@kontourai/flow-agents 2.3.0 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (301) hide show
  1. package/.github/CODEOWNERS +16 -0
  2. package/.github/workflows/ci.yml +44 -0
  3. package/.github/workflows/trust-reconcile.yml +62 -4
  4. package/AGENTS.md +4 -4
  5. package/CHANGELOG.md +62 -0
  6. package/CONTEXT.md +35 -0
  7. package/README.md +9 -3
  8. package/agents/dev.json +1 -1
  9. package/agents/tool-code-reviewer.json +1 -1
  10. package/agents/tool-planner.json +3 -3
  11. package/agents/tool-verifier.json +3 -3
  12. package/build/src/cli/assignment-provider.d.ts +1 -0
  13. package/build/src/cli/assignment-provider.js +748 -0
  14. package/build/src/cli/console-learning-projection.js +3 -2
  15. package/build/src/cli/effective-assignment-provider-settings.d.ts +1 -0
  16. package/build/src/cli/effective-assignment-provider-settings.js +125 -0
  17. package/build/src/cli/init.js +104 -21
  18. package/build/src/cli/kit.js +37 -6
  19. package/build/src/cli/pull-work-provider.js +1 -1
  20. package/build/src/cli/usage-feedback.js +3 -3
  21. package/build/src/cli/validate-hook-influence.js +1 -0
  22. package/build/src/cli/validate-workflow-artifacts.js +27 -7
  23. package/build/src/cli/workflow-artifact-cleanup-audit.js +36 -2
  24. package/build/src/cli/workflow-sidecar.d.ts +14 -7
  25. package/build/src/cli/workflow-sidecar.js +938 -168
  26. package/build/src/cli.js +6 -0
  27. package/build/src/flow-kit/validate.d.ts +23 -0
  28. package/build/src/flow-kit/validate.js +67 -1
  29. package/build/src/index.d.ts +1 -1
  30. package/build/src/index.js +1 -1
  31. package/build/src/lib/flow-resolver.d.ts +6 -4
  32. package/build/src/lib/flow-resolver.js +125 -58
  33. package/build/src/lib/local-artifact-root.d.ts +14 -2
  34. package/build/src/lib/local-artifact-root.js +22 -5
  35. package/build/src/lib/workflow-learning-projection.js +2 -2
  36. package/build/src/runtime-adapters.d.ts +12 -0
  37. package/build/src/runtime-adapters.js +56 -16
  38. package/build/src/tools/build-universal-bundles.js +49 -16
  39. package/build/src/tools/generate-context-map.js +10 -8
  40. package/build/src/tools/validate-source-tree.js +24 -1
  41. package/console.telemetry.json +22 -0
  42. package/context/contracts/artifact-contract.md +40 -7
  43. package/context/contracts/assignment-provider-contract.md +239 -0
  44. package/context/contracts/builder-kit-workflow-state-contract.md +5 -2
  45. package/context/contracts/decision-registry-contract.md +265 -0
  46. package/context/contracts/delivery-contract.md +3 -1
  47. package/context/contracts/execution-contract.md +25 -0
  48. package/context/contracts/governance-adapter-contract.md +2 -0
  49. package/context/contracts/knowledge-store-contract.md +197 -0
  50. package/context/contracts/planning-contract.md +4 -1
  51. package/context/contracts/review-contract.md +7 -3
  52. package/context/contracts/sandbox-policy.md +2 -0
  53. package/context/contracts/standing-directives.md +13 -0
  54. package/context/contracts/verification-contract.md +11 -1
  55. package/context/contracts/work-item-contract.md +3 -1
  56. package/context/deferred/parallelization.md +1 -1
  57. package/context/gate-awareness.md +4 -4
  58. package/context/scripts/git-status.sh +2 -2
  59. package/context/scripts/hooks/config-protection.js +502 -2
  60. package/context/scripts/hooks/lib/config-protection-remedies.js +69 -0
  61. package/context/scripts/hooks/run-hook.js +14 -1
  62. package/context/scripts/hooks/stop-goal-fit.js +1140 -99
  63. package/context/scripts/hooks/workflow-steering.js +212 -6
  64. package/context/settings/assignment-provider-settings.json +33 -0
  65. package/docs/adr/0007-flow-skill-kit-tool-boundary.md +2 -0
  66. package/docs/adr/0015-flow-flow-agents-boundary-reconciliation.md +35 -0
  67. package/docs/adr/0019-kit-dependency-ownership.md +62 -0
  68. package/docs/adr/0020-trust-reconcile-manifest-and-claim-classification.md +290 -0
  69. package/docs/adr/0021-assignment-leases-and-stale-claim-takeover.md +221 -0
  70. package/docs/adr/0022-fail-closed-delivery-reconciliation-with-governed-exemptions.md +463 -0
  71. package/docs/agent-system-guidebook.md +3 -3
  72. package/docs/agent-usage-feedback-loop.md +6 -6
  73. package/docs/context-map.md +10 -7
  74. package/docs/decisions/decision-records.md +57 -0
  75. package/docs/decisions/index.md +17 -0
  76. package/docs/decisions/knowledge-store-provider.md +51 -0
  77. package/docs/decisions/model-routing.md +63 -0
  78. package/docs/decisions/promotion-gate.md +52 -0
  79. package/docs/decisions/standing-directives.md +66 -0
  80. package/docs/developer-architecture.md +1 -1
  81. package/docs/fixture-ownership.md +4 -0
  82. package/docs/flow-kit-repository-contract.md +5 -5
  83. package/docs/getting-started.md +12 -2
  84. package/docs/integrations/harness-install.md +2 -1
  85. package/docs/kit-authoring-guide.md +64 -5
  86. package/docs/knowledge-kit.md +5 -1
  87. package/docs/learnings/2026-07-improvement-program.md +203 -0
  88. package/docs/migrations.md +6 -5
  89. package/docs/north-star.md +2 -2
  90. package/docs/operating-layers.md +4 -3
  91. package/docs/repository-structure.md +5 -5
  92. package/docs/skills-map.md +8 -8
  93. package/docs/spec/runtime-hook-surface.md +19 -15
  94. package/docs/spikes/graph-provider-2026-07.md +155 -0
  95. package/docs/standards-register.md +7 -7
  96. package/docs/trust-anchor-adoption.md +105 -4
  97. package/docs/work-item-adapters.md +1 -1
  98. package/docs/workflow-artifact-lifecycle.md +72 -9
  99. package/docs/workflow-eval-strategy.md +3 -3
  100. package/docs/workflow-shared-contracts.md +3 -2
  101. package/docs/workflow-usage-guide.md +260 -21
  102. package/evals/acceptance/DEMO-false-completion.md +20 -11
  103. package/evals/acceptance/prove-capture-teeth-declared.sh +15 -15
  104. package/evals/acceptance/prove-capture-teeth.sh +11 -11
  105. package/evals/acceptance/test_kiro_harness.sh +1 -1
  106. package/evals/ci/antigaming-suite.sh +5 -0
  107. package/evals/ci/run-baseline.sh +71 -1
  108. package/evals/fixtures/assignment-provider/actor-a.json +6 -0
  109. package/evals/fixtures/assignment-provider/actor-b.json +6 -0
  110. package/evals/fixtures/assignment-provider/github-issue-claimed.json +27 -0
  111. package/evals/fixtures/assignment-provider/github-issue-unassigned.json +7 -0
  112. package/evals/fixtures/assignment-provider/liveness-fresh.json +9 -0
  113. package/evals/fixtures/assignment-provider/liveness-stale.json +9 -0
  114. package/evals/fixtures/flow-kit-repository/invalid-bad-dependency/flows/review.flow.json +26 -0
  115. package/evals/fixtures/flow-kit-repository/invalid-bad-dependency/kit.json +13 -0
  116. package/evals/fixtures/flow-kit-repository/valid-with-dependency/flows/review.flow.json +26 -0
  117. package/evals/fixtures/flow-kit-repository/valid-with-dependency/kit.json +13 -0
  118. package/evals/fixtures/hook-influence/cases.json +32 -0
  119. package/evals/fixtures/pull-work-provider/github-issues.json +6 -6
  120. package/evals/fixtures/trust-reconcile-exploits/fabricated-attestation.json +59 -0
  121. package/evals/fixtures/trust-reconcile-exploits/no-label-bypass.json +36 -0
  122. package/evals/fixtures/trust-reconcile-exploits/skip-assumed-bypass.json +59 -0
  123. package/evals/fixtures/trust-reconcile-exploits/status-misassertion.json +48 -0
  124. package/evals/fixtures/trust-reconcile-exploits/waived-command-check.json +44 -0
  125. package/evals/fixtures/trust-reconcile-mixed-bundle/mixed-bundle.json +159 -0
  126. package/evals/fixtures/trust-reconcile-ws3/ws3-bundle.json +920 -0
  127. package/evals/integration/test_actor_identity.sh +254 -0
  128. package/evals/integration/test_assignment_provider_github.sh +318 -0
  129. package/evals/integration/test_assignment_provider_local_file.sh +222 -0
  130. package/evals/integration/test_builder_step_producers.sh +33 -23
  131. package/evals/integration/test_bundle_install.sh +22 -16
  132. package/evals/integration/test_bundle_lifecycle.sh +11 -11
  133. package/evals/integration/test_captured_fail_reconciliation.sh +50 -50
  134. package/evals/integration/test_checkpoint_signing.sh +43 -0
  135. package/evals/integration/test_claim_lookup.sh +4 -4
  136. package/evals/integration/test_codex_hook_resolution.sh +114 -0
  137. package/evals/integration/test_command_log_concurrency.sh +8 -8
  138. package/evals/integration/test_command_log_fork_classification.sh +3 -3
  139. package/evals/integration/test_command_log_integrity.sh +16 -16
  140. package/evals/integration/test_console_learning_projection.sh +1 -1
  141. package/evals/integration/test_critique_supersession_roundtrip.sh +182 -0
  142. package/evals/integration/test_dual_emit_flow_step.sh +145 -0
  143. package/evals/integration/test_enforcer_expects_driven.sh +12 -12
  144. package/evals/integration/test_evidence_capture_hook.sh +14 -13
  145. package/evals/integration/test_fixture_retirement_audit.sh +2 -2
  146. package/evals/integration/test_flow_agents_statusline.sh +2 -2
  147. package/evals/integration/test_flow_kit_install_git.sh +52 -0
  148. package/evals/integration/test_flow_kit_repository.sh +2 -0
  149. package/evals/integration/test_flowdef_session_activation.sh +6 -6
  150. package/evals/integration/test_flowdef_union_floor_regression.sh +429 -0
  151. package/evals/integration/test_gate_bypass_chain.sh +52 -40
  152. package/evals/integration/test_gate_lockdown.sh +97 -73
  153. package/evals/integration/test_gate_review_inquiry_records.sh +3 -3
  154. package/evals/integration/test_goal_fit_escape_hatch.sh +10 -10
  155. package/evals/integration/test_goal_fit_ghost_session.sh +104 -0
  156. package/evals/integration/test_goal_fit_hook.sh +32 -32
  157. package/evals/integration/test_goal_fit_rederive.sh +9 -9
  158. package/evals/integration/test_hook_category_behaviors.sh +103 -0
  159. package/evals/integration/test_hook_influence_cases.sh +1 -0
  160. package/evals/integration/test_install_merge.sh +262 -1
  161. package/evals/integration/test_kit_identity_trust.sh +6 -6
  162. package/evals/integration/test_liveness_conflict_injection.sh +587 -0
  163. package/evals/integration/test_liveness_heartbeat.sh +677 -0
  164. package/evals/integration/test_liveness_verdict.sh +394 -0
  165. package/evals/integration/test_local_flow_kit_install.sh +15 -0
  166. package/evals/integration/test_phase_map_and_gate_claim.sh +63 -11
  167. package/evals/integration/test_promote_gate.sh +178 -0
  168. package/evals/integration/test_publish_delivery.sh +23 -6
  169. package/evals/integration/test_pull_work_assignment_join.sh +132 -0
  170. package/evals/integration/test_pull_work_liveness_preflight.sh +394 -0
  171. package/evals/integration/test_pull_work_provider.sh +2 -2
  172. package/evals/integration/test_reconcile_soundness.sh +37 -13
  173. package/evals/integration/test_resolvefirststep_security.sh +22 -0
  174. package/evals/integration/test_runtime_adapter_activation.sh +87 -18
  175. package/evals/integration/test_session_resume_roundtrip.sh +147 -0
  176. package/evals/integration/test_sidecar_field_preservation.sh +249 -0
  177. package/evals/integration/test_trust_reconcile.sh +11 -10
  178. package/evals/integration/test_trust_reconcile_manifest.sh +79 -0
  179. package/evals/integration/test_trust_reconcile_mixed_bundle.sh +96 -0
  180. package/evals/integration/test_trust_reconcile_negatives.sh +759 -0
  181. package/evals/integration/test_usage_feedback_global.sh +5 -5
  182. package/evals/integration/test_validate_artifacts_portability.sh +60 -0
  183. package/evals/integration/test_verify_cli.sh +2 -2
  184. package/evals/integration/test_veritas_governance_kit.sh +117 -0
  185. package/evals/integration/test_workflow_artifact_cleanup_audit.sh +26 -1
  186. package/evals/integration/test_workflow_artifacts.sh +33 -0
  187. package/evals/integration/test_workflow_sidecar_writer.sh +802 -74
  188. package/evals/integration/test_workflow_steering_hook.sh +175 -5
  189. package/evals/lib/codex-provider.sh +1 -1
  190. package/evals/lib/node.sh +19 -1
  191. package/evals/run.sh +32 -0
  192. package/evals/static/test_decisions.sh +150 -0
  193. package/evals/static/test_flowdef_codeowners_coverage.sh +62 -0
  194. package/evals/static/test_knowledge_providers.sh +23 -0
  195. package/evals/static/test_package.sh +19 -10
  196. package/evals/static/test_universal_bundles.sh +48 -3
  197. package/evals/static/test_workflow_skills.sh +41 -8
  198. package/kits/builder/flows/build.flow.json +3 -74
  199. package/kits/builder/flows/publish-learn.flow.json +90 -0
  200. package/kits/builder/kit.json +11 -0
  201. package/kits/builder/skills/builder-shape/SKILL.md +1 -1
  202. package/kits/builder/skills/deliver/SKILL.md +32 -11
  203. package/kits/builder/skills/design-probe/SKILL.md +4 -4
  204. package/kits/builder/skills/evidence-gate/SKILL.md +26 -1
  205. package/kits/builder/skills/execute-plan/SKILL.md +2 -2
  206. package/kits/builder/skills/fix-bug/SKILL.md +2 -0
  207. package/kits/builder/skills/gate-review/SKILL.md +6 -6
  208. package/kits/builder/skills/idea-to-backlog/SKILL.md +1 -1
  209. package/kits/builder/skills/learning-review/SKILL.md +7 -7
  210. package/kits/builder/skills/pickup-probe/SKILL.md +5 -4
  211. package/kits/builder/skills/plan-work/SKILL.md +27 -5
  212. package/kits/builder/skills/pull-work/SKILL.md +148 -5
  213. package/kits/builder/skills/release-readiness/SKILL.md +4 -4
  214. package/kits/builder/skills/review-work/SKILL.md +24 -1
  215. package/kits/builder/skills/tdd-workflow/SKILL.md +2 -0
  216. package/kits/builder/skills/verify-work/SKILL.md +8 -1
  217. package/kits/catalog.json +6 -0
  218. package/kits/knowledge/kit.json +35 -0
  219. package/kits/knowledge/providers/conformance/fixtures/git-repo/CONTEXT.md +12 -0
  220. package/kits/knowledge/providers/conformance/fixtures/git-repo/docs/decisions/old-sprocket-shape.md +13 -0
  221. package/kits/knowledge/providers/conformance/fixtures/git-repo/docs/decisions/sprocket-shape.md +14 -0
  222. package/kits/knowledge/providers/conformance/fixtures/git-repo/docs/decisions/widget-format.md +14 -0
  223. package/kits/knowledge/providers/conformance/fixtures/git-repo/docs/learnings/fixture-learning.md +7 -0
  224. package/kits/knowledge/providers/conformance/fixtures/work-item/issues.json +30 -0
  225. package/kits/knowledge/providers/conformance/suite.test.js +125 -0
  226. package/kits/knowledge/providers/git-repo/index.js +236 -0
  227. package/kits/knowledge/providers/health/health-pass.test.js +99 -0
  228. package/kits/knowledge/providers/health/index.js +153 -0
  229. package/kits/knowledge/providers/index.js +24 -0
  230. package/kits/knowledge/providers/lib/model.js +91 -0
  231. package/kits/knowledge/providers/lib/schema-validate.js +119 -0
  232. package/kits/knowledge/providers/markdown-vault/index.js +169 -0
  233. package/kits/knowledge/providers/work-item/index.js +204 -0
  234. package/kits/veritas-governance/adapter/readiness-to-trust-bundle.mjs +178 -0
  235. package/kits/veritas-governance/docs/README.md +75 -0
  236. package/kits/veritas-governance/fixtures/readiness/not-ready.readiness-report.json +4645 -0
  237. package/kits/veritas-governance/fixtures/readiness/ready.readiness-report.json +4403 -0
  238. package/kits/veritas-governance/flows/readiness-check.flow.json +35 -0
  239. package/kits/veritas-governance/kit.json +16 -0
  240. package/package.json +11 -5
  241. package/packaging/README.md +2 -2
  242. package/packaging/conformance/fixtures/config-protection--allow-read-state-json.json +20 -0
  243. package/packaging/conformance/fixtures/config-protection--block-write-state-json.json +20 -0
  244. package/packaging/conformance/fixtures/stop-goal-fit--block-bundle-disputed-claim.json +1 -1
  245. package/packaging/conformance/fixtures/stop-goal-fit--block-capture-contradicts-claimed-pass.json +1 -1
  246. package/packaging/manifest.json +9 -10
  247. package/schemas/assignment-provider-settings.schema.json +125 -0
  248. package/schemas/decision-record.schema.json +109 -0
  249. package/schemas/knowledge/edge.schema.json +54 -0
  250. package/schemas/knowledge/health-report.schema.json +45 -0
  251. package/schemas/knowledge/node.schema.json +49 -0
  252. package/schemas/knowledge/proposal.schema.json +53 -0
  253. package/schemas/workflow-evidence.schema.json +1 -1
  254. package/schemas/workflow-state.schema.json +5 -0
  255. package/scripts/README.md +8 -3
  256. package/scripts/check-content-boundary.cjs +1 -1
  257. package/scripts/check-decisions.cjs +356 -0
  258. package/scripts/ci/derive-claim-status.mjs +74 -0
  259. package/scripts/ci/trust-reconcile.js +957 -103
  260. package/scripts/git-status.sh +2 -2
  261. package/scripts/hooks/claude-telemetry-hook.js +37 -3
  262. package/scripts/hooks/codex-telemetry-hook.js +36 -2
  263. package/scripts/hooks/config-protection.js +102 -30
  264. package/scripts/hooks/evidence-capture.js +3 -3
  265. package/scripts/hooks/lib/actor-identity.js +368 -0
  266. package/scripts/hooks/lib/config-protection-remedies.js +69 -0
  267. package/scripts/hooks/lib/liveness-heartbeat.js +361 -0
  268. package/scripts/hooks/lib/liveness-policy.js +127 -0
  269. package/scripts/hooks/lib/liveness-read.js +105 -12
  270. package/scripts/hooks/lib/liveness-write.js +46 -0
  271. package/scripts/hooks/lib/local-artifact-paths.js +12 -6
  272. package/scripts/hooks/opencode-telemetry-hook.js +27 -1
  273. package/scripts/hooks/pi-telemetry-hook.js +27 -1
  274. package/scripts/hooks/stop-goal-fit.js +157 -26
  275. package/scripts/hooks/workflow-steering.js +77 -3
  276. package/scripts/install-codex-home.sh +138 -38
  277. package/scripts/statusline/flow-agents-statusline.js +2 -2
  278. package/src/cli/assignment-provider.ts +845 -0
  279. package/src/cli/console-learning-projection.ts +3 -2
  280. package/src/cli/effective-assignment-provider-settings.ts +112 -0
  281. package/src/cli/init.ts +101 -21
  282. package/src/cli/kit.ts +37 -6
  283. package/src/cli/public-api.test.mjs +58 -6
  284. package/src/cli/pull-work-provider.ts +1 -1
  285. package/src/cli/trust-bundle-policy-order.test.mjs +87 -0
  286. package/src/cli/usage-feedback.ts +3 -3
  287. package/src/cli/validate-hook-influence.ts +1 -0
  288. package/src/cli/validate-workflow-artifacts.ts +27 -7
  289. package/src/cli/veritas-readiness-adapter.test.mjs +267 -0
  290. package/src/cli/workflow-artifact-cleanup-audit.ts +35 -2
  291. package/src/cli/workflow-sidecar.ts +933 -168
  292. package/src/cli.ts +6 -0
  293. package/src/flow-kit/validate.ts +74 -1
  294. package/src/index.ts +6 -2
  295. package/src/lib/flow-resolver.ts +123 -55
  296. package/src/lib/local-artifact-root.ts +24 -5
  297. package/src/lib/workflow-learning-projection.ts +2 -2
  298. package/src/runtime-adapters.ts +61 -15
  299. package/src/tools/build-universal-bundles.ts +49 -16
  300. package/src/tools/generate-context-map.ts +10 -8
  301. package/src/tools/validate-source-tree.ts +24 -1
@@ -0,0 +1,4403 @@
1
+ {
2
+ "record_schema_version": 1,
3
+ "run_id": "veritas-1783001685088",
4
+ "timestamp": "2026-07-02T14:14:45.088Z",
5
+ "source_ref": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
6
+ "source_kind": "working-tree",
7
+ "source_scope": [
8
+ "staged",
9
+ "unstaged",
10
+ "untracked"
11
+ ],
12
+ "integrity": {
13
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
14
+ "sourceKind": "working-tree",
15
+ "sourceScope": [
16
+ "staged",
17
+ "unstaged",
18
+ "untracked"
19
+ ],
20
+ "fileRefs": [],
21
+ "configRefs": {
22
+ "repoMap": {
23
+ "name": "veritas",
24
+ "path": ".veritas/repo-map.json",
25
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
26
+ },
27
+ "repoStandards": {
28
+ "name": "veritas-default",
29
+ "path": ".veritas/repo-standards/default.repo-standards.json",
30
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
31
+ },
32
+ "authoritySettings": {
33
+ "name": "authority-settings",
34
+ "path": ".veritas/authority/default.authority-settings.json",
35
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
36
+ }
37
+ }
38
+ },
39
+ "resolved_phase": "Phase 0 (Bootstrap)",
40
+ "resolved_workstream": "Initial Project Setup",
41
+ "matched_artifacts": [
42
+ "README.md"
43
+ ],
44
+ "components": [],
45
+ "component_details": [],
46
+ "file_nodes": {},
47
+ "triggered_evidence_checks": [],
48
+ "selected_evidence_check_ids": [
49
+ "required-evidence-check",
50
+ "vocabulary-consistency",
51
+ "fallow-advisory"
52
+ ],
53
+ "selected_evidence_check_labels": [
54
+ "npm run verify",
55
+ "npm run veritas:vocab:check",
56
+ "npm run veritas:fallow:advisory"
57
+ ],
58
+ "selected_evidence_checks": [
59
+ {
60
+ "id": "required-evidence-check",
61
+ "runner": "bash",
62
+ "label": "npm run verify",
63
+ "command": "npm run verify",
64
+ "method": "validation",
65
+ "surface_claim_ids": [],
66
+ "summary": "All evidence checks passed.",
67
+ "evidence_check_result": {
68
+ "id": "required-evidence-check",
69
+ "runner": "bash",
70
+ "label": "npm run verify",
71
+ "passed": true,
72
+ "exitCode": 0,
73
+ "signal": null,
74
+ "stdout": "\n> @kontourai/veritas@1.1.0 verify\n> node scripts/check-content-boundary.cjs && node scripts/verify.mjs\n\nContent boundary check passed.\nVeritas verification passed.\n",
75
+ "stderr": "",
76
+ "content": [],
77
+ "isError": false,
78
+ "timedOut": false,
79
+ "durationMs": 205
80
+ }
81
+ },
82
+ {
83
+ "id": "vocabulary-consistency",
84
+ "runner": "bash",
85
+ "label": "npm run veritas:vocab:check",
86
+ "command": "npm run veritas:vocab:check",
87
+ "method": "validation",
88
+ "surface_claim_ids": [],
89
+ "summary": "All evidence checks passed.",
90
+ "evidence_check_result": {
91
+ "id": "vocabulary-consistency",
92
+ "runner": "bash",
93
+ "label": "npm run veritas:vocab:check",
94
+ "passed": true,
95
+ "exitCode": 0,
96
+ "signal": null,
97
+ "stdout": "\n> @kontourai/veritas@1.1.0 veritas:vocab:check\n> node scripts/check-veritas-vocabulary.mjs\n\nPASS canonical-veritas-vocabulary: All matched files use canonical Veritas vocabulary.\n",
98
+ "stderr": "",
99
+ "content": [],
100
+ "isError": false,
101
+ "timedOut": false,
102
+ "durationMs": 137
103
+ }
104
+ },
105
+ {
106
+ "id": "fallow-advisory",
107
+ "runner": "bash",
108
+ "label": "npm run veritas:fallow:advisory",
109
+ "command": "npm run veritas:fallow:advisory",
110
+ "method": "auditability",
111
+ "surface_claim_ids": [],
112
+ "summary": "All evidence checks passed.",
113
+ "evidence_check_result": {
114
+ "id": "fallow-advisory",
115
+ "runner": "bash",
116
+ "label": "npm run veritas:fallow:advisory",
117
+ "passed": true,
118
+ "exitCode": 0,
119
+ "signal": null,
120
+ "stdout": "\n> @kontourai/veritas@1.1.0 veritas:fallow:advisory\n> node scripts/run-fallow-audit.mjs\n\n{\"artifactPath\":\".kontourai/veritas/external/fallow-audit.json\",\"schema_version\":\"veritas-fallow-advisory-v1\",\"tool\":\"fallow\",\"command\":\"npx -y fallow --format json --quiet\",\"verdict\":\"pass\",\"summary\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"duplicated_lines\":573,\"duplication_percent\":3.423757170172084,\"complexity_findings\":258,\"average_maintainability\":89.7},\"baseline\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"complexity_findings\":258},\"deltas\":{\"dead_code_issues\":0,\"duplication_clone_groups\":0,\"complexity_findings\":0},\"actions\":[]}\n",
121
+ "stderr": "",
122
+ "content": [],
123
+ "isError": false,
124
+ "timedOut": false,
125
+ "durationMs": 2586
126
+ }
127
+ }
128
+ ],
129
+ "evidence_check_resolution_source": "default",
130
+ "evidence_inventory_results": [],
131
+ "readiness_coverage": {
132
+ "evidence_check_count": 3,
133
+ "selected_evidence_check_count": 3,
134
+ "evidence_inventory_count": 0,
135
+ "required_inventory_count": 0,
136
+ "candidate_inventory_count": 0,
137
+ "advisory_inventory_count": 0,
138
+ "move_to_test_inventory_count": 0,
139
+ "retire_inventory_count": 0,
140
+ "upstream_candidate_count": 0,
141
+ "unknown_catch_evidence_inventory_ids": [],
142
+ "missing_review_trigger_inventory_ids": [],
143
+ "stale_inventory_ids": [],
144
+ "stale_or_unknown_inventory_ids": [],
145
+ "recommendation": "Readiness coverage has owners, review triggers, and no unknown catch-evidence inventories."
