@konneal/engine 0.2.48 → 0.2.50

package/dist/ask-FZA3ZFVB.js

@@ -0,0 +1,12 @@
+import {
+  handleAsk
+} from "./chunk-HT2MDJ5S.js";
+import "./chunk-VVLNUHW2.js";
+import "./chunk-JWTIPQ4L.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-O6VZIDPW.js";
+import "./chunk-Z24IAKB6.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleAsk
+};

package/dist/{chunk-47VBMM7I.js → chunk-DMIOBGQU.js}

@@ -7,24 +7,24 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-IUMHKBOY.js";
+} from "./chunk-VVLNUHW2.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-R2V3X6SQ.js";
+} from "./chunk-JWTIPQ4L.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "./chunk-4GJGBGJK.js";
+} from "./chunk-O6VZIDPW.js";
 import {
   LIMITS,
   MODELS,
   num,
   sha256Hex
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 
 // workers/worker_public/src/search.ts
 async function handleSearch(env, ctx, req, tier, key) {

package/dist/{chunk-SONICKNY.js → chunk-HT2MDJ5S.js}

@@ -35,14 +35,14 @@ import {
   syntheticUnderstanding,
   telemetry,
   understandQuery
-} from "./chunk-IUMHKBOY.js";
+} from "./chunk-VVLNUHW2.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-R2V3X6SQ.js";
+} from "./chunk-JWTIPQ4L.js";
 import {
   canonicalRefusal,
   refusalAnswer
@@ -52,17 +52,18 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "./chunk-4GJGBGJK.js";
+} from "./chunk-O6VZIDPW.js";
 import {
   LIMITS,
   MODELS,
+  THRESHOLDS,
   answerEffort,
   effortBudget,
   num,
   requestEffort,
   roleModel,
   sha256Hex
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";
@@ -216,6 +217,125 @@ ${ctx}`
   }
 }
 
