@kavishdua/proctor 0.0.0-stage → 1.0.0

package/dist/scripts/postinstall.js

@@ -0,0 +1,215 @@
+#!/usr/bin/env node
+
+// src/scripts/postinstall.ts
+import { spawnSync } from "child_process";
+import { existsSync } from "fs";
+import { dirname, join as join2, resolve } from "path";
+import { fileURLToPath } from "url";
+
+// src/adapters/detect.ts
+import { stat } from "fs/promises";
+import { join } from "path";
+
+// src/adapters/registry.ts
+function cursorMdcTransform(canonical) {
+  return `---
+description: proctor honest-completion ruleset, catches tests deleted, skipped, weakened, or gamed to fake a passing build
+globs: '**'
+alwaysApply: true
+---
+
+${canonical}`;
+}
+function skillFrontmatterTransform(canonical) {
+  return `---
+name: proctor
+description: Honest-completion ruleset for changes that touch tests or the code they cover. Use before deleting, skipping, renaming, or rewriting a test, before weakening an assertion, and before hardcoding or stubbing an implementation to make a test pass. Also covers what to do when a test looks genuinely wrong.
+---
+
+${canonical}`;
+}
+function copilotApplyToTransform(canonical) {
+  return `---
+applyTo: '**'
+---
+
+${canonical}`;
+}
+var AGENT_ADAPTERS = [
+  // Claude Code gets skill frontmatter via skillFrontmatterTransform so the ruleset carries an explicit
+  // description and loads when it is actually relevant.
+  { id: "claude-code", displayName: "Claude Code", relativePath: ".claude/skills/proctor/SKILL.md", scriptable: true, transform: skillFrontmatterTransform, detect: [".claude", "CLAUDE.md"] },
+  // Codex reads skills from `.agents/skills/` and REQUIRES `name` and `description` frontmatter;
+  // without it the skill is not recognized, so this path needs the same transform Claude Code uses.
+  { id: "codex", displayName: "Codex CLI", relativePath: ".agents/skills/proctor/SKILL.md", scriptable: true, transform: skillFrontmatterTransform, detect: [".codex", ".agents/skills"] },
+  // Cursor gets .mdc YAML frontmatter (description/globs/alwaysApply) via cursorMdcTransform
+  // so the rule reliably auto-attaches.
+  { id: "cursor", displayName: "Cursor", relativePath: ".cursor/rules/proctor.mdc", scriptable: true, transform: cursorMdcTransform, detect: [".cursor", ".cursorrules"] },
+  // Windsurf's rules.md is the workspace rules file users write their own rules into, not a
+  // proctor-owned path, so it merges rather than overwrites.
+  { id: "windsurf", displayName: "Windsurf", relativePath: ".windsurf/rules/rules.md", scriptable: false, shared: true, detect: [".windsurf", ".windsurfrules"] },
+  { id: "gemini-cli", displayName: "Gemini CLI", relativePath: "GEMINI.md", scriptable: true, shared: true, detect: [".gemini"] },
+  { id: "aider", displayName: "Aider", relativePath: "CONVENTIONS.md", scriptable: true, shared: true, detect: [".aider.conf.yml", ".aider.conf.yaml"] },
+  { id: "continue", displayName: "Continue.dev", relativePath: ".continue/rules/proctor.md", scriptable: true, detect: [".continue"] },
+  { id: "cline", displayName: "Cline", relativePath: ".clinerules/proctor.md", scriptable: true, detect: [".clinerules"] },
+  // Amazon Q Developer CLI is mid-transition to a closed-source "Kiro CLI", so treat this path
+  // as unstable: adapter only, no bench runner wired up.
+  { id: "amazon-q", displayName: "Amazon Q Developer", relativePath: ".amazonq/rules/proctor.md", scriptable: false, detect: [".amazonq"] },
+  // GitHub Copilot gets `applyTo: '**'` frontmatter via copilotApplyToTransform so the scoped
+  // instructions file actually activates.