146
+ },
147
+ "external_tool_results": [
148
+ {
149
+ "tool": "fallow",
150
+ "format": "veritas-fallow-advisory-v1",
151
+ "command": "npm run veritas:fallow:advisory",
152
+ "evidence_check_id": "fallow-advisory",
153
+ "verdict": "pass",
154
+ "blocking": false,
155
+ "summary": {
156
+ "dead_code_issues": 0,
157
+ "duplication_clone_groups": 17,
158
+ "duplicated_lines": 573,
159
+ "duplication_percent": 3.423757170172084,
160
+ "complexity_findings": 258,
161
+ "average_maintainability": 89.7
162
+ },
163
+ "artifact_path": ".kontourai/veritas/external/fallow-audit.json",
164
+ "actions": []
165
+ }
166
+ ],
167
+ "uncovered_path_result": "clear",
168
+ "baseline_ci_fast_passed": true,
169
+ "recommendations": [],
170
+ "false_positive_review": "unknown",
171
+ "promotion_candidate": false,
172
+ "override_or_bypass": false,
173
+ "owner": null,
174
+ "files": [],
175
+ "unresolved_files": [],
176
+ "promotion_allowed": true,
177
+ "producer": {
178
+ "name": "veritas",
179
+ "record_schema_version": 1,
180
+ "resolver_precedence": [
181
+ "explicit task or issue reference",
182
+ "matching local artifact under .veritas/**",
183
+ "active repo roadmap or README guidance",
184
+ "multi-workstream fallback suppresses promotion"
185
+ ],
186
+ "policy_defaults": {
187
+ "false_positive_review": "unknown",
188
+ "promotion_candidate": false,
189
+ "override_or_bypass": false
190
+ }
191
+ },
192
+ "repo_map": {
193
+ "name": "veritas",
194
+ "kind": "repo-map",
195
+ "report_transport": "local-json",
196
+ "default_resolution": {
197
+ "phase": "Phase 0 (Bootstrap)",
198
+ "workstream": "Initial Project Setup",
199
+ "matchedArtifacts": [
200
+ "README.md"
201
+ ]
202
+ },
203
+ "non_sliceable_invariants": [
204
+ "baseline evidenceCheck",
205
+ "repo-local guidance",
206
+ "tracked policy artifacts"
207
+ ],
208
+ "evidenceChecks": [
209
+ {
210
+ "id": "required-evidence-check",
211
+ "runner": "bash",
212
+ "label": "npm run verify",
213
+ "command": "npm run verify",
214
+ "method": "validation",
215
+ "surface_claim_ids": [],
216
+ "summary": "Runs npm run verify."
217
+ },
218
+ {
219
+ "id": "fallow-advisory",
220
+ "runner": "bash",
221
+ "label": "npm run veritas:fallow:advisory",
222
+ "command": "npm run veritas:fallow:advisory",
223
+ "method": "auditability",
224
+ "surface_claim_ids": [],
225
+ "summary": "Runs Fallow as advisory codebase-intelligence evidence."
226
+ },
227
+ {
228
+ "id": "vocabulary-consistency",
229
+ "runner": "bash",
230
+ "label": "npm run veritas:vocab:check",
231
+ "command": "npm run veritas:vocab:check",
232
+ "method": "validation",
233
+ "surface_claim_ids": [],
234
+ "summary": "Checks first-contact Veritas docs for canonical product vocabulary."
235
+ }
236
+ ],
237
+ "required_evidence_check_ids": [
238
+ "required-evidence-check"
239
+ ],
240
+ "default_evidence_check_ids": [
241
+ "required-evidence-check",
242
+ "vocabulary-consistency",
243
+ "fallow-advisory"
244
+ ],
245
+ "evidence_check_routes": [],
246
+ "uncovered_path_policy": "warn"
247
+ },
248
+ "repo_standards": {
249
+ "name": "veritas-default",
250
+ "version": 1,
251
+ "rule_count": 9
252
+ },
253
+ "policy_results": [
254
+ {
255
+ "rule_id": "policy-changes-require-attestation",
256
+ "classification": "hard-invariant",
257
+ "enforcementLevel": "Require",
258
+ "message": "Protected standards changes require a fresh authority-backed attestation.",
259
+ "owner": "repo-core",
260
+ "rollback_switch": null,
261
+ "implemented": true,
262
+ "passed": true,
263
+ "status": "pass",
264
+ "summary": "Active attestation policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a matches current protected standards hashes.",
265
+ "findings": []
266
+ },
267
+ {
268
+ "rule_id": "required-veritas-operational-artifacts",
269
+ "classification": "hard-invariant",
270
+ "enforcementLevel": "Require",
271
+ "enforcement": "deny",
272
+ "message": "The tracked Veritas operational artifacts must stay present so agents and reviewers share the same baseline.",
273
+ "owner": "repo-core",
274
+ "rollback_switch": null,
275
+ "implemented": true,
276
+ "passed": true,
277
+ "status": "info",
278
+ "summary": "All required repository artifacts are present.",
279
+ "findings": []
280
+ },
281
+ {
282
+ "rule_id": "required-veritas-cli-artifacts",
283
+ "classification": "hard-invariant",
284
+ "enforcementLevel": "Require",
285
+ "enforcement": "deny",
286
+ "message": "The shipped Veritas CLI entrypoints and package manifest must stay present.",
287
+ "owner": "repo-core",
288
+ "rollback_switch": null,
289
+ "implemented": true,
290
+ "passed": true,
291
+ "status": "info",
292
+ "summary": "All required repository artifacts are present.",
293
+ "findings": []
294
+ },
295
+ {
296
+ "rule_id": "required-veritas-reference-artifacts",
297
+ "classification": "hard-invariant",
298
+ "enforcementLevel": "Require",
299
+ "enforcement": "deny",
300
+ "message": "The repo must keep the docs that explain the shipped Veritas surface.",
301
+ "owner": "repo-core",
302
+ "rollback_switch": null,
303
+ "implemented": true,
304
+ "passed": true,
305
+ "status": "info",
306
+ "summary": "All required repository artifacts are present.",
307
+ "findings": []
308
+ },
309
+ {
310
+ "rule_id": "required-veritas-schema-artifacts",
311
+ "classification": "hard-invariant",
312
+ "enforcementLevel": "Require",
313
+ "enforcement": "deny",
314
+ "message": "The shipped Veritas schema set must stay present and reviewable.",
315
+ "owner": "repo-core",
316
+ "rollback_switch": null,
317
+ "implemented": true,
318
+ "passed": true,
319
+ "status": "info",
320
+ "summary": "All required repository artifacts are present.",
321
+ "findings": []
322
+ },
323
+ {
324
+ "rule_id": "ai-instruction-files-synced",
325
+ "classification": "hard-invariant",
326
+ "enforcementLevel": "Guide",
327
+ "enforcement": "deny",
328
+ "message": "All required AI tool instruction files must contain the Veritas governance block.",
329
+ "owner": "repo-maintainers",
330
+ "rollback_switch": null,
331
+ "implemented": true,
332
+ "passed": true,
333
+ "status": "info",
334
+ "summary": "All required AI instruction files contain the canonical Veritas governance block.",
335
+ "findings": []
336
+ },
337
+ {
338
+ "rule_id": "prefer-veritas-routed-delivery",
339
+ "classification": "promotable-policy",
340
+ "enforcementLevel": "Observe",
341
+ "enforcement": "advisory",
342
+ "message": "Prefer keeping the tracked Veritas evidenceCheck and repo conformance integration surfaces present so changes flow through the documented operational path before review.",
343
+ "owner": "repo-maintainers",
344
+ "rollback_switch": "soften-veritas-route",
345
+ "implemented": true,
346
+ "passed": true,
347
+ "status": "info",
348
+ "summary": "All required repository artifacts are present.",
349
+ "findings": []
350
+ },
351
+ {
352
+ "rule_id": "no-console-log-in-src",
353
+ "classification": "advisory-pattern",
354
+ "enforcementLevel": "Guide",
355
+ "enforcement": "advisory",
356
+ "message": "Source files should not leave console.log diagnostics behind.",
357
+ "owner": "repo-maintainers",
358
+ "rollback_switch": "allow-console-log",
359
+ "implemented": true,
360
+ "passed": true,
361
+ "status": "info",
362
+ "summary": "No matched files contain forbidden pattern console\\.log.",
363
+ "findings": []
364
+ },
365
+ {
366
+ "rule_id": "canonical-veritas-vocabulary",
367
+ "classification": "advisory-pattern",
368
+ "enforcementLevel": "Guide",
369
+ "enforcement": "advisory",
370
+ "message": "First-contact Veritas docs should use canonical product vocabulary from CONTEXT.md.",
371
+ "owner": "docs-team",
372
+ "rollback_switch": "allow-vocabulary-drift",
373
+ "implemented": true,
374
+ "passed": true,
375
+ "status": "info",
376
+ "summary": "All matched files use canonical Veritas vocabulary.",
377
+ "findings": []
378
+ },
379
+ {
380
+ "rule_id": "repeatable-governance-uses-veritas-primitives",
381
+ "classification": "promotable-policy",
382
+ "enforcementLevel": "Guide",
383
+ "enforcement": "advisory",
384
+ "message": "Repeatable repo governance checks should be represented by Veritas primitives before they become local helper scripts.",
385
+ "owner": "repo-maintainers",
386
+ "rollback_switch": "allow-unrepresented-governance-script",
387
+ "implemented": true,
388
+ "passed": true,
389
+ "status": "info",
390
+ "summary": "Repeatable governance checks are represented by Veritas primitives.",
391
+ "findings": []
392
+ }
393
+ ],
394
+ "governance_state": {
395
+ "state": "current",
396
+ "currentAttestationId": "policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
397
+ "attestation": {
398
+ "schemaVersion": 1,
399
+ "id": "policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
400
+ "kind": "policy-change",
401
+ "actor": {
402
+ "id": "maintainer",
403
+ "displayName": "Maintainer",
404
+ "identityEvidence": {
405
+ "gitEmail": "maintainer@example.com",
406
+ "signingKeyFingerprint": null
407
+ }
408
+ },
409
+ "attestedAt": "2026-07-01T03:36:48.637Z",
410
+ "repoStandardsHash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab",
411
+ "repoMapHash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d",
412
+ "authoritySettingsHash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946",
413
+ "priorAttestationId": "policy-change-2026-07-01T01-56-01-735Z-928f47d6028a",
414
+ "validUntilDays": 90,
415
+ "notes": "Authorize routing CONTEXT-MAP.md as a root manifest so PR branch-diff conformance resolves the repo context map.",
416
+ "metadata": {
417
+ "protectedStandardsPaths": {
418
+ "repoStandardsPath": ".veritas/repo-standards/default.repo-standards.json",
419
+ "repoMapPath": ".veritas/repo-map.json",
420
+ "authoritySettingsPath": ".veritas/authority/default.authority-settings.json"
421
+ },
422
+ "supersedes": "policy-change-2026-07-01T01-56-01-735Z-928f47d6028a",
423
+ "approvalRef": "chat:2026-07-01-user-pipeline-fix",
424
+ "approvalRefPolicy": {
425
+ "mode": "reference-only",
426
+ "matchedPrefix": null,
427
+ "requiresResolution": false
428
+ },
429
+ "approvalResolution": null
430
+ },
431
+ "surface": {
432
+ "claim": {
433
+ "id": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
434
+ "subjectType": "veritas-protected-standards",
435
+ "subjectId": "protected-standards",
436
+ "surface": "veritas.attestations",
437
+ "claimType": "veritas-human-attestation",
438
+ "fieldOrBehavior": "policy-change",
439
+ "value": {
440
+ "contentHash": "bf9eecd22cce007378c54a74bda643faa279274e32015f1481a50dab50afb18f",
441
+ "validUntil": "2026-09-29T03:36:48.637Z"
442
+ },
443
+ "createdAt": "2026-07-01T03:36:48.637Z",
444
+ "updatedAt": "2026-07-01T03:36:48.637Z",
445
+ "status": "verified",
446
+ "impactLevel": "high",
447
+ "confidenceBasis": {
448
+ "sourceQuality": "strong",
449
+ "reviewerAuthority": "human",
450
+ "evidenceStrength": "strong",
451
+ "impactLevel": "high"
452
+ }
453
+ },
454
+ "evidence": {
455
+ "id": "evidence.attestation.veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
456
+ "claimId": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
457
+ "evidenceType": "attestation",
458
+ "method": "attestation",
459
+ "sourceRef": "veritas:protected-standards",
460
+ "excerptOrSummary": "Authorize routing CONTEXT-MAP.md as a root manifest so PR branch-diff conformance resolves the repo context map.",
461
+ "observedAt": "2026-07-01T03:36:48.637Z",
462
+ "collectedBy": "maintainer",
463
+ "integrityRef": "bf9eecd22cce007378c54a74bda643faa279274e32015f1481a50dab50afb18f",
464
+ "metadata": {
465
+ "actor": {
466
+ "id": "maintainer",
467
+ "displayName": "Maintainer"
468
+ },
469
+ "attestedAt": "2026-07-01T03:36:48.637Z",
470
+ "validUntil": "2026-09-29T03:36:48.637Z",
471
+ "contentHash": "bf9eecd22cce007378c54a74bda643faa279274e32015f1481a50dab50afb18f"
472
+ },
473
+ "sourceLocator": ".veritas/attestations"
474
+ },
475
+ "event": {
476
+ "id": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a.verified",
477
+ "claimId": "veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
478
+ "status": "verified",
479
+ "actor": "maintainer",
480
+ "method": "human attestation",
481
+ "evidenceIds": [
482
+ "evidence.attestation.veritas.attestation.policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a"
483
+ ],
484
+ "createdAt": "2026-07-01T03:36:48.637Z",
485
+ "verifiedAt": "2026-07-01T03:36:48.637Z"
486
+ }
487
+ }
488
+ },
489
+ "pending": false,
490
+ "drift": [],
491
+ "expired": false,
492
+ "ageDays": 1,
493
+ "validUntil": "2026-09-29T03:36:48.637Z",
494
+ "protectedStandards": {
495
+ "hashes": {
496
+ "repoStandardsHash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab",
497
+ "repoMapHash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d",
498
+ "authoritySettingsHash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
499
+ },
500
+ "paths": {
501
+ "repoStandardsPath": ".veritas/repo-standards/default.repo-standards.json",
502
+ "repoMapPath": ".veritas/repo-map.json",
503
+ "authoritySettingsPath": ".veritas/authority/default.authority-settings.json"
504
+ }
505
+ },
506
+ "admissibilityWarning": false,
507
+ "admissibilityWarningReason": null
508
+ },
509
+ "trust": {
510
+ "bundle": {
511
+ "schemaVersion": 3,
512
+ "source": "veritas:veritas-1783001685088",
513
+ "claims": [
514
+ {
515
+ "id": "veritas.surface.governance.guidance",
516
+ "surface": "veritas.affected-surface",
517
+ "claimType": "veritas-affected-surface",
518
+ "fieldOrBehavior": "governance.guidance",
519
+ "subjectType": "repo-surface",
520
+ "subjectId": "veritas:governance.guidance",
521
+ "impactLevel": "medium",
522
+ "verificationPolicyId": "veritas.surface",
523
+ "metadata": {
524
+ "nodeId": "governance.guidance"
525
+ },
526
+ "createdAt": "2026-05-19T13:38:14.077Z",
527
+ "updatedAt": "2026-07-02T14:14:45.088Z",
528
+ "value": "governance.guidance",
529
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
530
+ },
531
+ {
532
+ "id": "veritas.surface.governance.root-manifests",
533
+ "surface": "veritas.affected-surface",
534
+ "claimType": "veritas-affected-surface",
535
+ "fieldOrBehavior": "governance.root-manifests",
536
+ "subjectType": "repo-surface",
537
+ "subjectId": "veritas:governance.root-manifests",
538
+ "impactLevel": "medium",
539
+ "verificationPolicyId": "veritas.surface",
540
+ "metadata": {
541
+ "nodeId": "governance.root-manifests"
542
+ },
543
+ "createdAt": "2026-05-19T13:38:14.077Z",
544
+ "updatedAt": "2026-07-02T14:14:45.088Z",
545
+ "value": "governance.root-manifests",
546
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
547
+ },
548
+ {
549
+ "id": "veritas.surface.tooling.bin",
550
+ "surface": "veritas.affected-surface",
551
+ "claimType": "veritas-affected-surface",
552
+ "fieldOrBehavior": "tooling.bin",
553
+ "subjectType": "repo-surface",
554
+ "subjectId": "veritas:tooling.bin",
555
+ "impactLevel": "medium",
556
+ "verificationPolicyId": "veritas.surface",
557
+ "metadata": {
558
+ "nodeId": "tooling.bin"
559
+ },
560
+ "createdAt": "2026-05-19T13:38:14.077Z",
561
+ "updatedAt": "2026-07-02T14:14:45.088Z",
562
+ "value": "tooling.bin",
563
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
564
+ },
565
+ {
566
+ "id": "veritas.surface.delivery.github",
567
+ "surface": "veritas.affected-surface",
568
+ "claimType": "veritas-affected-surface",
569
+ "fieldOrBehavior": "delivery.github",
570
+ "subjectType": "repo-surface",
571
+ "subjectId": "veritas:delivery.github",
572
+ "impactLevel": "medium",
573
+ "verificationPolicyId": "veritas.surface",
574
+ "metadata": {
575
+ "nodeId": "delivery.github"
576
+ },
577
+ "createdAt": "2026-05-19T13:38:14.077Z",
578
+ "updatedAt": "2026-07-02T14:14:45.088Z",
579
+ "value": "delivery.github",
580
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
581
+ },
582
+ {
583
+ "id": "veritas.surface.tooling.scripts",
584
+ "surface": "veritas.affected-surface",
585
+ "claimType": "veritas-affected-surface",
586
+ "fieldOrBehavior": "tooling.scripts",
587
+ "subjectType": "repo-surface",
588
+ "subjectId": "veritas:tooling.scripts",
589
+ "impactLevel": "medium",
590
+ "verificationPolicyId": "veritas.surface",
591
+ "metadata": {
592
+ "nodeId": "tooling.scripts"
593
+ },
594
+ "createdAt": "2026-05-19T13:38:14.077Z",
595
+ "updatedAt": "2026-07-02T14:14:45.088Z",
596
+ "value": "tooling.scripts",
597
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
598
+ },
599
+ {
600
+ "id": "veritas.surface.governance.schemas",
601
+ "surface": "veritas.affected-surface",
602
+ "claimType": "veritas-affected-surface",
603
+ "fieldOrBehavior": "governance.schemas",
604
+ "subjectType": "repo-surface",
605
+ "subjectId": "veritas:governance.schemas",
606
+ "impactLevel": "medium",
607
+ "verificationPolicyId": "veritas.surface",
608
+ "metadata": {
609
+ "nodeId": "governance.schemas"
610
+ },
611
+ "createdAt": "2026-05-19T13:38:14.077Z",
612
+ "updatedAt": "2026-07-02T14:14:45.088Z",
613
+ "value": "governance.schemas",
614
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
615
+ },
616
+ {
617
+ "id": "veritas.surface.governance.repo-maps",
618
+ "surface": "veritas.affected-surface",
619
+ "claimType": "veritas-affected-surface",
620
+ "fieldOrBehavior": "governance.repo-maps",
621
+ "subjectType": "repo-surface",
622
+ "subjectId": "veritas:governance.repo-maps",
623
+ "impactLevel": "medium",
624
+ "verificationPolicyId": "veritas.surface",
625
+ "metadata": {
626
+ "nodeId": "governance.repo-maps"
627
+ },
628
+ "createdAt": "2026-05-19T13:38:14.077Z",
629
+ "updatedAt": "2026-07-02T14:14:45.088Z",
630
+ "value": "governance.repo-maps",
631
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
632
+ },
633
+ {
634
+ "id": "veritas.surface.governance.repo-standards",
635
+ "surface": "veritas.affected-surface",
636
+ "claimType": "veritas-affected-surface",
637
+ "fieldOrBehavior": "governance.repo-standards",
638
+ "subjectType": "repo-surface",
639
+ "subjectId": "veritas:governance.repo-standards",
640
+ "impactLevel": "medium",
641
+ "verificationPolicyId": "veritas.surface",
642
+ "metadata": {
643
+ "nodeId": "governance.repo-standards"
644
+ },
645
+ "createdAt": "2026-05-19T13:38:14.077Z",
646
+ "updatedAt": "2026-07-02T14:14:45.088Z",
647
+ "value": "governance.repo-standards",
648
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
649
+ },
650
+ {
651
+ "id": "veritas.surface.examples.example-data",
652
+ "surface": "veritas.affected-surface",
653
+ "claimType": "veritas-affected-surface",
654
+ "fieldOrBehavior": "examples.example-data",
655
+ "subjectType": "repo-surface",
656
+ "subjectId": "veritas:examples.example-data",
657
+ "impactLevel": "medium",
658
+ "verificationPolicyId": "veritas.surface",
659
+ "metadata": {
660
+ "nodeId": "examples.example-data"
661
+ },
662
+ "createdAt": "2026-05-19T13:38:14.077Z",
663
+ "updatedAt": "2026-07-02T14:14:45.088Z",
664
+ "value": "examples.example-data",
665
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
666
+ },
667
+ {
668
+ "id": "veritas.surface.app.src",
669
+ "surface": "veritas.affected-surface",
670
+ "claimType": "veritas-affected-surface",
671
+ "fieldOrBehavior": "app.src",
672
+ "subjectType": "repo-surface",
673
+ "subjectId": "veritas:app.src",
