@kontourai/flow-agents 2.3.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (250) hide show
  1. package/.github/CODEOWNERS +8 -0
  2. package/.github/workflows/ci.yml +32 -0
  3. package/AGENTS.md +4 -4
  4. package/CHANGELOG.md +39 -0
  5. package/CONTEXT.md +14 -0
  6. package/README.md +9 -3
  7. package/agents/dev.json +1 -1
  8. package/agents/tool-code-reviewer.json +1 -1
  9. package/agents/tool-planner.json +3 -3
  10. package/agents/tool-verifier.json +3 -3
  11. package/build/src/cli/console-learning-projection.js +3 -2
  12. package/build/src/cli/init.js +104 -21
  13. package/build/src/cli/kit.js +37 -6
  14. package/build/src/cli/pull-work-provider.js +1 -1
  15. package/build/src/cli/usage-feedback.js +3 -3
  16. package/build/src/cli/validate-hook-influence.js +1 -0
  17. package/build/src/cli/validate-workflow-artifacts.js +22 -6
  18. package/build/src/cli/workflow-artifact-cleanup-audit.js +36 -2
  19. package/build/src/cli/workflow-sidecar.d.ts +14 -7
  20. package/build/src/cli/workflow-sidecar.js +792 -69
  21. package/build/src/flow-kit/validate.d.ts +23 -0
  22. package/build/src/flow-kit/validate.js +67 -1
  23. package/build/src/index.d.ts +1 -1
  24. package/build/src/index.js +1 -1
  25. package/build/src/lib/flow-resolver.d.ts +6 -4
  26. package/build/src/lib/flow-resolver.js +125 -58
  27. package/build/src/lib/local-artifact-root.d.ts +14 -2
  28. package/build/src/lib/local-artifact-root.js +22 -5
  29. package/build/src/lib/workflow-learning-projection.js +2 -2
  30. package/build/src/runtime-adapters.d.ts +12 -0
  31. package/build/src/runtime-adapters.js +56 -16
  32. package/build/src/tools/build-universal-bundles.js +49 -16
  33. package/build/src/tools/generate-context-map.js +10 -8
  34. package/build/src/tools/validate-source-tree.js +23 -1
  35. package/console.telemetry.json +22 -0
  36. package/context/contracts/artifact-contract.md +38 -7
  37. package/context/contracts/builder-kit-workflow-state-contract.md +3 -2
  38. package/context/contracts/decision-registry-contract.md +263 -0
  39. package/context/contracts/delivery-contract.md +1 -1
  40. package/context/contracts/planning-contract.md +2 -1
  41. package/context/contracts/review-contract.md +5 -3
  42. package/context/contracts/verification-contract.md +9 -1
  43. package/context/contracts/work-item-contract.md +1 -1
  44. package/context/deferred/parallelization.md +1 -1
  45. package/context/gate-awareness.md +4 -4
  46. package/context/scripts/git-status.sh +2 -2
  47. package/context/scripts/hooks/config-protection.js +502 -2
  48. package/context/scripts/hooks/lib/config-protection-remedies.js +69 -0
  49. package/context/scripts/hooks/run-hook.js +14 -1
  50. package/context/scripts/hooks/stop-goal-fit.js +1140 -99
  51. package/context/scripts/hooks/workflow-steering.js +212 -6
  52. package/docs/adr/0007-flow-skill-kit-tool-boundary.md +2 -0
  53. package/docs/adr/0015-flow-flow-agents-boundary-reconciliation.md +35 -0
  54. package/docs/adr/0019-kit-dependency-ownership.md +62 -0
  55. package/docs/adr/0020-trust-reconcile-manifest-and-claim-classification.md +290 -0
  56. package/docs/adr/0021-assignment-leases-and-stale-claim-takeover.md +221 -0
  57. package/docs/adr/0022-fail-closed-delivery-reconciliation-with-governed-exemptions.md +283 -0
  58. package/docs/agent-system-guidebook.md +3 -3
  59. package/docs/agent-usage-feedback-loop.md +6 -6
  60. package/docs/context-map.md +9 -7
  61. package/docs/decisions/decision-records.md +57 -0
  62. package/docs/decisions/index.md +14 -0
  63. package/docs/decisions/promotion-gate.md +52 -0
  64. package/docs/developer-architecture.md +1 -1
  65. package/docs/fixture-ownership.md +3 -0
  66. package/docs/flow-kit-repository-contract.md +5 -5
  67. package/docs/getting-started.md +12 -2
  68. package/docs/integrations/harness-install.md +2 -1
  69. package/docs/kit-authoring-guide.md +64 -5
  70. package/docs/knowledge-kit.md +5 -1
  71. package/docs/learnings/2026-07-improvement-program.md +203 -0
  72. package/docs/migrations.md +6 -5
  73. package/docs/north-star.md +2 -2
  74. package/docs/operating-layers.md +4 -3
  75. package/docs/repository-structure.md +5 -5
  76. package/docs/skills-map.md +8 -8
  77. package/docs/spec/runtime-hook-surface.md +19 -15
  78. package/docs/spikes/graph-provider-2026-07.md +155 -0
  79. package/docs/standards-register.md +7 -7
  80. package/docs/trust-anchor-adoption.md +105 -4
  81. package/docs/work-item-adapters.md +1 -1
  82. package/docs/workflow-artifact-lifecycle.md +72 -9
  83. package/docs/workflow-eval-strategy.md +3 -3
  84. package/docs/workflow-shared-contracts.md +1 -1
  85. package/docs/workflow-usage-guide.md +254 -21
  86. package/evals/acceptance/DEMO-false-completion.md +20 -11
  87. package/evals/acceptance/prove-capture-teeth-declared.sh +15 -15
  88. package/evals/acceptance/prove-capture-teeth.sh +11 -11
  89. package/evals/acceptance/test_kiro_harness.sh +1 -1
  90. package/evals/ci/antigaming-suite.sh +5 -0
  91. package/evals/ci/run-baseline.sh +65 -1
  92. package/evals/fixtures/flow-kit-repository/invalid-bad-dependency/flows/review.flow.json +26 -0
  93. package/evals/fixtures/flow-kit-repository/invalid-bad-dependency/kit.json +13 -0
  94. package/evals/fixtures/flow-kit-repository/valid-with-dependency/flows/review.flow.json +26 -0
  95. package/evals/fixtures/flow-kit-repository/valid-with-dependency/kit.json +13 -0
  96. package/evals/fixtures/hook-influence/cases.json +32 -0
  97. package/evals/fixtures/pull-work-provider/github-issues.json +6 -6
  98. package/evals/fixtures/trust-reconcile-exploits/fabricated-attestation.json +59 -0
  99. package/evals/fixtures/trust-reconcile-exploits/no-label-bypass.json +36 -0
  100. package/evals/fixtures/trust-reconcile-exploits/skip-assumed-bypass.json +59 -0
  101. package/evals/fixtures/trust-reconcile-exploits/status-misassertion.json +48 -0
  102. package/evals/fixtures/trust-reconcile-exploits/waived-command-check.json +44 -0
  103. package/evals/fixtures/trust-reconcile-mixed-bundle/mixed-bundle.json +159 -0
  104. package/evals/fixtures/trust-reconcile-ws3/ws3-bundle.json +920 -0
  105. package/evals/integration/test_actor_identity.sh +254 -0
  106. package/evals/integration/test_builder_step_producers.sh +33 -23
  107. package/evals/integration/test_bundle_install.sh +22 -16
  108. package/evals/integration/test_bundle_lifecycle.sh +11 -11
  109. package/evals/integration/test_captured_fail_reconciliation.sh +50 -50
  110. package/evals/integration/test_checkpoint_signing.sh +43 -0
  111. package/evals/integration/test_claim_lookup.sh +4 -4
  112. package/evals/integration/test_codex_hook_resolution.sh +114 -0
  113. package/evals/integration/test_command_log_concurrency.sh +8 -8
  114. package/evals/integration/test_command_log_fork_classification.sh +3 -3
  115. package/evals/integration/test_command_log_integrity.sh +16 -16
  116. package/evals/integration/test_console_learning_projection.sh +1 -1
  117. package/evals/integration/test_dual_emit_flow_step.sh +145 -0
  118. package/evals/integration/test_enforcer_expects_driven.sh +12 -12
  119. package/evals/integration/test_evidence_capture_hook.sh +14 -13
  120. package/evals/integration/test_fixture_retirement_audit.sh +2 -2
  121. package/evals/integration/test_flow_agents_statusline.sh +2 -2
  122. package/evals/integration/test_flow_kit_install_git.sh +52 -0
  123. package/evals/integration/test_flow_kit_repository.sh +2 -0
  124. package/evals/integration/test_flowdef_session_activation.sh +6 -6
  125. package/evals/integration/test_flowdef_union_floor_regression.sh +429 -0
  126. package/evals/integration/test_gate_bypass_chain.sh +52 -40
  127. package/evals/integration/test_gate_lockdown.sh +97 -73
  128. package/evals/integration/test_gate_review_inquiry_records.sh +3 -3
  129. package/evals/integration/test_goal_fit_escape_hatch.sh +10 -10
  130. package/evals/integration/test_goal_fit_ghost_session.sh +104 -0
  131. package/evals/integration/test_goal_fit_hook.sh +32 -32
  132. package/evals/integration/test_goal_fit_rederive.sh +9 -9
  133. package/evals/integration/test_hook_category_behaviors.sh +103 -0
  134. package/evals/integration/test_hook_influence_cases.sh +1 -0
  135. package/evals/integration/test_install_merge.sh +262 -1
  136. package/evals/integration/test_kit_identity_trust.sh +6 -6
  137. package/evals/integration/test_liveness_conflict_injection.sh +587 -0
  138. package/evals/integration/test_liveness_heartbeat.sh +677 -0
  139. package/evals/integration/test_liveness_verdict.sh +394 -0
  140. package/evals/integration/test_local_flow_kit_install.sh +15 -0
  141. package/evals/integration/test_phase_map_and_gate_claim.sh +63 -11
  142. package/evals/integration/test_promote_gate.sh +178 -0
  143. package/evals/integration/test_publish_delivery.sh +2 -2
  144. package/evals/integration/test_pull_work_liveness_preflight.sh +386 -0
  145. package/evals/integration/test_pull_work_provider.sh +2 -2
  146. package/evals/integration/test_reconcile_soundness.sh +4 -4
  147. package/evals/integration/test_resolvefirststep_security.sh +22 -0
  148. package/evals/integration/test_runtime_adapter_activation.sh +87 -18
  149. package/evals/integration/test_session_resume_roundtrip.sh +147 -0
  150. package/evals/integration/test_sidecar_field_preservation.sh +249 -0
  151. package/evals/integration/test_trust_reconcile.sh +2 -2
  152. package/evals/integration/test_trust_reconcile_manifest.sh +79 -0
  153. package/evals/integration/test_trust_reconcile_mixed_bundle.sh +96 -0
  154. package/evals/integration/test_trust_reconcile_negatives.sh +151 -0
  155. package/evals/integration/test_usage_feedback_global.sh +5 -5
  156. package/evals/integration/test_validate_artifacts_portability.sh +60 -0
  157. package/evals/integration/test_verify_cli.sh +2 -2
  158. package/evals/integration/test_veritas_governance_kit.sh +117 -0
  159. package/evals/integration/test_workflow_artifact_cleanup_audit.sh +26 -1
  160. package/evals/integration/test_workflow_artifacts.sh +33 -0
  161. package/evals/integration/test_workflow_sidecar_writer.sh +723 -74
  162. package/evals/integration/test_workflow_steering_hook.sh +175 -5
  163. package/evals/lib/codex-provider.sh +1 -1
  164. package/evals/lib/node.sh +19 -1
  165. package/evals/run.sh +22 -0
  166. package/evals/static/test_decisions.sh +150 -0
  167. package/evals/static/test_flowdef_codeowners_coverage.sh +56 -0
  168. package/evals/static/test_package.sh +19 -10
  169. package/evals/static/test_universal_bundles.sh +48 -3
  170. package/evals/static/test_workflow_skills.sh +41 -8
  171. package/kits/builder/flows/build.flow.json +3 -74
  172. package/kits/builder/flows/publish-learn.flow.json +90 -0
  173. package/kits/builder/kit.json +11 -0
  174. package/kits/builder/skills/builder-shape/SKILL.md +1 -1
  175. package/kits/builder/skills/deliver/SKILL.md +13 -11
  176. package/kits/builder/skills/design-probe/SKILL.md +4 -4
  177. package/kits/builder/skills/evidence-gate/SKILL.md +26 -1
  178. package/kits/builder/skills/execute-plan/SKILL.md +2 -2
  179. package/kits/builder/skills/fix-bug/SKILL.md +2 -0
  180. package/kits/builder/skills/gate-review/SKILL.md +6 -6
  181. package/kits/builder/skills/idea-to-backlog/SKILL.md +1 -1
  182. package/kits/builder/skills/learning-review/SKILL.md +7 -7
  183. package/kits/builder/skills/pickup-probe/SKILL.md +5 -4
  184. package/kits/builder/skills/plan-work/SKILL.md +27 -5
  185. package/kits/builder/skills/pull-work/SKILL.md +80 -5
  186. package/kits/builder/skills/release-readiness/SKILL.md +4 -4
  187. package/kits/builder/skills/review-work/SKILL.md +24 -1
  188. package/kits/builder/skills/tdd-workflow/SKILL.md +2 -0
  189. package/kits/builder/skills/verify-work/SKILL.md +8 -1
  190. package/kits/catalog.json +6 -0
  191. package/kits/veritas-governance/adapter/readiness-to-trust-bundle.mjs +178 -0
  192. package/kits/veritas-governance/docs/README.md +75 -0
  193. package/kits/veritas-governance/fixtures/readiness/not-ready.readiness-report.json +4645 -0
  194. package/kits/veritas-governance/fixtures/readiness/ready.readiness-report.json +4403 -0
  195. package/kits/veritas-governance/flows/readiness-check.flow.json +35 -0
  196. package/kits/veritas-governance/kit.json +16 -0
  197. package/package.json +8 -4
  198. package/packaging/README.md +2 -2
  199. package/packaging/conformance/fixtures/config-protection--allow-read-state-json.json +20 -0
  200. package/packaging/conformance/fixtures/config-protection--block-write-state-json.json +20 -0
  201. package/packaging/conformance/fixtures/stop-goal-fit--block-bundle-disputed-claim.json +1 -1
  202. package/packaging/conformance/fixtures/stop-goal-fit--block-capture-contradicts-claimed-pass.json +1 -1
  203. package/packaging/manifest.json +9 -10
  204. package/schemas/decision-record.schema.json +109 -0
  205. package/schemas/workflow-evidence.schema.json +1 -1
  206. package/schemas/workflow-state.schema.json +5 -0
  207. package/scripts/README.md +8 -3
  208. package/scripts/check-content-boundary.cjs +1 -1
  209. package/scripts/check-decisions.cjs +356 -0
  210. package/scripts/ci/derive-claim-status.mjs +74 -0
  211. package/scripts/ci/trust-reconcile.js +436 -79
  212. package/scripts/git-status.sh +2 -2
  213. package/scripts/hooks/claude-telemetry-hook.js +37 -3
  214. package/scripts/hooks/codex-telemetry-hook.js +36 -2
  215. package/scripts/hooks/config-protection.js +102 -30
  216. package/scripts/hooks/evidence-capture.js +3 -3
  217. package/scripts/hooks/lib/actor-identity.js +368 -0
  218. package/scripts/hooks/lib/config-protection-remedies.js +69 -0
  219. package/scripts/hooks/lib/liveness-heartbeat.js +361 -0
  220. package/scripts/hooks/lib/liveness-policy.js +127 -0
  221. package/scripts/hooks/lib/liveness-read.js +105 -12
  222. package/scripts/hooks/lib/liveness-write.js +46 -0
  223. package/scripts/hooks/lib/local-artifact-paths.js +12 -6
  224. package/scripts/hooks/opencode-telemetry-hook.js +27 -1
  225. package/scripts/hooks/pi-telemetry-hook.js +27 -1
  226. package/scripts/hooks/stop-goal-fit.js +157 -26
  227. package/scripts/hooks/workflow-steering.js +77 -3
  228. package/scripts/install-codex-home.sh +138 -38
  229. package/scripts/statusline/flow-agents-statusline.js +2 -2
  230. package/src/cli/console-learning-projection.ts +3 -2
  231. package/src/cli/init.ts +101 -21
  232. package/src/cli/kit.ts +37 -6
  233. package/src/cli/public-api.test.mjs +58 -6
  234. package/src/cli/pull-work-provider.ts +1 -1
  235. package/src/cli/trust-bundle-policy-order.test.mjs +87 -0
  236. package/src/cli/usage-feedback.ts +3 -3
  237. package/src/cli/validate-hook-influence.ts +1 -0
  238. package/src/cli/validate-workflow-artifacts.ts +22 -6
  239. package/src/cli/veritas-readiness-adapter.test.mjs +267 -0
  240. package/src/cli/workflow-artifact-cleanup-audit.ts +35 -2
  241. package/src/cli/workflow-sidecar.ts +795 -71
  242. package/src/flow-kit/validate.ts +74 -1
  243. package/src/index.ts +6 -2
  244. package/src/lib/flow-resolver.ts +123 -55
  245. package/src/lib/local-artifact-root.ts +24 -5
  246. package/src/lib/workflow-learning-projection.ts +2 -2
  247. package/src/runtime-adapters.ts +61 -15
  248. package/src/tools/build-universal-bundles.ts +49 -16
  249. package/src/tools/generate-context-map.ts +10 -8
  250. package/src/tools/validate-source-tree.ts +23 -1
@@ -0,0 +1,4645 @@
1
+ {
2
+ "record_schema_version": 1,
3
+ "run_id": "veritas-1783001840335",
4
+ "timestamp": "2026-07-02T14:17:20.335Z",
5
+ "source_ref": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
6
+ "source_kind": "working-tree",
7
+ "source_scope": [
8
+ "staged",
9
+ "unstaged",
10
+ "untracked"
11
+ ],
12
+ "integrity": {
13
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
14
+ "sourceKind": "working-tree",
15
+ "sourceScope": [
16
+ "staged",
17
+ "unstaged",
18
+ "untracked"
19
+ ],
20
+ "fileRefs": [],
21
+ "configRefs": {
22
+ "repoMap": {
23
+ "name": "veritas",
24
+ "path": ".veritas/repo-map.json",
25
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
26
+ },
27
+ "repoStandards": {
28
+ "name": "veritas-default",
29
+ "path": ".veritas/repo-standards/default.repo-standards.json",
30
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
31
+ },
32
+ "authoritySettings": {
33
+ "name": "authority-settings",
34
+ "path": ".veritas/authority/default.authority-settings.json",
35
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
36
+ }
37
+ }
38
+ },
39
+ "resolved_phase": "Phase 0 (Bootstrap)",
40
+ "resolved_workstream": "Initial Project Setup",
41
+ "matched_artifacts": [
42
+ "README.md"
43
+ ],
44
+ "components": [],
45
+ "component_details": [],
46
+ "file_nodes": {},
47
+ "triggered_evidence_checks": [],
48
+ "selected_evidence_check_ids": [
49
+ "required-evidence-check",
50
+ "vocabulary-consistency",
51
+ "fallow-advisory"
52
+ ],
53
+ "selected_evidence_check_labels": [
54
+ "npm run verify",
55
+ "npm run veritas:vocab:check",
56
+ "npm run veritas:fallow:advisory"
57
+ ],
58
+ "selected_evidence_checks": [
59
+ {
60
+ "id": "required-evidence-check",
61
+ "runner": "bash",
62
+ "label": "npm run verify",
63
+ "command": "npm run verify",
64
+ "method": "validation",
65
+ "surface_claim_ids": [],
66
+ "summary": "All evidence checks passed.",
67
+ "evidence_check_result": {
68
+ "id": "required-evidence-check",
69
+ "runner": "bash",
70
+ "label": "npm run verify",
71
+ "passed": true,
72
+ "exitCode": 0,
73
+ "signal": null,
74
+ "stdout": "\n> @kontourai/veritas@1.1.0 verify\n> node scripts/check-content-boundary.cjs && node scripts/verify.mjs\n\nContent boundary check passed.\nVeritas verification passed.\n",
75
+ "stderr": "",
76
+ "content": [],
77
+ "isError": false,
78
+ "timedOut": false,
79
+ "durationMs": 190
80
+ }
81
+ },
82
+ {
83
+ "id": "vocabulary-consistency",
84
+ "runner": "bash",
85
+ "label": "npm run veritas:vocab:check",
86
+ "command": "npm run veritas:vocab:check",
87
+ "method": "validation",
88
+ "surface_claim_ids": [],
89
+ "summary": "All evidence checks passed.",
90
+ "evidence_check_result": {
91
+ "id": "vocabulary-consistency",
92
+ "runner": "bash",
93
+ "label": "npm run veritas:vocab:check",
94
+ "passed": true,
95
+ "exitCode": 0,
96
+ "signal": null,
97
+ "stdout": "\n> @kontourai/veritas@1.1.0 veritas:vocab:check\n> node scripts/check-veritas-vocabulary.mjs\n\nPASS canonical-veritas-vocabulary: All matched files use canonical Veritas vocabulary.\n",
98
+ "stderr": "",
99
+ "content": [],
100
+ "isError": false,
101
+ "timedOut": false,
102
+ "durationMs": 137
103
+ }
104
+ },
105
+ {
106
+ "id": "fallow-advisory",
107
+ "runner": "bash",
108
+ "label": "npm run veritas:fallow:advisory",
109
+ "command": "npm run veritas:fallow:advisory",
110
+ "method": "auditability",
111
+ "surface_claim_ids": [],
112
+ "summary": "All evidence checks passed.",
113
+ "evidence_check_result": {
114
+ "id": "fallow-advisory",
115
+ "runner": "bash",
116
+ "label": "npm run veritas:fallow:advisory",
117
+ "passed": true,
118
+ "exitCode": 0,
119
+ "signal": null,
120
+ "stdout": "\n> @kontourai/veritas@1.1.0 veritas:fallow:advisory\n> node scripts/run-fallow-audit.mjs\n\n{\"artifactPath\":\".kontourai/veritas/external/fallow-audit.json\",\"schema_version\":\"veritas-fallow-advisory-v1\",\"tool\":\"fallow\",\"command\":\"npx -y fallow --format json --quiet\",\"verdict\":\"warn\",\"summary\":{\"dead_code_issues\":2,\"duplication_clone_groups\":17,\"duplicated_lines\":573,\"duplication_percent\":3.429084380610413,\"complexity_findings\":258,\"average_maintainability\":89.7},\"baseline\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"complexity_findings\":258},\"deltas\":{\"dead_code_issues\":2,\"duplication_clone_groups\":0,\"complexity_findings\":0},\"actions\":[{\"type\":\"apply-refactoring\",\"description\":\"2 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/surface/readiness-authority.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/readiness-authority.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (68 LOC), 6 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/surface/primitives.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/primitives.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (4 LOC), 8 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/util/strings.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/util/strings.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"4 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/evidence/external-tools.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/evidence/external-tools.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"5 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/evidence/suites.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/evidence/suites.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"6 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-status.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-status.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"7 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/explain.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/explain.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (279 LOC), 3 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/standards-feedback/recommendations.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/standards-feedback/recommendations.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (59 LOC), 4 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/plugins/loader.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/plugins/loader.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (384 LOC), 3 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-projection.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-projection.mjs\"]}]}\n",
121
+ "stderr": "",
122
+ "content": [],
123
+ "isError": false,
124
+ "timedOut": false,
125
+ "durationMs": 705
126
+ }
127
+ }
128
+ ],
129
+ "evidence_check_resolution_source": "default",
130
+ "evidence_inventory_results": [],
131
+ "readiness_coverage": {
132
+ "evidence_check_count": 3,
133
+ "selected_evidence_check_count": 3,
134
+ "evidence_inventory_count": 0,
135
+ "required_inventory_count": 0,
136
+ "candidate_inventory_count": 0,
137
+ "advisory_inventory_count": 0,
138
+ "move_to_test_inventory_count": 0,
139
+ "retire_inventory_count": 0,
140
+ "upstream_candidate_count": 0,
141
+ "unknown_catch_evidence_inventory_ids": [],
142
+ "missing_review_trigger_inventory_ids": [],
143
+ "stale_inventory_ids": [],
144
+ "stale_or_unknown_inventory_ids": [],
145
+ "recommendation": "Readiness coverage has owners, review triggers, and no unknown catch-evidence inventories."