+// workers/worker_public/prompts/faithfulness.md
+var faithfulness_default = `You are a factuality judge. Given an answer and the retrieved passages it was based on, identify any claims in the answer that are NOT directly supported by the passages. Reply with ONLY a JSON object: {"score": 0.0-1.0, "ungrounded_claims": ["claim text", ...]} \u2014 score is the fraction of claims that ARE grounded in the passages; if every claim is supported, score is 1.0 and ungrounded_claims is [].
+
+Passages prefixed [M] are this service's own machine-computed model data (typed blocks the answer was given) \u2014 a claim restating [M] content is grounded.
+`;
+
+// workers/worker_public/src/verdict-parse.ts
+function coerceVerdict(obj) {
+  if (obj === null || typeof obj !== "object" || Array.isArray(obj)) return null;
+  const raw = obj.score;
+  const score = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+  if (!Number.isFinite(score)) return null;
+  const claims = obj.ungrounded_claims;
+  return {
+    score: Math.max(0, Math.min(1, score)),
+    ungrounded_claims: Array.isArray(claims) ? claims.map(String).slice(0, 5) : []
+  };
+}
+function parseVerdict(text) {
+  const stripped = text.replace(/```[a-zA-Z]*\n?/g, "").replace(/```/g, "").trim();
+  try {
+    const whole = coerceVerdict(JSON.parse(stripped));
+    if (whole) return whole;
+  } catch {
+  }
+  let verdict = null;
+  let depth = 0;
+  let start = -1;
+  let inString = false;
+  let escaped = false;
+  for (let i = 0; i < stripped.length; i++) {
+    const ch = stripped[i];
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (inString && ch === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (ch === '"') {
+      inString = !inString;
+      continue;
+    }
+    if (inString) continue;
+    if (ch === "{") {
+      if (depth === 0) start = i;
+      depth++;
+    } else if (ch === "}" && depth > 0) {
+      depth--;
+      if (depth === 0 && start >= 0) {
+        try {
+          const v = coerceVerdict(JSON.parse(stripped.slice(start, i + 1)));
+          if (v) verdict = v;
+        } catch {
+        }
+      }
+    }
+  }
+  return verdict;
+}
+
+// workers/worker_public/src/faithfulness-context.ts
+function buildJudgeContext(passages, machine = []) {
+  const context = passages.slice(0, 8).map((p, i) => {
+    const text = typeof p === "string" ? p : p.text;
+    const limit = typeof p !== "string" && p.table ? 2400 : 1400;
+    return `[${i + 1}] ${text.replace(/\s+/g, " ").slice(0, limit)}`;
+  }).join("\n");
+  const machineContext = machine.length ? "\n" + machine.slice(0, 6).map((m) => `[M] ${m.replace(/\s+/g, " ").slice(0, 400)}`).join("\n") : "";
+  return context + machineContext;
+}
+
+// workers/worker_public/src/faithfulness.ts
+async function scoreFaithfulness(ai, model, answer, passages, machine = []) {
+  if (!answer || !passages.length) return null;
+  const context = buildJudgeContext(passages, machine);
+  const t0 = Date.now();
+  const timeout = new Promise((r) => setTimeout(() => {
+    console.log(`faithfulness: timeout (${Date.now() - t0}ms)`);
+    r(null);
+  }, 24e4));
+  const call = (async () => {
+    const res = await ai.run(model, {
+      messages: [
+        {
+          role: "system",
+          content: faithfulness_default.trimEnd()
+        },
+        { role: "user", content: `Answer:
+${answer.slice(0, 2e3)}
+
+Passages:
+${context}${machine.length ? buildJudgeContext([], machine) : ""}` }
+      ],
+      max_tokens: 6144,
+      reasoning_effort: "low",
+      // DeepSeek-V4 card: temp 1.0 / top_p 1.0
+      temperature: 1,
+      top_p: 1
+    });
+    const text = typeof res?.response === "string" ? res.response : res?.choices?.[0]?.message?.content;
+    const verdict = parseVerdict(text ?? "");
+    if (!verdict) {
+      console.log(`faithfulness: no parse (${Date.now() - t0}ms, text ${(text ?? "").length} chars) raw=${JSON.stringify((text ?? "").replace(/\s+/g, " ").slice(0, 500))}`);