674
+ "impactLevel": "medium",
675
+ "verificationPolicyId": "veritas.surface",
676
+ "metadata": {
677
+ "nodeId": "app.src"
678
+ },
679
+ "createdAt": "2026-05-19T13:38:14.077Z",
680
+ "updatedAt": "2026-07-02T14:14:45.088Z",
681
+ "value": "app.src",
682
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
683
+ },
684
+ {
685
+ "id": "veritas.surface.docs.docs",
686
+ "surface": "veritas.affected-surface",
687
+ "claimType": "veritas-affected-surface",
688
+ "fieldOrBehavior": "docs.docs",
689
+ "subjectType": "repo-surface",
690
+ "subjectId": "veritas:docs.docs",
691
+ "impactLevel": "medium",
692
+ "verificationPolicyId": "veritas.surface",
693
+ "metadata": {
694
+ "nodeId": "docs.docs"
695
+ },
696
+ "createdAt": "2026-05-19T13:38:14.077Z",
697
+ "updatedAt": "2026-07-02T14:14:45.088Z",
698
+ "value": "docs.docs",
699
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
700
+ },
701
+ {
702
+ "id": "veritas.surface.verification.tests",
703
+ "surface": "veritas.affected-surface",
704
+ "claimType": "veritas-affected-surface",
705
+ "fieldOrBehavior": "verification.tests",
706
+ "subjectType": "repo-surface",
707
+ "subjectId": "veritas:verification.tests",
708
+ "impactLevel": "medium",
709
+ "verificationPolicyId": "veritas.surface",
710
+ "metadata": {
711
+ "nodeId": "verification.tests"
712
+ },
713
+ "createdAt": "2026-05-19T13:38:14.077Z",
714
+ "updatedAt": "2026-07-02T14:14:45.088Z",
715
+ "value": "verification.tests",
716
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
717
+ },
718
+ {
719
+ "id": "veritas.governance",
720
+ "surface": "veritas.governance",
721
+ "claimType": "veritas-governance-artifact",
722
+ "fieldOrBehavior": "governance artifact integrity",
723
+ "subjectType": "repository",
724
+ "subjectId": "veritas",
725
+ "impactLevel": "high",
726
+ "verificationPolicyId": "veritas.governance-artifact",
727
+ "createdAt": "2026-05-19T13:38:14.077Z",
728
+ "updatedAt": "2026-07-02T14:14:45.088Z",
729
+ "value": "governance artifact integrity",
730
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
731
+ },
732
+ {
733
+ "id": "veritas.evidence-check.npm-run-verify",
734
+ "surface": "veritas.evidence-check",
735
+ "claimType": "software-evidence-check",
736
+ "fieldOrBehavior": "npm run verify",
737
+ "subjectType": "repository",
738
+ "subjectId": "veritas",
739
+ "impactLevel": "high",
740
+ "verificationPolicyId": "veritas.evidence-check",
741
+ "metadata": {
742
+ "command": "npm run verify"
743
+ },
744
+ "createdAt": "2026-05-19T13:38:14.077Z",
745
+ "updatedAt": "2026-07-02T14:14:45.088Z",
746
+ "value": "all checks pass",
747
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
748
+ },
749
+ {
750
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
751
+ "surface": "veritas.evidence-check",
752
+ "claimType": "software-evidence-check",
753
+ "fieldOrBehavior": "npm run veritas:fallow:advisory",
754
+ "subjectType": "repository",
755
+ "subjectId": "veritas",
756
+ "impactLevel": "high",
757
+ "verificationPolicyId": "veritas.evidence-check",
758
+ "metadata": {
759
+ "command": "npm run veritas:fallow:advisory"
760
+ },
761
+ "createdAt": "2026-05-19T13:38:14.077Z",
762
+ "updatedAt": "2026-07-02T14:14:45.088Z",
763
+ "value": "all checks pass",
764
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
765
+ },
766
+ {
767
+ "id": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
768
+ "surface": "veritas.policy-results",
769
+ "claimType": "veritas-policy-result",
770
+ "fieldOrBehavior": "policy-changes-require-attestation",
771
+ "subjectType": "policy-rule",
772
+ "subjectId": "veritas:veritas-default:policy-changes-require-attestation",
773
+ "impactLevel": "high",
774
+ "verificationPolicyId": "veritas.policy-result",
775
+ "metadata": {
776
+ "projected": true,
777
+ "ruleId": "policy-changes-require-attestation",
778
+ "enforcementLevel": "Require",
779
+ "classification": "hard-invariant",
780
+ "repoStandards": "veritas-default",
781
+ "repoMap": "veritas"
782
+ },
783
+ "createdAt": "2026-07-02T14:14:45.088Z",
784
+ "updatedAt": "2026-07-02T14:14:45.088Z",
785
+ "value": "policy-changes-require-attestation",
786
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
787
+ },
788
+ {
789
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
790
+ "surface": "veritas.policy-results",
791
+ "claimType": "veritas-policy-result",
792
+ "fieldOrBehavior": "required-veritas-operational-artifacts",
793
+ "subjectType": "policy-rule",
794
+ "subjectId": "veritas:veritas-default:required-veritas-operational-artifacts",
795
+ "impactLevel": "high",
796
+ "verificationPolicyId": "veritas.policy-result",
797
+ "metadata": {
798
+ "projected": true,
799
+ "ruleId": "required-veritas-operational-artifacts",
800
+ "enforcementLevel": "Require",
801
+ "classification": "hard-invariant",
802
+ "repoStandards": "veritas-default",
803
+ "repoMap": "veritas"
804
+ },
805
+ "createdAt": "2026-07-02T14:14:45.088Z",
806
+ "updatedAt": "2026-07-02T14:14:45.088Z",
807
+ "value": "required-veritas-operational-artifacts",
808
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
809
+ },
810
+ {
811
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
812
+ "surface": "veritas.policy-results",
813
+ "claimType": "veritas-policy-result",
814
+ "fieldOrBehavior": "required-veritas-cli-artifacts",
815
+ "subjectType": "policy-rule",
816
+ "subjectId": "veritas:veritas-default:required-veritas-cli-artifacts",
817
+ "impactLevel": "high",
818
+ "verificationPolicyId": "veritas.policy-result",
819
+ "metadata": {
820
+ "projected": true,
821
+ "ruleId": "required-veritas-cli-artifacts",
822
+ "enforcementLevel": "Require",
823
+ "classification": "hard-invariant",
824
+ "repoStandards": "veritas-default",
825
+ "repoMap": "veritas"
826
+ },
827
+ "createdAt": "2026-07-02T14:14:45.088Z",
828
+ "updatedAt": "2026-07-02T14:14:45.088Z",
829
+ "value": "required-veritas-cli-artifacts",
830
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
831
+ },
832
+ {
833
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
834
+ "surface": "veritas.policy-results",
835
+ "claimType": "veritas-policy-result",
836
+ "fieldOrBehavior": "required-veritas-reference-artifacts",
837
+ "subjectType": "policy-rule",
838
+ "subjectId": "veritas:veritas-default:required-veritas-reference-artifacts",
839
+ "impactLevel": "high",
840
+ "verificationPolicyId": "veritas.policy-result",
841
+ "metadata": {
842
+ "projected": true,
843
+ "ruleId": "required-veritas-reference-artifacts",
844
+ "enforcementLevel": "Require",
845
+ "classification": "hard-invariant",
846
+ "repoStandards": "veritas-default",
847
+ "repoMap": "veritas"
848
+ },
849
+ "createdAt": "2026-07-02T14:14:45.088Z",
850
+ "updatedAt": "2026-07-02T14:14:45.088Z",
851
+ "value": "required-veritas-reference-artifacts",
852
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
853
+ },
854
+ {
855
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
856
+ "surface": "veritas.policy-results",
857
+ "claimType": "veritas-policy-result",
858
+ "fieldOrBehavior": "required-veritas-schema-artifacts",
859
+ "subjectType": "policy-rule",
860
+ "subjectId": "veritas:veritas-default:required-veritas-schema-artifacts",
861
+ "impactLevel": "high",
862
+ "verificationPolicyId": "veritas.policy-result",
863
+ "metadata": {
864
+ "projected": true,
865
+ "ruleId": "required-veritas-schema-artifacts",
866
+ "enforcementLevel": "Require",
867
+ "classification": "hard-invariant",
868
+ "repoStandards": "veritas-default",
869
+ "repoMap": "veritas"
870
+ },
871
+ "createdAt": "2026-07-02T14:14:45.088Z",
872
+ "updatedAt": "2026-07-02T14:14:45.088Z",
873
+ "value": "required-veritas-schema-artifacts",
874
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
875
+ },
876
+ {
877
+ "id": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
878
+ "surface": "veritas.policy-results",
879
+ "claimType": "veritas-policy-result",
880
+ "fieldOrBehavior": "ai-instruction-files-synced",
881
+ "subjectType": "policy-rule",
882
+ "subjectId": "veritas:veritas-default:ai-instruction-files-synced",
883
+ "impactLevel": "high",
884
+ "verificationPolicyId": "veritas.policy-result",
885
+ "metadata": {
886
+ "projected": true,
887
+ "ruleId": "ai-instruction-files-synced",
888
+ "enforcementLevel": "Guide",
889
+ "classification": "hard-invariant",
890
+ "repoStandards": "veritas-default",
891
+ "repoMap": "veritas"
892
+ },
893
+ "createdAt": "2026-07-02T14:14:45.088Z",
894
+ "updatedAt": "2026-07-02T14:14:45.088Z",
895
+ "value": "ai-instruction-files-synced",
896
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
897
+ },
898
+ {
899
+ "id": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
900
+ "surface": "veritas.policy-results",
901
+ "claimType": "veritas-policy-result",
902
+ "fieldOrBehavior": "prefer-veritas-routed-delivery",
903
+ "subjectType": "policy-rule",
904
+ "subjectId": "veritas:veritas-default:prefer-veritas-routed-delivery",
905
+ "impactLevel": "low",
906
+ "verificationPolicyId": "veritas.policy-result",
907
+ "metadata": {
908
+ "projected": true,
909
+ "ruleId": "prefer-veritas-routed-delivery",
910
+ "enforcementLevel": "Observe",
911
+ "classification": "promotable-policy",
912
+ "repoStandards": "veritas-default",
913
+ "repoMap": "veritas"
914
+ },
915
+ "createdAt": "2026-07-02T14:14:45.088Z",
916
+ "updatedAt": "2026-07-02T14:14:45.088Z",
917
+ "value": "prefer-veritas-routed-delivery",
918
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
919
+ },
920
+ {
921
+ "id": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
922
+ "surface": "veritas.policy-results",
923
+ "claimType": "veritas-policy-result",
924
+ "fieldOrBehavior": "no-console-log-in-src",
925
+ "subjectType": "policy-rule",
926
+ "subjectId": "veritas:veritas-default:no-console-log-in-src",
927
+ "impactLevel": "medium",
928
+ "verificationPolicyId": "veritas.policy-result",
929
+ "metadata": {
930
+ "projected": true,
931
+ "ruleId": "no-console-log-in-src",
932
+ "enforcementLevel": "Guide",
933
+ "classification": "advisory-pattern",
934
+ "repoStandards": "veritas-default",
935
+ "repoMap": "veritas"
936
+ },
937
+ "createdAt": "2026-07-02T14:14:45.088Z",
938
+ "updatedAt": "2026-07-02T14:14:45.088Z",
939
+ "value": "no-console-log-in-src",
940
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
941
+ },
942
+ {
943
+ "id": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
944
+ "surface": "veritas.policy-results",
945
+ "claimType": "veritas-policy-result",
946
+ "fieldOrBehavior": "canonical-veritas-vocabulary",
947
+ "subjectType": "policy-rule",
948
+ "subjectId": "veritas:veritas-default:canonical-veritas-vocabulary",
949
+ "impactLevel": "medium",
950
+ "verificationPolicyId": "veritas.policy-result",
951
+ "metadata": {
952
+ "projected": true,
953
+ "ruleId": "canonical-veritas-vocabulary",
954
+ "enforcementLevel": "Guide",
955
+ "classification": "advisory-pattern",
956
+ "repoStandards": "veritas-default",
957
+ "repoMap": "veritas"
958
+ },
959
+ "createdAt": "2026-07-02T14:14:45.088Z",
960
+ "updatedAt": "2026-07-02T14:14:45.088Z",
961
+ "value": "canonical-veritas-vocabulary",
962
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
963
+ },
964
+ {
965
+ "id": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
966
+ "surface": "veritas.policy-results",
967
+ "claimType": "veritas-policy-result",
968
+ "fieldOrBehavior": "repeatable-governance-uses-veritas-primitives",
969
+ "subjectType": "policy-rule",
970
+ "subjectId": "veritas:veritas-default:repeatable-governance-uses-veritas-primitives",
971
+ "impactLevel": "medium",
972
+ "verificationPolicyId": "veritas.policy-result",
973
+ "metadata": {
974
+ "projected": true,
975
+ "ruleId": "repeatable-governance-uses-veritas-primitives",
976
+ "enforcementLevel": "Guide",
977
+ "classification": "promotable-policy",
978
+ "repoStandards": "veritas-default",
979
+ "repoMap": "veritas"
980
+ },
981
+ "createdAt": "2026-07-02T14:14:45.088Z",
982
+ "updatedAt": "2026-07-02T14:14:45.088Z",
983
+ "value": "repeatable-governance-uses-veritas-primitives",
984
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
985
+ },
986
+ {
987
+ "id": "veritas.veritas-1783001685088.readiness-verdict.working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
988
+ "surface": "veritas.readiness",
989
+ "claimType": "software-readiness-verdict",
990
+ "fieldOrBehavior": "mergeReadiness",
991
+ "subjectType": "repository-change",
992
+ "subjectId": "veritas-default:working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
993
+ "value": {
994
+ "verdict": "ready",
995
+ "promotionAllowed": true,
996
+ "uncoveredPathResult": "clear",
997
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
998
+ },
999
+ "status": "verified",
1000
+ "impactLevel": "high",
1001
+ "verificationPolicyId": "veritas.readiness-verdict",
1002
+ "derivedFrom": [
1003
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1004
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1005
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1006
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1007
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
1008
+ ],
1009
+ "derivationEdges": [
1010
+ {
1011
+ "inputClaimId": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1012
+ "method": "rule-application",
1013
+ "role": "blocking-requirement",
1014
+ "supportStrength": "strong",
1015
+ "rationale": "Veritas merge readiness applies the blocking requirement \"policy-changes-require-attestation\", which passed during requirements evaluation."
1016
+ },
1017
+ {
1018
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1019
+ "method": "rule-application",
1020
+ "role": "blocking-requirement",
1021
+ "supportStrength": "strong",
1022
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-operational-artifacts\", which passed during requirements evaluation."
1023
+ },
1024
+ {
1025
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1026
+ "method": "rule-application",
1027
+ "role": "blocking-requirement",
1028
+ "supportStrength": "strong",
1029
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-cli-artifacts\", which passed during requirements evaluation."
1030
+ },
1031
+ {
1032
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1033
+ "method": "rule-application",
1034
+ "role": "blocking-requirement",
1035
+ "supportStrength": "strong",
1036
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-reference-artifacts\", which passed during requirements evaluation."
1037
+ },
1038
+ {
1039
+ "inputClaimId": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
1040
+ "method": "rule-application",
1041
+ "role": "blocking-requirement",
1042
+ "supportStrength": "strong",
1043
+ "rationale": "Veritas merge readiness applies the blocking requirement \"required-veritas-schema-artifacts\", which passed during requirements evaluation."
1044
+ }
1045
+ ],
1046
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1047
+ "createdAt": "2026-07-02T14:14:45.088Z",
1048
+ "updatedAt": "2026-07-02T14:14:45.088Z",
1049
+ "metadata": {
1050
+ "producer": "veritas",
1051
+ "source": "readiness",
1052
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1053
+ "sourceKind": "working-tree",
1054
+ "sourceScope": [
1055
+ "staged",
1056
+ "unstaged",
1057
+ "untracked"
1058
+ ],
1059
+ "policyCoverage": {
1060
+ "policyResultCount": 10,
1061
+ "derivedRequirementClaimIds": [
1062
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1063
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1064
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1065
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1066
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
1067
+ ],
1068
+ "selectedEvidenceCheckCount": 3,
1069
+ "readinessCoveragePresent": true
1070
+ },
1071
+ "integrity": {
1072
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1073
+ "sourceKind": "working-tree",
1074
+ "sourceScope": [
1075
+ "staged",
1076
+ "unstaged",
1077
+ "untracked"
1078
+ ],
1079
+ "fileRefs": [],
1080
+ "configRefs": {
1081
+ "repoMap": {
1082
+ "name": "veritas",
1083
+ "path": ".veritas/repo-map.json",
1084
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1085
+ },
1086
+ "repoStandards": {
1087
+ "name": "veritas-default",
1088
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1089
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1090
+ },
1091
+ "authoritySettings": {
1092
+ "name": "authority-settings",
1093
+ "path": ".veritas/authority/default.authority-settings.json",
1094
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1095
+ }
1096
+ }
1097
+ }
1098
+ }
1099
+ }
1100
+ ],
1101
+ "evidence": [
1102
+ {
1103
+ "id": "veritas-1783001685088.evidence-check.required-evidence-check.evidence",
1104
+ "claimId": "veritas.evidence-check.npm-run-verify",
1105
+ "evidenceType": "test_output",
1106
+ "method": "validation",
1107
+ "sourceRef": "veritas-1783001685088",
1108
+ "sourceLocator": "selected_evidence_checks",
1109
+ "excerptOrSummary": "All evidence checks passed.",
1110
+ "observedAt": "2026-07-02T14:14:45.088Z",
1111
+ "collectedBy": "veritas",
1112
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1113
+ "passing": true,
1114
+ "blocking": true,
1115
+ "execution": {
1116
+ "runner": "bash",
1117
+ "label": "npm run verify",
1118
+ "exitCode": 0,
1119
+ "durationMs": 205
1120
+ },
1121
+ "metadata": {
1122
+ "sourceKind": "working-tree",
1123
+ "sourceScope": [
1124
+ "staged",
1125
+ "unstaged",
1126
+ "untracked"
1127
+ ],
1128
+ "files": [],
1129
+ "unresolvedFiles": [],
1130
+ "integrity": {
1131
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1132
+ "sourceKind": "working-tree",
1133
+ "sourceScope": [
1134
+ "staged",
1135
+ "unstaged",
1136
+ "untracked"
1137
+ ],
1138
+ "fileRefs": [],
1139
+ "configRefs": {
1140
+ "repoMap": {
1141
+ "name": "veritas",
1142
+ "path": ".veritas/repo-map.json",
1143
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1144
+ },
1145
+ "repoStandards": {
1146
+ "name": "veritas-default",
1147
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1148
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1149
+ },
1150
+ "authoritySettings": {
1151
+ "name": "authority-settings",
1152
+ "path": ".veritas/authority/default.authority-settings.json",
1153
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1154
+ }
1155
+ }
1156
+ },
1157
+ "fileIntegrity": [],
1158
+ "configIntegrity": {
1159
+ "repoMap": {
1160
+ "name": "veritas",
1161
+ "path": ".veritas/repo-map.json",
1162
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1163
+ },
1164
+ "repoStandards": {
1165
+ "name": "veritas-default",
1166
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1167
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1168
+ },
1169
+ "authoritySettings": {
1170
+ "name": "authority-settings",
1171
+ "path": ".veritas/authority/default.authority-settings.json",
1172
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1173
+ }
1174
+ },
1175
+ "evidenceCheckLabel": "npm run verify",
1176
+ "command": "npm run verify",
1177
+ "expectedResult": "all checks pass",
1178
+ "observedResult": {
1179
+ "expected": "all checks pass",
1180
+ "status": "passed",
1181
+ "summary": "All evidence checks passed."
