExD,YACmB,UAKb,EAAE;QALW,YAAO,GAAP,OAAO,CAKlB;QAEN,IAAI,CAAC,OAAO,GAAG;YACb,gBAAgB,EAAE,KAAK,EAAE,WAAW;YACpC,oBAAoB,EAAE,EAAE;YACxB,SAAS,EAAE,IAAI;YACf,sBAAsB,EAAE,QAAQ,EAAE,WAAW;YAC7C,GAAG,OAAO;SACX,CAAC;QAEF,IAAI,CAAC,2BAA2B,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,kBAAkB;QAC5B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAElC,sBAAsB;QACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAmB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,EAAU,EAAE,OAA6B;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,EAAU;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB,EAAE;QAC3B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,eAAwB,KAAK;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,OAAe;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAqC;QAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC9D,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,UAA4B;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEtD,wBAAwB;QACxB,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;YACxD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;YACtD,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;YAClD,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;YAChD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;YACxD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SACzD,CAAC;QAEF,2CAA2C;QAC3C,MAAM,kBAAkB,GAAG,CAAC,OAAsB,EAAU,EAAE;YAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,CAAC,+BAA+B;YACrE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,WAAW,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC;YAClC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC;QACjF,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC7C,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC;YACvC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC;YACrC,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC7C,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC9C,CAAC;QAEF,6BAA6B;QAC7B,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACzG,MAAM,OAAO,GAAG,CACd,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;YACrC,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO;YACnC,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;YAC/B,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;YAC7B,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;YACrC,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CACtC,CAAC;QAEF,kBAAkB;QAClB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;YACrD,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,UAAU,GAAG,OAAO,GAAG,aAAa,CAAC;QAC3C,MAAM,KAAK,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEtF,uBAAuB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAE9D,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG;YACxC,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,GAAG;gBACpD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG;gBAClD,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG;gBAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG;gBAC5C,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,GAAG;gBACpD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,GAAG;aACrD;YACD,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;YAC9C,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAiB,CAAC;YACjE,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAEpC,mBAAmB;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC3C,CAAC,CAAC;QAEH,eAAe;QACf,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAEvE,mBAAmB;QACnB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAEpC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAE7B,IAAI,QAAQ,GAAkC,IAAI,CAAC;YAEnD,IAAI,KAAK,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBAChC,QAAQ,GAAG,UAAU,CAAC;YACxB,CAAC;iBAAM,IAAI,KAAK,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;gBACnC,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;iBAAM,IAAI,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;gBACrC,QAAQ,GAAG,QAAQ,CAAC;YACtB,CAAC;iBAAM,IAAI,KAAK,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClC,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,WAAW,CAAC;oBACf,EAAE,EAAE,aAAa,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;oBACjD,QAAQ;oBACR,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,WAAW,KAAK,WAAW,QAAQ,YAAY;oBAC3E,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;oBAC9B,YAAY,EAAE,KAAK;oBACnB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,YAAY,EAAE,KAAK;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAiB,EAAE,MAAc;QACtD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC;YACrC,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;YACjD,KAAK,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/C,KAAK,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YACzC,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;YACjD,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;YACjD,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAiB;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,cAAc;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAU,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC,CAAC;QAC5D,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBACtB,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;oBAC5C,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,2BAA2B;QACjC,IAAI,CAAC,UAAU,GAAG;YAChB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAClE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACnE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAClE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAChE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SAChE,CAAC;IACJ,CAAC;CACF;AApTD,sDAoTC;AACD,kBAAkB"}

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@grc-claw/continuous-trust-engine",
+  "version": "0.8.0",
+  "description": "Real-time trust scoring for compliance posture",
+  "license": "MIT",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test dist/**/*.test.js"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "typescript": "^5.7.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,377 @@
+/**
+ * ContinuousTrustEngine - Real-time trust scoring for compliance posture
+ * 
+ * Continuously evaluates compliance posture, evidence quality, agent behavior,
+ * and organizational trust signals to produce a dynamic trust score.