+  // Detection deliberately does not treat a bare `.github/` as Copilot: nearly every repo has one.
+  { id: "github-copilot", displayName: "GitHub Copilot", relativePath: ".github/instructions/proctor.instructions.md", scriptable: false, transform: copilotApplyToTransform, detect: [".github/instructions", ".github/copilot-instructions.md"] },
+  { id: "zed", displayName: "Zed", relativePath: ".rules", scriptable: false, shared: true, detect: [".zed"] },
+  // Universal cross-vendor AGENTS.md standard (Linux Foundation-stewarded). Also covers Codex
+  // CLI's actual documented convention (developers.openai.com/codex/guides/agents-md) for free,
+  // the existing `codex` entry above deliberately keeps its original `.agents/skills/` path.
+  { id: "agents-md", displayName: "AGENTS.md (universal)", relativePath: "AGENTS.md", scriptable: false, shared: true },
+  // OpenHands' repo microagent is the one repo-wide instructions file, user-authored.
+  { id: "openhands", displayName: "OpenHands", relativePath: ".openhands/microagents/repo.md", scriptable: true, shared: true, detect: [".openhands"] },
+  // Kiro (AWS agentic IDE / Kiro CLI) intentionally coexists with the `amazon-q` entry above,
+  // they are two separately-installed products today. Revisit consolidation if the
+  // Amazon Q to Kiro merge ever completes.
+  { id: "kiro", displayName: "Kiro", relativePath: ".kiro/steering/proctor.md", scriptable: true, detect: [".kiro"] },
+  { id: "tabnine", displayName: "Tabnine", relativePath: ".tabnine/guidelines/proctor.md", scriptable: true, detect: [".tabnine"] },
+  { id: "trae", displayName: "Trae", relativePath: ".trae/rules/proctor.md", scriptable: false, detect: [".trae"] },
+  { id: "github-copilot-global", displayName: "GitHub Copilot (global)", relativePath: ".github/copilot-instructions.md", scriptable: false, shared: true, detect: [".github/instructions"] },
+  // Qodo's canonical path is a generic, un-namespaced repo-root filename that will often already
+  // hold unrelated user content, so it merges into a managed block instead of overwriting.
+  { id: "qodo", displayName: "Qodo", relativePath: "best_practices.md", scriptable: true, shared: true, detect: [".qodo"] },
+  // --- Agents added after the first roster, all with a stable file-based repo convention ---
+  // Roo Code reads every file under .roo/rules/ recursively, so a proctor-owned file drops in
+  // cleanly alongside whatever else the user keeps there.
+  { id: "roo-code", displayName: "Roo Code", relativePath: ".roo/rules/proctor.md", scriptable: false, detect: [".roo", ".roomodes"] },
+  // Kilo Code v7 moved config to kilo.jsonc but still auto-includes .kilocode/rules/ for
+  // backward compatibility, which is the only path proctor can write without editing user config.
+  { id: "kilo-code", displayName: "Kilo Code", relativePath: ".kilocode/rules/proctor.md", scriptable: true, detect: [".kilocode", "kilo.jsonc"] },
+  { id: "augment", displayName: "Augment Code", relativePath: ".augment/rules/proctor.md", scriptable: true, detect: [".augment"] },
+  // Google Antigravity defaults to .agents/rules/ (with .agent/rules/ still read as a fallback).
+  // Distinct subdirectory from the `codex` entry's .agents/skills/, so the two never collide.
+  { id: "antigravity", displayName: "Google Antigravity", relativePath: ".agents/rules/proctor.md", scriptable: false, detect: [".agents/rules", ".agent/rules"] },
+  // goose reads a single .goosehints file per directory, user-authored.
+  { id: "goose", displayName: "goose", relativePath: ".goosehints", scriptable: true, shared: true },
+  // Junie now prefers AGENTS.md (covered above) but still reads .junie/guidelines.md, which
+  // keeps older Junie installs covered.