1182
+ },
1183
+ "commandOutput": {
1184
+ "command": "npm run verify",
1185
+ "exitCode": 0,
1186
+ "signal": null,
1187
+ "stdout": "\n> @kontourai/veritas@1.1.0 verify\n> node scripts/check-content-boundary.cjs && node scripts/verify.mjs\n\nContent boundary check passed.\nVeritas verification passed.\n",
1188
+ "stderr": "",
1189
+ "combined": "\n> @kontourai/veritas@1.1.0 verify\n> node scripts/check-content-boundary.cjs && node scripts/verify.mjs\n\nContent boundary check passed.\nVeritas verification passed.\n"
1190
+ },
1191
+ "evidenceCheckResolutionSource": "default",
1192
+ "baselineCiFastPassed": true,
1193
+ "evidenceCheckId": "required-evidence-check",
1194
+ "evidenceCheckRunner": "bash",
1195
+ "surfaceClaimIds": []
1196
+ }
1197
+ },
1198
+ {
1199
+ "id": "veritas-1783001685088.evidence-check.fallow-advisory.evidence",
1200
+ "claimId": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
1201
+ "evidenceType": "test_output",
1202
+ "method": "auditability",
1203
+ "sourceRef": "veritas-1783001685088",
1204
+ "sourceLocator": "selected_evidence_checks",
1205
+ "excerptOrSummary": "All evidence checks passed.",
1206
+ "observedAt": "2026-07-02T14:14:45.088Z",
1207
+ "collectedBy": "veritas",
1208
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1209
+ "passing": true,
1210
+ "blocking": true,
1211
+ "execution": {
1212
+ "runner": "bash",
1213
+ "label": "npm run veritas:fallow:advisory",
1214
+ "exitCode": 0,
1215
+ "durationMs": 2586
1216
+ },
1217
+ "metadata": {
1218
+ "sourceKind": "working-tree",
1219
+ "sourceScope": [
1220
+ "staged",
1221
+ "unstaged",
1222
+ "untracked"
1223
+ ],
1224
+ "files": [],
1225
+ "unresolvedFiles": [],
1226
+ "integrity": {
1227
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1228
+ "sourceKind": "working-tree",
1229
+ "sourceScope": [
1230
+ "staged",
1231
+ "unstaged",
1232
+ "untracked"
1233
+ ],
1234
+ "fileRefs": [],
1235
+ "configRefs": {
1236
+ "repoMap": {
1237
+ "name": "veritas",
1238
+ "path": ".veritas/repo-map.json",
1239
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1240
+ },
1241
+ "repoStandards": {
1242
+ "name": "veritas-default",
1243
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1244
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1245
+ },
1246
+ "authoritySettings": {
1247
+ "name": "authority-settings",
1248
+ "path": ".veritas/authority/default.authority-settings.json",
1249
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1250
+ }
1251
+ }
1252
+ },
1253
+ "fileIntegrity": [],
1254
+ "configIntegrity": {
1255
+ "repoMap": {
1256
+ "name": "veritas",
1257
+ "path": ".veritas/repo-map.json",
1258
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1259
+ },
1260
+ "repoStandards": {
1261
+ "name": "veritas-default",
1262
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1263
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1264
+ },
1265
+ "authoritySettings": {
1266
+ "name": "authority-settings",
1267
+ "path": ".veritas/authority/default.authority-settings.json",
1268
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1269
+ }
1270
+ },
1271
+ "evidenceCheckLabel": "npm run veritas:fallow:advisory",
1272
+ "command": "npm run veritas:fallow:advisory",
1273
+ "expectedResult": "all checks pass",
1274
+ "observedResult": {
1275
+ "expected": "all checks pass",
1276
+ "status": "passed",
1277
+ "summary": "All evidence checks passed."
1278
+ },
1279
+ "commandOutput": {
1280
+ "command": "npm run veritas:fallow:advisory",
1281
+ "exitCode": 0,
1282
+ "signal": null,
1283
+ "stdout": "\n> @kontourai/veritas@1.1.0 veritas:fallow:advisory\n> node scripts/run-fallow-audit.mjs\n\n{\"artifactPath\":\".kontourai/veritas/external/fallow-audit.json\",\"schema_version\":\"veritas-fallow-advisory-v1\",\"tool\":\"fallow\",\"command\":\"npx -y fallow --format json --quiet\",\"verdict\":\"pass\",\"summary\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"duplicated_lines\":573,\"duplication_percent\":3.423757170172084,\"complexity_findings\":258,\"average_maintainability\":89.7},\"baseline\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"complexity_findings\":258},\"deltas\":{\"dead_code_issues\":0,\"duplication_clone_groups\":0,\"complexity_findings\":0},\"actions\":[]}\n",
1284
+ "stderr": "",
1285
+ "combined": "\n> @kontourai/veritas@1.1.0 veritas:fallow:advisory\n> node scripts/run-fallow-audit.mjs\n\n{\"artifactPath\":\".kontourai/veritas/external/fallow-audit.json\",\"schema_version\":\"veritas-fallow-advisory-v1\",\"tool\":\"fallow\",\"command\":\"npx -y fallow --format json --quiet\",\"verdict\":\"pass\",\"summary\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"duplicated_lines\":573,\"duplication_percent\":3.423757170172084,\"complexity_findings\":258,\"average_maintainability\":89.7},\"baseline\":{\"dead_code_issues\":0,\"duplication_clone_groups\":17,\"complexity_findings\":258},\"deltas\":{\"dead_code_issues\":0,\"duplication_clone_groups\":0,\"complexity_findings\":0},\"actions\":[]}\n"
1286
+ },
1287
+ "evidenceCheckResolutionSource": "default",
1288
+ "baselineCiFastPassed": true,
1289
+ "evidenceCheckId": "fallow-advisory",
1290
+ "evidenceCheckRunner": "bash",
1291
+ "surfaceClaimIds": []
1292
+ }
1293
+ },
1294
+ {
1295
+ "id": "veritas-1783001685088.policy.policy-changes-require-attestation.evidence",
1296
+ "claimId": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
1297
+ "evidenceType": "policy_rule",
1298
+ "method": "validation",
1299
+ "sourceRef": "veritas-1783001685088",
1300
+ "sourceLocator": "policy_results.policy-changes-require-attestation",
1301
+ "excerptOrSummary": "Active attestation policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a matches current protected standards hashes.",
1302
+ "observedAt": "2026-07-02T14:14:45.088Z",
1303
+ "collectedBy": "veritas",
1304
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1305
+ "passing": true,
1306
+ "blocking": true,
1307
+ "metadata": {
1308
+ "sourceKind": "working-tree",
1309
+ "sourceScope": [
1310
+ "staged",
1311
+ "unstaged",
1312
+ "untracked"
1313
+ ],
1314
+ "files": [],
1315
+ "unresolvedFiles": [],
1316
+ "integrity": {
1317
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1318
+ "sourceKind": "working-tree",
1319
+ "sourceScope": [
1320
+ "staged",
1321
+ "unstaged",
1322
+ "untracked"
1323
+ ],
1324
+ "fileRefs": [],
1325
+ "configRefs": {
1326
+ "repoMap": {
1327
+ "name": "veritas",
1328
+ "path": ".veritas/repo-map.json",
1329
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1330
+ },
1331
+ "repoStandards": {
1332
+ "name": "veritas-default",
1333
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1334
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1335
+ },
1336
+ "authoritySettings": {
1337
+ "name": "authority-settings",
1338
+ "path": ".veritas/authority/default.authority-settings.json",
1339
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1340
+ }
1341
+ }
1342
+ },
1343
+ "fileIntegrity": [],
1344
+ "configIntegrity": {
1345
+ "repoMap": {
1346
+ "name": "veritas",
1347
+ "path": ".veritas/repo-map.json",
1348
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1349
+ },
1350
+ "repoStandards": {
1351
+ "name": "veritas-default",
1352
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1353
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1354
+ },
1355
+ "authoritySettings": {
1356
+ "name": "authority-settings",
1357
+ "path": ".veritas/authority/default.authority-settings.json",
1358
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1359
+ }
1360
+ },
1361
+ "enforcementLevel": "Require",
1362
+ "classification": "hard-invariant",
1363
+ "implemented": true,
1364
+ "passed": true,
1365
+ "transparencyGapHints": []
1366
+ }
1367
+ },
1368
+ {
1369
+ "id": "veritas-1783001685088.policy.required-veritas-operational-artifacts.evidence",
1370
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
1371
+ "evidenceType": "policy_rule",
1372
+ "method": "validation",
1373
+ "sourceRef": "veritas-1783001685088",
1374
+ "sourceLocator": "policy_results.required-veritas-operational-artifacts",
1375
+ "excerptOrSummary": "All required repository artifacts are present.",
1376
+ "observedAt": "2026-07-02T14:14:45.088Z",
1377
+ "collectedBy": "veritas",
1378
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1379
+ "passing": true,
1380
+ "blocking": true,
1381
+ "metadata": {
1382
+ "sourceKind": "working-tree",
1383
+ "sourceScope": [
1384
+ "staged",
1385
+ "unstaged",
1386
+ "untracked"
1387
+ ],
1388
+ "files": [],
1389
+ "unresolvedFiles": [],
1390
+ "integrity": {
1391
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1392
+ "sourceKind": "working-tree",
1393
+ "sourceScope": [
1394
+ "staged",
1395
+ "unstaged",
1396
+ "untracked"
1397
+ ],
1398
+ "fileRefs": [],
1399
+ "configRefs": {
1400
+ "repoMap": {
1401
+ "name": "veritas",
1402
+ "path": ".veritas/repo-map.json",
1403
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1404
+ },
1405
+ "repoStandards": {
1406
+ "name": "veritas-default",
1407
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1408
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1409
+ },
1410
+ "authoritySettings": {
1411
+ "name": "authority-settings",
1412
+ "path": ".veritas/authority/default.authority-settings.json",
1413
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1414
+ }
1415
+ }
1416
+ },
1417
+ "fileIntegrity": [],
1418
+ "configIntegrity": {
1419
+ "repoMap": {
1420
+ "name": "veritas",
1421
+ "path": ".veritas/repo-map.json",
1422
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1423
+ },
1424
+ "repoStandards": {
1425
+ "name": "veritas-default",
1426
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1427
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1428
+ },
1429
+ "authoritySettings": {
1430
+ "name": "authority-settings",
1431
+ "path": ".veritas/authority/default.authority-settings.json",
1432
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1433
+ }
1434
+ },
1435
+ "enforcementLevel": "Require",
1436
+ "classification": "hard-invariant",
1437
+ "implemented": true,
1438
+ "passed": true,
1439
+ "transparencyGapHints": []
1440
+ }
1441
+ },
1442
+ {
1443
+ "id": "veritas-1783001685088.policy.required-veritas-cli-artifacts.evidence",
1444
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
1445
+ "evidenceType": "policy_rule",
1446
+ "method": "validation",
1447
+ "sourceRef": "veritas-1783001685088",
1448
+ "sourceLocator": "policy_results.required-veritas-cli-artifacts",
1449
+ "excerptOrSummary": "All required repository artifacts are present.",
1450
+ "observedAt": "2026-07-02T14:14:45.088Z",
1451
+ "collectedBy": "veritas",
1452
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1453
+ "passing": true,
1454
+ "blocking": true,
1455
+ "metadata": {
1456
+ "sourceKind": "working-tree",
1457
+ "sourceScope": [
1458
+ "staged",
1459
+ "unstaged",
1460
+ "untracked"
1461
+ ],
1462
+ "files": [],
1463
+ "unresolvedFiles": [],
1464
+ "integrity": {
1465
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1466
+ "sourceKind": "working-tree",
1467
+ "sourceScope": [
1468
+ "staged",
1469
+ "unstaged",
1470
+ "untracked"
1471
+ ],
1472
+ "fileRefs": [],
1473
+ "configRefs": {
1474
+ "repoMap": {
1475
+ "name": "veritas",
1476
+ "path": ".veritas/repo-map.json",
1477
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1478
+ },
1479
+ "repoStandards": {
1480
+ "name": "veritas-default",
1481
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1482
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1483
+ },
1484
+ "authoritySettings": {
1485
+ "name": "authority-settings",
1486
+ "path": ".veritas/authority/default.authority-settings.json",
1487
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1488
+ }
1489
+ }
1490
+ },
1491
+ "fileIntegrity": [],
1492
+ "configIntegrity": {
1493
+ "repoMap": {
1494
+ "name": "veritas",
1495
+ "path": ".veritas/repo-map.json",
1496
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1497
+ },
1498
+ "repoStandards": {
1499
+ "name": "veritas-default",
1500
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1501
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1502
+ },
1503
+ "authoritySettings": {
1504
+ "name": "authority-settings",
1505
+ "path": ".veritas/authority/default.authority-settings.json",
1506
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1507
+ }
1508
+ },
1509
+ "enforcementLevel": "Require",
1510
+ "classification": "hard-invariant",
1511
+ "implemented": true,
1512
+ "passed": true,
1513
+ "transparencyGapHints": []
1514
+ }
1515
+ },
1516
+ {
1517
+ "id": "veritas-1783001685088.policy.required-veritas-reference-artifacts.evidence",
1518
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
1519
+ "evidenceType": "policy_rule",
1520
+ "method": "validation",
1521
+ "sourceRef": "veritas-1783001685088",
1522
+ "sourceLocator": "policy_results.required-veritas-reference-artifacts",
1523
+ "excerptOrSummary": "All required repository artifacts are present.",
1524
+ "observedAt": "2026-07-02T14:14:45.088Z",
1525
+ "collectedBy": "veritas",
1526
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1527
+ "passing": true,
1528
+ "blocking": true,
1529
+ "metadata": {
1530
+ "sourceKind": "working-tree",
1531
+ "sourceScope": [
1532
+ "staged",
1533
+ "unstaged",
1534
+ "untracked"
1535
+ ],
1536
+ "files": [],
1537
+ "unresolvedFiles": [],
1538
+ "integrity": {
1539
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1540
+ "sourceKind": "working-tree",
1541
+ "sourceScope": [
1542
+ "staged",
1543
+ "unstaged",
1544
+ "untracked"
1545
+ ],
1546
+ "fileRefs": [],
1547
+ "configRefs": {
1548
+ "repoMap": {
1549
+ "name": "veritas",
1550
+ "path": ".veritas/repo-map.json",
1551
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1552
+ },
1553
+ "repoStandards": {
1554
+ "name": "veritas-default",
1555
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1556
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1557
+ },
1558
+ "authoritySettings": {
1559
+ "name": "authority-settings",
1560
+ "path": ".veritas/authority/default.authority-settings.json",
1561
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1562
+ }
1563
+ }
1564
+ },
1565
+ "fileIntegrity": [],
1566
+ "configIntegrity": {
1567
+ "repoMap": {
1568
+ "name": "veritas",
1569
+ "path": ".veritas/repo-map.json",
1570
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1571
+ },
1572
+ "repoStandards": {
1573
+ "name": "veritas-default",
1574
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1575
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1576
+ },
1577
+ "authoritySettings": {
1578
+ "name": "authority-settings",
1579
+ "path": ".veritas/authority/default.authority-settings.json",
1580
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1581
+ }
1582
+ },
1583
+ "enforcementLevel": "Require",
1584
+ "classification": "hard-invariant",
1585
+ "implemented": true,
1586
+ "passed": true,
1587
+ "transparencyGapHints": []
1588
+ }
1589
+ },
1590
+ {
1591
+ "id": "veritas-1783001685088.policy.required-veritas-schema-artifacts.evidence",
1592
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
1593
+ "evidenceType": "policy_rule",
1594
+ "method": "validation",
1595
+ "sourceRef": "veritas-1783001685088",
1596
+ "sourceLocator": "policy_results.required-veritas-schema-artifacts",
1597
+ "excerptOrSummary": "All required repository artifacts are present.",
1598
+ "observedAt": "2026-07-02T14:14:45.088Z",
1599
+ "collectedBy": "veritas",
1600
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1601
+ "passing": true,
1602
+ "blocking": true,
1603
+ "metadata": {
1604
+ "sourceKind": "working-tree",
1605
+ "sourceScope": [
1606
+ "staged",
1607
+ "unstaged",
1608
+ "untracked"
1609
+ ],
1610
+ "files": [],
1611
+ "unresolvedFiles": [],
1612
+ "integrity": {
1613
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1614
+ "sourceKind": "working-tree",
1615
+ "sourceScope": [
1616
+ "staged",
1617
+ "unstaged",
1618
+ "untracked"
1619
+ ],
1620
+ "fileRefs": [],
1621
+ "configRefs": {
1622
+ "repoMap": {
1623
+ "name": "veritas",
1624
+ "path": ".veritas/repo-map.json",
1625
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1626
+ },
1627
+ "repoStandards": {
1628
+ "name": "veritas-default",
1629
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1630
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1631
+ },
1632
+ "authoritySettings": {
1633
+ "name": "authority-settings",
1634
+ "path": ".veritas/authority/default.authority-settings.json",
1635
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1636
+ }
1637
+ }
1638
+ },
1639
+ "fileIntegrity": [],
1640
+ "configIntegrity": {
1641
+ "repoMap": {
1642
+ "name": "veritas",
1643
+ "path": ".veritas/repo-map.json",
1644
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1645
+ },
1646
+ "repoStandards": {
1647
+ "name": "veritas-default",
1648
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1649
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1650
+ },
1651
+ "authoritySettings": {
1652
+ "name": "authority-settings",
1653
+ "path": ".veritas/authority/default.authority-settings.json",
1654
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1655
+ }
1656
+ },
1657
+ "enforcementLevel": "Require",
1658
+ "classification": "hard-invariant",
1659
+ "implemented": true,
1660
+ "passed": true,
1661
+ "transparencyGapHints": []
1662
+ }
1663
+ },
1664
+ {
1665
+ "id": "veritas-1783001685088.policy.ai-instruction-files-synced.evidence",
1666
+ "claimId": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
1667
+ "evidenceType": "policy_rule",
1668
+ "method": "validation",
1669
+ "sourceRef": "veritas-1783001685088",
1670
+ "sourceLocator": "policy_results.ai-instruction-files-synced",
1671
+ "excerptOrSummary": "All required AI instruction files contain the canonical Veritas governance block.",
1672
+ "observedAt": "2026-07-02T14:14:45.088Z",
1673
+ "collectedBy": "veritas",
1674
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1675
+ "passing": true,
1676
+ "blocking": false,
1677
+ "metadata": {
1678
+ "sourceKind": "working-tree",
1679
+ "sourceScope": [
1680
+ "staged",
1681
+ "unstaged",
1682
+ "untracked"
1683
+ ],
1684
+ "files": [],
1685
+ "unresolvedFiles": [],
1686
+ "integrity": {
1687
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1688
+ "sourceKind": "working-tree",
1689
+ "sourceScope": [
1690
+ "staged",
1691
+ "unstaged",
1692
+ "untracked"
1693
+ ],
1694
+ "fileRefs": [],
1695
+ "configRefs": {
1696
+ "repoMap": {
1697
+ "name": "veritas",
1698
+ "path": ".veritas/repo-map.json",
1699
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1700
+ },
1701
+ "repoStandards": {
1702
+ "name": "veritas-default",
1703
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1704
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1705
+ },
1706
+ "authoritySettings": {
1707
+ "name": "authority-settings",
1708
+ "path": ".veritas/authority/default.authority-settings.json",
1709
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1710
+ }
1711
+ }
1712
+ },
1713
+ "fileIntegrity": [],
1714
+ "configIntegrity": {
1715
+ "repoMap": {
1716
+ "name": "veritas",
1717
+ "path": ".veritas/repo-map.json",
1718
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1719
+ },
1720
+ "repoStandards": {
1721
+ "name": "veritas-default",
1722
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1723
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1724
+ },
1725
+ "authoritySettings": {
1726
+ "name": "authority-settings",
1727
+ "path": ".veritas/authority/default.authority-settings.json",
1728
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1729
+ }
1730
+ },
1731
+ "enforcementLevel": "Guide",
1732
+ "classification": "hard-invariant",
1733
+ "implemented": true,
1734
+ "passed": true,
1735
+ "transparencyGapHints": []
1736
+ }
1737
+ },
1738
+ {
1739
+ "id": "veritas-1783001685088.policy.prefer-veritas-routed-delivery.evidence",
1740
+ "claimId": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
1741
+ "evidenceType": "policy_rule",
1742
+ "method": "validation",
1743
+ "sourceRef": "veritas-1783001685088",
1744
+ "sourceLocator": "policy_results.prefer-veritas-routed-delivery",
1745
+ "excerptOrSummary": "All required repository artifacts are present.",
1746
+ "observedAt": "2026-07-02T14:14:45.088Z",
1747
+ "collectedBy": "veritas",
1748
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1749
+ "passing": true,
1750
+ "blocking": false,
1751
+ "metadata": {
1752
+ "sourceKind": "working-tree",
1753
+ "sourceScope": [
1754
+ "staged",
1755
+ "unstaged",
1756
+ "untracked"
1757
+ ],
1758
+ "files": [],
1759
+ "unresolvedFiles": [],
1760
+ "integrity": {
1761
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1762
+ "sourceKind": "working-tree",
1763
+ "sourceScope": [
1764
+ "staged",
1765
+ "unstaged",
1766
+ "untracked"
1767
+ ],
1768
+ "fileRefs": [],
1769
+ "configRefs": {
1770
+ "repoMap": {
1771
+ "name": "veritas",
1772
+ "path": ".veritas/repo-map.json",
1773
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1774
+ },
1775
+ "repoStandards": {
1776