+      return null;
+    }
+    return verdict;
+  })();
+  return await Promise.race([call, timeout]);
+}
+
+// workers/worker_public/src/entailment.ts
+function entailmentVerdict(score, supportedFloor, partialFloor) {
+  if (score >= supportedFloor) return { support: "supported", note: "" };
+  if (score >= partialFloor) return { support: "partial", note: "Partially grounded \u2014 some claims lack support in the cited passages; verify against the cited clauses." };
+  return { support: "unsupported", note: "WARNING: This answer's claims are largely unsupported by the retrieved passages. Verify against official publications." };
+}
+
 // workers/worker_public/src/anchors.ts
 var normalize = (s) => s.replace(/[‘’‛′]/g, "'").replace(/[“”‟″]/g, '"').replace(/[–—−]/g, "-").replace(/­/g, "").replace(/[     ]/g, " ").replace(/\s+/g, " ").toLowerCase();
 var ANCHOR = /\[[^\[\]\n]*\]/g;
@@ -2073,7 +2193,11 @@ async function handleAsk(env, ctx, req, tier, key) {
     telemetry(env, ctx, tier, "ask", null, true, (cached.value.answer ?? "").length, cached.value.query_hash, q.lang, "exact", telemetryMeta());
     const cctx = cached.value.context_applied ?? NO_CONTEXT;
     if (wantsStream) {
-      return sseResponse([{ type: "citations", citations: cached.value.citations ?? [], quota, context_applied: cctx }, { type: "token", v: cached.value.answer ?? "" }, { type: "done", model: cached.value.model ?? MODELS.member, query_hash: cached.value.query_hash, served_from: "cache", context_applied: cctx }], corsHeaders(req));
+      return sseResponse([
+        { type: "citations", citations: cached.value.citations ?? [], quota, context_applied: cctx, ...cached.value.source_quality ? { source_quality: cached.value.source_quality, confidence_note: cached.value.confidence_note ?? null, ...cached.value.experimental_sources ? { experimental_sources: cached.value.experimental_sources } : {}, ...cached.value.entailment ? { entailment: cached.value.entailment } : {} } : {} },
+        { type: "token", v: cached.value.answer ?? "" },
+        { type: "done", model: cached.value.model ?? MODELS.member, query_hash: cached.value.query_hash, served_from: "cache", context_applied: cctx }
+      ], corsHeaders(req));
     }
     return json({ ...cached.value, cached: true, quota, context_applied: cctx });
   }
@@ -2582,6 +2706,21 @@ Answer account questions from these records ONLY: name the record when you use i
           });
           telemetry(env, ctx, tier, "ask", model, true, c2.text.length, queryHash, q.lang, void 0, telemetryMeta());
           const canonical = c2.text;
+          let streamedEntailment = null;
+          let streamedNote = "";
+          if (THRESHOLDS.entailmentGate && sourceQuality && usedHits.length && !canonical.includes(refusalAnswer())) {
+            const raced = await Promise.race([
+              scoreFaithfulness(env.AI, roleModel(env, "grader"), canonical, usedHits.map((h) => h.text)),
+              new Promise((r) => setTimeout(() => r(null), THRESHOLDS.entailmentBudgetMs))
+            ]);
+            if (raced) {
+              const v = entailmentVerdict(raced.score, THRESHOLDS.entailmentSupportedFloor, THRESHOLDS.entailmentPartialFloor);
+              streamedEntailment = { support: v.support, score: Math.round(raced.score * 100) / 100, ...raced.ungrounded_claims?.length ? { ungrounded: raced.ungrounded_claims.slice(0, 3) } : {} };
+              streamedNote = v.note;
+              if (v.support !== "supported") console.log("entailment(stream):", v.support, raced.score);
+              send({ type: "confidence", source_quality: sourceQuality, confidence_note: streamedNote || qualityNote(sourceQuality), ...streamedEntailment ? { entailment: streamedEntailment } : {} });
+            }
+          }
           const streamedAnchors = checkQuoteAnchors(canonical, usedHits.map((h) => h.text));