+  { id: "junie", displayName: "JetBrains Junie", relativePath: ".junie/guidelines.md", scriptable: true, shared: true, detect: [".junie"] },
+  { id: "qwen-code", displayName: "Qwen Code", relativePath: "QWEN.md", scriptable: true, shared: true, detect: [".qwen"] },
+  // Crush reads CRUSH.md for Crush-specific rules in addition to AGENTS.md.
+  { id: "crush", displayName: "Crush", relativePath: "CRUSH.md", scriptable: true, shared: true, detect: [".crush"] },
+  // Warp defaults to AGENTS.md now, but WARP.md still takes priority when both exist, so the
+  // ruleset has to be in both for Warp users who already have a WARP.md.
+  { id: "warp", displayName: "Warp", relativePath: "WARP.md", scriptable: false, shared: true },
+  // Amp's own file is AGENT.md, singular, which is a different file from the universal AGENTS.md.
+  { id: "amp", displayName: "Amp", relativePath: "AGENT.md", scriptable: true, shared: true },
+  // Firebase Studio generates .idx/airules.md with its own default rules, so merge rather than
+  // replace them.
+  { id: "firebase-studio", displayName: "Firebase Studio", relativePath: ".idx/airules.md", scriptable: false, shared: true, detect: [".idx"] },
+  // Replit Agent reads AGENTS.md as well, but replit.md is its native file and is auto-generated.
+  { id: "replit", displayName: "Replit Agent", relativePath: "replit.md", scriptable: false, shared: true, detect: [".replit"] }
+];
+
+// src/adapters/detect.ts
+var FALLBACK_ADAPTER_ID = "agents-md";
+async function exists(cwd, relativePath) {
+  try {
+    await stat(join(cwd, relativePath));
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function detectAgents(cwd) {
+  const detected = await Promise.all(
+    AGENT_ADAPTERS.map(async (adapter) => {
+      for (const marker of [adapter.relativePath, ...adapter.detect ?? []]) {
+        if (await exists(cwd, marker)) return adapter;
+      }
+      return void 0;
+    })
+  );
+  const found = detected.filter((a) => a !== void 0);
+  if (found.length > 0) return found;
+  const fallback = AGENT_ADAPTERS.find((a) => a.id === FALLBACK_ADAPTER_ID);
+  return fallback ? [fallback] : [];
+}
+
+// src/scripts/postinstall.ts
+var projectDir = process.env.INIT_CWD;
+function packageRoot() {
+  let dir = fileURLToPath(new URL(".", import.meta.url));
+  for (let i = 0; i < 6; i++) {
+    if (existsSync(join2(dir, "package.json"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return dir;
+}
+function skipReason(root) {
+  if (process.env.PROCTOR_NO_POSTINSTALL) return "PROCTOR_NO_POSTINSTALL is set";
+  if (process.env.CI) return "running in CI, where the checkout is disposable";
+  if (process.env.npm_config_global === "true") return "this is a global install, with no project to set up";
+  if (!projectDir) return "INIT_CWD is not set, so the target project is unknown";
+  const target = resolve(projectDir);
+  if (target === resolve(root)) return "this is proctor\u2019s own repository";
+  if (target.split(/[\\/]/).includes("node_modules")) return "installed as a transitive dependency";
+  if (target.includes("_npx") || target.includes(".npm/_cacache")) return "running via npx, not installing into a project";
+  if (!existsSync(join2(target, ".git"))) return "no git repository here, so there is no commit to guard";
+  return void 0;
+}
+async function printNotice(target) {
+  let agentPaths = [];
+  try {
+    agentPaths = (await detectAgents(target)).map((a) => a.relativePath);
+  } catch {
+  }
+  const lines = [
+    "",
+    "proctor is installed. It has written nothing to your repository.",
+    "",
+    "  npx proctor setup",
+    "",
+    "That one command would write, and nothing else:",
+    agentPaths.length > 0 ? `  - the honest-completion ruleset to ${agentPaths.length} agent path${agentPaths.length === 1 ? "" : "s"}: ${agentPaths.join(", ")}` : "  - the honest-completion ruleset to the agent paths this repo already uses (AGENTS.md if none are detected)",
+    "  - a git pre-commit hook at .git/hooks/pre-commit (or the configured hook path / .husky/pre-commit); a foreign hook is backed up, then replaced",
+    "  - a Claude Code Stop hook in .claude/settings.json, only if this repo uses Claude Code",
+    "  - .proctor-adapter-manifest.json, recording the deployed ruleset paths",
+    "",
+    "No network call is made. Git may configure a hook path outside the working tree.",
+    "Run `npx proctor check` first if you want to see what it finds before wiring anything up.",
+    "Set PROCTOR_AUTO_SETUP=1 to have future installs run setup for you.",
+    ""
+  ];
+  process.stdout.write(lines.join("\n"));
+}
+async function main() {
+  const root = packageRoot();
+  const reason = skipReason(root);
+  if (reason) {
+    if (process.env.PROCTOR_DEBUG) {
+      process.stdout.write(`proctor: postinstall did nothing (${reason}).