+ "name": "veritas-default",
1777
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1778
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1779
+ },
1780
+ "authoritySettings": {
1781
+ "name": "authority-settings",
1782
+ "path": ".veritas/authority/default.authority-settings.json",
1783
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1784
+ }
1785
+ }
1786
+ },
1787
+ "fileIntegrity": [],
1788
+ "configIntegrity": {
1789
+ "repoMap": {
1790
+ "name": "veritas",
1791
+ "path": ".veritas/repo-map.json",
1792
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1793
+ },
1794
+ "repoStandards": {
1795
+ "name": "veritas-default",
1796
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1797
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1798
+ },
1799
+ "authoritySettings": {
1800
+ "name": "authority-settings",
1801
+ "path": ".veritas/authority/default.authority-settings.json",
1802
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1803
+ }
1804
+ },
1805
+ "enforcementLevel": "Observe",
1806
+ "classification": "promotable-policy",
1807
+ "implemented": true,
1808
+ "passed": true,
1809
+ "transparencyGapHints": []
1810
+ }
1811
+ },
1812
+ {
1813
+ "id": "veritas-1783001685088.policy.no-console-log-in-src.evidence",
1814
+ "claimId": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
1815
+ "evidenceType": "policy_rule",
1816
+ "method": "validation",
1817
+ "sourceRef": "veritas-1783001685088",
1818
+ "sourceLocator": "policy_results.no-console-log-in-src",
1819
+ "excerptOrSummary": "No matched files contain forbidden pattern console\\.log.",
1820
+ "observedAt": "2026-07-02T14:14:45.088Z",
1821
+ "collectedBy": "veritas",
1822
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1823
+ "passing": true,
1824
+ "blocking": false,
1825
+ "metadata": {
1826
+ "sourceKind": "working-tree",
1827
+ "sourceScope": [
1828
+ "staged",
1829
+ "unstaged",
1830
+ "untracked"
1831
+ ],
1832
+ "files": [],
1833
+ "unresolvedFiles": [],
1834
+ "integrity": {
1835
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1836
+ "sourceKind": "working-tree",
1837
+ "sourceScope": [
1838
+ "staged",
1839
+ "unstaged",
1840
+ "untracked"
1841
+ ],
1842
+ "fileRefs": [],
1843
+ "configRefs": {
1844
+ "repoMap": {
1845
+ "name": "veritas",
1846
+ "path": ".veritas/repo-map.json",
1847
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1848
+ },
1849
+ "repoStandards": {
1850
+ "name": "veritas-default",
1851
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1852
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1853
+ },
1854
+ "authoritySettings": {
1855
+ "name": "authority-settings",
1856
+ "path": ".veritas/authority/default.authority-settings.json",
1857
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1858
+ }
1859
+ }
1860
+ },
1861
+ "fileIntegrity": [],
1862
+ "configIntegrity": {
1863
+ "repoMap": {
1864
+ "name": "veritas",
1865
+ "path": ".veritas/repo-map.json",
1866
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1867
+ },
1868
+ "repoStandards": {
1869
+ "name": "veritas-default",
1870
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1871
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1872
+ },
1873
+ "authoritySettings": {
1874
+ "name": "authority-settings",
1875
+ "path": ".veritas/authority/default.authority-settings.json",
1876
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1877
+ }
1878
+ },
1879
+ "enforcementLevel": "Guide",
1880
+ "classification": "advisory-pattern",
1881
+ "implemented": true,
1882
+ "passed": true,
1883
+ "transparencyGapHints": []
1884
+ }
1885
+ },
1886
+ {
1887
+ "id": "veritas-1783001685088.policy.canonical-veritas-vocabulary.evidence",
1888
+ "claimId": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
1889
+ "evidenceType": "policy_rule",
1890
+ "method": "validation",
1891
+ "sourceRef": "veritas-1783001685088",
1892
+ "sourceLocator": "policy_results.canonical-veritas-vocabulary",
1893
+ "excerptOrSummary": "All matched files use canonical Veritas vocabulary.",
1894
+ "observedAt": "2026-07-02T14:14:45.088Z",
1895
+ "collectedBy": "veritas",
1896
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1897
+ "passing": true,
1898
+ "blocking": false,
1899
+ "metadata": {
1900
+ "sourceKind": "working-tree",
1901
+ "sourceScope": [
1902
+ "staged",
1903
+ "unstaged",
1904
+ "untracked"
1905
+ ],
1906
+ "files": [],
1907
+ "unresolvedFiles": [],
1908
+ "integrity": {
1909
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1910
+ "sourceKind": "working-tree",
1911
+ "sourceScope": [
1912
+ "staged",
1913
+ "unstaged",
1914
+ "untracked"
1915
+ ],
1916
+ "fileRefs": [],
1917
+ "configRefs": {
1918
+ "repoMap": {
1919
+ "name": "veritas",
1920
+ "path": ".veritas/repo-map.json",
1921
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1922
+ },
1923
+ "repoStandards": {
1924
+ "name": "veritas-default",
1925
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1926
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1927
+ },
1928
+ "authoritySettings": {
1929
+ "name": "authority-settings",
1930
+ "path": ".veritas/authority/default.authority-settings.json",
1931
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1932
+ }
1933
+ }
1934
+ },
1935
+ "fileIntegrity": [],
1936
+ "configIntegrity": {
1937
+ "repoMap": {
1938
+ "name": "veritas",
1939
+ "path": ".veritas/repo-map.json",
1940
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1941
+ },
1942
+ "repoStandards": {
1943
+ "name": "veritas-default",
1944
+ "path": ".veritas/repo-standards/default.repo-standards.json",
1945
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
1946
+ },
1947
+ "authoritySettings": {
1948
+ "name": "authority-settings",
1949
+ "path": ".veritas/authority/default.authority-settings.json",
1950
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
1951
+ }
1952
+ },
1953
+ "enforcementLevel": "Guide",
1954
+ "classification": "advisory-pattern",
1955
+ "implemented": true,
1956
+ "passed": true,
1957
+ "transparencyGapHints": []
1958
+ }
1959
+ },
1960
+ {
1961
+ "id": "veritas-1783001685088.policy.repeatable-governance-uses-veritas-primitives.evidence",
1962
+ "claimId": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
1963
+ "evidenceType": "policy_rule",
1964
+ "method": "validation",
1965
+ "sourceRef": "veritas-1783001685088",
1966
+ "sourceLocator": "policy_results.repeatable-governance-uses-veritas-primitives",
1967
+ "excerptOrSummary": "Repeatable governance checks are represented by Veritas primitives.",
1968
+ "observedAt": "2026-07-02T14:14:45.088Z",
1969
+ "collectedBy": "veritas",
1970
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1971
+ "passing": true,
1972
+ "blocking": false,
1973
+ "metadata": {
1974
+ "sourceKind": "working-tree",
1975
+ "sourceScope": [
1976
+ "staged",
1977
+ "unstaged",
1978
+ "untracked"
1979
+ ],
1980
+ "files": [],
1981
+ "unresolvedFiles": [],
1982
+ "integrity": {
1983
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
1984
+ "sourceKind": "working-tree",
1985
+ "sourceScope": [
1986
+ "staged",
1987
+ "unstaged",
1988
+ "untracked"
1989
+ ],
1990
+ "fileRefs": [],
1991
+ "configRefs": {
1992
+ "repoMap": {
1993
+ "name": "veritas",
1994
+ "path": ".veritas/repo-map.json",
1995
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
1996
+ },
1997
+ "repoStandards": {
1998
+ "name": "veritas-default",
1999
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2000
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2001
+ },
2002
+ "authoritySettings": {
2003
+ "name": "authority-settings",
2004
+ "path": ".veritas/authority/default.authority-settings.json",
2005
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2006
+ }
2007
+ }
2008
+ },
2009
+ "fileIntegrity": [],
2010
+ "configIntegrity": {
2011
+ "repoMap": {
2012
+ "name": "veritas",
2013
+ "path": ".veritas/repo-map.json",
2014
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2015
+ },
2016
+ "repoStandards": {
2017
+ "name": "veritas-default",
2018
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2019
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2020
+ },
2021
+ "authoritySettings": {
2022
+ "name": "authority-settings",
2023
+ "path": ".veritas/authority/default.authority-settings.json",
2024
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2025
+ }
2026
+ },
2027
+ "enforcementLevel": "Guide",
2028
+ "classification": "promotable-policy",
2029
+ "implemented": true,
2030
+ "passed": true,
2031
+ "transparencyGapHints": []
2032
+ }
2033
+ },
2034
+ {
2035
+ "id": "veritas-1783001685088.readiness-verdict.evidence",
2036
+ "claimId": "veritas.veritas-1783001685088.readiness-verdict.working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2037
+ "evidenceType": "policy_rule",
2038
+ "method": "validation",
2039
+ "sourceRef": "veritas-1783001685088",
2040
+ "sourceLocator": "readiness",
2041
+ "excerptOrSummary": "Veritas readiness verdict is ready for the evaluated repository change.",
2042
+ "observedAt": "2026-07-02T14:14:45.088Z",
2043
+ "collectedBy": "veritas",
2044
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2045
+ "passing": true,
2046
+ "blocking": false,
2047
+ "metadata": {
2048
+ "sourceKind": "working-tree",
2049
+ "sourceScope": [
2050
+ "staged",
2051
+ "unstaged",
2052
+ "untracked"
2053
+ ],
2054
+ "files": [],
2055
+ "unresolvedFiles": [],
2056
+ "integrity": {
2057
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2058
+ "sourceKind": "working-tree",
2059
+ "sourceScope": [
2060
+ "staged",
2061
+ "unstaged",
2062
+ "untracked"
2063
+ ],
2064
+ "fileRefs": [],
2065
+ "configRefs": {
2066
+ "repoMap": {
2067
+ "name": "veritas",
2068
+ "path": ".veritas/repo-map.json",
2069
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2070
+ },
2071
+ "repoStandards": {
2072
+ "name": "veritas-default",
2073
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2074
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2075
+ },
2076
+ "authoritySettings": {
2077
+ "name": "authority-settings",
2078
+ "path": ".veritas/authority/default.authority-settings.json",
2079
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2080
+ }
2081
+ }
2082
+ },
2083
+ "fileIntegrity": [],
2084
+ "configIntegrity": {
2085
+ "repoMap": {
2086
+ "name": "veritas",
2087
+ "path": ".veritas/repo-map.json",
2088
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2089
+ },
2090
+ "repoStandards": {
2091
+ "name": "veritas-default",
2092
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2093
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2094
+ },
2095
+ "authoritySettings": {
2096
+ "name": "authority-settings",
2097
+ "path": ".veritas/authority/default.authority-settings.json",
2098
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2099
+ }
2100
+ },
2101
+ "readinessVerdict": "ready",
2102
+ "readinessStatus": "verified",
2103
+ "promotionAllowed": true,
2104
+ "uncoveredPathResult": "clear",
2105
+ "policyResults": {
2106
+ "total": 10,
2107
+ "failedBlocking": [],
2108
+ "warnings": []
2109
+ },
2110
+ "evidenceChecks": {
2111
+ "selected": [
2112
+ "required-evidence-check",
2113
+ "vocabulary-consistency",
2114
+ "fallow-advisory"
2115
+ ],
2116
+ "failed": [],
2117
+ "baselineCiFastPassed": true
2118
+ },
2119
+ "transparencyGapHints": []
2120
+ }
2121
+ },
2122
+ {
2123
+ "id": "veritas-1783001685088.governance.veritas.governance.attestation.evidence",
2124
+ "claimId": "veritas.governance",
2125
+ "evidenceType": "attestation",
2126
+ "method": "attestation",
2127
+ "sourceRef": "veritas-1783001685088",
2128
+ "sourceLocator": ".veritas/attestations",
2129
+ "excerptOrSummary": "Authority-backed attestation currency is verified for Protected Standards state current.",
2130
+ "observedAt": "2026-07-02T14:14:45.088Z",
2131
+ "collectedBy": "veritas",
2132
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2133
+ "passing": true,
2134
+ "blocking": false,
2135
+ "metadata": {
2136
+ "sourceKind": "working-tree",
2137
+ "sourceScope": [
2138
+ "staged",
2139
+ "unstaged",
2140
+ "untracked"
2141
+ ],
2142
+ "files": [],
2143
+ "unresolvedFiles": [],
2144
+ "integrity": {
2145
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2146
+ "sourceKind": "working-tree",
2147
+ "sourceScope": [
2148
+ "staged",
2149
+ "unstaged",
2150
+ "untracked"
2151
+ ],
2152
+ "fileRefs": [],
2153
+ "configRefs": {
2154
+ "repoMap": {
2155
+ "name": "veritas",
2156
+ "path": ".veritas/repo-map.json",
2157
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2158
+ },
2159
+ "repoStandards": {
2160
+ "name": "veritas-default",
2161
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2162
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2163
+ },
2164
+ "authoritySettings": {
2165
+ "name": "authority-settings",
2166
+ "path": ".veritas/authority/default.authority-settings.json",
2167
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2168
+ }
2169
+ }
2170
+ },
2171
+ "fileIntegrity": [],
2172
+ "configIntegrity": {
2173
+ "repoMap": {
2174
+ "name": "veritas",
2175
+ "path": ".veritas/repo-map.json",
2176
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2177
+ },
2178
+ "repoStandards": {
2179
+ "name": "veritas-default",
2180
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2181
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2182
+ },
2183
+ "authoritySettings": {
2184
+ "name": "authority-settings",
2185
+ "path": ".veritas/authority/default.authority-settings.json",
2186
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2187
+ }
2188
+ }
2189
+ }
2190
+ },
2191
+ {
2192
+ "id": "veritas-1783001685088.governance.veritas.governance.audit.evidence",
2193
+ "claimId": "veritas.governance",
2194
+ "evidenceType": "policy_rule",
2195
+ "method": "auditability",
2196
+ "sourceRef": "veritas-1783001685088",
2197
+ "sourceLocator": "governance_state",
2198
+ "excerptOrSummary": "Veritas inspected Protected Standards state current for governance artifact integrity.",
2199
+ "observedAt": "2026-07-02T14:14:45.088Z",
2200
+ "collectedBy": "veritas",
2201
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2202
+ "passing": true,
2203
+ "blocking": false,
2204
+ "metadata": {
2205
+ "sourceKind": "working-tree",
2206
+ "sourceScope": [
2207
+ "staged",
2208
+ "unstaged",
2209
+ "untracked"
2210
+ ],
2211
+ "files": [],
2212
+ "unresolvedFiles": [],
2213
+ "integrity": {
2214
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2215
+ "sourceKind": "working-tree",
2216
+ "sourceScope": [
2217
+ "staged",
2218
+ "unstaged",
2219
+ "untracked"
2220
+ ],
2221
+ "fileRefs": [],
2222
+ "configRefs": {
2223
+ "repoMap": {
2224
+ "name": "veritas",
2225
+ "path": ".veritas/repo-map.json",
2226
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2227
+ },
2228
+ "repoStandards": {
2229
+ "name": "veritas-default",
2230
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2231
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2232
+ },
2233
+ "authoritySettings": {
2234
+ "name": "authority-settings",
2235
+ "path": ".veritas/authority/default.authority-settings.json",
2236
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2237
+ }
2238
+ }
2239
+ },
2240
+ "fileIntegrity": [],
2241
+ "configIntegrity": {
2242
+ "repoMap": {
2243
+ "name": "veritas",
2244
+ "path": ".veritas/repo-map.json",
2245
+ "hash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d"
2246
+ },
2247
+ "repoStandards": {
2248
+ "name": "veritas-default",
2249
+ "path": ".veritas/repo-standards/default.repo-standards.json",
2250
+ "hash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab"
2251
+ },
2252
+ "authoritySettings": {
2253
+ "name": "authority-settings",
2254
+ "path": ".veritas/authority/default.authority-settings.json",
2255
+ "hash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
2256
+ }
2257
+ }
2258
+ }
2259
+ }
2260
+ ],
2261
+ "policies": [
2262
+ {
2263
+ "id": "veritas.surface",
2264
+ "claimType": "veritas-affected-surface",
2265
+ "requiredEvidence": [
2266
+ "policy_rule"
2267
+ ],
2268
+ "requiredMethods": [
2269
+ "auditability"
2270
+ ],
2271
+ "requiresCorroboration": false,
2272
+ "acceptanceCriteria": [
2273
+ "veritas evidence artifact"
2274
+ ],
2275
+ "reviewAuthority": "veritas",
2276
+ "validityRule": {
2277
+ "kind": "commit"
2278
+ },
2279
+ "stalenessTriggers": [
2280
+ "source_ref changes",
2281
+ "affected node changes"
2282
+ ],
2283
+ "conflictRules": [
2284
+ "newer evidence for the same node supersedes older evidence"
2285
+ ],
2286
+ "impactLevel": "medium"
2287
+ },
2288
+ {
2289
+ "id": "veritas.governance-artifact",
2290
+ "claimType": "veritas-governance-artifact",
2291
+ "requiredEvidence": [
2292
+ "attestation",
2293
+ "policy_rule"
2294
+ ],
2295
+ "requiredMethods": [
2296
+ "auditability",
2297
+ "attestation"
2298
+ ],
2299
+ "requiresCorroboration": false,
2300
+ "acceptanceCriteria": [
2301
+ "Protected Standards hash inspection",
2302
+ "human attestation status"
2303
+ ],
2304
+ "reviewAuthority": "veritas plus human attestation",
2305
+ "validityRule": {
2306
+ "kind": "manual"
2307
+ },
2308
+ "stalenessTriggers": [
2309
+ "repo standards hash changes",
2310
+ "repo map hash changes",
2311
+ "authority settings hash changes",
2312
+ "attestation expiry"
2313
+ ],
2314
+ "conflictRules": [
2315
+ "hash drift disputes governance artifact currency"
2316
+ ],
2317
+ "impactLevel": "high"
2318
+ },
2319
+ {
2320
+ "id": "veritas.evidence-check",
2321
+ "claimType": "software-evidence-check",
2322
+ "requiredEvidence": [
2323
+ "test_output"
2324
+ ],
2325
+ "requiredMethods": [
2326
+ "validation"
2327
+ ],
2328
+ "requiresCorroboration": false,
2329
+ "acceptanceCriteria": [
2330
+ "selected evidenceCheck command"
2331
+ ],
2332
+ "reviewAuthority": "veritas",
2333
+ "validityRule": {
2334
+ "kind": "commit"
2335
+ },
2336
+ "stalenessTriggers": [
2337
+ "source_ref changes",
2338
+ "evidenceCheck command changes",
2339
+ "baseline evidenceCheck fails"
2340
+ ],
2341
+ "conflictRules": [
2342
+ "failed evidenceCheck rejects a previously verified evidenceCheck claim"
2343
+ ],
2344
+ "impactLevel": "high"
2345
+ },
2346
+ {
2347
+ "id": "veritas.policy-result",
2348
+ "claimType": "veritas-policy-result",
2349
+ "requiredEvidence": [
2350
+ "policy_rule"
2351
+ ],
2352
+ "requiredMethods": [
2353
+ "validation"
2354
+ ],
2355
+ "requiresCorroboration": false,
2356
+ "acceptanceCriteria": [
2357
+ "requirements evaluation"
2358
+ ],
2359
+ "reviewAuthority": "veritas requirements",
2360
+ "validityRule": {
2361
+ "kind": "commit"
2362
+ },
2363
+ "stalenessTriggers": [
2364
+ "source_ref changes",
2365
+ "Repo Standards changes",
2366
+ "requirement implementation changes"
2367
+ ],
2368
+ "conflictRules": [
2369
+ "blocking failed requirements reject the affected claim"
2370
+ ],
2371
+ "impactLevel": "high"
2372
+ },
2373
+ {
2374
+ "id": "veritas.readiness-verdict",
2375
+ "claimType": "software-readiness-verdict",
2376
+ "requiredEvidence": [
2377
+ "policy_rule"
2378
+ ],
2379
+ "requiredMethods": [
2380
+ "validation"
2381
+ ],
2382
+ "requiresCorroboration": false,
2383
+ "acceptanceCriteria": [
2384
+ "Veritas readiness verdict"
2385
+ ],
2386
+ "reviewAuthority": "veritas readiness producer",
2387
+ "validityRule": {
2388
+ "kind": "commit"
2389
+ },
2390
+ "stalenessTriggers": [
2391
+ "source_ref changes",
2392
+ "changed file integrity changes",
2393
+ "Protected Standards hash changes"
2394
+ ],
2395
+ "conflictRules": [
2396
+ "blocking failed requirements or evidenceChecks reject readiness"
2397
+ ],
2398
+ "impactLevel": "high"
2399
+ }
2400
+ ],
2401
+ "events": [
2402
+ {
2403
+ "id": "veritas-1783001685088.evidence-check.required-evidence-check.verified",
2404
+ "claimId": "veritas.evidence-check.npm-run-verify",
2405
+ "status": "verified",
2406
+ "actor": "veritas",
2407
+ "method": "npm run verify",
2408
+ "evidenceIds": [
2409
+ "veritas-1783001685088.evidence-check.required-evidence-check.evidence"
2410
+ ],
2411
+ "createdAt": "2026-07-02T14:14:45.088Z",
2412
+ "verifiedAt": "2026-07-02T14:14:45.088Z"
2413
+ },
2414
+ {
2415
+ "id": "veritas-1783001685088.evidence-check.fallow-advisory.verified",
2416
+ "claimId": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
2417
+ "status": "verified",
2418
+ "actor": "veritas",
2419
+ "method": "npm run veritas:fallow:advisory",
2420
+ "evidenceIds": [
2421
+ "veritas-1783001685088.evidence-check.fallow-advisory.evidence"
2422
+ ],
2423
+ "createdAt": "2026-07-02T14:14:45.088Z",
2424
+ "verifiedAt": "2026-07-02T14:14:45.088Z"
2425
+ },
2426
+ {
2427
+ "id": "veritas-1783001685088.policy.policy-changes-require-attestation.verified",
2428
+ "claimId": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
2429
+ "status": "verified",
2430
+ "actor": "veritas",
2431
+ "method": "requirements evaluation",
2432
+ "evidenceIds": [
2433
+ "veritas-1783001685088.policy.policy-changes-require-attestation.evidence"
2434
+ ],
2435
+ "createdAt": "2026-07-02T14:14:45.088Z",
2436
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2437
+ "notes": "Protected standards changes require a fresh authority-backed attestation."