146
+ },
147
+ "external_tool_results": [
148
+ {
149
+ "tool": "fallow",
150
+ "format": "veritas-fallow-advisory-v1",
151
+ "command": "npm run veritas:fallow:advisory",
152
+ "evidence_check_id": "fallow-advisory",
153
+ "verdict": "warn",
154
+ "blocking": false,
155
+ "summary": {
156
+ "dead_code_issues": 2,
157
+ "duplication_clone_groups": 17,
158
+ "duplicated_lines": 573,
159
+ "duplication_percent": 3.429084380610413,
160
+ "complexity_findings": 258,
161
+ "average_maintainability": 89.7
162
+ },
163
+ "artifact_path": ".kontourai/veritas/external/fallow-audit.json",
164
+ "actions": [
165
+ {
166
+ "type": "apply-refactoring",
167
+ "description": "2 complex functions lack test coverage path, add tests before modifying",
168
+ "auto_fixable": false,
169
+ "paths": [
170
+ "src/surface/readiness-authority.mjs"
171
+ ]
172
+ },
173
+ {
174
+ "type": "suppress-line",
175
+ "description": "Suppress the underlying complexity finding",
176
+ "auto_fixable": false,
177
+ "paths": [
178
+ "src/surface/readiness-authority.mjs"
179
+ ]
180
+ },
181
+ {
182
+ "type": "apply-refactoring",
183
+ "description": "Split high-impact file (68 LOC), 6 dependents amplify every change",
184
+ "auto_fixable": false,
185
+ "paths": [
186
+ "src/surface/primitives.mjs"
187
+ ]
188
+ },
189
+ {
190
+ "type": "suppress-line",
191
+ "description": "Suppress the underlying complexity finding",
192
+ "auto_fixable": false,
193
+ "paths": [
194
+ "src/surface/primitives.mjs"
195
+ ]
196
+ },
197
+ {
198
+ "type": "apply-refactoring",
199
+ "description": "Split high-impact file (4 LOC), 8 dependents amplify every change",
200
+ "auto_fixable": false,
201
+ "paths": [
202
+ "src/util/strings.mjs"
203
+ ]
204
+ },
205
+ {
206
+ "type": "suppress-line",
207
+ "description": "Suppress the underlying complexity finding",
208
+ "auto_fixable": false,
209
+ "paths": [
210
+ "src/util/strings.mjs"
211
+ ]
212
+ },
213
+ {
214
+ "type": "apply-refactoring",
215
+ "description": "4 complex functions lack test coverage path, add tests before modifying",
216
+ "auto_fixable": false,
217
+ "paths": [
218
+ "src/evidence/external-tools.mjs"
219
+ ]
220
+ },
221
+ {
222
+ "type": "suppress-line",
223
+ "description": "Suppress the underlying complexity finding",
224
+ "auto_fixable": false,
225
+ "paths": [
226
+ "src/evidence/external-tools.mjs"
227
+ ]
228
+ },
229
+ {
230
+ "type": "apply-refactoring",
231
+ "description": "5 complex functions lack test coverage path, add tests before modifying",
232
+ "auto_fixable": false,
233
+ "paths": [
234
+ "src/evidence/suites.mjs"
235
+ ]
236
+ },
237
+ {
238
+ "type": "suppress-line",
239
+ "description": "Suppress the underlying complexity finding",
240
+ "auto_fixable": false,
241
+ "paths": [
242
+ "src/evidence/suites.mjs"
243
+ ]
244
+ },
245
+ {
246
+ "type": "apply-refactoring",
247
+ "description": "6 complex functions lack test coverage path, add tests before modifying",
248
+ "auto_fixable": false,
249
+ "paths": [
250
+ "src/surface/evidence-status.mjs"
251
+ ]
252
+ },
253
+ {
254
+ "type": "suppress-line",
255
+ "description": "Suppress the underlying complexity finding",
256
+ "auto_fixable": false,
257
+ "paths": [
258
+ "src/surface/evidence-status.mjs"
259
+ ]
260
+ },
261
+ {
262
+ "type": "apply-refactoring",
263
+ "description": "7 complex functions lack test coverage path, add tests before modifying",
264
+ "auto_fixable": false,
265
+ "paths": [
266
+ "src/explain.mjs"
267
+ ]
268
+ },
269
+ {
270
+ "type": "suppress-line",
271
+ "description": "Suppress the underlying complexity finding",
272
+ "auto_fixable": false,
273
+ "paths": [
274
+ "src/explain.mjs"
275
+ ]
276
+ },
277
+ {
278
+ "type": "apply-refactoring",
279
+ "description": "Split high-impact file (279 LOC), 3 dependents amplify every change",
280
+ "auto_fixable": false,
281
+ "paths": [
282
+ "src/standards-feedback/recommendations.mjs"
283
+ ]
284
+ },
285
+ {
286
+ "type": "suppress-line",
287
+ "description": "Suppress the underlying complexity finding",
288
+ "auto_fixable": false,
289
+ "paths": [
290
+ "src/standards-feedback/recommendations.mjs"
291
+ ]
292
+ },
293
+ {
294
+ "type": "apply-refactoring",
295
+ "description": "Split high-impact file (59 LOC), 4 dependents amplify every change",
296
+ "auto_fixable": false,
297
+ "paths": [
298
+ "src/plugins/loader.mjs"
299
+ ]
300
+ },
301
+ {
302
+ "type": "suppress-line",
303
+ "description": "Suppress the underlying complexity finding",
304
+ "auto_fixable": false,
305
+ "paths": [
306
+ "src/plugins/loader.mjs"
307
+ ]
308
+ },
309
+ {
310
+ "type": "apply-refactoring",
311
+ "description": "Split high-impact file (384 LOC), 3 dependents amplify every change",
312
+ "auto_fixable": false,
313
+ "paths": [
314
+ "src/surface/evidence-projection.mjs"
315
+ ]
316
+ },
317
+ {
318
+ "type": "suppress-line",
319
+ "description": "Suppress the underlying complexity finding",
320
+ "auto_fixable": false,
321
+ "paths": [
322
+ "src/surface/evidence-projection.mjs"
323
+ ]
324
+ }
325
+ ]
326
+ }
327
+ ],
328
+ "uncovered_path_result": "clear",
329
+ "baseline_ci_fast_passed": true,
330
+ "recommendations": [],
331
+ "false_positive_review": "unknown",
332
+ "promotion_candidate": false,
333
+ "override_or_bypass": false,
334
+ "owner": null,
335
+ "files": [],
336
+ "unresolved_files": [],
337
+ "promotion_allowed": true,
338
+ "producer": {
339
+ "name": "veritas",
340
+ "record_schema_version": 1,
341
+ "resolver_precedence": [
342
+ "explicit task or issue reference",
343
+ "matching local artifact under .veritas/**",
344
+ "active repo roadmap or README guidance",
345
+ "multi-workstream fallback suppresses promotion"
346
+ ],
347
+ "policy_defaults": {
348
+ "false_positive_review": "unknown",
349
+ "promotion_candidate": false,
350
+ "override_or_bypass": false
351
+ }
352
+ },
353
+ "repo_map": {
354
+ "name": "veritas",
355
+ "kind": "repo-map",
356
+ "report_transport": "local-json",
357
+ "default_resolution": {
358
+ "phase": "Phase 0 (Bootstrap)",
359
+ "workstream": "Initial Project Setup",
360
+ "matchedArtifacts": [
361
+ "README.md"
362
+ ]
363
+ },
364
+ "non_sliceable_invariants": [
365
+ "baseline evidenceCheck",
366
+ "repo-local guidance",
367
+ "tracked policy artifacts"
368
+ ],
369
+ "evidenceChecks": [
370
+ {
371
+ "id": "required-evidence-check",
372
+ "runner": "bash",
373
+ "label": "npm run verify",
374
+ "command": "npm run verify",
375
+ "method": "validation",
376
+ "surface_claim_ids": [],
377
+ "summary": "Runs npm run verify."
378
+ },
379
+ {
380
+ "id": "fallow-advisory",
381
+ "runner": "bash",
382
+ "label": "npm run veritas:fallow:advisory",
383
+ "command": "npm run veritas:fallow:advisory",
384
+ "method": "auditability",
385
+ "surface_claim_ids": [],
386
+ "summary": "Runs Fallow as advisory codebase-intelligence evidence."
387
+ },
388
+ {
389
+ "id": "vocabulary-consistency",
390
+ "runner": "bash",
391
+ "label": "npm run veritas:vocab:check",
392
+ "command": "npm run veritas:vocab:check",
393
+ "method": "validation",
394
+ "surface_claim_ids": [],
395
+ "summary": "Checks first-contact Veritas docs for canonical product vocabulary."
396
+ }
397
+ ],
398
+ "required_evidence_check_ids": [
399
+ "required-evidence-check"
400
+ ],
401
+ "default_evidence_check_ids": [
402
+ "required-evidence-check",
403
+ "vocabulary-consistency",
404
+ "fallow-advisory"
405
+ ],
406
+ "evidence_check_routes": [],
407
+ "uncovered_path_policy": "warn"
408
+ },
409
+ "repo_standards": {
410
+ "name": "veritas-default",
411
+ "version": 1,
412
+ "rule_count": 9
413
+ },
414
+ "policy_results": [
415
+ {
416
+ "rule_id": "policy-changes-require-attestation",
417
+ "classification": "hard-invariant",
418
+ "enforcementLevel": "Require",
419
+ "message": "Protected standards changes require a fresh authority-backed attestation.",
420
+ "owner": "repo-core",
421
+ "rollback_switch": null,
422
+ "implemented": true,
423
+ "passed": true,
424
+ "status": "pass",
425
+ "summary": "Active attestation policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a matches current protected standards hashes.",
426
+ "findings": []
427
+ },
428
+ {
429
+ "rule_id": "required-veritas-operational-artifacts",
430
+ "classification": "hard-invariant",
431
+ "enforcementLevel": "Require",
432
+ "enforcement": "deny",
433
+ "message": "The tracked Veritas operational artifacts must stay present so agents and reviewers share the same baseline.",
434
+ "owner": "repo-core",
435
+ "rollback_switch": null,
436
+ "implemented": true,
437
+ "passed": true,
438
+ "status": "info",
439
+ "summary": "All required repository artifacts are present.",
440
+ "findings": []
441
+ },
442
+ {
443
+ "rule_id": "required-veritas-cli-artifacts",
444
+ "classification": "hard-invariant",
445
+ "enforcementLevel": "Require",
446
+ "enforcement": "deny",
447
+ "message": "The shipped Veritas CLI entrypoints and package manifest must stay present.",
448
+ "owner": "repo-core",
449
+ "rollback_switch": null,
450
+ "implemented": true,
451
+ "passed": false,
452
+ "status": "info",
453
+ "summary": "Some required repository artifacts are missing.",
454
+ "findings": [
455
+ {
456
+ "kind": "missing-artifact",
457
+ "artifact": "bin/veritas-report.mjs"
458
+ }
459
+ ]
460
+ },
461
+ {
462
+ "rule_id": "required-veritas-reference-artifacts",
463
+ "classification": "hard-invariant",
464
+ "enforcementLevel": "Require",
465
+ "enforcement": "deny",
466
+ "message": "The repo must keep the docs that explain the shipped Veritas surface.",
467
+ "owner": "repo-core",
468
+ "rollback_switch": null,
469
+ "implemented": true,
470
+ "passed": true,
471
+ "status": "info",
472
+ "summary": "All required repository artifacts are present.",
473
+ "findings": []
474
+ },
475
+ {
476
+ "rule_id": "required-veritas-schema-artifacts",
477
+ "classification": "hard-invariant",
478
+ "enforcementLevel": "Require",
479
+ "enforcement": "deny",
480
+ "message": "The shipped Veritas schema set must stay present and reviewable.",
481
+ "owner": "repo-core",
482
+ "rollback_switch": null,
483
+ "implemented": true,
484
+ "passed": true,
485
+ "status": "info",
486
+ "summary": "All required repository artifacts are present.",
487
+ "findings": []
488
+ },
489
+ {
490
+ "rule_id": "ai-instruction-files-synced",
491
+ "classification": "hard-invariant",
492
+ "enforcementLevel": "Guide",
493
+ "enforcement": "deny",
494
+ "message": "All required AI tool instruction files must contain the Veritas governance block.",
495
+ "owner": "repo-maintainers",
496
+ "rollback_switch": null,
497
+ "implemented": true,
498
+ "passed": true,
499
+ "status": "info",
500
+ "summary": "All required AI instruction files contain the canonical Veritas governance block.",
501
+ "findings": []
502
+ },
503
+ {
504
+ "rule_id": "prefer-veritas-routed-delivery",
505
+ "classification": "promotable-policy",
506
+ "enforcementLevel": "Observe",
507
+ "enforcement": "advisory",
508
+ "message": "Prefer keeping the tracked Veritas evidenceCheck and repo conformance integration surfaces present so changes flow through the documented operational path before review.",
509
+ "owner": "repo-maintainers",
510
+ "rollback_switch": "soften-veritas-route",
511
+ "implemented": true,
512
+ "passed": true,
513
+ "status": "info",
514
+ "summary": "All required repository artifacts are present.",
515
+ "findings": []
516
+ },
517
+ {
518
+ "rule_id": "no-console-log-in-src",
519
+ "classification": "advisory-pattern",
520
+ "enforcementLevel": "Guide",
521
+ "enforcement": "advisory",
522
+ "message": "Source files should not leave console.log diagnostics behind.",
523
+ "owner": "repo-maintainers",
524
+ "rollback_switch": "allow-console-log",
525
+ "implemented": true,
526
+ "passed": true,
527
+ "status": "info",
528
+ "summary": "No matched files contain forbidden pattern console\\.log.",
529
+ "findings": []
530
+ },
531
+ {
532
+ "rule_id": "canonical-veritas-vocabulary",
533
+ "classification": "advisory-pattern",
534
+ "enforcementLevel": "Guide",
535
+ "enforcement": "advisory",
536
+ "message": "First-contact Veritas docs should use canonical product vocabulary from CONTEXT.md.",
537
+ "owner": "docs-team",
538
+ "rollback_switch": "allow-vocabulary-drift",
539
+ "implemented": true,
540
+ "passed": true,
541
+ "status": "info",
542
+ "summary": "All matched files use canonical Veritas vocabulary.",
543
+ "findings": []
544
+ },
545
+ {
546
+ "rule_id": "repeatable-governance-uses-veritas-primitives",
547
+ "classification": "promotable-policy",
548
+ "enforcementLevel": "Guide",
549
+ "enforcement": "advisory",
550
+ "message": "Repeatable repo governance checks should be represented by Veritas primitives before they become local helper scripts.",
551
+ "owner": "repo-maintainers",
552
+ "rollback_switch": "allow-unrepresented-governance-script",
553
+ "implemented": true,
554
+ "passed": true,
555
+ "status": "info",
556
+ "summary": "Repeatable governance checks are represented by Veritas primitives.",
557
+ "findings": []
558
+ }
559
+ ],
560
+ "governance_state": {
561
+ "state": "current",
562
+ "currentAttestationId": "policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
563
+ "attestation": {
564
+ "schemaVersion": 1,
565
+ "id": "policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
566
+ "kind": "policy-change",
567
+ "actor": {
568
+ "id": "maintainer",
569
+ "displayName": "Maintainer",
570
+ "identityEvidence": {
571
+ "gitEmail": "maintainer@example.com",
572
+ "signingKeyFingerprint": null
573
+ }
574
+ },
575
+ "attestedAt": "2026-07-01T03:36:48.637Z",
576
+ "repoStandardsHash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab",
577
+ "repoMapHash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d",
578
+ "authoritySettingsHash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946",
579
+ "priorAttestationId": "policy-change-2026-07-01T01-56-01-735Z-928f47d6028a",
580
+ "validUntilDays": 90,
581
+ "notes": "Authorize routing CONTEXT-MAP.md as a root manifest so PR branch-diff conformance resolves the repo context map.",
582
+ "metadata": {
583
+ "protectedStandardsPaths": {
584
+ "repoStandardsPath": ".veritas/repo-standards/default.repo-standards.json",
585
+ "repoMapPath": ".veritas/repo-map.json",
586
+ "authoritySettingsPath": ".veritas/authority/default.authority-settings.json"
587
+ },
588
+ "supersedes": "policy-change-2026-07-01T01-56-01-735Z-928f47d6028a",
589
+ "approvalRef": "chat:2026-07-01-user-pipeline-fix",
590
+ "approvalRefPolicy": {
591
+ "mode": "reference-only",
592
+ "matchedPrefix": null,
593
+ "requiresResolution": false
594
+ },
595
+ "approvalResolution": null
596
+ },
597
+ "surface": {
598
+ "claim": {
599
+ "id": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
600
+ "subjectType": "veritas-protected-standards",
601
+ "subjectId": "protected-standards",
602
+ "surface": "veritas.attestations",
603
+ "claimType": "veritas-human-attestation",
604
+ "fieldOrBehavior": "policy-change",
605
+ "value": {
606
+ "contentHash": "bf9eecd22cce007378c54a74bda643faa279274e32015f1481a50dab50afb18f",
607
+ "validUntil": "2026-09-29T03:36:48.637Z"
608
+ },
609
+ "createdAt": "2026-07-01T03:36:48.637Z",
610
+ "updatedAt": "2026-07-01T03:36:48.637Z",
611
+ "status": "verified",
612
+ "impactLevel": "high",
613
+ "confidenceBasis": {
614
+ "sourceQuality": "strong",
615
+ "reviewerAuthority": "human",
616
+ "evidenceStrength": "strong",
617
+ "impactLevel": "high"
618
+ }
619
+ },
620
+ "evidence": {
621
+ "id": "evidence.attestation.veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
622
+ "claimId": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
623
+ "evidenceType": "attestation",
624
+ "method": "attestation",
625
+ "sourceRef": "veritas:protected-standards",
626
+ "excerptOrSummary": "Authorize routing CONTEXT-MAP.md as a root manifest so PR branch-diff conformance resolves the repo context map.",
627
+ "observedAt": "2026-07-01T03:36:48.637Z",
628
+ "collectedBy": "maintainer",
629
+ "integrityRef": "bf9eecd22cce007378c54a74bda643faa279274e32015f1481a50dab50afb18f",
630
+ "metadata": {
631
+ "actor": {
632
+ "id": "maintainer",
633
+ "displayName": "Maintainer"
634
+ },
635
+ "attestedAt": "2026-07-01T03:36:48.637Z",
636
+ "validUntil": "2026-09-29T03:36:48.637Z",
637
+ "contentHash": "bf9eecd22cce007378c54a74bda643faa279274e32015f1481a50dab50afb18f"
638
+ },
639
+ "sourceLocator": ".veritas/attestations"
640
+ },
641
+ "event": {
642
+ "id": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a.verified",
643
+ "claimId": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
644
+ "status": "verified",
645
+ "actor": "maintainer",
646
+ "method": "human attestation",
647
+ "evidenceIds": [
648
+ "evidence.attestation.veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a"
649
+ ],
650
+ "createdAt": "2026-07-01T03:36:48.637Z",
651
+ "verifiedAt": "2026-07-01T03:36:48.637Z"
652
+ }
653
+ }
654
+ },
655
+ "pending": false,
656
+ "drift": [],
657
+ "expired": false,
658
+ "ageDays": 1,
659
+ "validUntil": "2026-09-29T03:36:48.637Z",
660
+ "protectedStandards": {
661
+ "hashes": {
662
+ "repoStandardsHash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab",
663
+ "repoMapHash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d",
664
+ "authoritySettingsHash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
665
+ },
666
+ "paths": {
667
+ "repoStandardsPath": ".veritas/repo-standards/default.repo-standards.json",
668
+ "repoMapPath": ".veritas/repo-map.json",
669
+ "authoritySettingsPath": ".veritas/authority/default.authority-settings.json"
670
+ }
671
+ },
672
+ "admissibilityWarning": false,
673
+ "admissibilityWarningReason": null
674
+ },
675
+ "trust": {
676
+ "bundle": {
677
+ "schemaVersion": 3,
678
+ "source": "veritas:veritas-1783001840335",
679
+ "claims": [
680
+ {
681
+ "id": "veritas.surface.governance.guidance",
682
+ "surface": "veritas.affected-surface",
683
+ "claimType": "veritas-affected-surface",
684
+ "fieldOrBehavior": "governance.guidance",
685
+ "subjectType": "repo-surface",
686
+ "subjectId": "veritas:governance.guidance",
687
+ "impactLevel": "medium",
688
+ "verificationPolicyId": "veritas.surface",
689
+ "metadata": {
690
+ "nodeId": "governance.guidance"
691
+ },
692
+ "createdAt": "2026-05-19T13:38:14.077Z",
693
+ "updatedAt": "2026-07-02T14:17:20.335Z",
694
+ "value": "governance.guidance",
695
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
696
+ },
697
+ {
698
+ "id": "veritas.surface.governance.root-manifests",
699
+ "surface": "veritas.affected-surface",
700
+ "claimType": "veritas-affected-surface",
701
+ "fieldOrBehavior": "governance.root-manifests",
702
+ "subjectType": "repo-surface",
703
+ "subjectId": "veritas:governance.root-manifests",
704
+ "impactLevel": "medium",
705
+ "verificationPolicyId": "veritas.surface",
706
+ "metadata": {
707
+ "nodeId": "governance.root-manifests"
708
+ },
709
+ "createdAt": "2026-05-19T13:38:14.077Z",
710
+ "updatedAt": "2026-07-02T14:17:20.335Z",
711
+ "value": "governance.root-manifests",
712
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
713
+ },
714
+ {
715
+ "id": "veritas.surface.tooling.bin",
716
+ "surface": "veritas.affected-surface",
717
+ "claimType": "veritas-affected-surface",
718
+ "fieldOrBehavior": "tooling.bin",
719
+ "subjectType": "repo-surface",
720
+ "subjectId": "veritas:tooling.bin",
721
+ "impactLevel": "medium",
722
+ "verificationPolicyId": "veritas.surface",
723
+ "metadata": {
724
+ "nodeId": "tooling.bin"
725
+ },
726
+ "createdAt": "2026-05-19T13:38:14.077Z",
727
+ "updatedAt": "2026-07-02T14:17:20.335Z",
728
+ "value": "tooling.bin",
729
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
730
+ },
731
+ {
732
+ "id": "veritas.surface.delivery.github",
733
+ "surface": "veritas.affected-surface",
734
+ "claimType": "veritas-affected-surface",
735
+ "fieldOrBehavior": "delivery.github",
736
+ "subjectType": "repo-surface",
737
+ "subjectId": "veritas:delivery.github",
738
+ "impactLevel": "medium",
739
+ "verificationPolicyId": "veritas.surface",
740
+ "metadata": {
741
+ "nodeId": "delivery.github"
742
+ },
743
+ "createdAt": "2026-05-19T13:38:14.077Z",
744
+ "updatedAt": "2026-07-02T14:17:20.335Z",
745
+ "value": "delivery.github",
746
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
747
+ },
748
+ {
749
+ "id": "veritas.surface.tooling.scripts",
750
+ "surface": "veritas.affected-surface",
751
+ "claimType": "veritas-affected-surface",
752
+ "fieldOrBehavior": "tooling.scripts",
753
+ "subjectType": "repo-surface",
754
+ "subjectId": "veritas:tooling.scripts",
755
+ "impactLevel": "medium",
756
+ "verificationPolicyId": "veritas.surface",
757
+ "metadata": {
758
+ "nodeId": "tooling.scripts"
759
+ },
760
+ "createdAt": "2026-05-19T13:38:14.077Z",
761
+ "updatedAt": "2026-07-02T14:17:20.335Z",
762
+ "value": "tooling.scripts",
763
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
764
+ },
765
+ {
766
+ "id": "veritas.surface.governance.schemas",
767
+ "surface": "veritas.affected-surface",
768
+ "claimType": "veritas-affected-surface",
769
+ "fieldOrBehavior": "governance.schemas",
770
+ "subjectType": "repo-surface",
771
+ "subjectId": "veritas:governance.schemas",
772
+ "impactLevel": "medium",
773
+ "verificationPolicyId": "veritas.surface",
774
+ "metadata": {
775
+ "nodeId": "governance.schemas"
776
+ },
777
+ "createdAt": "2026-05-19T13:38:14.077Z",
778
+ "updatedAt": "2026-07-02T14:17:20.335Z",
779
+ "value": "governance.schemas",
780
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
781
+ },
782
+ {
783
+ "id": "veritas.surface.governance.repo-maps",
784
+ "surface": "veritas.affected-surface",
785
+ "claimType": "veritas-affected-surface",
786
+ "fieldOrBehavior": "governance.repo-maps",
787
+ "subjectType": "repo-surface",
788
+ "subjectId": "veritas:governance.repo-maps",
789
+ "impactLevel": "medium",
790
+ "verificationPolicyId": "veritas.surface",
791
+ "metadata": {
792
+ "nodeId": "governance.repo-maps"
793
+ },
794
+ "createdAt": "2026-05-19T13:38:14.077Z",
795
+ "updatedAt": "2026-07-02T14:17:20.335Z",
796
+ "value": "governance.repo-maps",
797
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
798
+ },
799
+ {
800
+ "id": "veritas.surface.governance.repo-standards",
801
+ "surface": "veritas.affected-surface",
802
+ "claimType": "veritas-affected-surface",
803
+ "fieldOrBehavior": "governance.repo-standards",
804
+ "subjectType": "repo-surface",
805
+ "subjectId": "veritas:governance.repo-standards",
806
+ "impactLevel": "medium",
807
+ "verificationPolicyId": "veritas.surface",
808
+ "metadata": {
809
+ "nodeId": "governance.repo-standards"
810
+ },
811
+ "createdAt": "2026-05-19T13:38:14.077Z",
812
+ "updatedAt": "2026-07-02T14:17:20.335Z",
813
+ "value": "governance.repo-standards",
814
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
815
+ },
816
+ {
817
+ "id": "veritas.surface.examples.example-data",
818
+ "surface": "veritas.affected-surface",
819
+ "claimType": "veritas-affected-surface",
820
+ "fieldOrBehavior": "examples.example-data",
821
+ "subjectType": "repo-surface",
822
+ "subjectId": "veritas:examples.example-data",
823
+ "impactLevel": "medium",
824
+ "verificationPolicyId": "veritas.surface",
825
+ "metadata": {
826