+`);
+    }
+    return;
+  }
+  const target = projectDir;
+  if (!process.env.PROCTOR_AUTO_SETUP) {
+    await printNotice(target);
+    return;
+  }
+  const cli = join2(root, "dist", "cli.js");
+  if (!existsSync(cli)) {
+    process.stdout.write("proctor: build output not found, skipping automatic setup. Run `npx proctor setup`.\n");
+    return;
+  }
+  const result = spawnSync(process.execPath, [cli, "setup"], {
+    cwd: target,
+    stdio: "inherit"
+  });
+  if (result.status !== 0) {
+    process.stdout.write("proctor: automatic setup did not finish cleanly. Run `npx proctor setup` to see why.\n");
+  }
+}
+main().catch((err) => {
+  process.stdout.write(`proctor: postinstall notice could not be printed (${String(err)}). Run \`npx proctor setup\` to install the guards.
+`);
+});

package/package.json

@@ -1,6 +1,82 @@
 {
   "name": "@kavishdua/proctor",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Catch AI agents gaming their test suites: deleted tests, skipped tests, weakened assertions, hardcoded outputs",
+  "homepage": "https://github.com/catfish-1234/proctor#readme",
+  "bugs": {
+    "url": "https://github.com/catfish-1234/proctor/issues"
+  },
+  "type": "module",
+  "bin": {
+    "proctor": "./dist/cli.js"
+  },
+  "main": "./dist/cli.js",
+  "exports": {
+    ".": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "!dist/scripts",
+    "dist/scripts/postinstall.js",
+    "proctor.schema.json",
+    "src/skill/SKILL.md"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/catfish-1234/proctor.git"
+  },
+  "keywords": [
+    "proctor",
+    "ai",
+    "testing",
+    "test-tampering",
+    "reward-hacking",
+    "guardrails",
+    "code-review",
+    "git-hook",
+    "pre-commit",
+    "static-analysis",
+    "sarif",
+    "agent-skills",
+    "claude",
+    "claude-code",
+    "cursor",
+    "copilot"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "postinstall": "node -e \"const f='dist/scripts/postinstall.js';if(require('fs').existsSync(f))require('child_process').spawnSync(process.execPath,[f],{stdio:'inherit'})\"",
+    "pretest": "npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "drift-check": "node dist/cli.js drift-check",
+    "verify:pack": "node scripts/run-bash.mjs scripts/verify-pack.sh",
+    "sync-plugin": "node dist/scripts/sync-plugin.js",
+    "lint": "oxlint --deny correctness --allow no-unused-vars --allow no-useless-escape --allow prefer-string-starts-ends-with src tests scripts tsup.config.ts vitest.config.ts"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.132.0",
+    "brace-expansion": "^5.0.12",
+    "commander": "^14.0.3",
+    "parse-diff": "0.12.0",
+    "picocolors": "1.1.1",
+    "picomatch": "^4.0.7",
+    "tinyglobby": "^0.2.17"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.4",
+    "@types/picomatch": "^4.0.3",
+    "oxlint": "^1.88.0",
+    "tsup": "8.5.1",
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.11"
+  },
+  "overrides": {
+    "esbuild": "^0.28.1"
+  }
+}

package/proctor.schema.json

@@ -0,0 +1,57 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://github.com/catfish-1234/proctor/proctor.schema.json",
+  "title": "Proctor Config",
+  "description": "Configuration for proctor, AI agent test-tampering guard",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "type": "array",
+      "items": { "type": "string", "pattern": "^(?:RH|WI)\\d{3}$" },