2438
+ },
2439
+ {
2440
+ "id": "veritas-1783001685088.policy.required-veritas-operational-artifacts.verified",
2441
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
2442
+ "status": "verified",
2443
+ "actor": "veritas",
2444
+ "method": "requirements evaluation",
2445
+ "evidenceIds": [
2446
+ "veritas-1783001685088.policy.required-veritas-operational-artifacts.evidence"
2447
+ ],
2448
+ "createdAt": "2026-07-02T14:14:45.088Z",
2449
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2450
+ "notes": "The tracked Veritas operational artifacts must stay present so agents and reviewers share the same baseline."
2451
+ },
2452
+ {
2453
+ "id": "veritas-1783001685088.policy.required-veritas-cli-artifacts.verified",
2454
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
2455
+ "status": "verified",
2456
+ "actor": "veritas",
2457
+ "method": "requirements evaluation",
2458
+ "evidenceIds": [
2459
+ "veritas-1783001685088.policy.required-veritas-cli-artifacts.evidence"
2460
+ ],
2461
+ "createdAt": "2026-07-02T14:14:45.088Z",
2462
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2463
+ "notes": "The shipped Veritas CLI entrypoints and package manifest must stay present."
2464
+ },
2465
+ {
2466
+ "id": "veritas-1783001685088.policy.required-veritas-reference-artifacts.verified",
2467
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
2468
+ "status": "verified",
2469
+ "actor": "veritas",
2470
+ "method": "requirements evaluation",
2471
+ "evidenceIds": [
2472
+ "veritas-1783001685088.policy.required-veritas-reference-artifacts.evidence"
2473
+ ],
2474
+ "createdAt": "2026-07-02T14:14:45.088Z",
2475
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2476
+ "notes": "The repo must keep the docs that explain the shipped Veritas surface."
2477
+ },
2478
+ {
2479
+ "id": "veritas-1783001685088.policy.required-veritas-schema-artifacts.verified",
2480
+ "claimId": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
2481
+ "status": "verified",
2482
+ "actor": "veritas",
2483
+ "method": "requirements evaluation",
2484
+ "evidenceIds": [
2485
+ "veritas-1783001685088.policy.required-veritas-schema-artifacts.evidence"
2486
+ ],
2487
+ "createdAt": "2026-07-02T14:14:45.088Z",
2488
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2489
+ "notes": "The shipped Veritas schema set must stay present and reviewable."
2490
+ },
2491
+ {
2492
+ "id": "veritas-1783001685088.policy.ai-instruction-files-synced.verified",
2493
+ "claimId": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
2494
+ "status": "verified",
2495
+ "actor": "veritas",
2496
+ "method": "requirements evaluation",
2497
+ "evidenceIds": [
2498
+ "veritas-1783001685088.policy.ai-instruction-files-synced.evidence"
2499
+ ],
2500
+ "createdAt": "2026-07-02T14:14:45.088Z",
2501
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2502
+ "notes": "All required AI tool instruction files must contain the Veritas governance block."
2503
+ },
2504
+ {
2505
+ "id": "veritas-1783001685088.policy.prefer-veritas-routed-delivery.verified",
2506
+ "claimId": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
2507
+ "status": "verified",
2508
+ "actor": "veritas",
2509
+ "method": "requirements evaluation",
2510
+ "evidenceIds": [
2511
+ "veritas-1783001685088.policy.prefer-veritas-routed-delivery.evidence"
2512
+ ],
2513
+ "createdAt": "2026-07-02T14:14:45.088Z",
2514
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2515
+ "notes": "Prefer keeping the tracked Veritas evidenceCheck and repo conformance integration surfaces present so changes flow through the documented operational path before review."
2516
+ },
2517
+ {
2518
+ "id": "veritas-1783001685088.policy.no-console-log-in-src.verified",
2519
+ "claimId": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
2520
+ "status": "verified",
2521
+ "actor": "veritas",
2522
+ "method": "requirements evaluation",
2523
+ "evidenceIds": [
2524
+ "veritas-1783001685088.policy.no-console-log-in-src.evidence"
2525
+ ],
2526
+ "createdAt": "2026-07-02T14:14:45.088Z",
2527
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2528
+ "notes": "Source files should not leave console.log diagnostics behind."
2529
+ },
2530
+ {
2531
+ "id": "veritas-1783001685088.policy.canonical-veritas-vocabulary.verified",
2532
+ "claimId": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
2533
+ "status": "verified",
2534
+ "actor": "veritas",
2535
+ "method": "requirements evaluation",
2536
+ "evidenceIds": [
2537
+ "veritas-1783001685088.policy.canonical-veritas-vocabulary.evidence"
2538
+ ],
2539
+ "createdAt": "2026-07-02T14:14:45.088Z",
2540
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2541
+ "notes": "First-contact Veritas docs should use canonical product vocabulary from CONTEXT.md."
2542
+ },
2543
+ {
2544
+ "id": "veritas-1783001685088.policy.repeatable-governance-uses-veritas-primitives.verified",
2545
+ "claimId": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
2546
+ "status": "verified",
2547
+ "actor": "veritas",
2548
+ "method": "requirements evaluation",
2549
+ "evidenceIds": [
2550
+ "veritas-1783001685088.policy.repeatable-governance-uses-veritas-primitives.evidence"
2551
+ ],
2552
+ "createdAt": "2026-07-02T14:14:45.088Z",
2553
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2554
+ "notes": "Repeatable repo governance checks should be represented by Veritas primitives before they become local helper scripts."
2555
+ },
2556
+ {
2557
+ "id": "veritas-1783001685088.readiness-verdict.verified",
2558
+ "claimId": "veritas.veritas-1783001685088.readiness-verdict.working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
2559
+ "status": "verified",
2560
+ "actor": "veritas",
2561
+ "method": "readiness verdict",
2562
+ "evidenceIds": [
2563
+ "veritas-1783001685088.readiness-verdict.evidence"
2564
+ ],
2565
+ "createdAt": "2026-07-02T14:14:45.088Z",
2566
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2567
+ "notes": "Veritas readiness verdict is ready for the evaluated repository change."
2568
+ },
2569
+ {
2570
+ "id": "veritas-1783001685088.governance.veritas.governance.verified",
2571
+ "claimId": "veritas.governance",
2572
+ "status": "verified",
2573
+ "actor": "veritas",
2574
+ "method": "authority attestation status",
2575
+ "evidenceIds": [
2576
+ "veritas-1783001685088.governance.veritas.governance.attestation.evidence",
2577
+ "veritas-1783001685088.governance.veritas.governance.audit.evidence"
2578
+ ],
2579
+ "createdAt": "2026-07-02T14:14:45.088Z",
2580
+ "verifiedAt": "2026-07-02T14:14:45.088Z",
2581
+ "notes": "Authority-backed attestation currency is verified."
2582
+ }
2583
+ ],
2584
+ "claimGroups": [
2585
+ {
2586
+ "id": "veritas.requirements.veritas-default",
2587
+ "title": "veritas-default",
2588
+ "kind": "requirement-set",
2589
+ "description": "Veritas requirements projected as Surface trust claims.",
2590
+ "claimIds": [
2591
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
2592
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
2593
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
2594
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
2595
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
2596
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
2597
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
2598
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src",
2599
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
2600
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
2601
+ ],
2602
+ "requirements": [
2603
+ {
2604
+ "id": "veritas.requirement.policy-changes-require-attestation",
2605
+ "title": "policy-changes-require-attestation",
2606
+ "claimIds": [
2607
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation"
2608
+ ],
2609
+ "required": true,
2610
+ "severity": "high",
2611
+ "validationStrategy": {
2612
+ "requiredEvidence": [
2613
+ "policy_rule"
2614
+ ],
2615
+ "requiredMethods": [
2616
+ "validation"
2617
+ ],
2618
+ "acceptanceCriteria": [
2619
+ "requirements evaluation"
2620
+ ],
2621
+ "reviewAuthority": "veritas requirements",
2622
+ "metadata": {
2623
+ "ruleId": "policy-changes-require-attestation",
2624
+ "enforcementLevel": "Require",
2625
+ "classification": "hard-invariant"
2626
+ }
2627
+ },
2628
+ "metadata": {
2629
+ "implemented": true,
2630
+ "enforcementLevel": "Require",
2631
+ "classification": "hard-invariant"
2632
+ }
2633
+ },
2634
+ {
2635
+ "id": "veritas.requirement.required-veritas-operational-artifacts",
2636
+ "title": "required-veritas-operational-artifacts",
2637
+ "claimIds": [
2638
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts"
2639
+ ],
2640
+ "required": true,
2641
+ "severity": "high",
2642
+ "validationStrategy": {
2643
+ "requiredEvidence": [
2644
+ "policy_rule"
2645
+ ],
2646
+ "requiredMethods": [
2647
+ "validation"
2648
+ ],
2649
+ "acceptanceCriteria": [
2650
+ "requirements evaluation"
2651
+ ],
2652
+ "reviewAuthority": "veritas requirements",
2653
+ "metadata": {
2654
+ "ruleId": "required-veritas-operational-artifacts",
2655
+ "enforcementLevel": "Require",
2656
+ "classification": "hard-invariant"
2657
+ }
2658
+ },
2659
+ "metadata": {
2660
+ "implemented": true,
2661
+ "enforcementLevel": "Require",
2662
+ "classification": "hard-invariant"
2663
+ }
2664
+ },
2665
+ {
2666
+ "id": "veritas.requirement.required-veritas-cli-artifacts",
2667
+ "title": "required-veritas-cli-artifacts",
2668
+ "claimIds": [
2669
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts"
2670
+ ],
2671
+ "required": true,
2672
+ "severity": "high",
2673
+ "validationStrategy": {
2674
+ "requiredEvidence": [
2675
+ "policy_rule"
2676
+ ],
2677
+ "requiredMethods": [
2678
+ "validation"
2679
+ ],
2680
+ "acceptanceCriteria": [
2681
+ "requirements evaluation"
2682
+ ],
2683
+ "reviewAuthority": "veritas requirements",
2684
+ "metadata": {
2685
+ "ruleId": "required-veritas-cli-artifacts",
2686
+ "enforcementLevel": "Require",
2687
+ "classification": "hard-invariant"
2688
+ }
2689
+ },
2690
+ "metadata": {
2691
+ "implemented": true,
2692
+ "enforcementLevel": "Require",
2693
+ "classification": "hard-invariant"
2694
+ }
2695
+ },
2696
+ {
2697
+ "id": "veritas.requirement.required-veritas-reference-artifacts",
2698
+ "title": "required-veritas-reference-artifacts",
2699
+ "claimIds": [
2700
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts"
2701
+ ],
2702
+ "required": true,
2703
+ "severity": "high",
2704
+ "validationStrategy": {
2705
+ "requiredEvidence": [
2706
+ "policy_rule"
2707
+ ],
2708
+ "requiredMethods": [
2709
+ "validation"
2710
+ ],
2711
+ "acceptanceCriteria": [
2712
+ "requirements evaluation"
2713
+ ],
2714
+ "reviewAuthority": "veritas requirements",
2715
+ "metadata": {
2716
+ "ruleId": "required-veritas-reference-artifacts",
2717
+ "enforcementLevel": "Require",
2718
+ "classification": "hard-invariant"
2719
+ }
2720
+ },
2721
+ "metadata": {
2722
+ "implemented": true,
2723
+ "enforcementLevel": "Require",
2724
+ "classification": "hard-invariant"
2725
+ }
2726
+ },
2727
+ {
2728
+ "id": "veritas.requirement.required-veritas-schema-artifacts",
2729
+ "title": "required-veritas-schema-artifacts",
2730
+ "claimIds": [
2731
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
2732
+ ],
2733
+ "required": true,
2734
+ "severity": "high",
2735
+ "validationStrategy": {
2736
+ "requiredEvidence": [
2737
+ "policy_rule"
2738
+ ],
2739
+ "requiredMethods": [
2740
+ "validation"
2741
+ ],
2742
+ "acceptanceCriteria": [
2743
+ "requirements evaluation"
2744
+ ],
2745
+ "reviewAuthority": "veritas requirements",
2746
+ "metadata": {
2747
+ "ruleId": "required-veritas-schema-artifacts",
2748
+ "enforcementLevel": "Require",
2749
+ "classification": "hard-invariant"
2750
+ }
2751
+ },
2752
+ "metadata": {
2753
+ "implemented": true,
2754
+ "enforcementLevel": "Require",
2755
+ "classification": "hard-invariant"
2756
+ }
2757
+ },
2758
+ {
2759
+ "id": "veritas.requirement.ai-instruction-files-synced",
2760
+ "title": "ai-instruction-files-synced",
2761
+ "claimIds": [
2762
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced"
2763
+ ],
2764
+ "required": false,
2765
+ "severity": "high",
2766
+ "validationStrategy": {
2767
+ "requiredEvidence": [
2768
+ "policy_rule"
2769
+ ],
2770
+ "requiredMethods": [
2771
+ "validation"
2772
+ ],
2773
+ "acceptanceCriteria": [
2774
+ "requirements evaluation"
2775
+ ],
2776
+ "reviewAuthority": "veritas requirements",
2777
+ "metadata": {
2778
+ "ruleId": "ai-instruction-files-synced",
2779
+ "enforcementLevel": "Guide",
2780
+ "classification": "hard-invariant"
2781
+ }
2782
+ },
2783
+ "metadata": {
2784
+ "implemented": true,
2785
+ "enforcementLevel": "Guide",
2786
+ "classification": "hard-invariant"
2787
+ }
2788
+ },
2789
+ {
2790
+ "id": "veritas.requirement.prefer-veritas-routed-delivery",
2791
+ "title": "prefer-veritas-routed-delivery",
2792
+ "claimIds": [
2793
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery"
2794
+ ],
2795
+ "required": false,
2796
+ "severity": "low",
2797
+ "validationStrategy": {
2798
+ "requiredEvidence": [
2799
+ "policy_rule"
2800
+ ],
2801
+ "requiredMethods": [
2802
+ "validation"
2803
+ ],
2804
+ "acceptanceCriteria": [
2805
+ "requirements evaluation"
2806
+ ],
2807
+ "reviewAuthority": "veritas requirements",
2808
+ "metadata": {
2809
+ "ruleId": "prefer-veritas-routed-delivery",
2810
+ "enforcementLevel": "Observe",
2811
+ "classification": "promotable-policy"
2812
+ }
2813
+ },
2814
+ "metadata": {
2815
+ "implemented": true,
2816
+ "enforcementLevel": "Observe",
2817
+ "classification": "promotable-policy"
2818
+ }
2819
+ },
2820
+ {
2821
+ "id": "veritas.requirement.no-console-log-in-src",
2822
+ "title": "no-console-log-in-src",
2823
+ "claimIds": [
2824
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src"
2825
+ ],
2826
+ "required": false,
2827
+ "severity": "medium",
2828
+ "validationStrategy": {
2829
+ "requiredEvidence": [
2830
+ "policy_rule"
2831
+ ],
2832
+ "requiredMethods": [
2833
+ "validation"
2834
+ ],
2835
+ "acceptanceCriteria": [
2836
+ "requirements evaluation"
2837
+ ],
2838
+ "reviewAuthority": "veritas requirements",
2839
+ "metadata": {
2840
+ "ruleId": "no-console-log-in-src",
2841
+ "enforcementLevel": "Guide",
2842
+ "classification": "advisory-pattern"
2843
+ }
2844
+ },
2845
+ "metadata": {
2846
+ "implemented": true,
2847
+ "enforcementLevel": "Guide",
2848
+ "classification": "advisory-pattern"
2849
+ }
2850
+ },
2851
+ {
2852
+ "id": "veritas.requirement.canonical-veritas-vocabulary",
2853
+ "title": "canonical-veritas-vocabulary",
2854
+ "claimIds": [
2855
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary"
2856
+ ],
2857
+ "required": false,
2858
+ "severity": "medium",
2859
+ "validationStrategy": {
2860
+ "requiredEvidence": [
2861
+ "policy_rule"
2862
+ ],
2863
+ "requiredMethods": [
2864
+ "validation"
2865
+ ],
2866
+ "acceptanceCriteria": [
2867
+ "requirements evaluation"
2868
+ ],
2869
+ "reviewAuthority": "veritas requirements",
2870
+ "metadata": {
2871
+ "ruleId": "canonical-veritas-vocabulary",
2872
+ "enforcementLevel": "Guide",
2873
+ "classification": "advisory-pattern"
2874
+ }
2875
+ },
2876
+ "metadata": {
2877
+ "implemented": true,
2878
+ "enforcementLevel": "Guide",
2879
+ "classification": "advisory-pattern"
2880
+ }
2881
+ },
2882
+ {
2883
+ "id": "veritas.requirement.repeatable-governance-uses-veritas-primitives",
2884
+ "title": "repeatable-governance-uses-veritas-primitives",
2885
+ "claimIds": [
2886
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
2887
+ ],
2888
+ "required": false,
2889
+ "severity": "medium",
2890
+ "validationStrategy": {
2891
+ "requiredEvidence": [
2892
+ "policy_rule"
2893
+ ],
2894
+ "requiredMethods": [
2895
+ "validation"
2896
+ ],
2897
+ "acceptanceCriteria": [
2898
+ "requirements evaluation"
2899
+ ],
2900
+ "reviewAuthority": "veritas requirements",
2901
+ "metadata": {
2902
+ "ruleId": "repeatable-governance-uses-veritas-primitives",
2903
+ "enforcementLevel": "Guide",
2904
+ "classification": "promotable-policy"
2905
+ }
2906
+ },
2907
+ "metadata": {
2908
+ "implemented": true,
2909
+ "enforcementLevel": "Guide",
2910
+ "classification": "promotable-policy"
2911
+ }
2912
+ }
2913
+ ],
2914
+ "rollupPolicy": {
2915
+ "mode": "all-required",
2916
+ "requiredRequirementIds": [
2917
+ "veritas.requirement.policy-changes-require-attestation",
2918
+ "veritas.requirement.required-veritas-operational-artifacts",
2919
+ "veritas.requirement.required-veritas-cli-artifacts",
2920
+ "veritas.requirement.required-veritas-reference-artifacts",
2921
+ "veritas.requirement.required-veritas-schema-artifacts"
2922
+ ],
2923
+ "optionalRequirementIds": [
2924
+ "veritas.requirement.ai-instruction-files-synced",
2925
+ "veritas.requirement.prefer-veritas-routed-delivery",
2926
+ "veritas.requirement.no-console-log-in-src",
2927
+ "veritas.requirement.canonical-veritas-vocabulary",
2928
+ "veritas.requirement.repeatable-governance-uses-veritas-primitives"
2929
+ ]
2930
+ },
2931
+ "metadata": {
2932
+ "producer": "veritas",
2933
+ "repoStandards": {
2934
+ "name": "veritas-default",
2935
+ "version": 1,
2936
+ "rule_count": 9
2937
+ },
2938
+ "repoMap": {
2939
+ "name": "veritas",
2940
+ "kind": "repo-map",
2941
+ "report_transport": "local-json",
2942
+ "default_resolution": {
2943
+ "phase": "Phase 0 (Bootstrap)",
2944
+ "workstream": "Initial Project Setup",
2945
+ "matchedArtifacts": [
2946
+ "README.md"
2947
+ ]
2948
+ },
2949
+ "non_sliceable_invariants": [
2950
+ "baseline evidenceCheck",
2951
+ "repo-local guidance",
2952
+ "tracked policy artifacts"
2953
+ ],
2954
+ "evidenceChecks": [
2955
+ {
2956
+ "id": "required-evidence-check",
2957
+ "runner": "bash",
2958
+ "label": "npm run verify",
2959
+ "command": "npm run verify",
2960
+ "method": "validation",
2961
+ "surface_claim_ids": [],
2962
+ "summary": "Runs npm run verify."
2963
+ },
2964
+ {
2965
+ "id": "fallow-advisory",
2966
+ "runner": "bash",
2967
+ "label": "npm run veritas:fallow:advisory",
2968
+ "command": "npm run veritas:fallow:advisory",
2969
+ "method": "auditability",
2970
+ "surface_claim_ids": [],
2971
+ "summary": "Runs Fallow as advisory codebase-intelligence evidence."
2972
+ },
2973
+ {
2974
+ "id": "vocabulary-consistency",
2975
+ "runner": "bash",
2976
+ "label": "npm run veritas:vocab:check",
2977
+ "command": "npm run veritas:vocab:check",
2978
+ "method": "validation",
2979
+ "surface_claim_ids": [],
2980
+ "summary": "Checks first-contact Veritas docs for canonical product vocabulary."