+ "nodeId": "examples.example-data"
827
+ },
828
+ "createdAt": "2026-05-19T13:38:14.077Z",
829
+ "updatedAt": "2026-07-02T14:17:20.335Z",
830
+ "value": "examples.example-data",
831
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
832
+ },
833
+ {
834
+ "id": "veritas.surface.app.src",
835
+ "surface": "veritas.affected-surface",
836
+ "claimType": "veritas-affected-surface",
837
+ "fieldOrBehavior": "app.src",
838
+ "subjectType": "repo-surface",
839
+ "subjectId": "veritas:app.src",
840
+ "impactLevel": "medium",
841
+ "verificationPolicyId": "veritas.surface",
842
+ "metadata": {
843
+ "nodeId": "app.src"
844
+ },
845
+ "createdAt": "2026-05-19T13:38:14.077Z",
846
+ "updatedAt": "2026-07-02T14:17:20.335Z",
847
+ "value": "app.src",
848
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
849
+ },
850
+ {
851
+ "id": "veritas.surface.docs.docs",
852
+ "surface": "veritas.affected-surface",
853
+ "claimType": "veritas-affected-surface",
854
+ "fieldOrBehavior": "docs.docs",
855
+ "subjectType": "repo-surface",
856
+ "subjectId": "veritas:docs.docs",
857
+ "impactLevel": "medium",
858
+ "verificationPolicyId": "veritas.surface",
859
+ "metadata": {
860
+ "nodeId": "docs.docs"
861
+ },
862
+ "createdAt": "2026-05-19T13:38:14.077Z",
863
+ "updatedAt": "2026-07-02T14:17:20.335Z",
864
+ "value": "docs.docs",
865
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
866
+ },
867
+ {
868
+ "id": "veritas.surface.verification.tests",
869
+ "surface": "veritas.affected-surface",
870
+ "claimType": "veritas-affected-surface",
871
+ "fieldOrBehavior": "verification.tests",
872
+ "subjectType": "repo-surface",
873
+ "subjectId": "veritas:verification.tests",
874
+ "impactLevel": "medium",
875
+ "verificationPolicyId": "veritas.surface",
876
+ "metadata": {
877
+ "nodeId": "verification.tests"
878
+ },
879
+ "createdAt": "2026-05-19T13:38:14.077Z",
880
+ "updatedAt": "2026-07-02T14:17:20.335Z",
881
+ "value": "verification.tests",
882
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
883
+ },
884
+ {
885
+ "id": "veritas.governance",
886
+ "surface": "veritas.governance",
887
+ "claimType": "veritas-governance-artifact",
888
+ "fieldOrBehavior": "governance artifact integrity",
889
+ "subjectType": "repository",
890
+ "subjectId": "veritas",
891
+ "impactLevel": "high",
892
+ "verificationPolicyId": "veritas.governance-artifact",
893
+ "createdAt": "2026-05-19T13:38:14.077Z",
894
+ "updatedAt": "2026-07-02T14:17:20.335Z",
895
+ "value": "governance artifact integrity",
896
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
897
+ },
898
+ {
899
+ "id": "veritas.evidence-check.npm-run-verify",
900
+ "surface": "veritas.evidence-check",
901
+ "claimType": "software-evidence-check",
902
+ "fieldOrBehavior": "npm run verify",
903
+ "subjectType": "repository",
904
+ "subjectId": "veritas",
905
+ "impactLevel": "high",
906
+ "verificationPolicyId": "veritas.evidence-check",
907
+ "metadata": {
908
+ "command": "npm run verify"
909
+ },
910
+ "createdAt": "2026-05-19T13:38:14.077Z",
911
+ "updatedAt": "2026-07-02T14:17:20.335Z",
912
+ "value": "all checks pass",
913
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
914
+ },
915
+ {
916
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
917
+ "surface": "veritas.evidence-check",
918
+ "claimType": "software-evidence-check",
919
+ "fieldOrBehavior": "npm run veritas:fallow:advisory",
920
+ "subjectType": "repository",
921
+ "subjectId": "veritas",
922
+ "impactLevel": "high",
923
+ "verificationPolicyId": "veritas.evidence-check",
924
+ "metadata": {
925
+ "command": "npm run veritas:fallow:advisory"
926
+ },
927
+ "createdAt": "2026-05-19T13:38:14.077Z",
928
+ "updatedAt": "2026-07-02T14:17:20.335Z",
929
+ "value": "all checks pass",
930
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
931
+ },
932
+ {
933
+ "id": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
934
+ "surface": "veritas.policy-results",
935
+ "claimType": "veritas-policy-result",
936
+ "fieldOrBehavior": "policy-changes-require-attestation",
937
+ "subjectType": "policy-rule",
938
+ "subjectId": "veritas:veritas-default:policy-changes-require-attestation",
939
+ "impactLevel": "high",
940
+ "verificationPolicyId": "veritas.policy-result",
941
+ "metadata": {
942
+ "projected": true,
943
+ "ruleId": "policy-changes-require-attestation",
944
+ "enforcementLevel": "Require",
945
+ "classification": "hard-invariant",
946
+ "repoStandards": "veritas-default",
947
+ "repoMap": "veritas"
948
+ },
949
+ "createdAt": "2026-07-02T14:17:20.335Z",
950
+ "updatedAt": "2026-07-02T14:17:20.335Z",
951
+ "value": "policy-changes-require-attestation",
952
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
953
+ },
954
+ {
955
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
956
+ "surface": "veritas.policy-results",
957
+ "claimType": "veritas-policy-result",
958
+ "fieldOrBehavior": "required-veritas-operational-artifacts",
959
+ "subjectType": "policy-rule",
960
+ "subjectId": "veritas:veritas-default:required-veritas-operational-artifacts",
961
+ "impactLevel": "high",
962
+ "verificationPolicyId": "veritas.policy-result",
963
+ "metadata": {
964
+ "projected": true,
965
+ "ruleId": "required-veritas-operational-artifacts",
966
+ "enforcementLevel": "Require",
967
+ "classification": "hard-invariant",
968
+ "repoStandards": "veritas-default",
969
+ "repoMap": "veritas"
970
+ },
971
+ "createdAt": "2026-07-02T14:17:20.335Z",
972
+ "updatedAt": "2026-07-02T14:17:20.335Z",
973
+ "value": "required-veritas-operational-artifacts",
974
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
975
+ },
976
+ {
977
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
978
+ "surface": "veritas.policy-results",
979
+ "claimType": "veritas-policy-result",
980
+ "fieldOrBehavior": "required-veritas-cli-artifacts",
981
+ "subjectType": "policy-rule",
982
+ "subjectId": "veritas:veritas-default:required-veritas-cli-artifacts",
983
+ "impactLevel": "high",
984
+ "verificationPolicyId": "veritas.policy-result",
985
+ "metadata": {
986
+ "projected": true,
987
+ "ruleId": "required-veritas-cli-artifacts",
988
+ "enforcementLevel": "Require",
989
+ "classification": "hard-invariant",
990
+ "repoStandards": "veritas-default",
991
+ "repoMap": "veritas"
992
+ },
993
+ "createdAt": "2026-07-02T14:17:20.335Z",
994
+ "updatedAt": "2026-07-02T14:17:20.335Z",
995
+ "value": "required-veritas-cli-artifacts",
996
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
997
+ },
998
+ {
999
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1000
+ "surface": "veritas.policy-results",
1001
+ "claimType": "veritas-policy-result",
1002
+ "fieldOrBehavior": "required-veritas-reference-artifacts",
1003
+ "subjectType": "policy-rule",
1004
+ "subjectId": "veritas:veritas-default:required-veritas-reference-artifacts",
1005
+ "impactLevel": "high",
1006
+ "verificationPolicyId": "veritas.policy-result",
1007
+ "metadata": {
1008
+ "projected": true,
1009
+ "ruleId": "required-veritas-reference-artifacts",
1010
+ "enforcementLevel": "Require",
1011
+ "classification": "hard-invariant",
1012
+ "repoStandards": "veritas-default",
1013
+ "repoMap": "veritas"
1014
+ },
1015
+ "createdAt": "2026-07-02T14:17:20.335Z",
1016
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1017
+ "value": "required-veritas-reference-artifacts",
1018
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1019
+ },
1020
+ {
1021
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
1022
+ "surface": "veritas.policy-results",
1023
+ "claimType": "veritas-policy-result",
1024
+ "fieldOrBehavior": "required-veritas-schema-artifacts",
1025
+ "subjectType": "policy-rule",
1026
+ "subjectId": "veritas:veritas-default:required-veritas-schema-artifacts",
1027
+ "impactLevel": "high",
1028
+ "verificationPolicyId": "veritas.policy-result",
1029
+ "metadata": {
1030
+ "projected": true,
1031
+ "ruleId": "required-veritas-schema-artifacts",
1032
+ "enforcementLevel": "Require",
1033
+ "classification": "hard-invariant",
1034
+ "repoStandards": "veritas-default",
1035
+ "repoMap": "veritas"
1036
+ },
1037
+ "createdAt": "2026-07-02T14:17:20.335Z",
1038
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1039
+ "value": "required-veritas-schema-artifacts",
1040
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1041
+ },
1042
+ {
1043
+ "id": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
1044
+ "surface": "veritas.policy-results",
1045
+ "claimType": "veritas-policy-result",
1046
+ "fieldOrBehavior": "ai-instruction-files-synced",
1047
+ "subjectType": "policy-rule",
1048
+ "subjectId": "veritas:veritas-default:ai-instruction-files-synced",
1049
+ "impactLevel": "high",
1050
+ "verificationPolicyId": "veritas.policy-result",
1051
+ "metadata": {
1052
+ "projected": true,
1053
+ "ruleId": "ai-instruction-files-synced",
1054
+ "enforcementLevel": "Guide",
1055
+ "classification": "hard-invariant",
1056
+ "repoStandards": "veritas-default",
1057
+ "repoMap": "veritas"
1058
+ },
1059
+ "createdAt": "2026-07-02T14:17:20.335Z",
1060
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1061
+ "value": "ai-instruction-files-synced",
1062
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1063
+ },
1064
+ {
1065
+ "id": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
1066
+ "surface": "veritas.policy-results",
1067
+ "claimType": "veritas-policy-result",
1068
+ "fieldOrBehavior": "prefer-veritas-routed-delivery",
1069
+ "subjectType": "policy-rule",
1070
+ "subjectId": "veritas:veritas-default:prefer-veritas-routed-delivery",
1071
+ "impactLevel": "low",
1072
+ "verificationPolicyId": "veritas.policy-result",
1073
+ "metadata": {
1074
+ "projected": true,
1075
+ "ruleId": "prefer-veritas-routed-delivery",
1076
+ "enforcementLevel": "Observe",
1077
+ "classification": "promotable-policy",
1078
+ "repoStandards": "veritas-default",
1079
+ "repoMap": "veritas"
1080
+ },
1081
+ "createdAt": "2026-07-02T14:17:20.335Z",
1082
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1083
+ "value": "prefer-veritas-routed-delivery",
1084
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1085
+ },
1086
+ {
1087
+ "id": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
1088
+ "surface": "veritas.policy-results",
1089
+ "claimType": "veritas-policy-result",
1090
+ "fieldOrBehavior": "no-console-log-in-src",
1091
+ "subjectType": "policy-rule",
1092
+ "subjectId": "veritas:veritas-default:no-console-log-in-src",
1093
+ "impactLevel": "medium",
1094
+ "verificationPolicyId": "veritas.policy-result",
1095
+ "metadata": {
1096
+ "projected": true,
1097
+ "ruleId": "no-console-log-in-src",
1098
+ "enforcementLevel": "Guide",
1099
+ "classification": "advisory-pattern",
1100
+ "repoStandards": "veritas-default",
1101
+ "repoMap": "veritas"
1102
+ },
1103
+ "createdAt": "2026-07-02T14:17:20.335Z",
1104
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1105
+ "value": "no-console-log-in-src",
1106
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1107
+ },
1108
+ {
1109
+ "id": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
1110
+ "surface": "veritas.policy-results",
1111
+ "claimType": "veritas-policy-result",
1112
+ "fieldOrBehavior": "canonical-veritas-vocabulary",
1113
+ "subjectType": "policy-rule",
1114
+ "subjectId": "veritas:veritas-default:canonical-veritas-vocabulary",
1115
+ "impactLevel": "medium",
1116
+ "verificationPolicyId": "veritas.policy-result",
1117
+ "metadata": {
1118
+ "projected": true,
1119
+ "ruleId": "canonical-veritas-vocabulary",
1120
+ "enforcementLevel": "Guide",
1121
+ "classification": "advisory-pattern",
1122
+ "repoStandards": "veritas-default",
1123
+ "repoMap": "veritas"
1124
+ },
1125
+ "createdAt": "2026-07-02T14:17:20.335Z",
1126
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1127
+ "value": "canonical-veritas-vocabulary",
1128
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1129
+ },
1130
+ {
1131
+ "id": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
1132
+ "surface": "veritas.policy-results",
1133
+ "claimType": "veritas-policy-result",
1134
+ "fieldOrBehavior": "repeatable-governance-uses-veritas-primitives",
1135
+ "subjectType": "policy-rule",
1136
+ "subjectId": "veritas:veritas-default:repeatable-governance-uses-veritas-primitives",
1137
+ "impactLevel": "medium",
1138
+ "verificationPolicyId": "veritas.policy-result",
1139
+ "metadata": {
1140
+ "projected": true,
1141
+ "ruleId": "repeatable-governance-uses-veritas-primitives",
1142
+ "enforcementLevel": "Guide",
1143
+ "classification": "promotable-policy",
1144
+ "repoStandards": "veritas-default",
1145
+ "repoMap": "veritas"
1146
+ },
1147
+ "createdAt": "2026-07-02T14:17:20.335Z",
1148
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1149
+ "value": "repeatable-governance-uses-veritas-primitives",
1150
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1151
+ },
1152
+ {
1153
+ "id": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1154
+ "surface": "veritas.readiness",
1155
+ "claimType": "software-readiness-verdict",
1156
+ "fieldOrBehavior": "mergeReadiness",
1157
+ "subjectType": "repository-change",
1158
+ "subjectId": "veritas-default:working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1159
+ "value": {
1160
+ "verdict": "ready",
1161
+ "promotionAllowed": true,
1162
+ "uncoveredPathResult": "clear",
1163
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
1164
+ },
1165
+ "status": "verified",
1166
+ "impactLevel": "high",
1167
+ "verificationPolicyId": "veritas.readiness-verdict",
1168
+ "derivedFrom": [
1169
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1170
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1171
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1172
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1173
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
1174
+ ],
1175
+ "derivationEdges": [
1176
+ {
1177
+ "inputClaimId": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1178
+ "method": "rule-application",
1179
+ "role": "blocking-requirement",
1180
+ "supportStrength": "strong",
1181
+ "rationale": "Veritas merge readiness applies the blocking requirement \"policy-changes-require-attestation\", which passed during requirements evaluation."
1182
+ },
1183
+ {
1184
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1185
+ "method": "rule-application",
1186
+ "role": "blocking-requirement",
1187
+ "supportStrength": "strong",
1188
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-operational-artifacts\", which passed during requirements evaluation."
1189
+ },
1190
+ {
1191
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1192
+ "method": "rule-application",
1193
+ "role": "blocking-requirement",
1194
+ "supportStrength": "strong",
1195
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-cli-artifacts\", which failed during requirements evaluation."
1196
+ },
1197
+ {
1198
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1199
+ "method": "rule-application",
1200
+ "role": "blocking-requirement",
1201
+ "supportStrength": "strong",
1202
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-reference-artifacts\", which passed during requirements evaluation."
1203
+ },
1204
+ {
1205
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
1206
+ "method": "rule-application",
1207
+ "role": "blocking-requirement",
1208
+ "supportStrength": "strong",
1209
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-schema-artifacts\", which passed during requirements evaluation."
1210
+ }
1211
+ ],
1212
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1213
+ "createdAt": "2026-07-02T14:17:20.335Z",
1214
+ "updatedAt": "2026-07-02T14:17:20.335Z",
1215
+ "metadata": {
1216
+ "producer": "veritas",
1217
+ "source": "readiness",
1218
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1219
+ "sourceKind": "working-tree",
1220
+ "sourceScope": [
1221
+ "staged",
1222
+ "unstaged",
1223
+ "untracked"
1224
+ ],
1225
+ "policyCoverage": {
1226
+ "policyResultCount": 10,
1227
+ "derivedRequirementClaimIds": [
1228
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1229
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1230
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1231
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1232
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
1233
+ ],
1234
+ "selectedEvidenceCheckCount": 3,
1235
+ "readinessCoveragePresent": true
1236
+ },
1237
+ "integrity": {
1238
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1239
+ "sourceKind": "working-tree",
1240
+ "sourceScope": [
1241
+ "staged",
1242
+ "unstaged",
1243
+ "untracked"
1244
+ ],
1245
+ "fileRefs": [],
1246
+ "configRefs": {
1247
+ "repoMap": {
1248
+ "name": "veritas",
1249
+ "path": ".veritas/repo-map.json",
1250
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1251
+ },
1252
+ "repoStandards": {
1253
+ "name": "veritas-default",
1254
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1255
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1256
+ },
1257
+ "authoritySettings": {
1258
+ "name": "authority-settings",
1259
+ "path": ".veritas/authority/default.authority-settings.json",
1260
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1261
+ }
1262
+ }
1263
+ }
1264
+ }
1265
+ }
1266
+ ],
1267
+ "evidence": [
1268
+ {
1269
+ "id": "veritas-1783001840335.evidence-check.required-evidence-check.evidence",
1270
+ "claimId": "veritas.evidence-check.npm-run-verify",
1271
+ "evidenceType": "test_output",
1272
+ "method": "validation",
1273
+ "sourceRef": "veritas-1783001840335",
1274
+ "sourceLocator": "selected_evidence_checks",
1275
+ "excerptOrSummary": "All evidence checks passed.",
1276
+ "observedAt": "2026-07-02T14:17:20.335Z",
1277
+ "collectedBy": "veritas",
1278
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1279
+ "passing": true,
1280
+ "blocking": true,
1281
+ "execution": {
1282
+ "runner": "bash",
1283
+ "label": "npm run verify",
1284
+ "exitCode": 0,
1285
+ "durationMs": 190
1286
+ },
1287
+ "metadata": {
1288
+ "sourceKind": "working-tree",
1289
+ "sourceScope": [
1290
+ "staged",
1291
+ "unstaged",
1292
+ "untracked"
1293
+ ],
1294
+ "files": [],
1295
+ "unresolvedFiles": [],
1296
+ "integrity": {
1297
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1298
+ "sourceKind": "working-tree",
1299
+ "sourceScope": [
1300
+ "staged",
1301
+ "unstaged",
1302
+ "untracked"
1303
+ ],
1304
+ "fileRefs": [],
1305
+ "configRefs": {
1306
+ "repoMap": {
1307
+ "name": "veritas",
1308
+ "path": ".veritas/repo-map.json",
1309
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1310
+ },
1311
+ "repoStandards": {
1312
+ "name": "veritas-default",
1313
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1314
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1315
+ },
1316
+ "authoritySettings": {
1317
+ "name": "authority-settings",
1318
+ "path": ".veritas/authority/default.authority-settings.json",
1319
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1320
+ }
1321
+ }
1322
+ },
1323
+ "fileIntegrity": [],
1324
+ "configIntegrity": {
1325
+ "repoMap": {
1326
+ "name": "veritas",
1327
+ "path": ".veritas/repo-map.json",
1328
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1329
+ },
1330
+ "repoStandards": {
1331
+ "name": "veritas-default",
1332
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1333
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1334
+ },
1335
+ "authoritySettings": {
1336
+ "name": "authority-settings",
1337
+ "path": ".veritas/authority/default.authority-settings.json",
1338
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1339
+ }
1340
+ },
1341
+ "evidenceCheckLabel": "npm run verify",
1342
+ "command": "npm run verify",
1343
+ "expectedResult": "all checks pass",
1344
+ "observedResult": {
1345
+ "expected": "all checks pass",
1346
+ "status": "passed",
1347
+ "summary": "All evidence checks passed."
1348
+ },
1349
+ "commandOutput": {
1350
+ "command": "npm run verify",
1351
+ "exitCode": 0,
1352
+ "signal": null,
1353
+ "stdout": "\n> @kontourai/veritas@1.1.0 verify\n> node scripts/check-content-boundary.cjs && node scripts/verify.mjs\n\nContent boundary check passed.\nVeritas verification passed.\n",
1354
+ "stderr": "",
1355
+ "combined": "\n> @kontourai/veritas@1.1.0 verify\n> node scripts/check-content-boundary.cjs && node scripts/verify.mjs\n\nContent boundary check passed.\nVeritas verification passed.\n"
1356
+ },
1357
+ "evidenceCheckResolutionSource": "default",
1358
+ "baselineCiFastPassed": true,
1359
+ "evidenceCheckId": "required-evidence-check",
1360
+ "evidenceCheckRunner": "bash",
1361
+ "surfaceClaimIds": []
1362
+ }
1363
+ },
1364
+ {
1365
+ "id": "veritas-1783001840335.evidence-check.fallow-advisory.evidence",
1366
+ "claimId": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
1367
+ "evidenceType": "test_output",
1368
+ "method": "auditability",
1369
+ "sourceRef": "veritas-1783001840335",
1370
+ "sourceLocator": "selected_evidence_checks",
1371
+ "excerptOrSummary": "All evidence checks passed.",
1372
+ "observedAt": "2026-07-02T14:17:20.335Z",
1373
+ "collectedBy": "veritas",
1374
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1375
+ "passing": true,
1376
+ "blocking": true,
1377
+ "execution": {
1378
+ "runner": "bash",
1379
+ "label": "npm run veritas:fallow:advisory",
1380
+ "exitCode": 0,
1381
+ "durationMs": 705
1382
+ },
1383
+ "metadata": {
1384
+ "sourceKind": "working-tree",
1385
+ "sourceScope": [
1386
+ "staged",
1387
+ "unstaged",
1388
+ "untracked"
1389
+ ],
1390
+ "files": [],
1391
+ "unresolvedFiles": [],
1392
+ "integrity": {
1393
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1394
+ "sourceKind": "working-tree",
1395
+ "sourceScope": [
1396
+ "staged",
1397
+ "unstaged",
1398
+ "untracked"
1399
+ ],
1400
+ "fileRefs": [],
1401
+ "configRefs": {
1402
+ "repoMap": {
1403
+ "name": "veritas",
1404
+ "path": ".veritas/repo-map.json",
1405
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1406
+ },
1407
+ "repoStandards": {
1408
+ "name": "veritas-default",
1409
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1410
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1411
+ },
1412
+ "authoritySettings": {
1413
+ "name": "authority-settings",
1414
+ "path": ".veritas/authority/default.authority-settings.json",
1415
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1416
+ }
1417
+ }
1418
+ },
1419
+ "fileIntegrity": [],
1420
+ "configIntegrity": {
1421
+ "repoMap": {
1422
+ "name": "veritas",
1423
+ "path": ".veritas/repo-map.json",
1424
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1425
+ },
1426
+ "repoStandards": {
1427
+ "name": "veritas-default",
1428
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1429
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1430
+ },
1431
+ "authoritySettings": {
1432
+ "name": "authority-settings",
1433
+ "path": ".veritas/authority/default.authority-settings.json",
1434
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1435
+ }
1436
+ },
1437
+ "evidenceCheckLabel": "npm run veritas:fallow:advisory",
1438
+ "command": "npm run veritas:fallow:advisory",
1439
+ "expectedResult": "all checks pass",
1440
+ "observedResult": {
1441
+ "expected": "all checks pass",
1442
+ "status": "passed",
1443
+ "summary": "All evidence checks passed."