+ * 
+ * This engine goes beyond static compliance checks by incorporating:
+ * - Real-time evidence freshness scoring
+ * - Agent behavioral trust signals
+ * - Control effectiveness metrics
+ * - Risk-adjusted trust calculations
+ * - Trust decay over time
+ * - Trust threshold alerts
+ */
+
+export interface TrustSignal {
+  id: string;
+  type: 'evidence' | 'control' | 'agent' | 'risk' | 'behavior' | 'external';
+  name: string;
+  value: number; // 0-100
+  weight: number; // 0-1
+  timestamp: Date;
+  metadata: Record<string, unknown>;
+}
+
+export interface TrustScore {
+  overall: number; // 0-100
+  breakdown: {
+    evidence: number;
+    control: number;
+    agent: number;
+    risk: number;
+    behavior: number;
+    external: number;
+  };
+  trend: 'improving' | 'stable' | 'declining';
+  trendDelta: number; // change from previous period
+  lastUpdated: Date;
+  nextUpdate: Date;
+  alerts: TrustAlert[];
+}
+
+export interface TrustAlert {
+  id: string;
+  severity: 'critical' | 'high' | 'medium' | 'low';
+  type: string;
+  message: string;
+  threshold: number;
+  currentValue: number;
+  timestamp: Date;
+  acknowledged: boolean;
+}
+
+export interface TrustThreshold {
+  metric: string;
+  critical: number;
+  high: number;
+  medium: number;
+  low: number;
+}
+
+export interface TrustHistoryEntry {
+  timestamp: Date;
+  score: TrustScore;
+  signals: TrustSignal[];
+}
+
+export class ContinuousTrustEngine {
+  private signals: Map<string, TrustSignal> = new Map();
+  private history: TrustHistoryEntry[] = [];
+  private thresholds: TrustThreshold[] = [];
+  private alerts: TrustAlert[] = [];
+  private updateInterval: NodeJS.Timeout | null = null;
+  private listeners: ((score: TrustScore) => void)[] = [];
+
+  constructor(
+    private readonly options: {
+      updateIntervalMs?: number;
+      historyRetentionDays?: number;
+      maxAlerts?: number;
+      autoAcknowledgeAfterMs?: number;
+    } = {}
+  ) {
+    this.options = {
+      updateIntervalMs: 60000, // 1 minute
+      historyRetentionDays: 90,
+      maxAlerts: 1000,
+      autoAcknowledgeAfterMs: 86400000, // 24 hours
+      ...options
+    };
+
+    this.initializeDefaultThresholds();
+  }
+
+  /**
+   * Start continuous trust monitoring
+   */
+  start(): void {
+    if (this.updateInterval) {
+      return; // Already running
+    }
+
+    this.updateInterval = setInterval(() => {
+      this.calculateAndNotify();
+    }, this.options.updateIntervalMs);
+
+    // Initial calculation
+    this.calculateAndNotify();
+  }
+
+  /**
+   * Stop continuous trust monitoring
+   */
+  stop(): void {
+    if (this.updateInterval) {
+      clearInterval(this.updateInterval);
+      this.updateInterval = null;
+    }
+  }
+
+  /**
+   * Register a trust signal
+   */
+  registerSignal(signal: TrustSignal): void {
+    this.signals.set(signal.id, signal);
+    this.evaluateThresholds();
+  }
+
+  /**
+   * Update an existing trust signal
+   */
+  updateSignal(id: string, updates: Partial<TrustSignal>): void {
+    const existing = this.signals.get(id);
+    if (existing) {
+      this.signals.set(id, { ...existing, ...updates, timestamp: new Date() });
+      this.evaluateThresholds();
+    }
+  }
+
+  /**
+   * Remove a trust signal
+   */
+  removeSignal(id: string): void {
+    this.signals.delete(id);
+  }
+
+  /**
+   * Get current trust score
+   */
+  getScore(): TrustScore {
+    return this.calculateScore();
+  }
+
+  /**
+   * Get trust history
+   */
+  getHistory(hours: number = 24): TrustHistoryEntry[] {
+    const cutoff = new Date(Date.now() - hours * 60 * 60 * 1000);