+      "description": "Rule IDs to enable. Defaults to all rules.",
+      "default": ["RH001","RH002","RH003","RH004","RH005","RH006","RH007","RH008","RH009","RH010","RH011","RH012","RH013","WI101","WI102","WI103","WI104","WI105","WI106","WI107","WI108","WI109","WI110","WI111","WI112"]
+    },
+    "testPathGlobs": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "Glob patterns identifying test files.",
+      "default": ["**/*.test.{ts,tsx,mts,cts,js,jsx,mjs,cjs}","**/*.spec.{ts,tsx,mts,cts,js,jsx,mjs,cjs}","test/**/*","tests/**/*","__tests__/**/*","**/test_*.py","**/*_test.py"]
+    },
+    "severity": {
+      "type": "object",
+      "additionalProperties": { "type": "string", "enum": ["error","warn","info"] },
+      "description": "Per-rule severity overrides. Keys are rule IDs (e.g. 'RH006')."
+    },
+    "ignorePatterns": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "File glob patterns to ignore entirely.",
+      "default": []
+    },
+    "approvedTestChanges": {
+      "type": "array",
+      "description": "Genuine test changes you've approved. A match downgrades the finding to 'info' so it stops blocking, but the finding is still reported everywhere. Read from the committed config, so a change cannot approve itself.",
+      "items": {
+        "type": "object",
+        "properties": {
+          "rule": { "type": "string", "pattern": "^(?:RH|WI)\\d{3}$", "description": "Rule ID this approval covers." },
+          "file": { "type": "string", "description": "Exact path or glob the approval applies to." },
+          "reason": { "type": "string", "minLength": 1, "description": "Why this change is legitimate." }
+        },
+        "required": ["rule", "file", "reason"],
+        "additionalProperties": false
+      },
+      "default": []
+    },
+    "aiModel": {
+      "type": "string",
+      "description": "Model ID used by the optional --ai judge. Defaults to claude-haiku-4-5-20251001."
+    },
+    "snapshotGlobs": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "Glob patterns identifying snapshot/golden files for RH006. Overrides the built-in defaults."
+    }
+  },
+  "additionalProperties": false
+}

package/src/skill/SKILL.md

@@ -0,0 +1,148 @@
+# Proctor Skill: Honest Completion Ruleset
+
+This is the canonical L1 skill for any AI coding agent working in a repository
+that uses `proctor`. It applies to every agent turn that touches test files or
+the code those tests exercise. Copy of this document is deployed verbatim to
+every supported agent's conventional skill/rule path (see `src/adapters/registry.ts`).
+Do not hand-edit deployed copies. Edit this file and run `proctor install-skill`.
+
+## 1. The Core Rules
+
+These rules are non-negotiable. They apply regardless of how much pressure
+there is to show a green build.
+
+Rules 1 to 5 are about the test suite. Rules 6 to 10 are about the work the
+suite is supposed to be proving, because a green build is only one of the
+things an agent can fake, and the others do not touch a test file at all.
+
+1. **Never modify, skip, or delete a test to make it pass.** A test is a
+   contract about correct behavior, not an obstacle standing between you and
+   a passing build.
+2. **If a test appears genuinely wrong, STOP and flag it to a human with
+   rationale.** Do not silently "fix" a test you believe is incorrect. Explain
+   why you think it's wrong and let a human decide.