1444
+ },
1445
+ "commandOutput": {
1446
+ "command": "npm run veritas:fallow:advisory",
1447
+ "exitCode": 0,
1448
+ "signal": null,
1449
+ "stdout": "\n> @kontourai/veritas@1.1.0 veritas:fallow:advisory\n> node scripts/run-fallow-audit.mjs\n\n{\"artifactPath\":\".kontourai/veritas/external/fallow-audit.json\",\"schema_version\":\"veritas-fallow-advisory-v1\",\"tool\":\"fallow\",\"command\":\"npx -y fallow --format json --quiet\",\"verdict\":\"warn\",\"summary\":{\"dead_code_issues\":2,\"duplication_clone_groups\":17,\"duplicated_lines\":573,\"duplication_percent\":3.429084380610413,\"complexity_findings\":258,\"average_maintainability\":89.7},\"baseline\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"complexity_findings\":258},\"deltas\":{\"dead_code_issues\":2,\"duplication_clone_groups\":0,\"complexity_findings\":0},\"actions\":[{\"type\":\"apply-refactoring\",\"description\":\"2 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/surface/readiness-authority.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/readiness-authority.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (68 LOC), 6 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/surface/primitives.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/primitives.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (4 LOC), 8 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/util/strings.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/util/strings.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"4 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/evidence/external-tools.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/evidence/external-tools.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"5 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/evidence/suites.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/evidence/suites.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"6 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-status.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-status.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"7 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/explain.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/explain.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (279 LOC), 3 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/standards-feedback/recommendations.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/standards-feedback/recommendations.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (59 LOC), 4 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/plugins/loader.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/plugins/loader.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (384 LOC), 3 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-projection.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-projection.mjs\"]}]}\n",
1450
+ "stderr": "",
1451
+ "combined": "\n> @kontourai/veritas@1.1.0 veritas:fallow:advisory\n> node scripts/run-fallow-audit.mjs\n\n{\"artifactPath\":\".kontourai/veritas/external/fallow-audit.json\",\"schema_version\":\"veritas-fallow-advisory-v1\",\"tool\":\"fallow\",\"command\":\"npx -y fallow --format json --quiet\",\"verdict\":\"warn\",\"summary\":{\"dead_code_issues\":2,\"duplication_clone_groups\":17,\"duplicated_lines\":573,\"duplication_percent\":3.429084380610413,\"complexity_findings\":258,\"average_maintainability\":89.7},\"baseline\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"complexity_findings\":258},\"deltas\":{\"dead_code_issues\":2,\"duplication_clone_groups\":0,\"complexity_findings\":0},\"actions\":[{\"type\":\"apply-refactoring\",\"description\":\"2 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/surface/readiness-authority.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/readiness-authority.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (68 LOC), 6 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/surface/primitives.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/primitives.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (4 LOC), 8 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/util/strings.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/util/strings.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"4 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/evidence/external-tools.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/evidence/external-tools.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"5 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/evidence/suites.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/evidence/suites.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"6 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-status.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-status.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"7 complex functions lack test coverage path, add tests before modifying\",\"auto_fixable\":false,\"paths\":[\"src/explain.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/explain.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (279 LOC), 3 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/standards-feedback/recommendations.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/standards-feedback/recommendations.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (59 LOC), 4 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/plugins/loader.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/plugins/loader.mjs\"]},{\"type\":\"apply-refactoring\",\"description\":\"Split high-impact file (384 LOC), 3 dependents amplify every change\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-projection.mjs\"]},{\"type\":\"suppress-line\",\"description\":\"Suppress the underlying complexity finding\",\"auto_fixable\":false,\"paths\":[\"src/surface/evidence-projection.mjs\"]}]}\n"
1452
+ },
1453
+ "evidenceCheckResolutionSource": "default",
1454
+ "baselineCiFastPassed": true,
1455
+ "evidenceCheckId": "fallow-advisory",
1456
+ "evidenceCheckRunner": "bash",
1457
+ "surfaceClaimIds": []
1458
+ }
1459
+ },
1460
+ {
1461
+ "id": "veritas-1783001840335.policy.policy-changes-require-attestation.evidence",
1462
+ "claimId": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1463
+ "evidenceType": "policy_rule",
1464
+ "method": "validation",
1465
+ "sourceRef": "veritas-1783001840335",
1466
+ "sourceLocator": "policy_results.policy-changes-require-attestation",
1467
+ "excerptOrSummary": "Active attestation policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a matches current protected standards hashes.",
1468
+ "observedAt": "2026-07-02T14:17:20.335Z",
1469
+ "collectedBy": "veritas",
1470
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1471
+ "passing": true,
1472
+ "blocking": true,
1473
+ "metadata": {
1474
+ "sourceKind": "working-tree",
1475
+ "sourceScope": [
1476
+ "staged",
1477
+ "unstaged",
1478
+ "untracked"
1479
+ ],
1480
+ "files": [],
1481
+ "unresolvedFiles": [],
1482
+ "integrity": {
1483
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1484
+ "sourceKind": "working-tree",
1485
+ "sourceScope": [
1486
+ "staged",
1487
+ "unstaged",
1488
+ "untracked"
1489
+ ],
1490
+ "fileRefs": [],
1491
+ "configRefs": {
1492
+ "repoMap": {
1493
+ "name": "veritas",
1494
+ "path": ".veritas/repo-map.json",
1495
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1496
+ },
1497
+ "repoStandards": {
1498
+ "name": "veritas-default",
1499
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1500
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1501
+ },
1502
+ "authoritySettings": {
1503
+ "name": "authority-settings",
1504
+ "path": ".veritas/authority/default.authority-settings.json",
1505
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1506
+ }
1507
+ }
1508
+ },
1509
+ "fileIntegrity": [],
1510
+ "configIntegrity": {
1511
+ "repoMap": {
1512
+ "name": "veritas",
1513
+ "path": ".veritas/repo-map.json",
1514
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1515
+ },
1516
+ "repoStandards": {
1517
+ "name": "veritas-default",
1518
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1519
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1520
+ },
1521
+ "authoritySettings": {
1522
+ "name": "authority-settings",
1523
+ "path": ".veritas/authority/default.authority-settings.json",
1524
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1525
+ }
1526
+ },
1527
+ "enforcementLevel": "Require",
1528
+ "classification": "hard-invariant",
1529
+ "implemented": true,
1530
+ "passed": true,
1531
+ "transparencyGapHints": []
1532
+ }
1533
+ },
1534
+ {
1535
+ "id": "veritas-1783001840335.policy.required-veritas-operational-artifacts.evidence",
1536
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1537
+ "evidenceType": "policy_rule",
1538
+ "method": "validation",
1539
+ "sourceRef": "veritas-1783001840335",
1540
+ "sourceLocator": "policy_results.required-veritas-operational-artifacts",
1541
+ "excerptOrSummary": "All required repository artifacts are present.",
1542
+ "observedAt": "2026-07-02T14:17:20.335Z",
1543
+ "collectedBy": "veritas",
1544
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1545
+ "passing": true,
1546
+ "blocking": true,
1547
+ "metadata": {
1548
+ "sourceKind": "working-tree",
1549
+ "sourceScope": [
1550
+ "staged",
1551
+ "unstaged",
1552
+ "untracked"
1553
+ ],
1554
+ "files": [],
1555
+ "unresolvedFiles": [],
1556
+ "integrity": {
1557
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1558
+ "sourceKind": "working-tree",
1559
+ "sourceScope": [
1560
+ "staged",
1561
+ "unstaged",
1562
+ "untracked"
1563
+ ],
1564
+ "fileRefs": [],
1565
+ "configRefs": {
1566
+ "repoMap": {
1567
+ "name": "veritas",
1568
+ "path": ".veritas/repo-map.json",
1569
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1570
+ },
1571
+ "repoStandards": {
1572
+ "name": "veritas-default",
1573
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1574
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1575
+ },
1576
+ "authoritySettings": {
1577
+ "name": "authority-settings",
1578
+ "path": ".veritas/authority/default.authority-settings.json",
1579
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1580
+ }
1581
+ }
1582
+ },
1583
+ "fileIntegrity": [],
1584
+ "configIntegrity": {
1585
+ "repoMap": {
1586
+ "name": "veritas",
1587
+ "path": ".veritas/repo-map.json",
1588
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1589
+ },
1590
+ "repoStandards": {
1591
+ "name": "veritas-default",
1592
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1593
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1594
+ },
1595
+ "authoritySettings": {
1596
+ "name": "authority-settings",
1597
+ "path": ".veritas/authority/default.authority-settings.json",
1598
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1599
+ }
1600
+ },
1601
+ "enforcementLevel": "Require",
1602
+ "classification": "hard-invariant",
1603
+ "implemented": true,
1604
+ "passed": true,
1605
+ "transparencyGapHints": []
1606
+ }
1607
+ },
1608
+ {
1609
+ "id": "veritas-1783001840335.policy.required-veritas-cli-artifacts.evidence",
1610
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1611
+ "evidenceType": "policy_rule",
1612
+ "method": "validation",
1613
+ "sourceRef": "veritas-1783001840335",
1614
+ "sourceLocator": "policy_results.required-veritas-cli-artifacts",
1615
+ "excerptOrSummary": "Some required repository artifacts are missing.",
1616
+ "observedAt": "2026-07-02T14:17:20.335Z",
1617
+ "collectedBy": "veritas",
1618
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1619
+ "passing": false,
1620
+ "blocking": true,
1621
+ "metadata": {
1622
+ "sourceKind": "working-tree",
1623
+ "sourceScope": [
1624
+ "staged",
1625
+ "unstaged",
1626
+ "untracked"
1627
+ ],
1628
+ "files": [],
1629
+ "unresolvedFiles": [],
1630
+ "integrity": {
1631
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1632
+ "sourceKind": "working-tree",
1633
+ "sourceScope": [
1634
+ "staged",
1635
+ "unstaged",
1636
+ "untracked"
1637
+ ],
1638
+ "fileRefs": [],
1639
+ "configRefs": {
1640
+ "repoMap": {
1641
+ "name": "veritas",
1642
+ "path": ".veritas/repo-map.json",
1643
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1644
+ },
1645
+ "repoStandards": {
1646
+ "name": "veritas-default",
1647
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1648
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1649
+ },
1650
+ "authoritySettings": {
1651
+ "name": "authority-settings",
1652
+ "path": ".veritas/authority/default.authority-settings.json",
1653
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1654
+ }
1655
+ }
1656
+ },
1657
+ "fileIntegrity": [],
1658
+ "configIntegrity": {
1659
+ "repoMap": {
1660
+ "name": "veritas",
1661
+ "path": ".veritas/repo-map.json",
1662
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1663
+ },
1664
+ "repoStandards": {
1665
+ "name": "veritas-default",
1666
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1667
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1668
+ },
1669
+ "authoritySettings": {
1670
+ "name": "authority-settings",
1671
+ "path": ".veritas/authority/default.authority-settings.json",
1672
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1673
+ }
1674
+ },
1675
+ "enforcementLevel": "Require",
1676
+ "classification": "hard-invariant",
1677
+ "implemented": true,
1678
+ "passed": false,
1679
+ "transparencyGapHints": [
1680
+ {
1681
+ "type": "policy_violation",
1682
+ "severity": "high",
1683
+ "message": "The shipped Veritas CLI entrypoints and package manifest must stay present.",
1684
+ "blocking": true
1685
+ }
1686
+ ]
1687
+ }
1688
+ },
1689
+ {
1690
+ "id": "veritas-1783001840335.policy.required-veritas-reference-artifacts.evidence",
1691
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1692
+ "evidenceType": "policy_rule",
1693
+ "method": "validation",
1694
+ "sourceRef": "veritas-1783001840335",
1695
+ "sourceLocator": "policy_results.required-veritas-reference-artifacts",
1696
+ "excerptOrSummary": "All required repository artifacts are present.",
1697
+ "observedAt": "2026-07-02T14:17:20.335Z",
1698
+ "collectedBy": "veritas",
1699
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1700
+ "passing": true,
1701
+ "blocking": true,
1702
+ "metadata": {
1703
+ "sourceKind": "working-tree",
1704
+ "sourceScope": [
1705
+ "staged",
1706
+ "unstaged",
1707
+ "untracked"
1708
+ ],
1709
+ "files": [],
1710
+ "unresolvedFiles": [],
1711
+ "integrity": {
1712
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1713
+ "sourceKind": "working-tree",
1714
+ "sourceScope": [
1715
+ "staged",
1716
+ "unstaged",
1717
+ "untracked"
1718
+ ],
1719
+ "fileRefs": [],
1720
+ "configRefs": {
1721
+ "repoMap": {
1722
+ "name": "veritas",
1723
+ "path": ".veritas/repo-map.json",
1724
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1725
+ },
1726
+ "repoStandards": {
1727
+ "name": "veritas-default",
1728
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1729
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1730
+ },
1731
+ "authoritySettings": {
1732
+ "name": "authority-settings",
1733
+ "path": ".veritas/authority/default.authority-settings.json",
1734
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1735
+ }
1736
+ }
1737
+ },
1738
+ "fileIntegrity": [],
1739
+ "configIntegrity": {
1740
+ "repoMap": {
1741
+ "name": "veritas",
1742
+ "path": ".veritas/repo-map.json",
1743
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1744
+ },
1745
+ "repoStandards": {
1746
+ "name": "veritas-default",
1747
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1748
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1749
+ },
1750
+ "authoritySettings": {
1751
+ "name": "authority-settings",
1752
+ "path": ".veritas/authority/default.authority-settings.json",
1753
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1754
+ }
1755
+ },
1756
+ "enforcementLevel": "Require",
1757
+ "classification": "hard-invariant",
1758
+ "implemented": true,
1759
+ "passed": true,
1760
+ "transparencyGapHints": []
1761
+ }
1762
+ },
1763
+ {
1764
+ "id": "veritas-1783001840335.policy.required-veritas-schema-artifacts.evidence",
1765
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
1766
+ "evidenceType": "policy_rule",
1767
+ "method": "validation",
1768
+ "sourceRef": "veritas-1783001840335",
1769
+ "sourceLocator": "policy_results.required-veritas-schema-artifacts",
1770
+ "excerptOrSummary": "All required repository artifacts are present.",
1771
+ "observedAt": "2026-07-02T14:17:20.335Z",
1772
+ "collectedBy": "veritas",
1773
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1774
+ "passing": true,
1775
+ "blocking": true,
1776
+ "metadata": {
1777
+ "sourceKind": "working-tree",
1778
+ "sourceScope": [
1779
+ "staged",
1780
+ "unstaged",
1781
+ "untracked"
1782
+ ],
1783
+ "files": [],
1784
+ "unresolvedFiles": [],
1785
+ "integrity": {
1786
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1787
+ "sourceKind": "working-tree",
1788
+ "sourceScope": [
1789
+ "staged",
1790
+ "unstaged",
1791
+ "untracked"
1792
+ ],
1793
+ "fileRefs": [],
1794
+ "configRefs": {
1795
+ "repoMap": {
1796
+ "name": "veritas",
1797
+ "path": ".veritas/repo-map.json",
1798
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1799
+ },
1800
+ "repoStandards": {
1801
+ "name": "veritas-default",
1802
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1803
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1804
+ },
1805
+ "authoritySettings": {
1806
+ "name": "authority-settings",
1807
+ "path": ".veritas/authority/default.authority-settings.json",
1808
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1809
+ }
1810
+ }
1811
+ },
1812
+ "fileIntegrity": [],
1813
+ "configIntegrity": {
1814
+ "repoMap": {
1815
+ "name": "veritas",
1816
+ "path": ".veritas/repo-map.json",
1817
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1818
+ },
1819
+ "repoStandards": {
1820
+ "name": "veritas-default",
1821
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1822
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1823
+ },
1824
+ "authoritySettings": {
1825
+ "name": "authority-settings",
1826
+ "path": ".veritas/authority/default.authority-settings.json",
1827
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1828
+ }
1829
+ },
1830
+ "enforcementLevel": "Require",
1831
+ "classification": "hard-invariant",
1832
+ "implemented": true,
1833
+ "passed": true,
1834
+ "transparencyGapHints": []
1835
+ }
1836
+ },
1837
+ {
1838
+ "id": "veritas-1783001840335.policy.ai-instruction-files-synced.evidence",
1839
+ "claimId": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
1840
+ "evidenceType": "policy_rule",
1841
+ "method": "validation",
1842
+ "sourceRef": "veritas-1783001840335",
1843
+ "sourceLocator": "policy_results.ai-instruction-files-synced",
1844
+ "excerptOrSummary": "All required AI instruction files contain the canonical Veritas governance block.",
1845
+ "observedAt": "2026-07-02T14:17:20.335Z",
1846
+ "collectedBy": "veritas",
1847
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1848
+ "passing": true,
1849
+ "blocking": false,
1850
+ "metadata": {
1851
+ "sourceKind": "working-tree",
1852
+ "sourceScope": [
1853
+ "staged",
1854
+ "unstaged",
1855
+ "untracked"
1856
+ ],
1857
+ "files": [],
1858
+ "unresolvedFiles": [],
1859
+ "integrity": {
1860
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1861
+ "sourceKind": "working-tree",
1862
+ "sourceScope": [
1863
+ "staged",
1864
+ "unstaged",
1865
+ "untracked"
1866
+ ],
1867
+ "fileRefs": [],
1868
+ "configRefs": {
1869
+ "repoMap": {
1870
+ "name": "veritas",
1871
+ "path": ".veritas/repo-map.json",
1872
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1873
+ },
1874
+ "repoStandards": {
1875
+ "name": "veritas-default",
1876
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1877
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1878
+ },
1879
+ "authoritySettings": {
1880
+ "name": "authority-settings",
1881
+ "path": ".veritas/authority/default.authority-settings.json",
1882
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1883
+ }
1884
+ }
1885
+ },
1886
+ "fileIntegrity": [],
1887
+ "configIntegrity": {
1888
+ "repoMap": {
1889
+ "name": "veritas",
1890
+ "path": ".veritas/repo-map.json",
1891
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1892
+ },
1893
+ "repoStandards": {
1894
+ "name": "veritas-default",
1895
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1896
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1897
+ },
1898
+ "authoritySettings": {
1899
+ "name": "authority-settings",
1900
+ "path": ".veritas/authority/default.authority-settings.json",
1901
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1902
+ }
1903
+ },
1904
+ "enforcementLevel": "Guide",
1905
+ "classification": "hard-invariant",
1906
+ "implemented": true,
1907
+ "passed": true,
1908
+ "transparencyGapHints": []
1909
+ }
1910
+ },
1911
+ {
1912
+ "id": "veritas-1783001840335.policy.prefer-veritas-routed-delivery.evidence",
1913
+ "claimId": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
1914
+ "evidenceType": "policy_rule",
1915
+ "method": "validation",
1916
+ "sourceRef": "veritas-1783001840335",
1917
+ "sourceLocator": "policy_results.prefer-veritas-routed-delivery",
1918
+ "excerptOrSummary": "All required repository artifacts are present.",
1919
+ "observedAt": "2026-07-02T14:17:20.335Z",
1920
+ "collectedBy": "veritas",
1921
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1922
+ "passing": true,
1923
+ "blocking": false,
1924
+ "metadata": {
1925
+ "sourceKind": "working-tree",
1926
+ "sourceScope": [
1927
+ "staged",
1928
+ "unstaged",
1929
+ "untracked"
1930
+ ],
1931
+ "files": [],
1932
+ "unresolvedFiles": [],
1933
+ "integrity": {
1934
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1935
+ "sourceKind": "working-tree",
1936
+ "sourceScope": [
1937
+ "staged",
1938
+ "unstaged",
1939
+ "untracked"
1940
+ ],
1941
+ "fileRefs": [],
1942
+ "configRefs": {
1943
+ "repoMap": {
1944
+ "name": "veritas",
1945
+ "path": ".veritas/repo-map.json",
1946
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1947
+ },
1948
+ "repoStandards": {
1949
+ "name": "veritas-default",
1950
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1951
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1952
+ },
1953
+ "authoritySettings": {
1954
+ "name": "authority-settings",
1955
+ "path": ".veritas/authority/default.authority-settings.json",
1956
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1957
+ }
1958
+ }
1959
+ },
1960
+ "fileIntegrity": [],
1961
+ "configIntegrity": {
1962
+ "repoMap": {
1963
+ "name": "veritas",
1964
+ "path": ".veritas/repo-map.json",
1965
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1966
+ },
1967
+ "repoStandards": {
1968
+ "name": "veritas-default",
1969
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1970
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1971
+ },
1972
+ "authoritySettings": {
1973
+ "name": "authority-settings",
1974
+ "path": ".veritas/authority/default.authority-settings.json",
1975
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1976
+ }
1977
+ },
1978
+ "enforcementLevel": "Observe",
1979
+ "classification": "promotable-policy",
1980
+ "implemented": true,
1981
+ "passed": true,
1982
+ "transparencyGapHints": []
1983
+ }
1984
+ },
1985
+ {
1986
+ "id": "veritas-1783001840335.policy.no-console-log-in-src.evidence",
1987
+ "claimId": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
1988
+ "evidenceType": "policy_rule",
1989
+ "method": "validation",
1990
+ "sourceRef": "veritas-1783001840335",
1991
+ "sourceLocator": "policy_results.no-console-log-in-src",
1992
+ "excerptOrSummary": "No matched files contain forbidden pattern console\\.log.",
1993
+ "observedAt": "2026-07-02T14:17:20.335Z",
1994
+ "collectedBy": "veritas",
1995
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
1996
+ "passing": true,
1997
+ "blocking": false,
1998
+ "metadata": {
1999
+ "sourceKind": "working-tree",
2000
+ "sourceScope": [
2001
+ "staged",
2002
+ "unstaged",
2003
+ "untracked"
2004
+ ],
2005
+ "files": [],
2006
+ "unresolvedFiles": [],
2007
+ "integrity": {
2008
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2009
+ "sourceKind": "working-tree",
2010
+ "sourceScope": [
2011
+ "staged",
2012
+ "unstaged",
2013
+ "untracked"
2014
+ ],
2015
+ "fileRefs": [],
2016
+ "configRefs": {
2017
+ "repoMap": {
2018
+ "name": "veritas",
2019
+ "path": ".veritas/repo-map.json",
2020
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2021
+ },
2022
+ "repoStandards": {
2023
+ "name": "veritas-default",
2024