           const streamedRetyped = tableRetyped(canonical, usedHits.some((h) => h.metadata.unit_id && h.metadata.block === "table"));
           const streamed = { total: streamedAnchors.total, violations: streamedRetyped ? ["table-retyped"] : streamedAnchors.violations };
@@ -2590,7 +2729,7 @@ Answer account questions from these records ONLY: name the record when you use i
           }
           if (streamed.violations.length === 0 && canonical.length > 0 && !contextual && !declaredCtx && !canonical.includes(refusalAnswer())) {
             ctx.waitUntil(
-              env.CACHE.put(exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt))), JSON.stringify({ answer: canonical, citations: cites, model, query_hash: queryHash }), { expirationTtl: LIMITS.cacheTtlSec })
+              env.CACHE.put(exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt))), JSON.stringify({ answer: canonical, citations: cites, model, query_hash: queryHash, ...sourceQuality ? { source_quality: sourceQuality, confidence_note: streamedNote || qualityNote(sourceQuality) } : {}, ...streamedEntailment ? { entailment: streamedEntailment } : {} }), { expirationTtl: LIMITS.cacheTtlSec })
             );
           }
           controller.close();
@@ -2688,7 +2827,21 @@ Answer account questions from these records ONLY: name the record when you use i
   }
   completionBlocks.push(...await completeFigures(env.DB, answer, [...c2ns.blocks, ...completionBlocks], used));
   const jsonQuality = answerQuality(finalCites.map((c) => c.quality));
-  const out = { answer, citations: finalCites, ...jsonQuality ? { source_quality: jsonQuality, confidence_note: qualityNote(jsonQuality), ...jsonQuality === "ocr" ? { experimental_sources: experimentalSourceLabels(finalCites) } : {} } : {}, model: MODELS.member, query_hash: queryHash, follow_ups: understanding?.follow_ups ?? [], blocks: [...c2ns.blocks, ...verdictBlock ? [verdictBlock] : [], ...conditionBlock ? [conditionBlock] : [], ...aggregationBlock ? [aggregationBlock] : [], ...completionBlocks], context_applied: ctxApplied, ...liveRecords ? { records: liveRecords } : {} };
+  let entailment = null;
+  let entailmentNote = "";
+  if (THRESHOLDS.entailmentGate && jsonQuality && used.length && !answer.includes(refusalAnswer())) {
+    const raced = await Promise.race([
+      scoreFaithfulness(env.AI, roleModel(env, "grader"), answer, used.map((h) => h.text)),
+      new Promise((r) => setTimeout(() => r(null), THRESHOLDS.entailmentBudgetMs))
+    ]);
+    if (raced) {
+      const v = entailmentVerdict(raced.score, THRESHOLDS.entailmentSupportedFloor, THRESHOLDS.entailmentPartialFloor);
+      entailment = { support: v.support, score: Math.round(raced.score * 100) / 100, ...raced.ungrounded_claims?.length ? { ungrounded: raced.ungrounded_claims.slice(0, 3) } : {} };
+      entailmentNote = v.note;
+      if (v.support !== "supported") console.log("entailment:", v.support, raced.score, raced.ungrounded_claims?.slice(0, 2));
+    }
+  }
+  const out = { answer, citations: finalCites, ...jsonQuality ? { source_quality: jsonQuality, confidence_note: entailmentNote || qualityNote(jsonQuality), ...entailment ? { entailment } : {}, ...jsonQuality === "ocr" ? { experimental_sources: experimentalSourceLabels(finalCites) } : {} } : {}, model: MODELS.member, query_hash: queryHash, follow_ups: understanding?.follow_ups ?? [], blocks: [...c2ns.blocks, ...verdictBlock ? [verdictBlock] : [], ...conditionBlock ? [conditionBlock] : [], ...aggregationBlock ? [aggregationBlock] : [], ...completionBlocks], context_applied: ctxApplied, ...liveRecords ? { records: liveRecords } : {} };
   const cacheable = !contextual && !declaredCtx && !answer.includes(refusalAnswer()) && finalAnchors.violations.length === 0;
   if (cacheable) {
     const ck = exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt)));
@@ -2720,6 +2873,7 @@ function sseResponse(events, cors) {
 