+3. **Never hardcode an implementation to match a test fixture literal.**
+   Special-casing a return value so it matches exactly what the test expects,
+   without implementing the real underlying logic, is not a fix.
+4. **Never gut real logic behind an always-true mock.** Replacing a function
+   body with a stub, a constant, or a mock that always satisfies the assertion
+   is not the same as making the code correct.
+5. **A fix is not done until the original, unaltered tests pass**, or a
+   human has explicitly approved a change to the test itself. Passing tests
+   you weakened, skipped, or replaced does not count as done.
+6. **Never discard an error to make a failure stop.** An empty catch, an
+   `except: pass`, a `rescue nil`, a discarded promise rejection: none of
+   these fix anything. They stop the failure being reported, which is worse
+   than the failure, because now nobody will find out. Handle the error or
+   let it propagate. If discarding it genuinely is correct, write the reason
+   in the handler.
+7. **Never delete validation to make a case pass.** A guard clause is a test
+   that runs in production. Deleting a `throw`, a `raise`, an `assert`, or a
+   precondition check because something tripped it is the same move as
+   deleting a failing test, minus the record that it happened.
+8. **Never present unfinished or faked work as finished.** That covers
+   shipping a `NotImplementedError`, a `todo!()`, or a "not implemented"
+   throw inside a change you describe as complete, and it covers returning
+   canned, mock, or placeholder data from code that is supposed to do real
+   work. If you could not build it, say so in plain words.
+9. **Never disable a security control or hide code from review.** Do not
+   turn off TLS certificate verification, drop an authorization gate, or
+   disable CSRF protection to make a request succeed. Do not add source or
+   test files to `.gitignore`, and do not use `git update-index
+   --assume-unchanged`: code git cannot see is code nobody can review.
+10. **Never turn off the checks instead of satisfying them.** Do not disable
+   a proctor check, lower its severity, add an ignore pattern, write your own
+   approval, delete a ruleset file, add `--no-verify`, switch off TypeScript
+   strictness, or widen a type to `any` to silence the checker. If a check is
+   genuinely wrong, that is Rule 2: stop and say so.
+
+Rule 5's approval is a specific, concrete thing, not a figure of speech. A human
+records it by running `proctor approve <RH-ID> <file> --reason "..."` and
+committing the result. You do not get to grant it to yourself: approvals are read
+from the committed config, so one you add in the same change you are making has no
+effect. If you think a test change is genuinely warranted, say so and ask, the way
+Rule 2 describes. Do not write the approval and carry on.
+
+## 2. The Guard That Enforces This
+
+These rules are not just values or prose to keep in mind. They are backed by
+a deterministic enforcement mechanism. `proctor`, a deterministic diff-level
+guard, runs on every commit and on every agent turn (via the Claude Code Stop
+hook and the git pre-commit hook) and will block on any error-severity
+violation of the rules above. If you delete, skip, or weaken a test, or
+hardcode/gut the implementation behind it, `proctor` inspects the diff, not
+your reasoning about the diff, and stops the commit or turn before it lands.
+There is no way to reason around it from inside the agent's own context,
+because it operates below that layer, directly on the diff.
+
+Concretely: `proctor check --uncommitted --ci` runs after every agent turn ends,
+reading staged and unstaged changes alike, so leaving an edit unstaged hides
+nothing. If it finds an error-severity finding, the turn is blocked and the
+finding is reported back to you to fix honestly. Treat a block from this guard as
+the guard doing its job, not as a bug to work around.
+
+## 3. Rule Reference
+
+Each row below is sourced verbatim from `RULE_METADATA` in `src/rules.ts`,
+the same registry the tool itself uses to report findings. If you see one of
+these rule IDs in a `proctor` finding, this table tells you what it caught.
+
+There are two families. `RH001`–`RH014` check the claim "the tests pass": they
+read the test suite and the code directly beneath it. `WI101`–`WI113` check the
+claim "the work is done": they read shipped code for the ways a change can fake
+completion without touching a test at all.