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2025
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2026
+ },
2027
+ "authoritySettings": {
2028
+ "name": "authority-settings",
2029
+ "path": ".veritas/authority/default.authority-settings.json",
2030
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2031
+ }
2032
+ }
2033
+ },
2034
+ "fileIntegrity": [],
2035
+ "configIntegrity": {
2036
+ "repoMap": {
2037
+ "name": "veritas",
2038
+ "path": ".veritas/repo-map.json",
2039
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2040
+ },
2041
+ "repoStandards": {
2042
+ "name": "veritas-default",
2043
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2044
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2045
+ },
2046
+ "authoritySettings": {
2047
+ "name": "authority-settings",
2048
+ "path": ".veritas/authority/default.authority-settings.json",
2049
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2050
+ }
2051
+ },
2052
+ "enforcementLevel": "Guide",
2053
+ "classification": "advisory-pattern",
2054
+ "implemented": true,
2055
+ "passed": true,
2056
+ "transparencyGapHints": []
2057
+ }
2058
+ },
2059
+ {
2060
+ "id": "veritas-1783001840335.policy.canonical-veritas-vocabulary.evidence",
2061
+ "claimId": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
2062
+ "evidenceType": "policy_rule",
2063
+ "method": "validation",
2064
+ "sourceRef": "veritas-1783001840335",
2065
+ "sourceLocator": "policy_results.canonical-veritas-vocabulary",
2066
+ "excerptOrSummary": "All matched files use canonical Veritas vocabulary.",
2067
+ "observedAt": "2026-07-02T14:17:20.335Z",
2068
+ "collectedBy": "veritas",
2069
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2070
+ "passing": true,
2071
+ "blocking": false,
2072
+ "metadata": {
2073
+ "sourceKind": "working-tree",
2074
+ "sourceScope": [
2075
+ "staged",
2076
+ "unstaged",
2077
+ "untracked"
2078
+ ],
2079
+ "files": [],
2080
+ "unresolvedFiles": [],
2081
+ "integrity": {
2082
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2083
+ "sourceKind": "working-tree",
2084
+ "sourceScope": [
2085
+ "staged",
2086
+ "unstaged",
2087
+ "untracked"
2088
+ ],
2089
+ "fileRefs": [],
2090
+ "configRefs": {
2091
+ "repoMap": {
2092
+ "name": "veritas",
2093
+ "path": ".veritas/repo-map.json",
2094
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2095
+ },
2096
+ "repoStandards": {
2097
+ "name": "veritas-default",
2098
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2099
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2100
+ },
2101
+ "authoritySettings": {
2102
+ "name": "authority-settings",
2103
+ "path": ".veritas/authority/default.authority-settings.json",
2104
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2105
+ }
2106
+ }
2107
+ },
2108
+ "fileIntegrity": [],
2109
+ "configIntegrity": {
2110
+ "repoMap": {
2111
+ "name": "veritas",
2112
+ "path": ".veritas/repo-map.json",
2113
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2114
+ },
2115
+ "repoStandards": {
2116
+ "name": "veritas-default",
2117
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2118
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2119
+ },
2120
+ "authoritySettings": {
2121
+ "name": "authority-settings",
2122
+ "path": ".veritas/authority/default.authority-settings.json",
2123
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2124
+ }
2125
+ },
2126
+ "enforcementLevel": "Guide",
2127
+ "classification": "advisory-pattern",
2128
+ "implemented": true,
2129
+ "passed": true,
2130
+ "transparencyGapHints": []
2131
+ }
2132
+ },
2133
+ {
2134
+ "id": "veritas-1783001840335.policy.repeatable-governance-uses-veritas-primitives.evidence",
2135
+ "claimId": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
2136
+ "evidenceType": "policy_rule",
2137
+ "method": "validation",
2138
+ "sourceRef": "veritas-1783001840335",
2139
+ "sourceLocator": "policy_results.repeatable-governance-uses-veritas-primitives",
2140
+ "excerptOrSummary": "Repeatable governance checks are represented by Veritas primitives.",
2141
+ "observedAt": "2026-07-02T14:17:20.335Z",
2142
+ "collectedBy": "veritas",
2143
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2144
+ "passing": true,
2145
+ "blocking": false,
2146
+ "metadata": {
2147
+ "sourceKind": "working-tree",
2148
+ "sourceScope": [
2149
+ "staged",
2150
+ "unstaged",
2151
+ "untracked"
2152
+ ],
2153
+ "files": [],
2154
+ "unresolvedFiles": [],
2155
+ "integrity": {
2156
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2157
+ "sourceKind": "working-tree",
2158
+ "sourceScope": [
2159
+ "staged",
2160
+ "unstaged",
2161
+ "untracked"
2162
+ ],
2163
+ "fileRefs": [],
2164
+ "configRefs": {
2165
+ "repoMap": {
2166
+ "name": "veritas",
2167
+ "path": ".veritas/repo-map.json",
2168
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2169
+ },
2170
+ "repoStandards": {
2171
+ "name": "veritas-default",
2172
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2173
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2174
+ },
2175
+ "authoritySettings": {
2176
+ "name": "authority-settings",
2177
+ "path": ".veritas/authority/default.authority-settings.json",
2178
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2179
+ }
2180
+ }
2181
+ },
2182
+ "fileIntegrity": [],
2183
+ "configIntegrity": {
2184
+ "repoMap": {
2185
+ "name": "veritas",
2186
+ "path": ".veritas/repo-map.json",
2187
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2188
+ },
2189
+ "repoStandards": {
2190
+ "name": "veritas-default",
2191
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2192
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2193
+ },
2194
+ "authoritySettings": {
2195
+ "name": "authority-settings",
2196
+ "path": ".veritas/authority/default.authority-settings.json",
2197
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2198
+ }
2199
+ },
2200
+ "enforcementLevel": "Guide",
2201
+ "classification": "promotable-policy",
2202
+ "implemented": true,
2203
+ "passed": true,
2204
+ "transparencyGapHints": []
2205
+ }
2206
+ },
2207
+ {
2208
+ "id": "veritas-1783001840335.readiness-verdict.evidence",
2209
+ "claimId": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2210
+ "evidenceType": "policy_rule",
2211
+ "method": "validation",
2212
+ "sourceRef": "veritas-1783001840335",
2213
+ "sourceLocator": "readiness",
2214
+ "excerptOrSummary": "Veritas readiness verdict is ready for the evaluated repository change.",
2215
+ "observedAt": "2026-07-02T14:17:20.335Z",
2216
+ "collectedBy": "veritas",
2217
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2218
+ "passing": true,
2219
+ "blocking": false,
2220
+ "metadata": {
2221
+ "sourceKind": "working-tree",
2222
+ "sourceScope": [
2223
+ "staged",
2224
+ "unstaged",
2225
+ "untracked"
2226
+ ],
2227
+ "files": [],
2228
+ "unresolvedFiles": [],
2229
+ "integrity": {
2230
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2231
+ "sourceKind": "working-tree",
2232
+ "sourceScope": [
2233
+ "staged",
2234
+ "unstaged",
2235
+ "untracked"
2236
+ ],
2237
+ "fileRefs": [],
2238
+ "configRefs": {
2239
+ "repoMap": {
2240
+ "name": "veritas",
2241
+ "path": ".veritas/repo-map.json",
2242
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2243
+ },
2244
+ "repoStandards": {
2245
+ "name": "veritas-default",
2246
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2247
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2248
+ },
2249
+ "authoritySettings": {
2250
+ "name": "authority-settings",
2251
+ "path": ".veritas/authority/default.authority-settings.json",
2252
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2253
+ }
2254
+ }
2255
+ },
2256
+ "fileIntegrity": [],
2257
+ "configIntegrity": {
2258
+ "repoMap": {
2259
+ "name": "veritas",
2260
+ "path": ".veritas/repo-map.json",
2261
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2262
+ },
2263
+ "repoStandards": {
2264
+ "name": "veritas-default",
2265
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2266
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2267
+ },
2268
+ "authoritySettings": {
2269
+ "name": "authority-settings",
2270
+ "path": ".veritas/authority/default.authority-settings.json",
2271
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2272
+ }
2273
+ },
2274
+ "readinessVerdict": "ready",
2275
+ "readinessStatus": "verified",
2276
+ "promotionAllowed": true,
2277
+ "uncoveredPathResult": "clear",
2278
+ "policyResults": {
2279
+ "total": 10,
2280
+ "failedBlocking": [
2281
+ "required-veritas-cli-artifacts"
2282
+ ],
2283
+ "warnings": []
2284
+ },
2285
+ "evidenceChecks": {
2286
+ "selected": [
2287
+ "required-evidence-check",
2288
+ "vocabulary-consistency",
2289
+ "fallow-advisory"
2290
+ ],
2291
+ "failed": [],
2292
+ "baselineCiFastPassed": true
2293
+ },
2294
+ "transparencyGapHints": [
2295
+ {
2296
+ "type": "policy_violation",
2297
+ "severity": "high",
2298
+ "message": "Blocking readiness requirement failed: required-veritas-cli-artifacts.",
2299
+ "blocking": true
2300
+ }
2301
+ ]
2302
+ }
2303
+ },
2304
+ {
2305
+ "id": "veritas-1783001840335.governance.veritas.governance.attestation.evidence",
2306
+ "claimId": "veritas.governance",
2307
+ "evidenceType": "attestation",
2308
+ "method": "attestation",
2309
+ "sourceRef": "veritas-1783001840335",
2310
+ "sourceLocator": ".veritas/attestations",
2311
+ "excerptOrSummary": "Authority-backed attestation currency is verified for Protected Standards state current.",
2312
+ "observedAt": "2026-07-02T14:17:20.335Z",
2313
+ "collectedBy": "veritas",
2314
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2315
+ "passing": true,
2316
+ "blocking": false,
2317
+ "metadata": {
2318
+ "sourceKind": "working-tree",
2319
+ "sourceScope": [
2320
+ "staged",
2321
+ "unstaged",
2322
+ "untracked"
2323
+ ],
2324
+ "files": [],
2325
+ "unresolvedFiles": [],
2326
+ "integrity": {
2327
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2328
+ "sourceKind": "working-tree",
2329
+ "sourceScope": [
2330
+ "staged",
2331
+ "unstaged",
2332
+ "untracked"
2333
+ ],
2334
+ "fileRefs": [],
2335
+ "configRefs": {
2336
+ "repoMap": {
2337
+ "name": "veritas",
2338
+ "path": ".veritas/repo-map.json",
2339
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2340
+ },
2341
+ "repoStandards": {
2342
+ "name": "veritas-default",
2343
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2344
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2345
+ },
2346
+ "authoritySettings": {
2347
+ "name": "authority-settings",
2348
+ "path": ".veritas/authority/default.authority-settings.json",
2349
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2350
+ }
2351
+ }
2352
+ },
2353
+ "fileIntegrity": [],
2354
+ "configIntegrity": {
2355
+ "repoMap": {
2356
+ "name": "veritas",
2357
+ "path": ".veritas/repo-map.json",
2358
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2359
+ },
2360
+ "repoStandards": {
2361
+ "name": "veritas-default",
2362
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2363
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2364
+ },
2365
+ "authoritySettings": {
2366
+ "name": "authority-settings",
2367
+ "path": ".veritas/authority/default.authority-settings.json",
2368
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2369
+ }
2370
+ }
2371
+ }
2372
+ },
2373
+ {
2374
+ "id": "veritas-1783001840335.governance.veritas.governance.audit.evidence",
2375
+ "claimId": "veritas.governance",
2376
+ "evidenceType": "policy_rule",
2377
+ "method": "auditability",
2378
+ "sourceRef": "veritas-1783001840335",
2379
+ "sourceLocator": "governance_state",
2380
+ "excerptOrSummary": "Veritas inspected Protected Standards state current for governance artifact integrity.",
2381
+ "observedAt": "2026-07-02T14:17:20.335Z",
2382
+ "collectedBy": "veritas",
2383
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2384
+ "passing": true,
2385
+ "blocking": false,
2386
+ "metadata": {
2387
+ "sourceKind": "working-tree",
2388
+ "sourceScope": [
2389
+ "staged",
2390
+ "unstaged",
2391
+ "untracked"
2392
+ ],
2393
+ "files": [],
2394
+ "unresolvedFiles": [],
2395
+ "integrity": {
2396
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2397
+ "sourceKind": "working-tree",
2398
+ "sourceScope": [
2399
+ "staged",
2400
+ "unstaged",
2401
+ "untracked"
2402
+ ],
2403
+ "fileRefs": [],
2404
+ "configRefs": {
2405
+ "repoMap": {
2406
+ "name": "veritas",
2407
+ "path": ".veritas/repo-map.json",
2408
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2409
+ },
2410
+ "repoStandards": {
2411
+ "name": "veritas-default",
2412
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2413
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2414
+ },
2415
+ "authoritySettings": {
2416
+ "name": "authority-settings",
2417
+ "path": ".veritas/authority/default.authority-settings.json",
2418
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2419
+ }
2420
+ }
2421
+ },
2422
+ "fileIntegrity": [],
2423
+ "configIntegrity": {
2424
+ "repoMap": {
2425
+ "name": "veritas",
2426
+ "path": ".veritas/repo-map.json",
2427
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2428
+ },
2429
+ "repoStandards": {
2430
+ "name": "veritas-default",
2431
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2432
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2433
+ },
2434
+ "authoritySettings": {
2435
+ "name": "authority-settings",
2436
+ "path": ".veritas/authority/default.authority-settings.json",
2437
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2438
+ }
2439
+ }
2440
+ }
2441
+ }
2442
+ ],
2443
+ "policies": [
2444
+ {
2445
+ "id": "veritas.surface",
2446
+ "claimType": "veritas-affected-surface",
2447
+ "requiredEvidence": [
2448
+ "policy_rule"
2449
+ ],
2450
+ "requiredMethods": [
2451
+ "auditability"
2452
+ ],
2453
+ "requiresCorroboration": false,
2454
+ "acceptanceCriteria": [
2455
+ "veritas evidence artifact"
2456
+ ],
2457
+ "reviewAuthority": "veritas",
2458
+ "validityRule": {
2459
+ "kind": "commit"
2460
+ },
2461
+ "stalenessTriggers": [
2462
+ "source_ref changes",
2463
+ "affected node changes"
2464
+ ],
2465
+ "conflictRules": [
2466
+ "newer evidence for the same node supersedes older evidence"
2467
+ ],
2468
+ "impactLevel": "medium"
2469
+ },
2470
+ {
2471
+ "id": "veritas.governance-artifact",
2472
+ "claimType": "veritas-governance-artifact",
2473
+ "requiredEvidence": [
2474
+ "attestation",
2475
+ "policy_rule"
2476
+ ],
2477
+ "requiredMethods": [
2478
+ "auditability",
2479
+ "attestation"
2480
+ ],
2481
+ "requiresCorroboration": false,
2482
+ "acceptanceCriteria": [
2483
+ "Protected Standards hash inspection",
2484
+ "human attestation status"
2485
+ ],
2486
+ "reviewAuthority": "veritas plus human attestation",
2487
+ "validityRule": {
2488
+ "kind": "manual"
2489
+ },
2490
+ "stalenessTriggers": [
2491
+ "repo standards hash changes",
2492
+ "repo map hash changes",
2493
+ "authority settings hash changes",
2494
+ "attestation expiry"
2495
+ ],
2496
+ "conflictRules": [
2497
+ "hash drift disputes governance artifact currency"
2498
+ ],
2499
+ "impactLevel": "high"
2500
+ },
2501
+ {
2502
+ "id": "veritas.evidence-check",
2503
+ "claimType": "software-evidence-check",
2504
+ "requiredEvidence": [
2505
+ "test_output"
2506
+ ],
2507
+ "requiredMethods": [
2508
+ "validation"
2509
+ ],
2510
+ "requiresCorroboration": false,
2511
+ "acceptanceCriteria": [
2512
+ "selected evidenceCheck command"
2513
+ ],
2514
+ "reviewAuthority": "veritas",
2515
+ "validityRule": {
2516
+ "kind": "commit"
2517
+ },
2518
+ "stalenessTriggers": [
2519
+ "source_ref changes",
2520
+ "evidenceCheck command changes",
2521
+ "baseline evidenceCheck fails"
2522
+ ],
2523
+ "conflictRules": [
2524
+ "failed evidenceCheck rejects a previously verified evidenceCheck claim"
2525
+ ],
2526
+ "impactLevel": "high"
2527
+ },
2528
+ {
2529
+ "id": "veritas.policy-result",
2530
+ "claimType": "veritas-policy-result",
2531
+ "requiredEvidence": [
2532
+ "policy_rule"
2533
+ ],
2534
+ "requiredMethods": [
2535
+ "validation"
2536
+ ],
2537
+ "requiresCorroboration": false,
2538
+ "acceptanceCriteria": [
2539
+ "requirements evaluation"
2540
+ ],
2541
+ "reviewAuthority": "veritas requirements",
2542
+ "validityRule": {
2543
+ "kind": "commit"
2544
+ },
2545
+ "stalenessTriggers": [
2546
+ "source_ref changes",
2547
+ "Repo Standards changes",
2548
+ "requirement implementation changes"
2549
+ ],
2550
+ "conflictRules": [
2551
+ "blocking failed requirements reject the affected claim"
2552
+ ],
2553
+ "impactLevel": "high"
2554
+ },
2555
+ {
2556
+ "id": "veritas.readiness-verdict",
2557
+ "claimType": "software-readiness-verdict",
2558
+ "requiredEvidence": [
2559
+ "policy_rule"
2560
+ ],
2561
+ "requiredMethods": [
2562
+ "validation"
2563
+ ],
2564
+ "requiresCorroboration": false,
2565
+ "acceptanceCriteria": [
2566
+ "Veritas readiness verdict"
2567
+ ],
2568
+ "reviewAuthority": "veritas readiness producer",
2569
+ "validityRule": {
2570
+ "kind": "commit"
2571
+ },
2572
+ "stalenessTriggers": [
2573
+ "source_ref changes",
2574
+ "changed file integrity changes",
2575
+ "Protected Standards hash changes"
2576
+ ],
2577
+ "conflictRules": [
2578
+ "blocking failed requirements or evidenceChecks reject readiness"
2579
+ ],
2580
+ "impactLevel": "high"
2581
+ }
2582
+ ],
2583
+ "events": [
2584
+ {
2585
+ "id": "veritas-1783001840335.evidence-check.required-evidence-check.verified",
2586
+ "claimId": "veritas.evidence-check.npm-run-verify",
2587
+ "status": "verified",
2588
+ "actor": "veritas",
2589
+ "method": "npm run verify",
2590
+ "evidenceIds": [
2591
+ "veritas-1783001840335.evidence-check.required-evidence-check.evidence"
2592
+ ],
2593
+ "createdAt": "2026-07-02T14:17:20.335Z",
2594
+ "verifiedAt": "2026-07-02T14:17:20.335Z"
2595
+ },
2596
+ {
2597
+ "id": "veritas-1783001840335.evidence-check.fallow-advisory.verified",
2598
+ "claimId": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
2599
+ "status": "verified",
2600
+ "actor": "veritas",
2601
+ "method": "npm run veritas:fallow:advisory",
2602
+ "evidenceIds": [
2603
+ "veritas-1783001840335.evidence-check.fallow-advisory.evidence"
2604
+ ],
2605
+ "createdAt": "2026-07-02T14:17:20.335Z",
2606
+ "verifiedAt": "2026-07-02T14:17:20.335Z"
2607
+ },
2608
+ {
2609
+ "id": "veritas-1783001840335.policy.policy-changes-require-attestation.verified",
2610
+ "claimId": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
2611
+ "status": "verified",
2612
+ "actor": "veritas",
2613
+ "method": "requirements evaluation",
2614
+ "evidenceIds": [
2615
+ "veritas-1783001840335.policy.policy-changes-require-attestation.evidence"
2616
+ ],
2617
+ "createdAt": "2026-07-02T14:17:20.335Z",
2618
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2619
+ "notes": "Protected standards changes require a fresh authority-backed attestation."
2620
+ },
2621
+ {
2622
+ "id": "veritas-1783001840335.policy.required-veritas-operational-artifacts.verified",
2623
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
2624
+ "status": "verified",
2625
+ "actor": "veritas",
2626
+ "method": "requirements evaluation",
2627
+ "evidenceIds": [
2628
+ "veritas-1783001840335.policy.required-veritas-operational-artifacts.evidence"
2629
+ ],
2630
+ "createdAt": "2026-07-02T14:17:20.335Z",
2631
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2632
+ "notes": "The tracked Veritas operational artifacts must stay present so agents and reviewers share the same baseline."
2633
+ },
2634
+ {
2635
+ "id": "veritas-1783001840335.policy.required-veritas-cli-artifacts.rejected",
2636
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
2637
+ "status": "rejected",
2638
+ "actor": "veritas",
2639
+ "method": "requirements evaluation",
2640
+ "evidenceIds": [
2641
+ "veritas-1783001840335.policy.required-veritas-cli-artifacts.evidence"
2642
+ ],
2643
+ "createdAt": "2026-07-02T14:17:20.335Z",
2644
+ "notes": "The shipped Veritas CLI entrypoints and package manifest must stay present."
2645
+ },
2646
+ {
2647
+ "id": "veritas-1783001840335.policy.required-veritas-reference-artifacts.verified",
2648
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
2649
+ "status": "verified",
2650
+ "actor": "veritas",
2651
+ "method": "requirements evaluation",
2652
+ "evidenceIds": [
2653
+ "veritas-1783001840335.policy.required-veritas-reference-artifacts.evidence"
2654
+ ],
2655
+ "createdAt": "2026-07-02T14:17:20.335Z",
2656
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2657
+ "notes": "The repo must keep the docs that explain the shipped Veritas surface."
2658
+ },
2659
+ {
2660
+ "id": "veritas-1783001840335.policy.required-veritas-schema-artifacts.verified",
2661
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
2662
+ "status": "verified",
2663
+ "actor": "veritas",
2664
+ "method": "requirements evaluation",
2665
+ "evidenceIds": [
2666
+ "veritas-1783001840335.policy.required-veritas-schema-artifacts.evidence"
2667
+ ],
2668
+ "createdAt": "2026-07-02T14:17:20.335Z",
2669
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2670
+ "notes": "The shipped Veritas schema set must stay present and reviewable."
2671
+ },
2672
+ {
2673
+ "id": "veritas-1783001840335.policy.ai-instruction-files-synced.verified",
2674
+ "claimId": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
2675
+ "status": "verified",
2676
+ "actor": "veritas",
2677
+ "method": "requirements evaluation",
2678
+ "evidenceIds": [
2679
+ "veritas-1783001840335.policy.ai-instruction-files-synced.evidence"
2680
+ ],
2681
+ "createdAt": "2026-07-02T14:17:20.335Z",
2682
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2683
+ "notes": "All required AI tool instruction files must contain the Veritas governance block."
2684
+ },
2685
+ {
2686
+ "id": "veritas-1783001840335.policy.prefer-veritas-routed-delivery.verified",
2687
+ "claimId": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
2688
+ "status": "verified",
2689
+ "actor": "veritas",
2690
+ "method": "requirements evaluation",
2691
+ "evidenceIds": [
2692
+ "veritas-1783001840335.policy.prefer-veritas-routed-delivery.evidence"
2693
+ ],
2694
+ "createdAt": "2026-07-02T14:17:20.335Z",
2695
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2696
+ "notes": "Prefer keeping the tracked Veritas evidenceCheck and repo conformance integration surfaces present so changes flow through the documented operational path before review."
2697
+ },
2698
+ {
2699
+ "id": "veritas-1783001840335.policy.no-console-log-in-src.verified",
2700
+ "claimId": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
2701
+ "status": "verified",
2702
+ "actor": "veritas",
2703
+ "method": "requirements evaluation",
2704
+ "evidenceIds": [
2705
+ "veritas-1783001840335.policy.no-console-log-in-src.evidence"
2706
+ ],
2707
+ "createdAt": "2026-07-02T14:17:20.335Z",
2708
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2709
+ "notes": "Source files should not leave console.log diagnostics behind."
2710
+ },
2711
+ {
2712
+ "id": "veritas-1783001840335.policy.canonical-veritas-vocabulary.verified",
2713
+ "claimId": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
2714
+ "status": "verified",
2715
+ "actor": "veritas",
2716
+ "method": "requirements evaluation",
2717
+ "evidenceIds": [
2718
+ "veritas-1783001840335.policy.canonical-veritas-vocabulary.evidence"
2719
+ ],
2720
+ "createdAt": "2026-07-02T14:17:20.335Z",
2721
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2722
+ "notes": "First-contact Veritas docs should use canonical product vocabulary from CONTEXT.md."
2723
+ },
2724
+ {
2725
+ "id": "veritas-1783001840335.policy.repeatable-governance-uses-veritas-primitives.verified",
2726
+ "claimId": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
2727
+ "status": "verified",
2728
+ "actor": "veritas",
2729
+ "method": "requirements evaluation",
2730
+ "evidenceIds": [
2731
+ "veritas-1783001840335.policy.repeatable-governance-uses-veritas-primitives.evidence"
2732
+ ],
2733
+ "createdAt": "2026-07-02T14:17:20.335Z",
2734
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2735
+ "notes": "Repeatable repo governance checks should be represented by Veritas primitives before they become local helper scripts."
2736
+ },
2737
+ {
2738
+ "id": "veritas-1783001840335.readiness-verdict.verified",
2739
+ "claimId": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
2740
+ "status": "verified",
2741
+ "actor": "veritas",
2742
+ "method": "readiness verdict",
2743
+ "evidenceIds": [
2744
+ "veritas-1783001840335.readiness-verdict.evidence"
2745
+ ],
2746
+ "createdAt": "2026-07-02T14:17:20.335Z",
2747
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2748
+ "notes": "Veritas readiness verdict is ready for the evaluated repository change."