 export {
   handleMemories,
+  scoreFaithfulness,
   checkQuoteAnchors,
   standardForDocNumber,
   bindModelNode,

package/dist/{chunk-R2V3X6SQ.js → chunk-JWTIPQ4L.js}

@@ -1,7 +1,7 @@
 import {
   LIMITS,
   sha256Hex
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-4GJGBGJK.js → chunk-O6VZIDPW.js}

@@ -1,7 +1,7 @@
 import {
   DATASETS,
   datasetAllowed
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-IUMHKBOY.js → chunk-VVLNUHW2.js}

@@ -1,7 +1,7 @@
 import {
   bubbleConfirmPage,
   isAllowedBubbleOrigin
-} from "./chunk-R2V3X6SQ.js";
+} from "./chunk-JWTIPQ4L.js";
 import {
   DATASETS,
   LIMITS,
@@ -12,7 +12,7 @@ import {
   processExpansion,
   sha256Hex,
   today
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-V46XM2GU.js → chunk-Z24IAKB6.js}

@@ -60,6 +60,15 @@ var THRESHOLDS = {
    *  pool below the primary dense lane; they must earn their window
    *  slot under the cross-encoder, not by graph membership alone. */
   graphLaneDiscount: 0.75,
+  /** The entailment gate (TODO.new-era/10): the faithfulness scorer
+   *  promoted from eval-only onto the serving path. The confidence line
+   *  then states a measurement — claim support in the cited passages —
+   *  not only the source rung. Fails open (a slow or unparseable check
+   *  leaves the source-rung note unchanged). */
+  entailmentGate: true,
+  entailmentBudgetMs: 6e3,
+  entailmentSupportedFloor: 0.9,
+  entailmentPartialFloor: 0.5,
   /** Concept-graph candidate discount — same rationale as the graph
    *  lane: definitional content enters discounted. */
   conceptGraphDiscount: 0.75,

package/dist/config.d.ts

@@ -32,6 +32,15 @@ export declare const THRESHOLDS: {
      *  pool below the primary dense lane; they must earn their window
      *  slot under the cross-encoder, not by graph membership alone. */
     readonly graphLaneDiscount: 0.75;
+    /** The entailment gate (TODO.new-era/10): the faithfulness scorer
+     *  promoted from eval-only onto the serving path. The confidence line
+     *  then states a measurement — claim support in the cited passages —
+     *  not only the source rung. Fails open (a slow or unparseable check
+     *  leaves the source-rung note unchanged). */
+    readonly entailmentGate: true;
+    readonly entailmentBudgetMs: 6000;
+    readonly entailmentSupportedFloor: 0.9;
+    readonly entailmentPartialFloor: 0.5;
     /** Concept-graph candidate discount — same rationale as the graph
      *  lane: definitional content enters discounted. */
     readonly conceptGraphDiscount: 0.75;

package/dist/entailment.d.ts

@@ -0,0 +1,5 @@
+export interface EntailmentVerdict {
+    support: "supported" | "partial" | "unsupported";
+    note: string;
+}
+export declare function entailmentVerdict(score: number, supportedFloor: number, partialFloor: number): EntailmentVerdict;

package/dist/search-KNB2S2PS.js

@@ -0,0 +1,12 @@
+import {
+  handleSearch
+} from "./chunk-DMIOBGQU.js";
+import "./chunk-VVLNUHW2.js";
+import "./chunk-JWTIPQ4L.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-O6VZIDPW.js";
+import "./chunk-Z24IAKB6.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleSearch
+};

package/dist/worker_mcp/src/index.js

@@ -1,7 +1,7 @@
 import {
   authenticate
-} from "../../chunk-R2V3X6SQ.js";
-import "../../chunk-V46XM2GU.js";
+} from "../../chunk-JWTIPQ4L.js";
+import "../../chunk-Z24IAKB6.js";
 import {
   P,
   setProfile

package/dist/worker_public/src/config.js

@@ -16,7 +16,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-V46XM2GU.js";
+} from "../../chunk-Z24IAKB6.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   DATASETS,