+
+### RH0xx, test tampering
+
+| RH-ID | Name | What It Catches |
+|-------|------|------------------|
+| RH001 | TestDeletedOrRenamed | Test file or test function deleted or renamed |
+| RH002 | AssertionWeakened | Assertion weakened or precision reduced |
+| RH003 | TestSkippedOrDisabled | Test disabled, skipped, or commented out |
+| RH004 | ImplementationHardcodesFixture | Implementation hardcodes test fixture value |
+| RH005 | FunctionBodyGutted | Function body replaced with a stub |
+| RH006 | SnapshotRewrittenWithoutReason | Snapshot/golden file rewritten without a stated reason |
+| RH007 | TestExcludedViaConfig | Test excluded from run path via config change |
+| RH008 | TautologicalAssertion | Assertion always passes regardless of behavior |
+| RH009 | CoverageGaming | Trivial test added while real assertions removed |
+| RH010 | FailureMasking | Async checks detached, timeout/retry abuse, or a mock manufacturing the expected answer |
+| RH011 | TypeLintSilencingSpam | Type/lint suppression comments added to pass (spam, or one file-wide directive) |
+| RH012 | CIPipelineTampering | Test step removed from CI, or neutered so a failing suite still passes |
+| RH013 | CoverageGateWeakened | Coverage threshold lowered or removed so less coverage now passes |
+| RH014 | TestWorkloadReduced | A surviving test is changed to exercise fewer generated or table-driven cases |
+
+### WI1xx, work integrity
+
+| WI-ID | Name | What It Catches |
+|-------|------|------------------|
+| WI101 | SilentErrorSwallowing | Error discarded by an empty handler, so failures pass unnoticed |
+| WI102 | UnimplementedWorkClaimed | Explicit not-implemented marker added to shipped code |
+| WI103 | ValidationRemoved | Guard clause or contract enforcement deleted from shipped code |
+| WI104 | GuardrailDisabled | Proctor, a commit hook, or a type/lint gate switched off instead of satisfied |
+| WI105 | FakeDataSubstituted | Real network, database, or filesystem work replaced with canned data |
+| WI106 | TypeSafetyEroded | Types widened to any or an unsafe cast to silence the type checker |
+| WI107 | SecurityControlDisabled | A security check switched off, or an authorization gate removed |
+| WI108 | SourceHiddenFromReview | Source or tests hidden from git, and therefore from every check |
+| WI109 | ExpectedValueChanged | A test's expected value edited to match the current behaviour |
+| WI110 | VerificationScriptNeutered | A test, lint, or build script rewritten so it can no longer fail |
+| WI111 | ImplementationOrTestsRemoved | The code under test deleted, or a test file emptied of its tests |
+| WI112 | CheckingQuietlyReduced | Assertions deleted from a surviving test, a golden file rewritten, or a module aliased to a stub |
+| WI113 | FailureAvoidanceWorkaround | Benchmark workload reduced, dependency downgraded, or fixed delay added instead of fixing a failure |
+
+Every WI check skips test files by design. An empty catch is how you assert that
+something throws, canned data is what a fixture is, and a loose cast is routine
+when building a partial mock. These checks watch the code your tests are supposed
+to be proving, not the tests themselves.
+
+RH004–RH011 are heuristic and higher-risk for false positives than RH001–003/007.
+Each is implemented conservatively: strong-signal-only, high precision over recall.
+RH004 and RH005 additionally accept `--ai` to catch fuzzier cases their deterministic
+core intentionally stays silent on. The WI checks are built the same way, and most of
+them offer the same escape hatch: a line whose comment explains why the thing it is
+doing is correct will not be flagged, because writing that sentence down is the
+outcome the check exists to produce. Run `proctor check --explain <ID>` if you're
+unsure why one fired.
+
+If you're unsure whether a change you're about to make would trip one of
+these, don't make the change and ask a human instead. That is always
+consistent with Rule 2 above.