2749
+ },
2750
+ {
2751
+ "id": "veritas-1783001840335.governance.veritas.governance.verified",
2752
+ "claimId": "veritas.governance",
2753
+ "status": "verified",
2754
+ "actor": "veritas",
2755
+ "method": "authority attestation status",
2756
+ "evidenceIds": [
2757
+ "veritas-1783001840335.governance.veritas.governance.attestation.evidence",
2758
+ "veritas-1783001840335.governance.veritas.governance.audit.evidence"
2759
+ ],
2760
+ "createdAt": "2026-07-02T14:17:20.335Z",
2761
+ "verifiedAt": "2026-07-02T14:17:20.335Z",
2762
+ "notes": "Authority-backed attestation currency is verified."
2763
+ }
2764
+ ],
2765
+ "claimGroups": [
2766
+ {
2767
+ "id": "veritas.requirements.veritas-default",
2768
+ "title": "veritas-default",
2769
+ "kind": "requirement-set",
2770
+ "description": "Veritas requirements projected as Surface trust claims.",
2771
+ "claimIds": [
2772
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
2773
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
2774
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
2775
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
2776
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
2777
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
2778
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
2779
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src",
2780
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
2781
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
2782
+ ],
2783
+ "requirements": [
2784
+ {
2785
+ "id": "veritas.requirement.policy-changes-require-attestation",
2786
+ "title": "policy-changes-require-attestation",
2787
+ "claimIds": [
2788
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation"
2789
+ ],
2790
+ "required": true,
2791
+ "severity": "high",
2792
+ "validationStrategy": {
2793
+ "requiredEvidence": [
2794
+ "policy_rule"
2795
+ ],
2796
+ "requiredMethods": [
2797
+ "validation"
2798
+ ],
2799
+ "acceptanceCriteria": [
2800
+ "requirements evaluation"
2801
+ ],
2802
+ "reviewAuthority": "veritas requirements",
2803
+ "metadata": {
2804
+ "ruleId": "policy-changes-require-attestation",
2805
+ "enforcementLevel": "Require",
2806
+ "classification": "hard-invariant"
2807
+ }
2808
+ },
2809
+ "metadata": {
2810
+ "implemented": true,
2811
+ "enforcementLevel": "Require",
2812
+ "classification": "hard-invariant"
2813
+ }
2814
+ },
2815
+ {
2816
+ "id": "veritas.requirement.required-veritas-operational-artifacts",
2817
+ "title": "required-veritas-operational-artifacts",
2818
+ "claimIds": [
2819
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts"
2820
+ ],
2821
+ "required": true,
2822
+ "severity": "high",
2823
+ "validationStrategy": {
2824
+ "requiredEvidence": [
2825
+ "policy_rule"
2826
+ ],
2827
+ "requiredMethods": [
2828
+ "validation"
2829
+ ],
2830
+ "acceptanceCriteria": [
2831
+ "requirements evaluation"
2832
+ ],
2833
+ "reviewAuthority": "veritas requirements",
2834
+ "metadata": {
2835
+ "ruleId": "required-veritas-operational-artifacts",
2836
+ "enforcementLevel": "Require",
2837
+ "classification": "hard-invariant"
2838
+ }
2839
+ },
2840
+ "metadata": {
2841
+ "implemented": true,
2842
+ "enforcementLevel": "Require",
2843
+ "classification": "hard-invariant"
2844
+ }
2845
+ },
2846
+ {
2847
+ "id": "veritas.requirement.required-veritas-cli-artifacts",
2848
+ "title": "required-veritas-cli-artifacts",
2849
+ "claimIds": [
2850
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts"
2851
+ ],
2852
+ "required": true,
2853
+ "severity": "high",
2854
+ "validationStrategy": {
2855
+ "requiredEvidence": [
2856
+ "policy_rule"
2857
+ ],
2858
+ "requiredMethods": [
2859
+ "validation"
2860
+ ],
2861
+ "acceptanceCriteria": [
2862
+ "requirements evaluation"
2863
+ ],
2864
+ "reviewAuthority": "veritas requirements",
2865
+ "metadata": {
2866
+ "ruleId": "required-veritas-cli-artifacts",
2867
+ "enforcementLevel": "Require",
2868
+ "classification": "hard-invariant"
2869
+ }
2870
+ },
2871
+ "metadata": {
2872
+ "implemented": true,
2873
+ "enforcementLevel": "Require",
2874
+ "classification": "hard-invariant"
2875
+ }
2876
+ },
2877
+ {
2878
+ "id": "veritas.requirement.required-veritas-reference-artifacts",
2879
+ "title": "required-veritas-reference-artifacts",
2880
+ "claimIds": [
2881
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts"
2882
+ ],
2883
+ "required": true,
2884
+ "severity": "high",
2885
+ "validationStrategy": {
2886
+ "requiredEvidence": [
2887
+ "policy_rule"
2888
+ ],
2889
+ "requiredMethods": [
2890
+ "validation"
2891
+ ],
2892
+ "acceptanceCriteria": [
2893
+ "requirements evaluation"
2894
+ ],
2895
+ "reviewAuthority": "veritas requirements",
2896
+ "metadata": {
2897
+ "ruleId": "required-veritas-reference-artifacts",
2898
+ "enforcementLevel": "Require",
2899
+ "classification": "hard-invariant"
2900
+ }
2901
+ },
2902
+ "metadata": {
2903
+ "implemented": true,
2904
+ "enforcementLevel": "Require",
2905
+ "classification": "hard-invariant"
2906
+ }
2907
+ },
2908
+ {
2909
+ "id": "veritas.requirement.required-veritas-schema-artifacts",
2910
+ "title": "required-veritas-schema-artifacts",
2911
+ "claimIds": [
2912
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
2913
+ ],
2914
+ "required": true,
2915
+ "severity": "high",
2916
+ "validationStrategy": {
2917
+ "requiredEvidence": [
2918
+ "policy_rule"
2919
+ ],
2920
+ "requiredMethods": [
2921
+ "validation"
2922
+ ],
2923
+ "acceptanceCriteria": [
2924
+ "requirements evaluation"
2925
+ ],
2926
+ "reviewAuthority": "veritas requirements",
2927
+ "metadata": {
2928
+ "ruleId": "required-veritas-schema-artifacts",
2929
+ "enforcementLevel": "Require",
2930
+ "classification": "hard-invariant"
2931
+ }
2932
+ },
2933
+ "metadata": {
2934
+ "implemented": true,
2935
+ "enforcementLevel": "Require",
2936
+ "classification": "hard-invariant"
2937
+ }
2938
+ },
2939
+ {
2940
+ "id": "veritas.requirement.ai-instruction-files-synced",
2941
+ "title": "ai-instruction-files-synced",
2942
+ "claimIds": [
2943
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced"
2944
+ ],
2945
+ "required": false,
2946
+ "severity": "high",
2947
+ "validationStrategy": {
2948
+ "requiredEvidence": [
2949
+ "policy_rule"
2950
+ ],
2951
+ "requiredMethods": [
2952
+ "validation"
2953
+ ],
2954
+ "acceptanceCriteria": [
2955
+ "requirements evaluation"
2956
+ ],
2957
+ "reviewAuthority": "veritas requirements",
2958
+ "metadata": {
2959
+ "ruleId": "ai-instruction-files-synced",
2960
+ "enforcementLevel": "Guide",
2961
+ "classification": "hard-invariant"
2962
+ }
2963
+ },
2964
+ "metadata": {
2965
+ "implemented": true,
2966
+ "enforcementLevel": "Guide",
2967
+ "classification": "hard-invariant"
2968
+ }
2969
+ },
2970
+ {
2971
+ "id": "veritas.requirement.prefer-veritas-routed-delivery",
2972
+ "title": "prefer-veritas-routed-delivery",
2973
+ "claimIds": [
2974
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery"
2975
+ ],
2976
+ "required": false,
2977
+ "severity": "low",
2978
+ "validationStrategy": {
2979
+ "requiredEvidence": [
2980
+ "policy_rule"
2981
+ ],
2982
+ "requiredMethods": [
2983
+ "validation"
2984
+ ],
2985
+ "acceptanceCriteria": [
2986
+ "requirements evaluation"
2987
+ ],
2988
+ "reviewAuthority": "veritas requirements",
2989
+ "metadata": {
2990
+ "ruleId": "prefer-veritas-routed-delivery",
2991
+ "enforcementLevel": "Observe",
2992
+ "classification": "promotable-policy"
2993
+ }
2994
+ },
2995
+ "metadata": {
2996
+ "implemented": true,
2997
+ "enforcementLevel": "Observe",
2998
+ "classification": "promotable-policy"
2999
+ }
3000
+ },
3001
+ {
3002
+ "id": "veritas.requirement.no-console-log-in-src",
3003
+ "title": "no-console-log-in-src",
3004
+ "claimIds": [
3005
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src"
3006
+ ],
3007
+ "required": false,
3008
+ "severity": "medium",
3009
+ "validationStrategy": {
3010
+ "requiredEvidence": [
3011
+ "policy_rule"
3012
+ ],
3013
+ "requiredMethods": [
3014
+ "validation"
3015
+ ],
3016
+ "acceptanceCriteria": [
3017
+ "requirements evaluation"
3018
+ ],
3019
+ "reviewAuthority": "veritas requirements",
3020
+ "metadata": {
3021
+ "ruleId": "no-console-log-in-src",
3022
+ "enforcementLevel": "Guide",
3023
+ "classification": "advisory-pattern"
3024
+ }
3025
+ },
3026
+ "metadata": {
3027
+ "implemented": true,
3028
+ "enforcementLevel": "Guide",
3029
+ "classification": "advisory-pattern"
3030
+ }
3031
+ },
3032
+ {
3033
+ "id": "veritas.requirement.canonical-veritas-vocabulary",
3034
+ "title": "canonical-veritas-vocabulary",
3035
+ "claimIds": [
3036
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary"
3037
+ ],
3038
+ "required": false,
3039
+ "severity": "medium",
3040
+ "validationStrategy": {
3041
+ "requiredEvidence": [
3042
+ "policy_rule"
3043
+ ],
3044
+ "requiredMethods": [
3045
+ "validation"
3046
+ ],
3047
+ "acceptanceCriteria": [
3048
+ "requirements evaluation"
3049
+ ],
3050
+ "reviewAuthority": "veritas requirements",
3051
+ "metadata": {
3052
+ "ruleId": "canonical-veritas-vocabulary",
3053
+ "enforcementLevel": "Guide",
3054
+ "classification": "advisory-pattern"
3055
+ }
3056
+ },
3057
+ "metadata": {
3058
+ "implemented": true,
3059
+ "enforcementLevel": "Guide",
3060
+ "classification": "advisory-pattern"
3061
+ }
3062
+ },
3063
+ {
3064
+ "id": "veritas.requirement.repeatable-governance-uses-veritas-primitives",
3065
+ "title": "repeatable-governance-uses-veritas-primitives",
3066
+ "claimIds": [
3067
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
3068
+ ],
3069
+ "required": false,
3070
+ "severity": "medium",
3071
+ "validationStrategy": {
3072
+ "requiredEvidence": [
3073
+ "policy_rule"
3074
+ ],
3075
+ "requiredMethods": [
3076
+ "validation"
3077
+ ],
3078
+ "acceptanceCriteria": [
3079
+ "requirements evaluation"
3080
+ ],
3081
+ "reviewAuthority": "veritas requirements",
3082
+ "metadata": {
3083
+ "ruleId": "repeatable-governance-uses-veritas-primitives",
3084
+ "enforcementLevel": "Guide",
3085
+ "classification": "promotable-policy"
3086
+ }
3087
+ },
3088
+ "metadata": {
3089
+ "implemented": true,
3090
+ "enforcementLevel": "Guide",
3091
+ "classification": "promotable-policy"
3092
+ }
3093
+ }
3094
+ ],
3095
+ "rollupPolicy": {
3096
+ "mode": "all-required",
3097
+ "requiredRequirementIds": [
3098
+ "veritas.requirement.policy-changes-require-attestation",
3099
+ "veritas.requirement.required-veritas-operational-artifacts",
3100
+ "veritas.requirement.required-veritas-cli-artifacts",
3101
+ "veritas.requirement.required-veritas-reference-artifacts",
3102
+ "veritas.requirement.required-veritas-schema-artifacts"
3103
+ ],
3104
+ "optionalRequirementIds": [
3105
+ "veritas.requirement.ai-instruction-files-synced",
3106
+ "veritas.requirement.prefer-veritas-routed-delivery",
3107
+ "veritas.requirement.no-console-log-in-src",
3108
+ "veritas.requirement.canonical-veritas-vocabulary",
3109
+ "veritas.requirement.repeatable-governance-uses-veritas-primitives"
3110
+ ]
3111
+ },
3112
+ "metadata": {
3113
+ "producer": "veritas",
3114
+ "repoStandards": {
3115
+ "name": "veritas-default",
3116
+ "version": 1,
3117
+ "rule_count": 9
3118
+ },
3119
+ "repoMap": {
3120
+ "name": "veritas",
3121
+ "kind": "repo-map",
3122
+ "report_transport": "local-json",
3123
+ "default_resolution": {
3124
+ "phase": "Phase 0 (Bootstrap)",
3125
+ "workstream": "Initial Project Setup",
3126
+ "matchedArtifacts": [
3127
+ "README.md"
3128
+ ]
3129
+ },
3130
+ "non_sliceable_invariants": [
3131
+ "baseline evidenceCheck",
3132
+ "repo-local guidance",
3133
+ "tracked policy artifacts"
3134
+ ],
3135
+ "evidenceChecks": [
3136
+ {
3137
+ "id": "required-evidence-check",
3138
+ "runner": "bash",
3139
+ "label": "npm run verify",
3140
+ "command": "npm run verify",
3141
+ "method": "validation",
3142
+ "surface_claim_ids": [],
3143
+ "summary": "Runs npm run verify."
3144
+ },
3145
+ {
3146
+ "id": "fallow-advisory",
3147
+ "runner": "bash",
3148
+ "label": "npm run veritas:fallow:advisory",
3149
+ "command": "npm run veritas:fallow:advisory",
3150
+ "method": "auditability",
3151
+ "surface_claim_ids": [],
3152
+ "summary": "Runs Fallow as advisory codebase-intelligence evidence."
3153
+ },
3154
+ {
3155
+ "id": "vocabulary-consistency",
3156
+ "runner": "bash",
3157
+ "label": "npm run veritas:vocab:check",
3158
+ "command": "npm run veritas:vocab:check",
3159
+ "method": "validation",
3160
+ "surface_claim_ids": [],
3161
+ "summary": "Checks first-contact Veritas docs for canonical product vocabulary."
3162
+ }
3163
+ ],
3164
+ "required_evidence_check_ids": [
3165
+ "required-evidence-check"
3166
+ ],
3167
+ "default_evidence_check_ids": [
3168
+ "required-evidence-check",
3169
+ "vocabulary-consistency",
3170
+ "fallow-advisory"
3171
+ ],
3172
+ "evidence_check_routes": [],
3173
+ "uncovered_path_policy": "warn"
3174
+ }
3175
+ }
3176
+ }
3177
+ ],
3178
+ "authorityTrace": [
3179
+ {
3180
+ "id": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca.authority",
3181
+ "subject": {
3182
+ "subjectType": "repository-change",
3183
+ "subjectId": "veritas-default:working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3184
+ },
3185
+ "actorRef": "actor:object-Object",
3186
+ "authorityType": "credential",
3187
+ "authorityRef": "attestation:policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
3188
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
3189
+ "observedAt": "2026-07-02T14:17:20.335Z",
3190
+ "evidenceIds": [
3191
+ "veritas-1783001840335.readiness-verdict.evidence"
3192
+ ],
3193
+ "claimIds": [
3194
+ "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3195
+ ],
3196
+ "validUntil": "2026-09-29T03:36:48.637Z",
3197
+ "integrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
3198
+ "metadata": {
3199
+ "kind": "governance-attestation",
3200
+ "producer": "veritas",
3201
+ "actor": {
3202
+ "id": "maintainer",
3203
+ "displayName": "Maintainer",
3204
+ "identityEvidence": {
3205
+ "gitEmail": "maintainer@example.com",
3206
+ "signingKeyFingerprint": null
3207
+ }
3208
+ },
3209
+ "method": "attestation",
3210
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
3211
+ "currentAttestationId": "policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
3212
+ "attestationState": "current",
3213
+ "validUntil": "2026-09-29T03:36:48.637Z",
3214
+ "protectedStandards": {
3215
+ "paths": {
3216
+ "repoStandardsPath": ".veritas/repo-standards/default.repo-standards.json",
3217
+ "repoMapPath": ".veritas/repo-map.json",
3218
+ "authoritySettingsPath": ".veritas/authority/default.authority-settings.json"
3219
+ },
3220
+ "hashes": {
3221
+ "repoStandardsHash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab",
3222
+ "repoMapHash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d",
3223
+ "authoritySettingsHash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
3224
+ },
3225
+ "drift": []
3226
+ }
3227
+ }
3228
+ }
3229
+ ]
3230
+ },
3231
+ "report": {
3232
+ "id": "veritas.veritas-1783001840335.surface-report",
3233
+ "generatedAt": "2026-07-02T14:17:20.335Z",
3234
+ "source": "veritas:veritas-1783001840335",
3235
+ "summary": {
3236
+ "totalClaims": 26,
3237
+ "byStatus": {
3238
+ "unknown": 12,
3239
+ "proposed": 1,
3240
+ "assumed": 0,
3241
+ "verified": 11,
3242
+ "stale": 0,
3243
+ "disputed": 0,
3244
+ "superseded": 0,
3245
+ "rejected": 2,
3246
+ "revoked": 0
3247
+ },
3248
+ "bySurface": {
3249
+ "veritas.affected-surface": 12,
3250
+ "veritas.governance": 1,
3251
+ "veritas.evidence-check": 2,
3252
+ "veritas.policy-results": 10,
3253
+ "veritas.readiness": 1
3254
+ },
3255
+ "confidenceBasis": {
3256
+ "sourceQuality": {},
3257
+ "reviewerAuthority": {},
3258
+ "evidenceStrength": {},
3259
+ "corroboratedClaims": 0,
3260
+ "averageExtractionConfidence": null,
3261
+ "freshnessAtRisk": [],
3262
+ "conflictedClaims": []
3263
+ },
3264
+ "transparencyGapsByType": {
3265
+ "contradiction": 0,
3266
+ "provenance_gap": 12,
3267
+ "policy_violation": 16,
3268
+ "freshness_breach": 0,
3269
+ "corroboration_absent": 0,
3270
+ "unsupported_inference": 0
3271
+ },
3272
+ "highImpactUnsupported": [
3273
+ "veritas.evidence-check.npm-run-veritas-fallow-advisory"
3274
+ ],
3275
+ "staleClaims": [],
3276
+ "disputedClaims": [],
3277
+ "recomputeNeededClaims": []
3278
+ },
3279
+ "claims": [
3280
+ {
3281
+ "id": "veritas.surface.governance.guidance",
3282
+ "status": "unknown",
3283
+ "subjectType": "repo-surface",
3284
+ "subjectId": "veritas:governance.guidance",
3285
+ "surface": "veritas.affected-surface",
3286
+ "claimType": "veritas-affected-surface",
3287
+ "fieldOrBehavior": "governance.guidance",
3288
+ "value": "governance.guidance",
3289
+ "verificationPolicyId": "veritas.surface",
3290
+ "createdAt": "2026-05-19T13:38:14.077Z",
3291
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3292
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3293
+ },
3294
+ {
3295
+ "id": "veritas.surface.governance.root-manifests",
3296
+ "status": "unknown",
3297
+ "subjectType": "repo-surface",
3298
+ "subjectId": "veritas:governance.root-manifests",
3299
+ "surface": "veritas.affected-surface",
3300
+ "claimType": "veritas-affected-surface",
3301
+ "fieldOrBehavior": "governance.root-manifests",
3302
+ "value": "governance.root-manifests",
3303
+ "verificationPolicyId": "veritas.surface",
3304
+ "createdAt": "2026-05-19T13:38:14.077Z",
3305
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3306
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3307
+ },
3308
+ {
3309
+ "id": "veritas.surface.tooling.bin",
3310
+ "status": "unknown",
3311
+ "subjectType": "repo-surface",
3312
+ "subjectId": "veritas:tooling.bin",
3313
+ "surface": "veritas.affected-surface",
3314
+ "claimType": "veritas-affected-surface",
3315
+ "fieldOrBehavior": "tooling.bin",
3316
+ "value": "tooling.bin",
3317
+ "verificationPolicyId": "veritas.surface",
3318
+ "createdAt": "2026-05-19T13:38:14.077Z",
3319
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3320
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3321
+ },
3322
+ {
3323
+ "id": "veritas.surface.delivery.github",
3324
+ "status": "unknown",
3325
+ "subjectType": "repo-surface",
3326
+ "subjectId": "veritas:delivery.github",
3327
+ "surface": "veritas.affected-surface",
3328
+ "claimType": "veritas-affected-surface",
3329
+ "fieldOrBehavior": "delivery.github",
3330
+ "value": "delivery.github",
3331
+ "verificationPolicyId": "veritas.surface",
3332
+ "createdAt": "2026-05-19T13:38:14.077Z",
3333
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3334
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3335
+ },
3336
+ {
3337
+ "id": "veritas.surface.tooling.scripts",
3338
+ "status": "unknown",
3339
+ "subjectType": "repo-surface",
3340
+ "subjectId": "veritas:tooling.scripts",
3341
+ "surface": "veritas.affected-surface",
3342
+ "claimType": "veritas-affected-surface",
3343
+ "fieldOrBehavior": "tooling.scripts",
3344
+ "value": "tooling.scripts",
3345
+ "verificationPolicyId": "veritas.surface",
3346
+ "createdAt": "2026-05-19T13:38:14.077Z",
3347
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3348
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3349
+ },
3350
+ {
3351
+ "id": "veritas.surface.governance.schemas",
3352
+ "status": "unknown",
3353
+ "subjectType": "repo-surface",
3354
+ "subjectId": "veritas:governance.schemas",
3355
+ "surface": "veritas.affected-surface",
3356
+ "claimType": "veritas-affected-surface",
3357
+ "fieldOrBehavior": "governance.schemas",
3358
+ "value": "governance.schemas",
3359
+ "verificationPolicyId": "veritas.surface",
3360
+ "createdAt": "2026-05-19T13:38:14.077Z",
3361
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3362
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3363
+ },
3364
+ {
3365
+ "id": "veritas.surface.governance.repo-maps",
3366
+ "status": "unknown",
3367
+ "subjectType": "repo-surface",
3368
+ "subjectId": "veritas:governance.repo-maps",
3369
+ "surface": "veritas.affected-surface",
3370
+ "claimType": "veritas-affected-surface",
3371
+ "fieldOrBehavior": "governance.repo-maps",
3372
+ "value": "governance.repo-maps",
3373
+ "verificationPolicyId": "veritas.surface",
3374
+ "createdAt": "2026-05-19T13:38:14.077Z",
3375
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3376
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3377
+ },
3378
+ {
3379
+ "id": "veritas.surface.governance.repo-standards",
3380
+ "status": "unknown",
3381
+ "subjectType": "repo-surface",
3382
+ "subjectId": "veritas:governance.repo-standards",
3383
+ "surface": "veritas.affected-surface",
3384
+ "claimType": "veritas-affected-surface",
3385
+ "fieldOrBehavior": "governance.repo-standards",
3386
+ "value": "governance.repo-standards",
3387
+ "verificationPolicyId": "veritas.surface",
3388
+ "createdAt": "2026-05-19T13:38:14.077Z",
3389
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3390
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3391
+ },
3392
+ {
3393
+ "id": "veritas.surface.examples.example-data",
3394
+ "status": "unknown",
3395
+ "subjectType": "repo-surface",
3396
+ "subjectId": "veritas:examples.example-data",
3397
+ "surface": "veritas.affected-surface",
3398
+ "claimType": "veritas-affected-surface",
3399
+ "fieldOrBehavior": "examples.example-data",
3400
+ "value": "examples.example-data",
3401
+ "verificationPolicyId": "veritas.surface",
3402
+ "createdAt": "2026-05-19T13:38:14.077Z",
3403
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3404
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3405
+ },
3406
+ {
3407
+ "id": "veritas.surface.app.src",
3408
+ "status": "unknown",
3409
+ "subjectType": "repo-surface",
3410
+ "subjectId": "veritas:app.src",
3411
+ "surface": "veritas.affected-surface",
3412
+ "claimType": "veritas-affected-surface",
3413
+ "fieldOrBehavior": "app.src",
3414
+ "value": "app.src",
3415
+ "verificationPolicyId": "veritas.surface",
3416
+ "createdAt": "2026-05-19T13:38:14.077Z",
3417