+    return this.history.filter(entry => entry.timestamp >= cutoff);
+  }
+
+  /**
+   * Get active alerts
+   */
+  getAlerts(acknowledged: boolean = false): TrustAlert[] {
+    return this.alerts.filter(alert => alert.acknowledged === acknowledged);
+  }
+
+  /**
+   * Acknowledge an alert
+   */
+  acknowledgeAlert(alertId: string): void {
+    const alert = this.alerts.find(a => a.id === alertId);
+    if (alert) {
+      alert.acknowledged = true;
+    }
+  }
+
+  /**
+   * Subscribe to trust score updates
+   */
+  subscribe(listener: (score: TrustScore) => void): () => void {
+    this.listeners.push(listener);
+    return () => {
+      this.listeners = this.listeners.filter(l => l !== listener);
+    };
+  }
+
+  /**
+   * Set custom thresholds
+   */
+  setThresholds(thresholds: TrustThreshold[]): void {
+    this.thresholds = thresholds;
+  }
+
+  /**
+   * Calculate trust score from all signals
+   */
+  private calculateScore(): TrustScore {
+    const signalArray = Array.from(this.signals.values());
+
+    // Group signals by type
+    const byType = {
+      evidence: signalArray.filter(s => s.type === 'evidence'),
+      control: signalArray.filter(s => s.type === 'control'),
+      agent: signalArray.filter(s => s.type === 'agent'),
+      risk: signalArray.filter(s => s.type === 'risk'),
+      behavior: signalArray.filter(s => s.type === 'behavior'),
+      external: signalArray.filter(s => s.type === 'external')
+    };
+
+    // Calculate weighted average for each type
+    const calculateTypeScore = (signals: TrustSignal[]): number => {
+      if (signals.length === 0) return 100; // Default to 100 if no signals
+      const totalWeight = signals.reduce((sum, s) => sum + s.weight, 0);
+      if (totalWeight === 0) return 100;
+      return signals.reduce((sum, s) => sum + (s.value * s.weight), 0) / totalWeight;
+    };
+
+    const breakdown = {
+      evidence: calculateTypeScore(byType.evidence),
+      control: calculateTypeScore(byType.control),
+      agent: calculateTypeScore(byType.agent),
+      risk: calculateTypeScore(byType.risk),
+      behavior: calculateTypeScore(byType.behavior),
+      external: calculateTypeScore(byType.external)
+    };
+
+    // Overall score with weights
+    const weights = { evidence: 0.25, control: 0.25, agent: 0.15, risk: 0.15, behavior: 0.1, external: 0.1 };
+    const overall = (
+      breakdown.evidence * weights.evidence +
+      breakdown.control * weights.control +
+      breakdown.agent * weights.agent +
+      breakdown.risk * weights.risk +
+      breakdown.behavior * weights.behavior +
+      breakdown.external * weights.external
+    );
+
+    // Calculate trend
+    const previousScore = this.history.length > 0 
+      ? this.history[this.history.length - 1].score.overall 
+      : overall;
+    const trendDelta = overall - previousScore;
+    const trend = trendDelta > 2 ? 'improving' : trendDelta < -2 ? 'declining' : 'stable';
+
+    // Filter active alerts
+    const activeAlerts = this.alerts.filter(a => !a.acknowledged);
+
+    return {
+      overall: Math.round(overall * 100) / 100,
+      breakdown: {
+        evidence: Math.round(breakdown.evidence * 100) / 100,
+        control: Math.round(breakdown.control * 100) / 100,
+        agent: Math.round(breakdown.agent * 100) / 100,
+        risk: Math.round(breakdown.risk * 100) / 100,
+        behavior: Math.round(breakdown.behavior * 100) / 100,
+        external: Math.round(breakdown.external * 100) / 100
+      },
+      trend,
+      trendDelta: Math.round(trendDelta * 100) / 100,
+      lastUpdated: new Date(),