2981
+ }
2982
+ ],
2983
+ "required_evidence_check_ids": [
2984
+ "required-evidence-check"
2985
+ ],
2986
+ "default_evidence_check_ids": [
2987
+ "required-evidence-check",
2988
+ "vocabulary-consistency",
2989
+ "fallow-advisory"
2990
+ ],
2991
+ "evidence_check_routes": [],
2992
+ "uncovered_path_policy": "warn"
2993
+ }
2994
+ }
2995
+ }
2996
+ ],
2997
+ "authorityTrace": [
2998
+ {
2999
+ "id": "veritas.veritas-1783001685088.readiness-verdict.working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.authority",
3000
+ "subject": {
3001
+ "subjectType": "repository-change",
3002
+ "subjectId": "veritas-default:working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3003
+ },
3004
+ "actorRef": "actor:object-Object",
3005
+ "authorityType": "credential",
3006
+ "authorityRef": "attestation:policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
3007
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
3008
+ "observedAt": "2026-07-02T14:14:45.088Z",
3009
+ "evidenceIds": [
3010
+ "veritas-1783001685088.readiness-verdict.evidence"
3011
+ ],
3012
+ "claimIds": [
3013
+ "veritas.veritas-1783001685088.readiness-verdict.working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3014
+ ],
3015
+ "validUntil": "2026-09-29T03:36:48.637Z",
3016
+ "integrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
3017
+ "metadata": {
3018
+ "kind": "governance-attestation",
3019
+ "producer": "veritas",
3020
+ "actor": {
3021
+ "id": "maintainer",
3022
+ "displayName": "Maintainer",
3023
+ "identityEvidence": {
3024
+ "gitEmail": "maintainer@example.com",
3025
+ "signingKeyFingerprint": null
3026
+ }
3027
+ },
3028
+ "method": "attestation",
3029
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
3030
+ "currentAttestationId": "policy-change-2026-07-01T03-36-48-637Z-6ce48338d05a",
3031
+ "attestationState": "current",
3032
+ "validUntil": "2026-09-29T03:36:48.637Z",
3033
+ "protectedStandards": {
3034
+ "paths": {
3035
+ "repoStandardsPath": ".veritas/repo-standards/default.repo-standards.json",
3036
+ "repoMapPath": ".veritas/repo-map.json",
3037
+ "authoritySettingsPath": ".veritas/authority/default.authority-settings.json"
3038
+ },
3039
+ "hashes": {
3040
+ "repoStandardsHash": "sha256:f145098ce654cac64526b84b0c24c5b3df44e08133762544d56f566365f99dab",
3041
+ "repoMapHash": "sha256:bb1279cf0974edcb4b30e6a3a44d42151113ef499efcac14d7c0c92922d0274d",
3042
+ "authoritySettingsHash": "sha256:192e1eeec727a0c18a372b76c4ed194eaa4faef0f6c6080f25a808aeeb660946"
3043
+ },
3044
+ "drift": []
3045
+ }
3046
+ }
3047
+ }
3048
+ ]
3049
+ },
3050
+ "report": {
3051
+ "id": "veritas.veritas-1783001685088.surface-report",
3052
+ "generatedAt": "2026-07-02T14:14:45.088Z",
3053
+ "source": "veritas:veritas-1783001685088",
3054
+ "summary": {
3055
+ "totalClaims": 26,
3056
+ "byStatus": {
3057
+ "unknown": 12,
3058
+ "proposed": 1,
3059
+ "assumed": 0,
3060
+ "verified": 13,
3061
+ "stale": 0,
3062
+ "disputed": 0,
3063
+ "superseded": 0,
3064
+ "rejected": 0,
3065
+ "revoked": 0
3066
+ },
3067
+ "bySurface": {
3068
+ "veritas.affected-surface": 12,
3069
+ "veritas.governance": 1,
3070
+ "veritas.evidence-check": 2,
3071
+ "veritas.policy-results": 10,
3072
+ "veritas.readiness": 1
3073
+ },
3074
+ "confidenceBasis": {
3075
+ "sourceQuality": {},
3076
+ "reviewerAuthority": {},
3077
+ "evidenceStrength": {},
3078
+ "corroboratedClaims": 0,
3079
+ "averageExtractionConfidence": null,
3080
+ "freshnessAtRisk": [],
3081
+ "conflictedClaims": []
3082
+ },
3083
+ "transparencyGapsByType": {
3084
+ "contradiction": 0,
3085
+ "provenance_gap": 12,
3086
+ "policy_violation": 13,
3087
+ "freshness_breach": 0,
3088
+ "corroboration_absent": 0,
3089
+ "unsupported_inference": 0
3090
+ },
3091
+ "highImpactUnsupported": [
3092
+ "veritas.evidence-check.npm-run-veritas-fallow-advisory"
3093
+ ],
3094
+ "staleClaims": [],
3095
+ "disputedClaims": [],
3096
+ "recomputeNeededClaims": []
3097
+ },
3098
+ "claims": [
3099
+ {
3100
+ "id": "veritas.surface.governance.guidance",
3101
+ "status": "unknown",
3102
+ "subjectType": "repo-surface",
3103
+ "subjectId": "veritas:governance.guidance",
3104
+ "surface": "veritas.affected-surface",
3105
+ "claimType": "veritas-affected-surface",
3106
+ "fieldOrBehavior": "governance.guidance",
3107
+ "value": "governance.guidance",
3108
+ "verificationPolicyId": "veritas.surface",
3109
+ "createdAt": "2026-05-19T13:38:14.077Z",
3110
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3111
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3112
+ },
3113
+ {
3114
+ "id": "veritas.surface.governance.root-manifests",
3115
+ "status": "unknown",
3116
+ "subjectType": "repo-surface",
3117
+ "subjectId": "veritas:governance.root-manifests",
3118
+ "surface": "veritas.affected-surface",
3119
+ "claimType": "veritas-affected-surface",
3120
+ "fieldOrBehavior": "governance.root-manifests",
3121
+ "value": "governance.root-manifests",
3122
+ "verificationPolicyId": "veritas.surface",
3123
+ "createdAt": "2026-05-19T13:38:14.077Z",
3124
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3125
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3126
+ },
3127
+ {
3128
+ "id": "veritas.surface.tooling.bin",
3129
+ "status": "unknown",
3130
+ "subjectType": "repo-surface",
3131
+ "subjectId": "veritas:tooling.bin",
3132
+ "surface": "veritas.affected-surface",
3133
+ "claimType": "veritas-affected-surface",
3134
+ "fieldOrBehavior": "tooling.bin",
3135
+ "value": "tooling.bin",
3136
+ "verificationPolicyId": "veritas.surface",
3137
+ "createdAt": "2026-05-19T13:38:14.077Z",
3138
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3139
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3140
+ },
3141
+ {
3142
+ "id": "veritas.surface.delivery.github",
3143
+ "status": "unknown",
3144
+ "subjectType": "repo-surface",
3145
+ "subjectId": "veritas:delivery.github",
3146
+ "surface": "veritas.affected-surface",
3147
+ "claimType": "veritas-affected-surface",
3148
+ "fieldOrBehavior": "delivery.github",
3149
+ "value": "delivery.github",
3150
+ "verificationPolicyId": "veritas.surface",
3151
+ "createdAt": "2026-05-19T13:38:14.077Z",
3152
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3153
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3154
+ },
3155
+ {
3156
+ "id": "veritas.surface.tooling.scripts",
3157
+ "status": "unknown",
3158
+ "subjectType": "repo-surface",
3159
+ "subjectId": "veritas:tooling.scripts",
3160
+ "surface": "veritas.affected-surface",
3161
+ "claimType": "veritas-affected-surface",
3162
+ "fieldOrBehavior": "tooling.scripts",
3163
+ "value": "tooling.scripts",
3164
+ "verificationPolicyId": "veritas.surface",
3165
+ "createdAt": "2026-05-19T13:38:14.077Z",
3166
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3167
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3168
+ },
3169
+ {
3170
+ "id": "veritas.surface.governance.schemas",
3171
+ "status": "unknown",
3172
+ "subjectType": "repo-surface",
3173
+ "subjectId": "veritas:governance.schemas",
3174
+ "surface": "veritas.affected-surface",
3175
+ "claimType": "veritas-affected-surface",
3176
+ "fieldOrBehavior": "governance.schemas",
3177
+ "value": "governance.schemas",
3178
+ "verificationPolicyId": "veritas.surface",
3179
+ "createdAt": "2026-05-19T13:38:14.077Z",
3180
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3181
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3182
+ },
3183
+ {
3184
+ "id": "veritas.surface.governance.repo-maps",
3185
+ "status": "unknown",
3186
+ "subjectType": "repo-surface",
3187
+ "subjectId": "veritas:governance.repo-maps",
3188
+ "surface": "veritas.affected-surface",
3189
+ "claimType": "veritas-affected-surface",
3190
+ "fieldOrBehavior": "governance.repo-maps",
3191
+ "value": "governance.repo-maps",
3192
+ "verificationPolicyId": "veritas.surface",
3193
+ "createdAt": "2026-05-19T13:38:14.077Z",
3194
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3195
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3196
+ },
3197
+ {
3198
+ "id": "veritas.surface.governance.repo-standards",
3199
+ "status": "unknown",
3200
+ "subjectType": "repo-surface",
3201
+ "subjectId": "veritas:governance.repo-standards",
3202
+ "surface": "veritas.affected-surface",
3203
+ "claimType": "veritas-affected-surface",
3204
+ "fieldOrBehavior": "governance.repo-standards",
3205
+ "value": "governance.repo-standards",
3206
+ "verificationPolicyId": "veritas.surface",
3207
+ "createdAt": "2026-05-19T13:38:14.077Z",
3208
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3209
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3210
+ },
3211
+ {
3212
+ "id": "veritas.surface.examples.example-data",
3213
+ "status": "unknown",
3214
+ "subjectType": "repo-surface",
3215
+ "subjectId": "veritas:examples.example-data",
3216
+ "surface": "veritas.affected-surface",
3217
+ "claimType": "veritas-affected-surface",
3218
+ "fieldOrBehavior": "examples.example-data",
3219
+ "value": "examples.example-data",
3220
+ "verificationPolicyId": "veritas.surface",
3221
+ "createdAt": "2026-05-19T13:38:14.077Z",
3222
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3223
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3224
+ },
3225
+ {
3226
+ "id": "veritas.surface.app.src",
3227
+ "status": "unknown",
3228
+ "subjectType": "repo-surface",
3229
+ "subjectId": "veritas:app.src",
3230
+ "surface": "veritas.affected-surface",
3231
+ "claimType": "veritas-affected-surface",
3232
+ "fieldOrBehavior": "app.src",
3233
+ "value": "app.src",
3234
+ "verificationPolicyId": "veritas.surface",
3235
+ "createdAt": "2026-05-19T13:38:14.077Z",
3236
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3237
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3238
+ },
3239
+ {
3240
+ "id": "veritas.surface.docs.docs",
3241
+ "status": "unknown",
3242
+ "subjectType": "repo-surface",
3243
+ "subjectId": "veritas:docs.docs",
3244
+ "surface": "veritas.affected-surface",
3245
+ "claimType": "veritas-affected-surface",
3246
+ "fieldOrBehavior": "docs.docs",
3247
+ "value": "docs.docs",
3248
+ "verificationPolicyId": "veritas.surface",
3249
+ "createdAt": "2026-05-19T13:38:14.077Z",
3250
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3251
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3252
+ },
3253
+ {
3254
+ "id": "veritas.surface.verification.tests",
3255
+ "status": "unknown",
3256
+ "subjectType": "repo-surface",
3257
+ "subjectId": "veritas:verification.tests",
3258
+ "surface": "veritas.affected-surface",
3259
+ "claimType": "veritas-affected-surface",
3260
+ "fieldOrBehavior": "verification.tests",
3261
+ "value": "verification.tests",
3262
+ "verificationPolicyId": "veritas.surface",
3263
+ "createdAt": "2026-05-19T13:38:14.077Z",
3264
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3265
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3266
+ },
3267
+ {
3268
+ "id": "veritas.governance",
3269
+ "status": "verified",
3270
+ "subjectType": "repository",
3271
+ "subjectId": "veritas",
3272
+ "surface": "veritas.governance",
3273
+ "claimType": "veritas-governance-artifact",
3274
+ "fieldOrBehavior": "governance artifact integrity",
3275
+ "value": "governance artifact integrity",
3276
+ "verificationPolicyId": "veritas.governance-artifact",
3277
+ "createdAt": "2026-05-19T13:38:14.077Z",
3278
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3279
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3280
+ },
3281
+ {
3282
+ "id": "veritas.evidence-check.npm-run-verify",
3283
+ "status": "verified",
3284
+ "subjectType": "repository",
3285
+ "subjectId": "veritas",
3286
+ "surface": "veritas.evidence-check",
3287
+ "claimType": "software-evidence-check",
3288
+ "fieldOrBehavior": "npm run verify",
3289
+ "value": "all checks pass",
3290
+ "verificationPolicyId": "veritas.evidence-check",
3291
+ "createdAt": "2026-05-19T13:38:14.077Z",
3292
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3293
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3294
+ },
3295
+ {
3296
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
3297
+ "status": "proposed",
3298
+ "subjectType": "repository",
3299
+ "subjectId": "veritas",
3300
+ "surface": "veritas.evidence-check",
3301
+ "claimType": "software-evidence-check",
3302
+ "fieldOrBehavior": "npm run veritas:fallow:advisory",
3303
+ "value": "all checks pass",
3304
+ "verificationPolicyId": "veritas.evidence-check",
3305
+ "createdAt": "2026-05-19T13:38:14.077Z",
3306
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3307
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3308
+ },
3309
+ {
3310
+ "id": "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
3311
+ "status": "verified",
3312
+ "subjectType": "policy-rule",
3313
+ "subjectId": "veritas:veritas-default:policy-changes-require-attestation",
3314
+ "surface": "veritas.policy-results",
3315
+ "claimType": "veritas-policy-result",
3316
+ "fieldOrBehavior": "policy-changes-require-attestation",
3317
+ "value": "policy-changes-require-attestation",
3318
+ "verificationPolicyId": "veritas.policy-result",
3319
+ "createdAt": "2026-07-02T14:14:45.088Z",
3320
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3321
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3322
+ },
3323
+ {
3324
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
3325
+ "status": "verified",
3326
+ "subjectType": "policy-rule",
3327
+ "subjectId": "veritas:veritas-default:required-veritas-operational-artifacts",
3328
+ "surface": "veritas.policy-results",
3329
+ "claimType": "veritas-policy-result",
3330
+ "fieldOrBehavior": "required-veritas-operational-artifacts",
3331
+ "value": "required-veritas-operational-artifacts",
3332
+ "verificationPolicyId": "veritas.policy-result",
3333
+ "createdAt": "2026-07-02T14:14:45.088Z",
3334
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3335
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3336
+ },
3337
+ {
3338
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
3339
+ "status": "verified",
3340
+ "subjectType": "policy-rule",
3341
+ "subjectId": "veritas:veritas-default:required-veritas-cli-artifacts",
3342
+ "surface": "veritas.policy-results",
3343
+ "claimType": "veritas-policy-result",
3344
+ "fieldOrBehavior": "required-veritas-cli-artifacts",
3345
+ "value": "required-veritas-cli-artifacts",
3346
+ "verificationPolicyId": "veritas.policy-result",
3347
+ "createdAt": "2026-07-02T14:14:45.088Z",
3348
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3349
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3350
+ },
3351
+ {
3352
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
3353
+ "status": "verified",
3354
+ "subjectType": "policy-rule",
3355
+ "subjectId": "veritas:veritas-default:required-veritas-reference-artifacts",
3356
+ "surface": "veritas.policy-results",
3357
+ "claimType": "veritas-policy-result",
3358
+ "fieldOrBehavior": "required-veritas-reference-artifacts",
3359
+ "value": "required-veritas-reference-artifacts",
3360
+ "verificationPolicyId": "veritas.policy-result",
3361
+ "createdAt": "2026-07-02T14:14:45.088Z",
3362
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3363
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3364
+ },
3365
+ {
3366
+ "id": "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
3367
+ "status": "verified",
3368
+ "subjectType": "policy-rule",
3369
+ "subjectId": "veritas:veritas-default:required-veritas-schema-artifacts",
3370
+ "surface": "veritas.policy-results",
3371
+ "claimType": "veritas-policy-result",
3372
+ "fieldOrBehavior": "required-veritas-schema-artifacts",
3373
+ "value": "required-veritas-schema-artifacts",
3374
+ "verificationPolicyId": "veritas.policy-result",
3375
+ "createdAt": "2026-07-02T14:14:45.088Z",
3376
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3377
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3378
+ },
3379
+ {
3380
+ "id": "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
3381
+ "status": "verified",
3382
+ "subjectType": "policy-rule",
3383
+ "subjectId": "veritas:veritas-default:ai-instruction-files-synced",
3384
+ "surface": "veritas.policy-results",
3385
+ "claimType": "veritas-policy-result",
3386
+ "fieldOrBehavior": "ai-instruction-files-synced",
3387
+ "value": "ai-instruction-files-synced",
3388
+ "verificationPolicyId": "veritas.policy-result",
3389
+ "createdAt": "2026-07-02T14:14:45.088Z",
3390
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3391
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3392
+ },
3393
+ {
3394
+ "id": "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
3395
+ "status": "verified",
3396
+ "subjectType": "policy-rule",
3397
+ "subjectId": "veritas:veritas-default:prefer-veritas-routed-delivery",
3398
+ "surface": "veritas.policy-results",
3399
+ "claimType": "veritas-policy-result",
3400
+ "fieldOrBehavior": "prefer-veritas-routed-delivery",
3401
+ "value": "prefer-veritas-routed-delivery",
3402
+ "verificationPolicyId": "veritas.policy-result",
3403
+ "createdAt": "2026-07-02T14:14:45.088Z",
3404
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3405
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3406
+ },
3407
+ {
3408
+ "id": "veritas.policy.veritas.veritas-default.no-console-log-in-src",
3409
+ "status": "verified",
3410
+ "subjectType": "policy-rule",
3411
+ "subjectId": "veritas:veritas-default:no-console-log-in-src",
3412
+ "surface": "veritas.policy-results",
3413
+ "claimType": "veritas-policy-result",
3414
+ "fieldOrBehavior": "no-console-log-in-src",
3415
+ "value": "no-console-log-in-src",
3416
+ "verificationPolicyId": "veritas.policy-result",
3417
+ "createdAt": "2026-07-02T14:14:45.088Z",
3418
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3419
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3420
+ },
3421
+ {
3422
+ "id": "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
3423
+ "status": "verified",
3424
+ "subjectType": "policy-rule",
3425
+ "subjectId": "veritas:veritas-default:canonical-veritas-vocabulary",
3426
+ "surface": "veritas.policy-results",
3427
+ "claimType": "veritas-policy-result",
3428
+ "fieldOrBehavior": "canonical-veritas-vocabulary",
3429
+ "value": "canonical-veritas-vocabulary",
3430
+ "verificationPolicyId": "veritas.policy-result",
3431
+ "createdAt": "2026-07-02T14:14:45.088Z",
3432
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3433
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3434
+ },
3435
+ {
3436
+ "id": "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives",
3437
+ "status": "verified",
3438
+ "subjectType": "policy-rule",
3439
+ "subjectId": "veritas:veritas-default:repeatable-governance-uses-veritas-primitives",
3440
+ "surface": "veritas.policy-results",
3441
+ "claimType": "veritas-policy-result",
3442
+ "fieldOrBehavior": "repeatable-governance-uses-veritas-primitives",
3443
+ "value": "repeatable-governance-uses-veritas-primitives",
3444
+ "verificationPolicyId": "veritas.policy-result",
3445
+ "createdAt": "2026-07-02T14:14:45.088Z",
3446
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3447
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3448
+ },
3449
+ {
3450
+ "id": "veritas.veritas-1783001685088.readiness-verdict.working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
3451
+ "status": "verified",
3452
+ "subjectType": "repository-change",
3453
+ "subjectId": "veritas-default:working-tree-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
3454
+ "surface": "veritas.readiness",
3455
+ "claimType": "software-readiness-verdict",
3456
+ "fieldOrBehavior": "mergeReadiness",
3457
+ "value": {
3458
+ "verdict": "ready",
3459
+ "promotionAllowed": true,
3460
+ "uncoveredPathResult": "clear",
3461
+ "sourceRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3462
+ },
3463
+ "verificationPolicyId": "veritas.readiness-verdict",
3464
+ "createdAt": "2026-07-02T14:14:45.088Z",
3465
+ "updatedAt": "2026-07-02T14:14:45.088Z",
3466
+ "currentIntegrityRef": "working-tree:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
3467
+ }
3468
+ ],
3469
+ "transparencyGaps": [
3470
+ {
3471
+ "id": "veritas.surface.governance.guidance.gap.provenance-gap",
3472
+ "claimId": "veritas.surface.governance.guidance",
3473
+ "type": "provenance_gap",
3474
+ "severity": "medium",
3475
+ "message": "Missing required evidence: policy_rule.",
3476
+ "policyId": "veritas.surface",
3477
+ "createdAt": "2026-07-02T14:14:45.088Z"
3478
+ },
3479
+ {
3480
+ "id": "veritas.surface.governance.guidance.gap.policy-violation",
3481
+ "claimId": "veritas.surface.governance.guidance",
3482
+ "type": "policy_violation",
3483
+ "severity": "medium",
3484
+ "message": "Missing required verification method: auditability.",
3485
+ "policyId": "veritas.surface",
3486
+ "createdAt": "2026-07-02T14:14:45.088Z",
3487
+ "evidenceIds": []
3488
+ },
3489
+ {
3490
+ "id": "veritas.surface.governance.root-manifests.gap.provenance-gap",
3491
+ "claimId": "veritas.surface.governance.root-manifests",
3492
+ "type": "provenance_gap",
3493
+ "severity": "medium",
3494
+ "message": "Missing required evidence: policy_rule.",
3495
+ "policyId": "veritas.surface",
3496
+ "createdAt": "2026-07-02T14:14:45.088Z"
3497
+ },
3498
+ {
3499
+ "id": "veritas.surface.governance.root-manifests.gap.policy-violation",
3500
+ "claimId": "veritas.surface.governance.root-manifests",
3501
+ "type": "policy_violation",
3502
+ "severity": "medium",
3503
+ "message": "Missing required verification method: auditability.",
3504