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3418
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3419
+ },
3420
+ {
3421
+ "id": "veritas.surface.docs.docs",
3422
+ "status": "unknown",
3423
+ "subjectType": "repo-surface",
3424
+ "subjectId": "veritas:docs.docs",
3425
+ "surface": "veritas.affected-surface",
3426
+ "claimType": "veritas-affected-surface",
3427
+ "fieldOrBehavior": "docs.docs",
3428
+ "value": "docs.docs",
3429
+ "verificationPolicyId": "veritas.surface",
3430
+ "createdAt": "2026-05-19T13:38:14.077Z",
3431
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3432
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3433
+ },
3434
+ {
3435
+ "id": "veritas.surface.verification.tests",
3436
+ "status": "unknown",
3437
+ "subjectType": "repo-surface",
3438
+ "subjectId": "veritas:verification.tests",
3439
+ "surface": "veritas.affected-surface",
3440
+ "claimType": "veritas-affected-surface",
3441
+ "fieldOrBehavior": "verification.tests",
3442
+ "value": "verification.tests",
3443
+ "verificationPolicyId": "veritas.surface",
3444
+ "createdAt": "2026-05-19T13:38:14.077Z",
3445
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3446
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3447
+ },
3448
+ {
3449
+ "id": "veritas.governance",
3450
+ "status": "verified",
3451
+ "subjectType": "repository",
3452
+ "subjectId": "veritas",
3453
+ "surface": "veritas.governance",
3454
+ "claimType": "veritas-governance-artifact",
3455
+ "fieldOrBehavior": "governance artifact integrity",
3456
+ "value": "governance artifact integrity",
3457
+ "verificationPolicyId": "veritas.governance-artifact",
3458
+ "createdAt": "2026-05-19T13:38:14.077Z",
3459
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3460
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3461
+ },
3462
+ {
3463
+ "id": "veritas.evidence-check.npm-run-verify",
3464
+ "status": "verified",
3465
+ "subjectType": "repository",
3466
+ "subjectId": "veritas",
3467
+ "surface": "veritas.evidence-check",
3468
+ "claimType": "software-evidence-check",
3469
+ "fieldOrBehavior": "npm run verify",
3470
+ "value": "all checks pass",
3471
+ "verificationPolicyId": "veritas.evidence-check",
3472
+ "createdAt": "2026-05-19T13:38:14.077Z",
3473
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3474
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3475
+ },
3476
+ {
3477
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
3478
+ "status": "proposed",
3479
+ "subjectType": "repository",
3480
+ "subjectId": "veritas",
3481
+ "surface": "veritas.evidence-check",
3482
+ "claimType": "software-evidence-check",
3483
+ "fieldOrBehavior": "npm run veritas:fallow:advisory",
3484
+ "value": "all checks pass",
3485
+ "verificationPolicyId": "veritas.evidence-check",
3486
+ "createdAt": "2026-05-19T13:38:14.077Z",
3487
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3488
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3489
+ },
3490
+ {
3491
+ "id": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
3492
+ "status": "verified",
3493
+ "subjectType": "policy-rule",
3494
+ "subjectId": "veritas:veritas-default:policy-changes-require-attestation",
3495
+ "surface": "veritas.policy-results",
3496
+ "claimType": "veritas-policy-result",
3497
+ "fieldOrBehavior": "policy-changes-require-attestation",
3498
+ "value": "policy-changes-require-attestation",
3499
+ "verificationPolicyId": "veritas.policy-result",
3500
+ "createdAt": "2026-07-02T14:17:20.335Z",
3501
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3502
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3503
+ },
3504
+ {
3505
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
3506
+ "status": "verified",
3507
+ "subjectType": "policy-rule",
3508
+ "subjectId": "veritas:veritas-default:required-veritas-operational-artifacts",
3509
+ "surface": "veritas.policy-results",
3510
+ "claimType": "veritas-policy-result",
3511
+ "fieldOrBehavior": "required-veritas-operational-artifacts",
3512
+ "value": "required-veritas-operational-artifacts",
3513
+ "verificationPolicyId": "veritas.policy-result",
3514
+ "createdAt": "2026-07-02T14:17:20.335Z",
3515
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3516
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3517
+ },
3518
+ {
3519
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
3520
+ "status": "rejected",
3521
+ "subjectType": "policy-rule",
3522
+ "subjectId": "veritas:veritas-default:required-veritas-cli-artifacts",
3523
+ "surface": "veritas.policy-results",
3524
+ "claimType": "veritas-policy-result",
3525
+ "fieldOrBehavior": "required-veritas-cli-artifacts",
3526
+ "value": "required-veritas-cli-artifacts",
3527
+ "verificationPolicyId": "veritas.policy-result",
3528
+ "createdAt": "2026-07-02T14:17:20.335Z",
3529
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3530
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3531
+ },
3532
+ {
3533
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
3534
+ "status": "verified",
3535
+ "subjectType": "policy-rule",
3536
+ "subjectId": "veritas:veritas-default:required-veritas-reference-artifacts",
3537
+ "surface": "veritas.policy-results",
3538
+ "claimType": "veritas-policy-result",
3539
+ "fieldOrBehavior": "required-veritas-reference-artifacts",
3540
+ "value": "required-veritas-reference-artifacts",
3541
+ "verificationPolicyId": "veritas.policy-result",
3542
+ "createdAt": "2026-07-02T14:17:20.335Z",
3543
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3544
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3545
+ },
3546
+ {
3547
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
3548
+ "status": "verified",
3549
+ "subjectType": "policy-rule",
3550
+ "subjectId": "veritas:veritas-default:required-veritas-schema-artifacts",
3551
+ "surface": "veritas.policy-results",
3552
+ "claimType": "veritas-policy-result",
3553
+ "fieldOrBehavior": "required-veritas-schema-artifacts",
3554
+ "value": "required-veritas-schema-artifacts",
3555
+ "verificationPolicyId": "veritas.policy-result",
3556
+ "createdAt": "2026-07-02T14:17:20.335Z",
3557
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3558
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3559
+ },
3560
+ {
3561
+ "id": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
3562
+ "status": "verified",
3563
+ "subjectType": "policy-rule",
3564
+ "subjectId": "veritas:veritas-default:ai-instruction-files-synced",
3565
+ "surface": "veritas.policy-results",
3566
+ "claimType": "veritas-policy-result",
3567
+ "fieldOrBehavior": "ai-instruction-files-synced",
3568
+ "value": "ai-instruction-files-synced",
3569
+ "verificationPolicyId": "veritas.policy-result",
3570
+ "createdAt": "2026-07-02T14:17:20.335Z",
3571
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3572
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3573
+ },
3574
+ {
3575
+ "id": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
3576
+ "status": "verified",
3577
+ "subjectType": "policy-rule",
3578
+ "subjectId": "veritas:veritas-default:prefer-veritas-routed-delivery",
3579
+ "surface": "veritas.policy-results",
3580
+ "claimType": "veritas-policy-result",
3581
+ "fieldOrBehavior": "prefer-veritas-routed-delivery",
3582
+ "value": "prefer-veritas-routed-delivery",
3583
+ "verificationPolicyId": "veritas.policy-result",
3584
+ "createdAt": "2026-07-02T14:17:20.335Z",
3585
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3586
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3587
+ },
3588
+ {
3589
+ "id": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
3590
+ "status": "verified",
3591
+ "subjectType": "policy-rule",
3592
+ "subjectId": "veritas:veritas-default:no-console-log-in-src",
3593
+ "surface": "veritas.policy-results",
3594
+ "claimType": "veritas-policy-result",
3595
+ "fieldOrBehavior": "no-console-log-in-src",
3596
+ "value": "no-console-log-in-src",
3597
+ "verificationPolicyId": "veritas.policy-result",
3598
+ "createdAt": "2026-07-02T14:17:20.335Z",
3599
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3600
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3601
+ },
3602
+ {
3603
+ "id": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
3604
+ "status": "verified",
3605
+ "subjectType": "policy-rule",
3606
+ "subjectId": "veritas:veritas-default:canonical-veritas-vocabulary",
3607
+ "surface": "veritas.policy-results",
3608
+ "claimType": "veritas-policy-result",
3609
+ "fieldOrBehavior": "canonical-veritas-vocabulary",
3610
+ "value": "canonical-veritas-vocabulary",
3611
+ "verificationPolicyId": "veritas.policy-result",
3612
+ "createdAt": "2026-07-02T14:17:20.335Z",
3613
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3614
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3615
+ },
3616
+ {
3617
+ "id": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
3618
+ "status": "verified",
3619
+ "subjectType": "policy-rule",
3620
+ "subjectId": "veritas:veritas-default:repeatable-governance-uses-veritas-primitives",
3621
+ "surface": "veritas.policy-results",
3622
+ "claimType": "veritas-policy-result",
3623
+ "fieldOrBehavior": "repeatable-governance-uses-veritas-primitives",
3624
+ "value": "repeatable-governance-uses-veritas-primitives",
3625
+ "verificationPolicyId": "veritas.policy-result",
3626
+ "createdAt": "2026-07-02T14:17:20.335Z",
3627
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3628
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3629
+ },
3630
+ {
3631
+ "id": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
3632
+ "status": "rejected",
3633
+ "subjectType": "repository-change",
3634
+ "subjectId": "veritas-default:working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
3635
+ "surface": "veritas.readiness",
3636
+ "claimType": "software-readiness-verdict",
3637
+ "fieldOrBehavior": "mergeReadiness",
3638
+ "value": {
3639
+ "verdict": "ready",
3640
+ "promotionAllowed": true,
3641
+ "uncoveredPathResult": "clear",
3642
+ "sourceRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3643
+ },
3644
+ "verificationPolicyId": "veritas.readiness-verdict",
3645
+ "createdAt": "2026-07-02T14:17:20.335Z",
3646
+ "updatedAt": "2026-07-02T14:17:20.335Z",
3647
+ "currentIntegrityRef": "working-tree:798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca"
3648
+ }
3649
+ ],
3650
+ "transparencyGaps": [
3651
+ {
3652
+ "id": "veritas.surface.governance.guidance.gap.provenance-gap",
3653
+ "claimId": "veritas.surface.governance.guidance",
3654
+ "type": "provenance_gap",
3655
+ "severity": "medium",
3656
+ "message": "Missing required evidence: policy_rule.",
3657
+ "policyId": "veritas.surface",
3658
+ "createdAt": "2026-07-02T14:17:20.335Z"
3659
+ },
3660
+ {
3661
+ "id": "veritas.surface.governance.guidance.gap.policy-violation",
3662
+ "claimId": "veritas.surface.governance.guidance",
3663
+ "type": "policy_violation",
3664
+ "severity": "medium",
3665
+ "message": "Missing required verification method: auditability.",
3666
+ "policyId": "veritas.surface",
3667
+ "createdAt": "2026-07-02T14:17:20.335Z",
3668
+ "evidenceIds": []
3669
+ },
3670
+ {
3671
+ "id": "veritas.surface.governance.root-manifests.gap.provenance-gap",
3672
+ "claimId": "veritas.surface.governance.root-manifests",
3673
+ "type": "provenance_gap",
3674
+ "severity": "medium",
3675
+ "message": "Missing required evidence: policy_rule.",
3676
+ "policyId": "veritas.surface",
3677
+ "createdAt": "2026-07-02T14:17:20.335Z"
3678
+ },
3679
+ {
3680
+ "id": "veritas.surface.governance.root-manifests.gap.policy-violation",
3681
+ "claimId": "veritas.surface.governance.root-manifests",
3682
+ "type": "policy_violation",
3683
+ "severity": "medium",
3684
+ "message": "Missing required verification method: auditability.",
3685
+ "policyId": "veritas.surface",
3686
+ "createdAt": "2026-07-02T14:17:20.335Z",
3687
+ "evidenceIds": []
3688
+ },
3689
+ {
3690
+ "id": "veritas.surface.tooling.bin.gap.provenance-gap",
3691
+ "claimId": "veritas.surface.tooling.bin",
3692
+ "type": "provenance_gap",
3693
+ "severity": "medium",
3694
+ "message": "Missing required evidence: policy_rule.",
3695
+ "policyId": "veritas.surface",
3696
+ "createdAt": "2026-07-02T14:17:20.335Z"
3697
+ },
3698
+ {
3699
+ "id": "veritas.surface.tooling.bin.gap.policy-violation",
3700
+ "claimId": "veritas.surface.tooling.bin",
3701
+ "type": "policy_violation",
3702
+ "severity": "medium",
3703
+ "message": "Missing required verification method: auditability.",
3704
+ "policyId": "veritas.surface",
3705
+ "createdAt": "2026-07-02T14:17:20.335Z",
3706
+ "evidenceIds": []
3707
+ },
3708
+ {
3709
+ "id": "veritas.surface.delivery.github.gap.provenance-gap",
3710
+ "claimId": "veritas.surface.delivery.github",
3711
+ "type": "provenance_gap",
3712
+ "severity": "medium",
3713
+ "message": "Missing required evidence: policy_rule.",
3714
+ "policyId": "veritas.surface",
3715
+ "createdAt": "2026-07-02T14:17:20.335Z"
3716
+ },
3717
+ {
3718
+ "id": "veritas.surface.delivery.github.gap.policy-violation",
3719
+ "claimId": "veritas.surface.delivery.github",
3720
+ "type": "policy_violation",
3721
+ "severity": "medium",
3722
+ "message": "Missing required verification method: auditability.",
3723
+ "policyId": "veritas.surface",
3724
+ "createdAt": "2026-07-02T14:17:20.335Z",
3725
+ "evidenceIds": []
3726
+ },
3727
+ {
3728
+ "id": "veritas.surface.tooling.scripts.gap.provenance-gap",
3729
+ "claimId": "veritas.surface.tooling.scripts",
3730
+ "type": "provenance_gap",
3731
+ "severity": "medium",
3732
+ "message": "Missing required evidence: policy_rule.",
3733
+ "policyId": "veritas.surface",
3734
+ "createdAt": "2026-07-02T14:17:20.335Z"
3735
+ },
3736
+ {
3737
+ "id": "veritas.surface.tooling.scripts.gap.policy-violation",
3738
+ "claimId": "veritas.surface.tooling.scripts",
3739
+ "type": "policy_violation",
3740
+ "severity": "medium",
3741
+ "message": "Missing required verification method: auditability.",
3742
+ "policyId": "veritas.surface",
3743
+ "createdAt": "2026-07-02T14:17:20.335Z",
3744
+ "evidenceIds": []
3745
+ },
3746
+ {
3747
+ "id": "veritas.surface.governance.schemas.gap.provenance-gap",
3748
+ "claimId": "veritas.surface.governance.schemas",
3749
+ "type": "provenance_gap",
3750
+ "severity": "medium",
3751
+ "message": "Missing required evidence: policy_rule.",
3752
+ "policyId": "veritas.surface",
3753
+ "createdAt": "2026-07-02T14:17:20.335Z"
3754
+ },
3755
+ {
3756
+ "id": "veritas.surface.governance.schemas.gap.policy-violation",
3757
+ "claimId": "veritas.surface.governance.schemas",
3758
+ "type": "policy_violation",
3759
+ "severity": "medium",
3760
+ "message": "Missing required verification method: auditability.",
3761
+ "policyId": "veritas.surface",
3762
+ "createdAt": "2026-07-02T14:17:20.335Z",
3763
+ "evidenceIds": []
3764
+ },
3765
+ {
3766
+ "id": "veritas.surface.governance.repo-maps.gap.provenance-gap",
3767
+ "claimId": "veritas.surface.governance.repo-maps",
3768
+ "type": "provenance_gap",
3769
+ "severity": "medium",
3770
+ "message": "Missing required evidence: policy_rule.",
3771
+ "policyId": "veritas.surface",
3772
+ "createdAt": "2026-07-02T14:17:20.335Z"
3773
+ },
3774
+ {
3775
+ "id": "veritas.surface.governance.repo-maps.gap.policy-violation",
3776
+ "claimId": "veritas.surface.governance.repo-maps",
3777
+ "type": "policy_violation",
3778
+ "severity": "medium",
3779
+ "message": "Missing required verification method: auditability.",
3780
+ "policyId": "veritas.surface",
3781
+ "createdAt": "2026-07-02T14:17:20.335Z",
3782
+ "evidenceIds": []
3783
+ },
3784
+ {
3785
+ "id": "veritas.surface.governance.repo-standards.gap.provenance-gap",
3786
+ "claimId": "veritas.surface.governance.repo-standards",
3787
+ "type": "provenance_gap",
3788
+ "severity": "medium",
3789
+ "message": "Missing required evidence: policy_rule.",
3790
+ "policyId": "veritas.surface",
3791
+ "createdAt": "2026-07-02T14:17:20.335Z"
3792
+ },
3793
+ {
3794
+ "id": "veritas.surface.governance.repo-standards.gap.policy-violation",
3795
+ "claimId": "veritas.surface.governance.repo-standards",
3796
+ "type": "policy_violation",
3797
+ "severity": "medium",
3798
+ "message": "Missing required verification method: auditability.",
3799
+ "policyId": "veritas.surface",
3800
+ "createdAt": "2026-07-02T14:17:20.335Z",
3801
+ "evidenceIds": []
3802
+ },
3803
+ {
3804
+ "id": "veritas.surface.examples.example-data.gap.provenance-gap",
3805
+ "claimId": "veritas.surface.examples.example-data",
3806
+ "type": "provenance_gap",
3807
+ "severity": "medium",
3808
+ "message": "Missing required evidence: policy_rule.",
3809
+ "policyId": "veritas.surface",
3810
+ "createdAt": "2026-07-02T14:17:20.335Z"
3811
+ },
3812
+ {
3813
+ "id": "veritas.surface.examples.example-data.gap.policy-violation",
3814
+ "claimId": "veritas.surface.examples.example-data",
3815
+ "type": "policy_violation",
3816
+ "severity": "medium",
3817
+ "message": "Missing required verification method: auditability.",
3818
+ "policyId": "veritas.surface",
3819
+ "createdAt": "2026-07-02T14:17:20.335Z",
3820
+ "evidenceIds": []
3821
+ },
3822
+ {
3823
+ "id": "veritas.surface.app.src.gap.provenance-gap",
3824
+ "claimId": "veritas.surface.app.src",
3825
+ "type": "provenance_gap",
3826
+ "severity": "medium",
3827
+ "message": "Missing required evidence: policy_rule.",
3828
+ "policyId": "veritas.surface",
3829
+ "createdAt": "2026-07-02T14:17:20.335Z"
3830
+ },
3831
+ {
3832
+ "id": "veritas.surface.app.src.gap.policy-violation",
3833
+ "claimId": "veritas.surface.app.src",
3834
+ "type": "policy_violation",
3835
+ "severity": "medium",
3836
+ "message": "Missing required verification method: auditability.",
3837
+ "policyId": "veritas.surface",
3838
+ "createdAt": "2026-07-02T14:17:20.335Z",
3839
+ "evidenceIds": []
3840
+ },
3841
+ {
3842
+ "id": "veritas.surface.docs.docs.gap.provenance-gap",
3843
+ "claimId": "veritas.surface.docs.docs",
3844
+ "type": "provenance_gap",
3845
+ "severity": "medium",
3846
+ "message": "Missing required evidence: policy_rule.",
3847
+ "policyId": "veritas.surface",
3848
+ "createdAt": "2026-07-02T14:17:20.335Z"
3849
+ },
3850
+ {
3851
+ "id": "veritas.surface.docs.docs.gap.policy-violation",
3852
+ "claimId": "veritas.surface.docs.docs",
3853
+ "type": "policy_violation",
3854
+ "severity": "medium",
3855
+ "message": "Missing required verification method: auditability.",
3856
+ "policyId": "veritas.surface",
3857
+ "createdAt": "2026-07-02T14:17:20.335Z",
3858
+ "evidenceIds": []
3859
+ },
3860
+ {
3861
+ "id": "veritas.surface.verification.tests.gap.provenance-gap",
3862
+ "claimId": "veritas.surface.verification.tests",
3863
+ "type": "provenance_gap",
3864
+ "severity": "medium",
3865
+ "message": "Missing required evidence: policy_rule.",
3866
+ "policyId": "veritas.surface",
3867
+ "createdAt": "2026-07-02T14:17:20.335Z"
3868
+ },
3869
+ {
3870
+ "id": "veritas.surface.verification.tests.gap.policy-violation",
3871
+ "claimId": "veritas.surface.verification.tests",
3872
+ "type": "policy_violation",
3873
+ "severity": "medium",
3874
+ "message": "Missing required verification method: auditability.",
3875
+ "policyId": "veritas.surface",
3876
+ "createdAt": "2026-07-02T14:17:20.335Z",
3877
+ "evidenceIds": []
3878
+ },
3879
+ {
3880
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory.gap.policy-violation",
3881
+ "claimId": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
3882
+ "type": "policy_violation",
3883
+ "severity": "high",
3884
+ "message": "Missing required verification method: validation.",
3885
+ "policyId": "veritas.evidence-check",
3886
+ "createdAt": "2026-07-02T14:17:20.335Z",
3887
+ "evidenceIds": [
3888
+ "veritas-1783001840335.evidence-check.fallow-advisory.evidence"
3889
+ ]
3890
+ },
3891
+ {
3892
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts.gap.evidence-veritas-1783001840335.policy.required-veritas-cli-artifacts.evidence",
3893
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
3894
+ "type": "policy_violation",
3895
+ "severity": "high",
3896
+ "message": "Evidence explicitly reported a non-passing result.",
3897
+ "policyId": "veritas.policy-result",
3898
+ "createdAt": "2026-07-02T14:17:20.335Z",
3899
+ "evidenceIds": [
3900
+ "veritas-1783001840335.policy.required-veritas-cli-artifacts.evidence"
3901
+ ]
3902
+ },
3903
+ {
3904
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts.gap.hint-1",
3905
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
3906
+ "type": "policy_violation",
3907
+ "severity": "high",
3908
+ "message": "The shipped Veritas CLI entrypoints and package manifest must stay present.",
3909
+ "policyId": "veritas.policy-result",
3910
+ "createdAt": "2026-07-02T14:17:20.335Z",
3911
+ "evidenceIds": [
3912
+ "veritas-1783001840335.policy.required-veritas-cli-artifacts.evidence"
3913
+ ]
3914
+ },
3915
+ {
3916
+ "id": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca.gap.hint-1",
3917
+ "claimId": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca",
3918
+ "type": "policy_violation",
3919
+ "severity": "high",
3920
+ "message": "Blocking readiness requirement failed: required-veritas-cli-artifacts.",
3921
+ "policyId": "veritas.readiness-verdict",
3922
+ "createdAt": "2026-07-02T14:17:20.335Z",
3923
+ "evidenceIds": [
3924
+ "veritas-1783001840335.readiness-verdict.evidence"
3925
+ ]
3926
+ }
3927
+ ],
3928
+ "transparencyGapsByClaimId": {
3929
+ "veritas.surface.governance.guidance": [
3930
+ {
3931
+ "id": "veritas.surface.governance.guidance.gap.provenance-gap",
3932
+ "type": "provenance_gap",
3933
+ "severity": "medium",
3934
+ "message": "Missing required evidence: policy_rule.",
3935
+ "policyId": "veritas.surface"
3936
+ },
3937
+ {
3938
+ "id": "veritas.surface.governance.guidance.gap.policy-violation",
3939
+ "type": "policy_violation",
3940
+ "severity": "medium",
3941
+ "message": "Missing required verification method: auditability.",
3942
+ "policyId": "veritas.surface"
3943
+ }
3944
+ ],
3945
+ "veritas.surface.governance.root-manifests": [