package/dist/worker_public/src/index.js

@@ -1,15 +1,16 @@
 import {
   handleSearch
-} from "../../chunk-47VBMM7I.js";
+} from "../../chunk-DMIOBGQU.js";
 import {
   bindModelNode,
   checkQuoteAnchors,
   handleAsk,
   handleMemories,
   modelGroundingBlock,
+  scoreFaithfulness,
   scoreJudge,
   standardForDocNumber
-} from "../../chunk-SONICKNY.js";
+} from "../../chunk-HT2MDJ5S.js";
 import {
   buildMessages,
   cfBlobs,
@@ -36,7 +37,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-IUMHKBOY.js";
+} from "../../chunk-VVLNUHW2.js";
 import {
   authenticate,
   corsHeaders,
@@ -45,14 +46,14 @@ import {
   readJson,
   validateQuery,
   withCors
-} from "../../chunk-R2V3X6SQ.js";
+} from "../../chunk-JWTIPQ4L.js";
 import {
   canonicalRefusal
 } from "../../chunk-A3QHHUN5.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "../../chunk-4GJGBGJK.js";
+} from "../../chunk-O6VZIDPW.js";
 import {
   LIMITS,
   MODELS,
@@ -63,7 +64,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-V46XM2GU.js";
+} from "../../chunk-Z24IAKB6.js";
 import {
   P,
   setProfile
@@ -333,118 +334,6 @@ async function handleGetShared(env, slug) {
   });
 }
 
-// workers/worker_public/prompts/faithfulness.md
-var faithfulness_default = `You are a factuality judge. Given an answer and the retrieved passages it was based on, identify any claims in the answer that are NOT directly supported by the passages. Reply with ONLY a JSON object: {"score": 0.0-1.0, "ungrounded_claims": ["claim text", ...]} \u2014 score is the fraction of claims that ARE grounded in the passages; if every claim is supported, score is 1.0 and ungrounded_claims is [].
-
-Passages prefixed [M] are this service's own machine-computed model data (typed blocks the answer was given) \u2014 a claim restating [M] content is grounded.
-`;
-
-// workers/worker_public/src/verdict-parse.ts
-function coerceVerdict(obj) {
-  if (obj === null || typeof obj !== "object" || Array.isArray(obj)) return null;
-  const raw = obj.score;
-  const score = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
-  if (!Number.isFinite(score)) return null;
-  const claims = obj.ungrounded_claims;
-  return {
-    score: Math.max(0, Math.min(1, score)),
-    ungrounded_claims: Array.isArray(claims) ? claims.map(String).slice(0, 5) : []
-  };
-}
-function parseVerdict(text) {
-  const stripped = text.replace(/```[a-zA-Z]*\n?/g, "").replace(/```/g, "").trim();
-  try {
-    const whole = coerceVerdict(JSON.parse(stripped));
-    if (whole) return whole;
-  } catch {
-  }
-  let verdict = null;
-  let depth = 0;
-  let start = -1;
-  let inString = false;
-  let escaped = false;
-  for (let i = 0; i < stripped.length; i++) {
-    const ch = stripped[i];
-    if (escaped) {
-      escaped = false;
-      continue;
-    }
-    if (inString && ch === "\\") {
-      escaped = true;
-      continue;
-    }
-    if (ch === '"') {
-      inString = !inString;
-      continue;
-    }
-    if (inString) continue;
-    if (ch === "{") {
-      if (depth === 0) start = i;
-      depth++;
-    } else if (ch === "}" && depth > 0) {
-      depth--;
-      if (depth === 0 && start >= 0) {
-        try {
-          const v = coerceVerdict(JSON.parse(stripped.slice(start, i + 1)));
-          if (v) verdict = v;
-        } catch {
-        }
-      }
-    }
-  }
-  return verdict;
-}
-
-// workers/worker_public/src/faithfulness-context.ts
-function buildJudgeContext(passages, machine = []) {
-  const context = passages.slice(0, 8).map((p, i) => {
-    const text = typeof p === "string" ? p : p.text;
-    const limit = typeof p !== "string" && p.table ? 2400 : 1400;
-    return `[${i + 1}] ${text.replace(/\s+/g, " ").slice(0, limit)}`;
-  }).join("\n");
-  const machineContext = machine.length ? "\n" + machine.slice(0, 6).map((m) => `[M] ${m.replace(/\s+/g, " ").slice(0, 400)}`).join("\n") : "";
-  return context + machineContext;
-}
-
-// workers/worker_public/src/faithfulness.ts
-async function scoreFaithfulness(ai, model, answer, passages, machine = []) {
-  if (!answer || !passages.length) return null;
-  const context = buildJudgeContext(passages, machine);
-  const t0 = Date.now();
-  const timeout = new Promise((r) => setTimeout(() => {
-    console.log(`faithfulness: timeout (${Date.now() - t0}ms)`);
-    r(null);
-  }, 24e4));
-  const call = (async () => {
-    const res = await ai.run(model, {
-      messages: [
-        {
-          role: "system",
-          content: faithfulness_default.trimEnd()
-        },
-        { role: "user", content: `Answer:
-${answer.slice(0, 2e3)}
-
-Passages:
-${context}${machine.length ? buildJudgeContext([], machine) : ""}` }
-      ],
-      max_tokens: 6144,
-      reasoning_effort: "low",
-      // DeepSeek-V4 card: temp 1.0 / top_p 1.0
-      temperature: 1,
-      top_p: 1
-    });
-    const text = typeof res?.response === "string" ? res.response : res?.choices?.[0]?.message?.content;
-    const verdict = parseVerdict(text ?? "");
-    if (!verdict) {
-      console.log(`faithfulness: no parse (${Date.now() - t0}ms, text ${(text ?? "").length} chars) raw=${JSON.stringify((text ?? "").replace(/\s+/g, " ").slice(0, 500))}`);
-      return null;
-    }
-    return verdict;
-  })();
-  return await Promise.race([call, timeout]);
-}
-
 // workers/worker_public/prompts/enrichment.md
 var enrichment_default = "You write a retrieval context for a passage from {{CORPUS_KIND}}. The context is prepended to the passage before embedding so a semantic search can locate the passage even when the query uses different vocabulary than the passage itself.\n\nWrite ONE concise sentence (at most 40 words) that situates the passage: name the publication by its exact {{PUBLISHER_NAME}} identifier (including part or annex when applicable) and what the passage covers \u2014 paraphrasing the topic in words DIFFERENT from the passage's own. Do not copy the passage verbatim, do not add facts that are not derivable from the passage or its header, do not answer or explain the content. Reply with the context sentence only \u2014 no quotes, no preamble.\n";
 