+      nextUpdate: new Date(Date.now() + this.options.updateIntervalMs!),
+      alerts: activeAlerts
+    };
+  }
+
+  /**
+   * Calculate score and notify listeners
+   */
+  private calculateAndNotify(): void {
+    const score = this.calculateScore();
+
+    // Store in history
+    this.history.push({
+      timestamp: new Date(),
+      score,
+      signals: Array.from(this.signals.values())
+    });
+
+    // Trim history
+    const cutoff = new Date(Date.now() - this.options.historyRetentionDays! * 24 * 60 * 60 * 1000);
+    this.history = this.history.filter(entry => entry.timestamp >= cutoff);
+
+    // Notify listeners
+    this.listeners.forEach(listener => listener(score));
+  }
+
+  /**
+   * Evaluate thresholds and create alerts
+   */
+  private evaluateThresholds(): void {
+    const score = this.calculateScore();
+
+    for (const threshold of this.thresholds) {
+      const value = this.getMetricValue(score, threshold.metric);
+      if (value === null) continue;
+
+      let severity: TrustAlert['severity'] | null = null;
+
+      if (value <= threshold.critical) {
+        severity = 'critical';
+      } else if (value <= threshold.high) {
+        severity = 'high';
+      } else if (value <= threshold.medium) {
+        severity = 'medium';
+      } else if (value <= threshold.low) {
+        severity = 'low';
+      }
+
+      if (severity) {
+        this.createAlert({
+          id: `threshold-${threshold.metric}-${Date.now()}`,
+          severity,
+          type: 'threshold',
+          message: `${threshold.metric} score (${value}) below ${severity} threshold`,
+          threshold: threshold[severity],
+          currentValue: value,
+          timestamp: new Date(),
+          acknowledged: false
+        });
+      }
+    }
+  }
+
+  /**
+   * Get metric value from score
+   */
+  private getMetricValue(score: TrustScore, metric: string): number | null {
+    switch (metric) {
+      case 'overall': return score.overall;
+      case 'evidence': return score.breakdown.evidence;
+      case 'control': return score.breakdown.control;
+      case 'agent': return score.breakdown.agent;
+      case 'risk': return score.breakdown.risk;
+      case 'behavior': return score.breakdown.behavior;
+      case 'external': return score.breakdown.external;
+      default: return null;
+    }
+  }
+
+  /**
+   * Create a new alert
+   */
+  private createAlert(alert: TrustAlert): void {
+    this.alerts.push(alert);
+
+    // Trim alerts
+    if (this.alerts.length > this.options.maxAlerts!) {
+      this.alerts = this.alerts.slice(-this.options.maxAlerts!);
+    }
+
+    // Auto-acknowledge old alerts
+    if (this.options.autoAcknowledgeAfterMs) {
+      const cutoff = new Date(Date.now() - this.options.autoAcknowledgeAfterMs);
+      this.alerts.forEach(a => {
+        if (a.timestamp < cutoff && !a.acknowledged) {
+          a.acknowledged = true;
+        }
+      });
+    }
+  }
+
+  /**
+   * Initialize default thresholds
+   */
+  private initializeDefaultThresholds(): void {
+    this.thresholds = [
+      { metric: 'overall', critical: 30, high: 50, medium: 70, low: 85 },
+      { metric: 'evidence', critical: 20, high: 40, medium: 60, low: 80 },
+      { metric: 'control', critical: 25, high: 45, medium: 65, low: 85 },
+      { metric: 'agent', critical: 30, high: 50, medium: 70, low: 85 },
+      { metric: 'risk', critical: 20, high: 40, medium: 60, low: 80 }
+    ];
+  }
+}
+// trigger publish

package/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist",
+    "composite": true
+  },
+  "include": ["src/**/*"]
+}