3946
+ {
3947
+ "id": "veritas.surface.governance.root-manifests.gap.provenance-gap",
3948
+ "type": "provenance_gap",
3949
+ "severity": "medium",
3950
+ "message": "Missing required evidence: policy_rule.",
3951
+ "policyId": "veritas.surface"
3952
+ },
3953
+ {
3954
+ "id": "veritas.surface.governance.root-manifests.gap.policy-violation",
3955
+ "type": "policy_violation",
3956
+ "severity": "medium",
3957
+ "message": "Missing required verification method: auditability.",
3958
+ "policyId": "veritas.surface"
3959
+ }
3960
+ ],
3961
+ "veritas.surface.tooling.bin": [
3962
+ {
3963
+ "id": "veritas.surface.tooling.bin.gap.provenance-gap",
3964
+ "type": "provenance_gap",
3965
+ "severity": "medium",
3966
+ "message": "Missing required evidence: policy_rule.",
3967
+ "policyId": "veritas.surface"
3968
+ },
3969
+ {
3970
+ "id": "veritas.surface.tooling.bin.gap.policy-violation",
3971
+ "type": "policy_violation",
3972
+ "severity": "medium",
3973
+ "message": "Missing required verification method: auditability.",
3974
+ "policyId": "veritas.surface"
3975
+ }
3976
+ ],
3977
+ "veritas.surface.delivery.github": [
3978
+ {
3979
+ "id": "veritas.surface.delivery.github.gap.provenance-gap",
3980
+ "type": "provenance_gap",
3981
+ "severity": "medium",
3982
+ "message": "Missing required evidence: policy_rule.",
3983
+ "policyId": "veritas.surface"
3984
+ },
3985
+ {
3986
+ "id": "veritas.surface.delivery.github.gap.policy-violation",
3987
+ "type": "policy_violation",
3988
+ "severity": "medium",
3989
+ "message": "Missing required verification method: auditability.",
3990
+ "policyId": "veritas.surface"
3991
+ }
3992
+ ],
3993
+ "veritas.surface.tooling.scripts": [
3994
+ {
3995
+ "id": "veritas.surface.tooling.scripts.gap.provenance-gap",
3996
+ "type": "provenance_gap",
3997
+ "severity": "medium",
3998
+ "message": "Missing required evidence: policy_rule.",
3999
+ "policyId": "veritas.surface"
4000
+ },
4001
+ {
4002
+ "id": "veritas.surface.tooling.scripts.gap.policy-violation",
4003
+ "type": "policy_violation",
4004
+ "severity": "medium",
4005
+ "message": "Missing required verification method: auditability.",
4006
+ "policyId": "veritas.surface"
4007
+ }
4008
+ ],
4009
+ "veritas.surface.governance.schemas": [
4010
+ {
4011
+ "id": "veritas.surface.governance.schemas.gap.provenance-gap",
4012
+ "type": "provenance_gap",
4013
+ "severity": "medium",
4014
+ "message": "Missing required evidence: policy_rule.",
4015
+ "policyId": "veritas.surface"
4016
+ },
4017
+ {
4018
+ "id": "veritas.surface.governance.schemas.gap.policy-violation",
4019
+ "type": "policy_violation",
4020
+ "severity": "medium",
4021
+ "message": "Missing required verification method: auditability.",
4022
+ "policyId": "veritas.surface"
4023
+ }
4024
+ ],
4025
+ "veritas.surface.governance.repo-maps": [
4026
+ {
4027
+ "id": "veritas.surface.governance.repo-maps.gap.provenance-gap",
4028
+ "type": "provenance_gap",
4029
+ "severity": "medium",
4030
+ "message": "Missing required evidence: policy_rule.",
4031
+ "policyId": "veritas.surface"
4032
+ },
4033
+ {
4034
+ "id": "veritas.surface.governance.repo-maps.gap.policy-violation",
4035
+ "type": "policy_violation",
4036
+ "severity": "medium",
4037
+ "message": "Missing required verification method: auditability.",
4038
+ "policyId": "veritas.surface"
4039
+ }
4040
+ ],
4041
+ "veritas.surface.governance.repo-standards": [
4042
+ {
4043
+ "id": "veritas.surface.governance.repo-standards.gap.provenance-gap",
4044
+ "type": "provenance_gap",
4045
+ "severity": "medium",
4046
+ "message": "Missing required evidence: policy_rule.",
4047
+ "policyId": "veritas.surface"
4048
+ },
4049
+ {
4050
+ "id": "veritas.surface.governance.repo-standards.gap.policy-violation",
4051
+ "type": "policy_violation",
4052
+ "severity": "medium",
4053
+ "message": "Missing required verification method: auditability.",
4054
+ "policyId": "veritas.surface"
4055
+ }
4056
+ ],
4057
+ "veritas.surface.examples.example-data": [
4058
+ {
4059
+ "id": "veritas.surface.examples.example-data.gap.provenance-gap",
4060
+ "type": "provenance_gap",
4061
+ "severity": "medium",
4062
+ "message": "Missing required evidence: policy_rule.",
4063
+ "policyId": "veritas.surface"
4064
+ },
4065
+ {
4066
+ "id": "veritas.surface.examples.example-data.gap.policy-violation",
4067
+ "type": "policy_violation",
4068
+ "severity": "medium",
4069
+ "message": "Missing required verification method: auditability.",
4070
+ "policyId": "veritas.surface"
4071
+ }
4072
+ ],
4073
+ "veritas.surface.app.src": [
4074
+ {
4075
+ "id": "veritas.surface.app.src.gap.provenance-gap",
4076
+ "type": "provenance_gap",
4077
+ "severity": "medium",
4078
+ "message": "Missing required evidence: policy_rule.",
4079
+ "policyId": "veritas.surface"
4080
+ },
4081
+ {
4082
+ "id": "veritas.surface.app.src.gap.policy-violation",
4083
+ "type": "policy_violation",
4084
+ "severity": "medium",
4085
+ "message": "Missing required verification method: auditability.",
4086
+ "policyId": "veritas.surface"
4087
+ }
4088
+ ],
4089
+ "veritas.surface.docs.docs": [
4090
+ {
4091
+ "id": "veritas.surface.docs.docs.gap.provenance-gap",
4092
+ "type": "provenance_gap",
4093
+ "severity": "medium",
4094
+ "message": "Missing required evidence: policy_rule.",
4095
+ "policyId": "veritas.surface"
4096
+ },
4097
+ {
4098
+ "id": "veritas.surface.docs.docs.gap.policy-violation",
4099
+ "type": "policy_violation",
4100
+ "severity": "medium",
4101
+ "message": "Missing required verification method: auditability.",
4102
+ "policyId": "veritas.surface"
4103
+ }
4104
+ ],
4105
+ "veritas.surface.verification.tests": [
4106
+ {
4107
+ "id": "veritas.surface.verification.tests.gap.provenance-gap",
4108
+ "type": "provenance_gap",
4109
+ "severity": "medium",
4110
+ "message": "Missing required evidence: policy_rule.",
4111
+ "policyId": "veritas.surface"
4112
+ },
4113
+ {
4114
+ "id": "veritas.surface.verification.tests.gap.policy-violation",
4115
+ "type": "policy_violation",
4116
+ "severity": "medium",
4117
+ "message": "Missing required verification method: auditability.",
4118
+ "policyId": "veritas.surface"
4119
+ }
4120
+ ],
4121
+ "veritas.evidence-check.npm-run-veritas-fallow-advisory": [
4122
+ {
4123
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory.gap.policy-violation",
4124
+ "type": "policy_violation",
4125
+ "severity": "high",
4126
+ "message": "Missing required verification method: validation.",
4127
+ "policyId": "veritas.evidence-check"
4128
+ }
4129
+ ],
4130
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts": [
4131
+ {
4132
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts.gap.evidence-veritas-1783001840335.policy.required-veritas-cli-artifacts.evidence",
4133
+ "type": "policy_violation",
4134
+ "severity": "high",
4135
+ "message": "Evidence explicitly reported a non-passing result.",
4136
+ "policyId": "veritas.policy-result"
4137
+ },
4138
+ {
4139
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts.gap.hint-1",
4140
+ "type": "policy_violation",
4141
+ "severity": "high",
4142
+ "message": "The shipped Veritas CLI entrypoints and package manifest must stay present.",
4143
+ "policyId": "veritas.policy-result"
4144
+ }
4145
+ ],
4146
+ "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca": [
4147
+ {
4148
+ "id": "veritas.veritas-1783001840335.readiness-verdict.working-tree-798d536c54a9d1c0d4c238509527732827088f61d7e74a65c9f830ccb8d77eca.gap.hint-1",
4149
+ "type": "policy_violation",
4150
+ "severity": "high",
4151
+ "message": "Blocking readiness requirement failed: required-veritas-cli-artifacts.",
4152
+ "policyId": "veritas.readiness-verdict"
4153
+ }
4154
+ ]
4155
+ },
4156
+ "claimGroupRollups": [
4157
+ {
4158
+ "id": "veritas.requirements.veritas-default",
4159
+ "title": "veritas-default",
4160
+ "kind": "requirement-set",
4161
+ "status": "rejected",
4162
+ "claimIds": [
4163
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
4164
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
4165
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
4166
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
4167
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
4168
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
4169
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
4170
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src",
4171
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
4172
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
4173
+ ],
4174
+ "requirements": [
4175
+ {
4176
+ "id": "veritas.requirement.policy-changes-require-attestation",
4177
+ "title": "policy-changes-require-attestation",
4178
+ "claimIds": [
4179
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation"
4180
+ ],
4181
+ "required": true,
4182
+ "severity": "high",
4183
+ "status": "verified",
4184
+ "verifiedClaims": [
4185
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation"
4186
+ ],
4187
+ "staleClaims": [],
4188
+ "disputedClaims": [],
4189
+ "unsupportedClaims": [],
4190
+ "missingClaimIds": [],
4191
+ "validationStrategy": {
4192
+ "requiredEvidence": [
4193
+ "policy_rule"
4194
+ ],
4195
+ "requiredMethods": [
4196
+ "validation"
4197
+ ],
4198
+ "acceptanceCriteria": [
4199
+ "requirements evaluation"
4200
+ ],
4201
+ "reviewAuthority": "veritas requirements",
4202
+ "metadata": {
4203
+ "ruleId": "policy-changes-require-attestation",
4204
+ "enforcementLevel": "Require",
4205
+ "classification": "hard-invariant"
4206
+ }
4207
+ },
4208
+ "metadata": {
4209
+ "implemented": true,
4210
+ "enforcementLevel": "Require",
4211
+ "classification": "hard-invariant"
4212
+ }
4213
+ },
4214
+ {
4215
+ "id": "veritas.requirement.required-veritas-operational-artifacts",
4216
+ "title": "required-veritas-operational-artifacts",
4217
+ "claimIds": [
4218
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts"
4219
+ ],
4220
+ "required": true,
4221
+ "severity": "high",
4222
+ "status": "verified",
4223
+ "verifiedClaims": [
4224
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts"
4225
+ ],
4226
+ "staleClaims": [],
4227
+ "disputedClaims": [],
4228
+ "unsupportedClaims": [],
4229
+ "missingClaimIds": [],
4230
+ "validationStrategy": {
4231
+ "requiredEvidence": [
4232
+ "policy_rule"
4233
+ ],
4234
+ "requiredMethods": [
4235
+ "validation"
4236
+ ],
4237
+ "acceptanceCriteria": [
4238
+ "requirements evaluation"
4239
+ ],
4240
+ "reviewAuthority": "veritas requirements",
4241
+ "metadata": {
4242
+ "ruleId": "required-veritas-operational-artifacts",
4243
+ "enforcementLevel": "Require",
4244
+ "classification": "hard-invariant"
4245
+ }
4246
+ },
4247
+ "metadata": {
4248
+ "implemented": true,
4249
+ "enforcementLevel": "Require",
4250
+ "classification": "hard-invariant"
4251
+ }
4252
+ },
4253
+ {
4254
+ "id": "veritas.requirement.required-veritas-cli-artifacts",
4255
+ "title": "required-veritas-cli-artifacts",
4256
+ "claimIds": [
4257
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts"
4258
+ ],
4259
+ "required": true,
4260
+ "severity": "high",
4261
+ "status": "rejected",
4262
+ "verifiedClaims": [],
4263
+ "staleClaims": [],
4264
+ "disputedClaims": [
4265
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts"
4266
+ ],
4267
+ "unsupportedClaims": [],
4268
+ "missingClaimIds": [],
4269
+ "validationStrategy": {
4270
+ "requiredEvidence": [
4271
+ "policy_rule"
4272
+ ],
4273
+ "requiredMethods": [
4274
+ "validation"
4275
+ ],
4276
+ "acceptanceCriteria": [
4277
+ "requirements evaluation"
4278
+ ],
4279
+ "reviewAuthority": "veritas requirements",
4280
+ "metadata": {
4281
+ "ruleId": "required-veritas-cli-artifacts",
4282
+ "enforcementLevel": "Require",
4283
+ "classification": "hard-invariant"
4284
+ }
4285
+ },
4286
+ "metadata": {
4287
+ "implemented": true,
4288
+ "enforcementLevel": "Require",
4289
+ "classification": "hard-invariant"
4290
+ }
4291
+ },
4292
+ {
4293
+ "id": "veritas.requirement.required-veritas-reference-artifacts",
4294
+ "title": "required-veritas-reference-artifacts",
4295
+ "claimIds": [
4296
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts"
4297
+ ],
4298
+ "required": true,
4299
+ "severity": "high",
4300
+ "status": "verified",
4301
+ "verifiedClaims": [
4302
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts"
4303
+ ],
4304
+ "staleClaims": [],
4305
+ "disputedClaims": [],
4306
+ "unsupportedClaims": [],
4307
+ "missingClaimIds": [],
4308
+ "validationStrategy": {
4309
+ "requiredEvidence": [
4310
+ "policy_rule"
4311
+ ],
4312
+ "requiredMethods": [
4313
+ "validation"
4314
+ ],
4315
+ "acceptanceCriteria": [
4316
+ "requirements evaluation"
4317
+ ],
4318
+ "reviewAuthority": "veritas requirements",
4319
+ "metadata": {
4320
+ "ruleId": "required-veritas-reference-artifacts",
4321
+ "enforcementLevel": "Require",
4322
+ "classification": "hard-invariant"
4323
+ }
4324
+ },
4325
+ "metadata": {
4326
+ "implemented": true,
4327
+ "enforcementLevel": "Require",
4328
+ "classification": "hard-invariant"
4329
+ }
4330
+ },
4331
+ {
4332
+ "id": "veritas.requirement.required-veritas-schema-artifacts",
4333
+ "title": "required-veritas-schema-artifacts",
4334
+ "claimIds": [
4335
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
4336
+ ],
4337
+ "required": true,
4338
+ "severity": "high",
4339
+ "status": "verified",
4340
+ "verifiedClaims": [
4341
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
4342
+ ],
4343
+ "staleClaims": [],
4344
+ "disputedClaims": [],
4345
+ "unsupportedClaims": [],
4346
+ "missingClaimIds": [],
4347
+ "validationStrategy": {
4348
+ "requiredEvidence": [
4349
+ "policy_rule"
4350
+ ],
4351
+ "requiredMethods": [
4352
+ "validation"
4353
+ ],
4354
+ "acceptanceCriteria": [
4355
+ "requirements evaluation"
4356
+ ],
4357
+ "reviewAuthority": "veritas requirements",
4358
+ "metadata": {
4359
+ "ruleId": "required-veritas-schema-artifacts",
4360
+ "enforcementLevel": "Require",
4361
+ "classification": "hard-invariant"
4362
+ }
4363
+ },
4364
+ "metadata": {
4365
+ "implemented": true,
4366
+ "enforcementLevel": "Require",
4367
+ "classification": "hard-invariant"
4368
+ }
4369
+ },
4370
+ {
4371
+ "id": "veritas.requirement.ai-instruction-files-synced",
4372
+ "title": "ai-instruction-files-synced",
4373
+ "claimIds": [
4374
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced"
4375
+ ],
4376
+ "required": false,
4377
+ "severity": "high",
4378
+ "status": "verified",
4379
+ "verifiedClaims": [
4380
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced"
4381
+ ],
4382
+ "staleClaims": [],
4383
+ "disputedClaims": [],
4384
+ "unsupportedClaims": [],
4385
+ "missingClaimIds": [],
4386
+ "validationStrategy": {
4387
+ "requiredEvidence": [
4388
+ "policy_rule"
4389
+ ],
4390
+ "requiredMethods": [
4391
+ "validation"
4392
+ ],
4393
+ "acceptanceCriteria": [
4394
+ "requirements evaluation"
4395
+ ],
4396
+ "reviewAuthority": "veritas requirements",
4397
+ "metadata": {
4398
+ "ruleId": "ai-instruction-files-synced",
4399
+ "enforcementLevel": "Guide",
4400
+ "classification": "hard-invariant"
4401
+ }
4402
+ },
4403
+ "metadata": {
4404
+ "implemented": true,
4405
+ "enforcementLevel": "Guide",
4406
+ "classification": "hard-invariant"
4407
+ }
4408
+ },
4409
+ {
4410
+ "id": "veritas.requirement.prefer-veritas-routed-delivery",
4411
+ "title": "prefer-veritas-routed-delivery",
4412
+ "claimIds": [
4413
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery"
4414
+ ],
4415
+ "required": false,
4416
+ "severity": "low",
4417
+ "status": "verified",
4418
+ "verifiedClaims": [
4419
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery"
4420
+ ],
4421
+ "staleClaims": [],
4422
+ "disputedClaims": [],
4423
+ "unsupportedClaims": [],
4424
+ "missingClaimIds": [],
4425
+ "validationStrategy": {
4426
+ "requiredEvidence": [
4427
+ "policy_rule"
4428
+ ],
4429
+ "requiredMethods": [
4430
+ "validation"
4431
+ ],
4432
+ "acceptanceCriteria": [
4433
+ "requirements evaluation"
4434
+ ],
4435
+ "reviewAuthority": "veritas requirements",
4436
+ "metadata": {
4437
+ "ruleId": "prefer-veritas-routed-delivery",
4438
+ "enforcementLevel": "Observe",
4439
+ "classification": "promotable-policy"
4440
+ }
4441
+ },
4442
+ "metadata": {
4443
+ "implemented": true,
4444
+ "enforcementLevel": "Observe",
4445
+ "classification": "promotable-policy"
4446
+ }
4447
+ },
4448
+ {
4449
+ "id": "veritas.requirement.no-console-log-in-src",
4450
+ "title": "no-console-log-in-src",
4451
+ "claimIds": [
4452
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src"
4453
+ ],
4454
+ "required": false,
4455
+ "severity": "medium",
4456
+ "status": "verified",
4457
+ "verifiedClaims": [
4458
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src"
4459
+ ],
4460
+ "staleClaims": [],
4461
+ "disputedClaims": [],
4462
+ "unsupportedClaims": [],
4463
+ "missingClaimIds": [],
4464
+ "validationStrategy": {
4465
+ "requiredEvidence": [
4466
+ "policy_rule"
4467
+ ],
4468
+ "requiredMethods": [
4469
+ "validation"
4470
+ ],
4471
+ "acceptanceCriteria": [
4472
+ "requirements evaluation"
4473
+ ],
4474
+ "reviewAuthority": "veritas requirements",
4475
+ "metadata": {
4476
+ "ruleId": "no-console-log-in-src",
4477
+ "enforcementLevel": "Guide",
4478
+ "classification": "advisory-pattern"
4479
+ }
4480
+ },
4481
+ "metadata": {
4482
+ "implemented": true,
4483
+ "enforcementLevel": "Guide",
4484
+ "classification": "advisory-pattern"
4485
+ }
4486
+ },
4487
+ {
4488
+ "id": "veritas.requirement.canonical-veritas-vocabulary",
4489
+ "title": "canonical-veritas-vocabulary",
4490
+ "claimIds": [
4491
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary"
4492
+ ],
4493
+ "required": false,
4494
+ "severity": "medium",
4495
+ "status": "verified",
4496
+ "verifiedClaims": [
4497
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary"
4498
+ ],
4499
+ "staleClaims": [],
4500
+ "disputedClaims": [],
4501
+ "unsupportedClaims": [],
4502
+ "missingClaimIds": [],
4503
+ "validationStrategy": {
4504
+ "requiredEvidence": [
4505
+ "policy_rule"
4506
+ ],
4507
+ "requiredMethods": [
4508
+ "validation"
4509
+ ],
4510
+ "acceptanceCriteria": [
4511
+ "requirements evaluation"
4512
+ ],
4513
+ "reviewAuthority": "veritas requirements",
4514
+ "metadata": {
4515
+ "ruleId": "canonical-veritas-vocabulary",
4516
+ "enforcementLevel": "Guide",
4517
+ "classification": "advisory-pattern"
4518
+ }
4519
+ },
4520
+ "metadata": {
4521
+ "implemented": true,
4522
+ "enforcementLevel": "Guide",
4523
+ "classification": "advisory-pattern"
4524
+ }
4525
+ },
4526
+ {
4527
+ "id": "veritas.requirement.repeatable-governance-uses-veritas-primitives",
4528
+ "title": "repeatable-governance-uses-veritas-primitives",
4529
+ "claimIds": [
4530
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
4531
+ ],
4532
+ "required": false,
4533
+ "severity": "medium",
4534
+ "status": "verified",
4535
+ "verifiedClaims": [
4536
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
4537
+ ],
4538
+ "staleClaims": [],
4539
+ "disputedClaims": [],
4540
+ "unsupportedClaims": [],
4541
+ "missingClaimIds": [],
4542
+ "validationStrategy": {
4543
+ "requiredEvidence": [
4544
+ "policy_rule"
4545
+ ],
4546
+ "requiredMethods": [
4547
+ "validation"
4548
+ ],
4549
+ "acceptanceCriteria": [
4550
+ "requirements evaluation"
4551
+ ],
4552
+ "reviewAuthority": "veritas requirements",
4553
+ "metadata": {
4554
+ "ruleId": "repeatable-governance-uses-veritas-primitives",
4555
+ "enforcementLevel": "Guide",
4556
+ "classification": "promotable-policy"
4557
+ }
4558
+ },
4559
+ "metadata": {
4560
+ "implemented": true,
4561
+ "enforcementLevel": "Guide",
4562
+ "classification": "promotable-policy"
4563
+ }
4564
+ }
4565
+ ],
4566
+ "summary": {
4567
+ "totalRequirements": 10,
4568
+ "requiredRequirements": 5,
4569
+ "verifiedRequirements": 9,
4570
+ "staleRequirements": 0,
4571
+ "disputedRequirements": 1,
4572
+ "unsupportedRequirements": 0,
4573
+ "missingClaims": 0,
4574
+ "verificationCoverage": 0.9
4575
+ },
4576
+ "description": "Veritas requirements projected as Surface trust claims.",
4577
+ "metadata": {
4578
+ "producer": "veritas",
4579
+ "repoStandards": {
4580
+ "name": "veritas-default",
4581
+ "version": 1,
4582
+ "rule_count": 9
4583
+ },
4584
+ "repoMap": {
4585
+ "name": "veritas",
4586
+ "kind": "repo-map",
4587
+ "report_transport": "local-json",
4588
+ "default_resolution": {
4589
+ "phase": "Phase 0 (Bootstrap)",
4590
+ "workstream": "Initial Project Setup",
4591
+ "matchedArtifacts": [
4592
+ "README.md"
4593
+ ]
4594
+ },
4595
+ "non_sliceable_invariants": [
4596
+ "baseline evidenceCheck",
4597
+ "repo-local guidance",
4598
+ "tracked policy artifacts"
4599
+ ],
4600
+ "evidenceChecks": [
4601
+ {
4602
+ "id": "required-evidence-check",
4603
+ "runner": "bash",
4604
+ "label": "npm run verify",
4605
+ "command": "npm run verify",
4606
+ "method": "validation",
4607
+ "surface_claim_ids": [],
4608
+ "summary": "Runs npm run verify."
4609
+ },
4610
+ {
4611
+ "id": "fallow-advisory",
4612
+ "runner": "bash",
4613
+ "label": "npm run veritas:fallow:advisory",
4614
+ "command": "npm run veritas:fallow:advisory",
4615
+ "method": "auditability",
4616
+ "surface_claim_ids": [],
4617
+ "summary": "Runs Fallow as advisory codebase-intelligence evidence."
4618
+ },
4619
+ {
4620
+ "id": "vocabulary-consistency",
4621
+ "runner": "bash",
4622
+ "label": "npm run veritas:vocab:check",
4623
+ "command": "npm run veritas:vocab:check",
4624
+ "method": "validation",
4625
+ "surface_claim_ids": [],
4626
+ "summary": "Checks first-contact Veritas docs for canonical product vocabulary."
4627
+ }
4628
+ ],
4629
+ "required_evidence_check_ids": [
4630
+ "required-evidence-check"
4631
+ ],
4632
+ "default_evidence_check_ids": [
4633
+ "required-evidence-check",
4634
+ "vocabulary-consistency",
4635
+ "fallow-advisory"
4636
+ ],
4637
+ "evidence_check_routes": [],
4638
+ "uncovered_path_policy": "warn"
4639
+ }
4640
+ }
4641
+ }
4642
+ ]
4643
+ }
4644
+ }
4645
+ }