@@ -1058,7 +947,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-KL7XUELS.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-NTQVSSAE.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-FZA3ZFVB.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-KNB2S2PS.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });

package/dist/worker_public/src/requestScope.js

@@ -4,8 +4,8 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "../../chunk-4GJGBGJK.js";
-import "../../chunk-V46XM2GU.js";
+} from "../../chunk-O6VZIDPW.js";
+import "../../chunk-Z24IAKB6.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   entitlementScope,

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.48",
+  "version": "0.2.50",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/src/ask.ts

@@ -3,7 +3,7 @@
 // echo — everything between "request validated" and "response written".
 // index.ts routes here; this module owns the answer contract.
 
-import { LIMITS, MODELS, num, sha256Hex, roleModel, answerEffort, requestEffort, effortBudget } from "./config";
+import { LIMITS, MODELS, THRESHOLDS, num, sha256Hex, roleModel, answerEffort, requestEffort, effortBudget } from "./config";
 import { portModelRunner } from "./env.ts";
 import { refCodec } from "./codecs";
 import { buildMessages, citations, retrieve, retrievalQuery, identityNote, splitHistory, listwiseRerank, refusalAnswer, Hit } from "./pipeline";
@@ -14,6 +14,8 @@ import { gradeRetrieval } from "./grader";
 import summarizePrompt from "../prompts/summarize.md";
 import { embed, generateOnce } from "./ai";
 import { reflect } from "./reflect";
+import { scoreFaithfulness } from "./faithfulness";
+import { entailmentVerdict } from "./entailment";
 import { checkQuoteAnchors, ANCHOR_CORRECTION_NOTE } from "./anchors";
 import { canonicalRefusal } from "./refusal";
 import { contractV2, tableRetyped } from "./refs";
@@ -405,7 +407,11 @@ async function handleAsk(
     const cctx = cached.value.context_applied ?? NO_CONTEXT;
     if (wantsStream) {
       // a cache hit must still speak SSE — the chat client parses a stream
-      return sseResponse([{ type: "citations", citations: cached.value.citations ?? [], quota, context_applied: cctx }, { type: "token", v: cached.value.answer ?? "" }, { type: "done", model: cached.value.model ?? MODELS.member, query_hash: cached.value.query_hash, served_from: "cache", context_applied: cctx }], corsHeaders(req));
+      return sseResponse([
+        { type: "citations", citations: cached.value.citations ?? [], quota, context_applied: cctx, ...(cached.value.source_quality ? { source_quality: cached.value.source_quality, confidence_note: cached.value.confidence_note ?? null, ...(cached.value.experimental_sources ? { experimental_sources: cached.value.experimental_sources } : {}), ...(cached.value.entailment ? { entailment: cached.value.entailment } : {}) } : {}) },
+        { type: "token", v: cached.value.answer ?? "" },
+        { type: "done", model: cached.value.model ?? MODELS.member, query_hash: cached.value.query_hash, served_from: "cache", context_applied: cctx },
+      ], corsHeaders(req));
     }
     return json({ ...cached.value, cached: true, quota, context_applied: cctx });
   }
@@ -1138,6 +1144,27 @@ async function handleAsk(
             passages: usedHits.slice(0, 8).map((h: Hit) => ({ d: h.metadata.docidentifier ?? "", a: h.metadata.clause_anchor ?? "", t: (h.text ?? "").slice(0, (h.metadata as any).block === "table" ? 1400 : 600), b: (h.metadata as any).block === "table" || undefined, ...((h.metadata as any).table_selection ? { s: (h.metadata as any).table_selection } : {}) })) });
           telemetry(env, ctx, tier, "ask", model, true, c2.text.length, queryHash, q.lang, undefined, telemetryMeta());
           const canonical = c2.text;
+
+          // the entailment gate, streaming shape (TODO.new-era/10): the
+          // measurement runs AFTER done — the chips, follow-ups and evidence
+          // never wait on the grader; a final confidence event refreshes the
+          // note when the measurement lands. Budgeted and fail-open like the
+          // JSON path's gate.
+          let streamedEntailment: { support: string; score: number; ungrounded?: string[] } | null = null;
+          let streamedNote = "";
+          if (THRESHOLDS.entailmentGate && sourceQuality && usedHits.length && !canonical.includes(refusalAnswer())) {
+            const raced = await Promise.race([
+              scoreFaithfulness(env.AI, roleModel(env, "grader"), canonical, usedHits.map((h: Hit) => h.text)),
+              new Promise<null>((r) => setTimeout(() => r(null), THRESHOLDS.entailmentBudgetMs)),
+            ]);
+            if (raced) {
+              const v = entailmentVerdict(raced.score, THRESHOLDS.entailmentSupportedFloor, THRESHOLDS.entailmentPartialFloor);
+              streamedEntailment = { support: v.support, score: Math.round(raced.score * 100) / 100, ...(raced.ungrounded_claims?.length ? { ungrounded: raced.ungrounded_claims.slice(0, 3) } : {}) };
+              streamedNote = v.note;
+              if (v.support !== "supported") console.log("entailment(stream):", v.support, raced.score);
+              send({ type: "confidence", source_quality: sourceQuality, confidence_note: streamedNote || qualityNote(sourceQuality), ...(streamedEntailment ? { entailment: streamedEntailment } : {}) });
+            }
+          }
           // streamed answers can't be regenerated mid-flight; enforcement
           // is that an unverified answer is never served from cache again
           const streamedAnchors = checkQuoteAnchors(canonical, usedHits.map((h: Hit) => h.text));
@@ -1148,7 +1175,7 @@ async function handleAsk(
           }
           if (streamed.violations.length === 0 && canonical.length > 0 && !contextual && !declaredCtx && !canonical.includes(refusalAnswer())) {
             ctx.waitUntil(
-              env.CACHE.put(exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt))), JSON.stringify({ answer: canonical, citations: cites, model, query_hash: queryHash }), { expirationTtl: LIMITS.cacheTtlSec }),
+              env.CACHE.put(exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt))), JSON.stringify({ answer: canonical, citations: cites, model, query_hash: queryHash, ...(sourceQuality ? { source_quality: sourceQuality, confidence_note: streamedNote || qualityNote(sourceQuality) } : {}), ...(streamedEntailment ? { entailment: streamedEntailment } : {}) }), { expirationTtl: LIMITS.cacheTtlSec }),
             );
           }
           controller.close();
@@ -1309,7 +1336,26 @@ async function handleAsk(
   completionBlocks.push(...(await completeFigures(env.DB, answer, [...c2ns.blocks, ...completionBlocks], used)));
 
   const jsonQuality = answerQuality(finalCites.map((c: any) => c.quality));
-  const out = { answer, citations: finalCites, ...(jsonQuality ? { source_quality: jsonQuality, confidence_note: qualityNote(jsonQuality), ...(jsonQuality === "ocr" ? { experimental_sources: experimentalSourceLabels(finalCites) } : {}) } : {}), model: MODELS.member, query_hash: queryHash, follow_ups: understanding?.follow_ups ?? [], blocks: [...c2ns.blocks, ...(verdictBlock ? [verdictBlock] : []), ...(conditionBlock ? [conditionBlock] : []), ...(aggregationBlock ? [aggregationBlock] : []), ...completionBlocks], context_applied: ctxApplied, ...(liveRecords ? { records: liveRecords } : {}) };
+  // the entailment gate (TODO.new-era/10): the eval battery's faithfulness
+  // scorer, promoted onto the serving path — the confidence line states a
+  // measurement (claim support in the cited passages), not only the source
+  // rung. Budgeted and fail-open: a slow or unparseable check leaves the
+  // rung note untouched; refusals and uncited answers have nothing to gate.
+  let entailment: { support: string; score: number; ungrounded?: string[] } | null = null;
+  let entailmentNote = "";
+  if (THRESHOLDS.entailmentGate && jsonQuality && used.length && !answer.includes(refusalAnswer())) {
+    const raced = await Promise.race([
+      scoreFaithfulness(env.AI, roleModel(env, "grader"), answer, (used as Hit[]).map((h: Hit) => h.text)),
+      new Promise<null>((r) => setTimeout(() => r(null), THRESHOLDS.entailmentBudgetMs)),
+    ]);
+    if (raced) {
+      const v = entailmentVerdict(raced.score, THRESHOLDS.entailmentSupportedFloor, THRESHOLDS.entailmentPartialFloor);
+      entailment = { support: v.support, score: Math.round(raced.score * 100) / 100, ...(raced.ungrounded_claims?.length ? { ungrounded: raced.ungrounded_claims.slice(0, 3) } : {}) };
+      entailmentNote = v.note;
+      if (v.support !== "supported") console.log("entailment:", v.support, raced.score, raced.ungrounded_claims?.slice(0, 2));
+    }
+  }
+  const out = { answer, citations: finalCites, ...(jsonQuality ? { source_quality: jsonQuality, confidence_note: entailmentNote || qualityNote(jsonQuality), ...(entailment ? { entailment } : {}), ...(jsonQuality === "ocr" ? { experimental_sources: experimentalSourceLabels(finalCites) } : {}) } : {}), model: MODELS.member, query_hash: queryHash, follow_ups: understanding?.follow_ups ?? [], blocks: [...c2ns.blocks, ...(verdictBlock ? [verdictBlock] : []), ...(conditionBlock ? [conditionBlock] : []), ...(aggregationBlock ? [aggregationBlock] : []), ...completionBlocks], context_applied: ctxApplied, ...(liveRecords ? { records: liveRecords } : {}) };
   const cacheable = !contextual && !declaredCtx && !answer.includes(refusalAnswer()) && finalAnchors.violations.length === 0;
   if (cacheable) {
     const ck = exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt)));

package/workers/worker_public/src/config.ts

@@ -56,6 +56,15 @@ export const THRESHOLDS = {
    *  pool below the primary dense lane; they must earn their window
    *  slot under the cross-encoder, not by graph membership alone. */
   graphLaneDiscount: 0.75,
+  /** The entailment gate (TODO.new-era/10): the faithfulness scorer
+   *  promoted from eval-only onto the serving path. The confidence line
+   *  then states a measurement — claim support in the cited passages —
+   *  not only the source rung. Fails open (a slow or unparseable check
+   *  leaves the source-rung note unchanged). */
+  entailmentGate: true,
+  entailmentBudgetMs: 6000,
+  entailmentSupportedFloor: 0.9,
+  entailmentPartialFloor: 0.5,
   /** Concept-graph candidate discount — same rationale as the graph
    *  lane: definitional content enters discounted. */
   conceptGraphDiscount: 0.75,

package/workers/worker_public/src/entailment.ts

@@ -0,0 +1,15 @@
+// The entailment gate's pure verdict mapper (TODO.new-era/10): what the
+// confidence line says once the claims were measured against the
+// passages they cite. Lives apart from faithfulness.ts so the unit
+// suites (plain node, no esbuild .md loader) can exercise it.
+
+export interface EntailmentVerdict {
+  support: "supported" | "partial" | "unsupported";
+  note: string;
+}
+
+export function entailmentVerdict(score: number, supportedFloor: number, partialFloor: number): EntailmentVerdict {
+  if (score >= supportedFloor) return { support: "supported", note: "" };
+  if (score >= partialFloor) return { support: "partial", note: "Partially grounded — some claims lack support in the cited passages; verify against the cited clauses." };
+  return { support: "unsupported", note: "WARNING: This answer's claims are largely unsupported by the retrieved passages. Verify against official publications." };
+}

package/dist/ask-KL7XUELS.js

@@ -1,12 +0,0 @@
-import {
-  handleAsk
-} from "./chunk-SONICKNY.js";
-import "./chunk-IUMHKBOY.js";
-import "./chunk-R2V3X6SQ.js";
-import "./chunk-A3QHHUN5.js";
-import "./chunk-4GJGBGJK.js";
-import "./chunk-V46XM2GU.js";
-import "./chunk-3FYJM7LH.js";
-export {
-  handleAsk
-};

package/dist/search-NTQVSSAE.js

@@ -1,12 +0,0 @@
-import {
-  handleSearch
-} from "./chunk-47VBMM7I.js";
-import "./chunk-IUMHKBOY.js";
-import "./chunk-R2V3X6SQ.js";
-import "./chunk-A3QHHUN5.js";
-import "./chunk-4GJGBGJK.js";
-import "./chunk-V46XM2GU.js";
-import "./chunk-3FYJM7LH.js";
-export {
-  handleSearch
-};