+ "policyId": "veritas.surface",
3505
+ "createdAt": "2026-07-02T14:14:45.088Z",
3506
+ "evidenceIds": []
3507
+ },
3508
+ {
3509
+ "id": "veritas.surface.tooling.bin.gap.provenance-gap",
3510
+ "claimId": "veritas.surface.tooling.bin",
3511
+ "type": "provenance_gap",
3512
+ "severity": "medium",
3513
+ "message": "Missing required evidence: policy_rule.",
3514
+ "policyId": "veritas.surface",
3515
+ "createdAt": "2026-07-02T14:14:45.088Z"
3516
+ },
3517
+ {
3518
+ "id": "veritas.surface.tooling.bin.gap.policy-violation",
3519
+ "claimId": "veritas.surface.tooling.bin",
3520
+ "type": "policy_violation",
3521
+ "severity": "medium",
3522
+ "message": "Missing required verification method: auditability.",
3523
+ "policyId": "veritas.surface",
3524
+ "createdAt": "2026-07-02T14:14:45.088Z",
3525
+ "evidenceIds": []
3526
+ },
3527
+ {
3528
+ "id": "veritas.surface.delivery.github.gap.provenance-gap",
3529
+ "claimId": "veritas.surface.delivery.github",
3530
+ "type": "provenance_gap",
3531
+ "severity": "medium",
3532
+ "message": "Missing required evidence: policy_rule.",
3533
+ "policyId": "veritas.surface",
3534
+ "createdAt": "2026-07-02T14:14:45.088Z"
3535
+ },
3536
+ {
3537
+ "id": "veritas.surface.delivery.github.gap.policy-violation",
3538
+ "claimId": "veritas.surface.delivery.github",
3539
+ "type": "policy_violation",
3540
+ "severity": "medium",
3541
+ "message": "Missing required verification method: auditability.",
3542
+ "policyId": "veritas.surface",
3543
+ "createdAt": "2026-07-02T14:14:45.088Z",
3544
+ "evidenceIds": []
3545
+ },
3546
+ {
3547
+ "id": "veritas.surface.tooling.scripts.gap.provenance-gap",
3548
+ "claimId": "veritas.surface.tooling.scripts",
3549
+ "type": "provenance_gap",
3550
+ "severity": "medium",
3551
+ "message": "Missing required evidence: policy_rule.",
3552
+ "policyId": "veritas.surface",
3553
+ "createdAt": "2026-07-02T14:14:45.088Z"
3554
+ },
3555
+ {
3556
+ "id": "veritas.surface.tooling.scripts.gap.policy-violation",
3557
+ "claimId": "veritas.surface.tooling.scripts",
3558
+ "type": "policy_violation",
3559
+ "severity": "medium",
3560
+ "message": "Missing required verification method: auditability.",
3561
+ "policyId": "veritas.surface",
3562
+ "createdAt": "2026-07-02T14:14:45.088Z",
3563
+ "evidenceIds": []
3564
+ },
3565
+ {
3566
+ "id": "veritas.surface.governance.schemas.gap.provenance-gap",
3567
+ "claimId": "veritas.surface.governance.schemas",
3568
+ "type": "provenance_gap",
3569
+ "severity": "medium",
3570
+ "message": "Missing required evidence: policy_rule.",
3571
+ "policyId": "veritas.surface",
3572
+ "createdAt": "2026-07-02T14:14:45.088Z"
3573
+ },
3574
+ {
3575
+ "id": "veritas.surface.governance.schemas.gap.policy-violation",
3576
+ "claimId": "veritas.surface.governance.schemas",
3577
+ "type": "policy_violation",
3578
+ "severity": "medium",
3579
+ "message": "Missing required verification method: auditability.",
3580
+ "policyId": "veritas.surface",
3581
+ "createdAt": "2026-07-02T14:14:45.088Z",
3582
+ "evidenceIds": []
3583
+ },
3584
+ {
3585
+ "id": "veritas.surface.governance.repo-maps.gap.provenance-gap",
3586
+ "claimId": "veritas.surface.governance.repo-maps",
3587
+ "type": "provenance_gap",
3588
+ "severity": "medium",
3589
+ "message": "Missing required evidence: policy_rule.",
3590
+ "policyId": "veritas.surface",
3591
+ "createdAt": "2026-07-02T14:14:45.088Z"
3592
+ },
3593
+ {
3594
+ "id": "veritas.surface.governance.repo-maps.gap.policy-violation",
3595
+ "claimId": "veritas.surface.governance.repo-maps",
3596
+ "type": "policy_violation",
3597
+ "severity": "medium",
3598
+ "message": "Missing required verification method: auditability.",
3599
+ "policyId": "veritas.surface",
3600
+ "createdAt": "2026-07-02T14:14:45.088Z",
3601
+ "evidenceIds": []
3602
+ },
3603
+ {
3604
+ "id": "veritas.surface.governance.repo-standards.gap.provenance-gap",
3605
+ "claimId": "veritas.surface.governance.repo-standards",
3606
+ "type": "provenance_gap",
3607
+ "severity": "medium",
3608
+ "message": "Missing required evidence: policy_rule.",
3609
+ "policyId": "veritas.surface",
3610
+ "createdAt": "2026-07-02T14:14:45.088Z"
3611
+ },
3612
+ {
3613
+ "id": "veritas.surface.governance.repo-standards.gap.policy-violation",
3614
+ "claimId": "veritas.surface.governance.repo-standards",
3615
+ "type": "policy_violation",
3616
+ "severity": "medium",
3617
+ "message": "Missing required verification method: auditability.",
3618
+ "policyId": "veritas.surface",
3619
+ "createdAt": "2026-07-02T14:14:45.088Z",
3620
+ "evidenceIds": []
3621
+ },
3622
+ {
3623
+ "id": "veritas.surface.examples.example-data.gap.provenance-gap",
3624
+ "claimId": "veritas.surface.examples.example-data",
3625
+ "type": "provenance_gap",
3626
+ "severity": "medium",
3627
+ "message": "Missing required evidence: policy_rule.",
3628
+ "policyId": "veritas.surface",
3629
+ "createdAt": "2026-07-02T14:14:45.088Z"
3630
+ },
3631
+ {
3632
+ "id": "veritas.surface.examples.example-data.gap.policy-violation",
3633
+ "claimId": "veritas.surface.examples.example-data",
3634
+ "type": "policy_violation",
3635
+ "severity": "medium",
3636
+ "message": "Missing required verification method: auditability.",
3637
+ "policyId": "veritas.surface",
3638
+ "createdAt": "2026-07-02T14:14:45.088Z",
3639
+ "evidenceIds": []
3640
+ },
3641
+ {
3642
+ "id": "veritas.surface.app.src.gap.provenance-gap",
3643
+ "claimId": "veritas.surface.app.src",
3644
+ "type": "provenance_gap",
3645
+ "severity": "medium",
3646
+ "message": "Missing required evidence: policy_rule.",
3647
+ "policyId": "veritas.surface",
3648
+ "createdAt": "2026-07-02T14:14:45.088Z"
3649
+ },
3650
+ {
3651
+ "id": "veritas.surface.app.src.gap.policy-violation",
3652
+ "claimId": "veritas.surface.app.src",
3653
+ "type": "policy_violation",
3654
+ "severity": "medium",
3655
+ "message": "Missing required verification method: auditability.",
3656
+ "policyId": "veritas.surface",
3657
+ "createdAt": "2026-07-02T14:14:45.088Z",
3658
+ "evidenceIds": []
3659
+ },
3660
+ {
3661
+ "id": "veritas.surface.docs.docs.gap.provenance-gap",
3662
+ "claimId": "veritas.surface.docs.docs",
3663
+ "type": "provenance_gap",
3664
+ "severity": "medium",
3665
+ "message": "Missing required evidence: policy_rule.",
3666
+ "policyId": "veritas.surface",
3667
+ "createdAt": "2026-07-02T14:14:45.088Z"
3668
+ },
3669
+ {
3670
+ "id": "veritas.surface.docs.docs.gap.policy-violation",
3671
+ "claimId": "veritas.surface.docs.docs",
3672
+ "type": "policy_violation",
3673
+ "severity": "medium",
3674
+ "message": "Missing required verification method: auditability.",
3675
+ "policyId": "veritas.surface",
3676
+ "createdAt": "2026-07-02T14:14:45.088Z",
3677
+ "evidenceIds": []
3678
+ },
3679
+ {
3680
+ "id": "veritas.surface.verification.tests.gap.provenance-gap",
3681
+ "claimId": "veritas.surface.verification.tests",
3682
+ "type": "provenance_gap",
3683
+ "severity": "medium",
3684
+ "message": "Missing required evidence: policy_rule.",
3685
+ "policyId": "veritas.surface",
3686
+ "createdAt": "2026-07-02T14:14:45.088Z"
3687
+ },
3688
+ {
3689
+ "id": "veritas.surface.verification.tests.gap.policy-violation",
3690
+ "claimId": "veritas.surface.verification.tests",
3691
+ "type": "policy_violation",
3692
+ "severity": "medium",
3693
+ "message": "Missing required verification method: auditability.",
3694
+ "policyId": "veritas.surface",
3695
+ "createdAt": "2026-07-02T14:14:45.088Z",
3696
+ "evidenceIds": []
3697
+ },
3698
+ {
3699
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory.gap.policy-violation",
3700
+ "claimId": "veritas.evidence-check.npm-run-veritas-fallow-advisory",
3701
+ "type": "policy_violation",
3702
+ "severity": "high",
3703
+ "message": "Missing required verification method: validation.",
3704
+ "policyId": "veritas.evidence-check",
3705
+ "createdAt": "2026-07-02T14:14:45.088Z",
3706
+ "evidenceIds": [
3707
+ "veritas-1783001685088.evidence-check.fallow-advisory.evidence"
3708
+ ]
3709
+ }
3710
+ ],
3711
+ "transparencyGapsByClaimId": {
3712
+ "veritas.surface.governance.guidance": [
3713
+ {
3714
+ "id": "veritas.surface.governance.guidance.gap.provenance-gap",
3715
+ "type": "provenance_gap",
3716
+ "severity": "medium",
3717
+ "message": "Missing required evidence: policy_rule.",
3718
+ "policyId": "veritas.surface"
3719
+ },
3720
+ {
3721
+ "id": "veritas.surface.governance.guidance.gap.policy-violation",
3722
+ "type": "policy_violation",
3723
+ "severity": "medium",
3724
+ "message": "Missing required verification method: auditability.",
3725
+ "policyId": "veritas.surface"
3726
+ }
3727
+ ],
3728
+ "veritas.surface.governance.root-manifests": [
3729
+ {
3730
+ "id": "veritas.surface.governance.root-manifests.gap.provenance-gap",
3731
+ "type": "provenance_gap",
3732
+ "severity": "medium",
3733
+ "message": "Missing required evidence: policy_rule.",
3734
+ "policyId": "veritas.surface"
3735
+ },
3736
+ {
3737
+ "id": "veritas.surface.governance.root-manifests.gap.policy-violation",
3738
+ "type": "policy_violation",
3739
+ "severity": "medium",
3740
+ "message": "Missing required verification method: auditability.",
3741
+ "policyId": "veritas.surface"
3742
+ }
3743
+ ],
3744
+ "veritas.surface.tooling.bin": [
3745
+ {
3746
+ "id": "veritas.surface.tooling.bin.gap.provenance-gap",
3747
+ "type": "provenance_gap",
3748
+ "severity": "medium",
3749
+ "message": "Missing required evidence: policy_rule.",
3750
+ "policyId": "veritas.surface"
3751
+ },
3752
+ {
3753
+ "id": "veritas.surface.tooling.bin.gap.policy-violation",
3754
+ "type": "policy_violation",
3755
+ "severity": "medium",
3756
+ "message": "Missing required verification method: auditability.",
3757
+ "policyId": "veritas.surface"
3758
+ }
3759
+ ],
3760
+ "veritas.surface.delivery.github": [
3761
+ {
3762
+ "id": "veritas.surface.delivery.github.gap.provenance-gap",
3763
+ "type": "provenance_gap",
3764
+ "severity": "medium",
3765
+ "message": "Missing required evidence: policy_rule.",
3766
+ "policyId": "veritas.surface"
3767
+ },
3768
+ {
3769
+ "id": "veritas.surface.delivery.github.gap.policy-violation",
3770
+ "type": "policy_violation",
3771
+ "severity": "medium",
3772
+ "message": "Missing required verification method: auditability.",
3773
+ "policyId": "veritas.surface"
3774
+ }
3775
+ ],
3776
+ "veritas.surface.tooling.scripts": [
3777
+ {
3778
+ "id": "veritas.surface.tooling.scripts.gap.provenance-gap",
3779
+ "type": "provenance_gap",
3780
+ "severity": "medium",
3781
+ "message": "Missing required evidence: policy_rule.",
3782
+ "policyId": "veritas.surface"
3783
+ },
3784
+ {
3785
+ "id": "veritas.surface.tooling.scripts.gap.policy-violation",
3786
+ "type": "policy_violation",
3787
+ "severity": "medium",
3788
+ "message": "Missing required verification method: auditability.",
3789
+ "policyId": "veritas.surface"
3790
+ }
3791
+ ],
3792
+ "veritas.surface.governance.schemas": [
3793
+ {
3794
+ "id": "veritas.surface.governance.schemas.gap.provenance-gap",
3795
+ "type": "provenance_gap",
3796
+ "severity": "medium",
3797
+ "message": "Missing required evidence: policy_rule.",
3798
+ "policyId": "veritas.surface"
3799
+ },
3800
+ {
3801
+ "id": "veritas.surface.governance.schemas.gap.policy-violation",
3802
+ "type": "policy_violation",
3803
+ "severity": "medium",
3804
+ "message": "Missing required verification method: auditability.",
3805
+ "policyId": "veritas.surface"
3806
+ }
3807
+ ],
3808
+ "veritas.surface.governance.repo-maps": [
3809
+ {
3810
+ "id": "veritas.surface.governance.repo-maps.gap.provenance-gap",
3811
+ "type": "provenance_gap",
3812
+ "severity": "medium",
3813
+ "message": "Missing required evidence: policy_rule.",
3814
+ "policyId": "veritas.surface"
3815
+ },
3816
+ {
3817
+ "id": "veritas.surface.governance.repo-maps.gap.policy-violation",
3818
+ "type": "policy_violation",
3819
+ "severity": "medium",
3820
+ "message": "Missing required verification method: auditability.",
3821
+ "policyId": "veritas.surface"
3822
+ }
3823
+ ],
3824
+ "veritas.surface.governance.repo-standards": [
3825
+ {
3826
+ "id": "veritas.surface.governance.repo-standards.gap.provenance-gap",
3827
+ "type": "provenance_gap",
3828
+ "severity": "medium",
3829
+ "message": "Missing required evidence: policy_rule.",
3830
+ "policyId": "veritas.surface"
3831
+ },
3832
+ {
3833
+ "id": "veritas.surface.governance.repo-standards.gap.policy-violation",
3834
+ "type": "policy_violation",
3835
+ "severity": "medium",
3836
+ "message": "Missing required verification method: auditability.",
3837
+ "policyId": "veritas.surface"
3838
+ }
3839
+ ],
3840
+ "veritas.surface.examples.example-data": [
3841
+ {
3842
+ "id": "veritas.surface.examples.example-data.gap.provenance-gap",
3843
+ "type": "provenance_gap",
3844
+ "severity": "medium",
3845
+ "message": "Missing required evidence: policy_rule.",
3846
+ "policyId": "veritas.surface"
3847
+ },
3848
+ {
3849
+ "id": "veritas.surface.examples.example-data.gap.policy-violation",
3850
+ "type": "policy_violation",
3851
+ "severity": "medium",
3852
+ "message": "Missing required verification method: auditability.",
3853
+ "policyId": "veritas.surface"
3854
+ }
3855
+ ],
3856
+ "veritas.surface.app.src": [
3857
+ {
3858
+ "id": "veritas.surface.app.src.gap.provenance-gap",
3859
+ "type": "provenance_gap",
3860
+ "severity": "medium",
3861
+ "message": "Missing required evidence: policy_rule.",
3862
+ "policyId": "veritas.surface"
3863
+ },
3864
+ {
3865
+ "id": "veritas.surface.app.src.gap.policy-violation",
3866
+ "type": "policy_violation",
3867
+ "severity": "medium",
3868
+ "message": "Missing required verification method: auditability.",
3869
+ "policyId": "veritas.surface"
3870
+ }
3871
+ ],
3872
+ "veritas.surface.docs.docs": [
3873
+ {
3874
+ "id": "veritas.surface.docs.docs.gap.provenance-gap",
3875
+ "type": "provenance_gap",
3876
+ "severity": "medium",
3877
+ "message": "Missing required evidence: policy_rule.",
3878
+ "policyId": "veritas.surface"
3879
+ },
3880
+ {
3881
+ "id": "veritas.surface.docs.docs.gap.policy-violation",
3882
+ "type": "policy_violation",
3883
+ "severity": "medium",
3884
+ "message": "Missing required verification method: auditability.",
3885
+ "policyId": "veritas.surface"
3886
+ }
3887
+ ],
3888
+ "veritas.surface.verification.tests": [
3889
+ {
3890
+ "id": "veritas.surface.verification.tests.gap.provenance-gap",
3891
+ "type": "provenance_gap",
3892
+ "severity": "medium",
3893
+ "message": "Missing required evidence: policy_rule.",
3894
+ "policyId": "veritas.surface"
3895
+ },
3896
+ {
3897
+ "id": "veritas.surface.verification.tests.gap.policy-violation",
3898
+ "type": "policy_violation",
3899
+ "severity": "medium",
3900
+ "message": "Missing required verification method: auditability.",
3901
+ "policyId": "veritas.surface"
3902
+ }
3903
+ ],
3904
+ "veritas.evidence-check.npm-run-veritas-fallow-advisory": [
3905
+ {
3906
+ "id": "veritas.evidence-check.npm-run-veritas-fallow-advisory.gap.policy-violation",
3907
+ "type": "policy_violation",
3908
+ "severity": "high",
3909
+ "message": "Missing required verification method: validation.",
3910
+ "policyId": "veritas.evidence-check"
3911
+ }
3912
+ ]
3913
+ },
3914
+ "claimGroupRollups": [
3915
+ {
3916
+ "id": "veritas.requirements.veritas-default",
3917
+ "title": "veritas-default",
3918
+ "kind": "requirement-set",
3919
+ "status": "verified",
3920
+ "claimIds": [
3921
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation",
3922
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts",
3923
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts",
3924
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts",
3925
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts",
3926
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced",
3927
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery",
3928
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src",
3929
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary",
3930
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
3931
+ ],
3932
+ "requirements": [
3933
+ {
3934
+ "id": "veritas.requirement.policy-changes-require-attestation",
3935
+ "title": "policy-changes-require-attestation",
3936
+ "claimIds": [
3937
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation"
3938
+ ],
3939
+ "required": true,
3940
+ "severity": "high",
3941
+ "status": "verified",
3942
+ "verifiedClaims": [
3943
+ "veritas.policy.veritas.veritas-default.policy-changes-require-attestation"
3944
+ ],
3945
+ "staleClaims": [],
3946
+ "disputedClaims": [],
3947
+ "unsupportedClaims": [],
3948
+ "missingClaimIds": [],
3949
+ "validationStrategy": {
3950
+ "requiredEvidence": [
3951
+ "policy_rule"
3952
+ ],
3953
+ "requiredMethods": [
3954
+ "validation"
3955
+ ],
3956
+ "acceptanceCriteria": [
3957
+ "requirements evaluation"
3958
+ ],
3959
+ "reviewAuthority": "veritas requirements",
3960
+ "metadata": {
3961
+ "ruleId": "policy-changes-require-attestation",
3962
+ "enforcementLevel": "Require",
3963
+ "classification": "hard-invariant"
3964
+ }
3965
+ },
3966
+ "metadata": {
3967
+ "implemented": true,
3968
+ "enforcementLevel": "Require",
3969
+ "classification": "hard-invariant"
3970
+ }
3971
+ },
3972
+ {
3973
+ "id": "veritas.requirement.required-veritas-operational-artifacts",
3974
+ "title": "required-veritas-operational-artifacts",
3975
+ "claimIds": [
3976
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts"
3977
+ ],
3978
+ "required": true,
3979
+ "severity": "high",
3980
+ "status": "verified",
3981
+ "verifiedClaims": [
3982
+ "veritas.policy.veritas.veritas-default.required-veritas-operational-artifacts"
3983
+ ],
3984
+ "staleClaims": [],
3985
+ "disputedClaims": [],
3986
+ "unsupportedClaims": [],
3987
+ "missingClaimIds": [],
3988
+ "validationStrategy": {
3989
+ "requiredEvidence": [
3990
+ "policy_rule"
3991
+ ],
3992
+ "requiredMethods": [
3993
+ "validation"
3994
+ ],
3995
+ "acceptanceCriteria": [
3996
+ "requirements evaluation"
3997
+ ],
3998
+ "reviewAuthority": "veritas requirements",
3999
+ "metadata": {
4000
+ "ruleId": "required-veritas-operational-artifacts",
4001
+ "enforcementLevel": "Require",
4002
+ "classification": "hard-invariant"
4003
+ }
4004
+ },
4005
+ "metadata": {
4006
+ "implemented": true,
4007
+ "enforcementLevel": "Require",
4008
+ "classification": "hard-invariant"
4009
+ }
4010
+ },
4011
+ {
4012
+ "id": "veritas.requirement.required-veritas-cli-artifacts",
4013
+ "title": "required-veritas-cli-artifacts",
4014
+ "claimIds": [
4015
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts"
4016
+ ],
4017
+ "required": true,
4018
+ "severity": "high",
4019
+ "status": "verified",
4020
+ "verifiedClaims": [
4021
+ "veritas.policy.veritas.veritas-default.required-veritas-cli-artifacts"
4022
+ ],
4023
+ "staleClaims": [],
4024
+ "disputedClaims": [],
4025
+ "unsupportedClaims": [],
4026
+ "missingClaimIds": [],
4027
+ "validationStrategy": {
4028
+ "requiredEvidence": [
4029
+ "policy_rule"
4030
+ ],
4031
+ "requiredMethods": [
4032
+ "validation"
4033
+ ],
4034
+ "acceptanceCriteria": [
4035
+ "requirements evaluation"
4036
+ ],
4037
+ "reviewAuthority": "veritas requirements",
4038
+ "metadata": {
4039
+ "ruleId": "required-veritas-cli-artifacts",
4040
+ "enforcementLevel": "Require",
4041
+ "classification": "hard-invariant"
4042
+ }
4043
+ },
4044
+ "metadata": {
4045
+ "implemented": true,
4046
+ "enforcementLevel": "Require",
4047
+ "classification": "hard-invariant"
4048
+ }
4049
+ },
4050
+ {
4051
+ "id": "veritas.requirement.required-veritas-reference-artifacts",
4052
+ "title": "required-veritas-reference-artifacts",
4053
+ "claimIds": [
4054
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts"
4055
+ ],
4056
+ "required": true,
4057
+ "severity": "high",
4058
+ "status": "verified",
4059
+ "verifiedClaims": [
4060
+ "veritas.policy.veritas.veritas-default.required-veritas-reference-artifacts"
4061
+ ],
4062
+ "staleClaims": [],
4063
+ "disputedClaims": [],
4064
+ "unsupportedClaims": [],
4065
+ "missingClaimIds": [],
4066
+ "validationStrategy": {
4067
+ "requiredEvidence": [
4068
+ "policy_rule"
4069
+ ],
4070
+ "requiredMethods": [
4071
+ "validation"
4072
+ ],
4073
+ "acceptanceCriteria": [
4074
+ "requirements evaluation"
4075
+ ],
4076
+ "reviewAuthority": "veritas requirements",
4077
+ "metadata": {
4078
+ "ruleId": "required-veritas-reference-artifacts",
4079
+ "enforcementLevel": "Require",
4080
+ "classification": "hard-invariant"
4081
+ }
4082
+ },
4083
+ "metadata": {
4084
+ "implemented": true,
4085
+ "enforcementLevel": "Require",
4086
+ "classification": "hard-invariant"
4087
+ }
4088
+ },
4089
+ {
4090
+ "id": "veritas.requirement.required-veritas-schema-artifacts",
4091
+ "title": "required-veritas-schema-artifacts",
4092
+ "claimIds": [
4093
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
4094
+ ],
4095
+ "required": true,
4096
+ "severity": "high",
4097
+ "status": "verified",
4098
+ "verifiedClaims": [
4099
+ "veritas.policy.veritas.veritas-default.required-veritas-schema-artifacts"
4100
+ ],
4101
+ "staleClaims": [],
4102
+ "disputedClaims": [],
4103
+ "unsupportedClaims": [],
4104
+ "missingClaimIds": [],
4105
+ "validationStrategy": {
4106
+ "requiredEvidence": [
4107
+ "policy_rule"
4108
+ ],
4109
+ "requiredMethods": [
4110
+ "validation"
4111
+ ],
4112
+ "acceptanceCriteria": [
4113
+ "requirements evaluation"
4114
+ ],
4115
+ "reviewAuthority": "veritas requirements",
4116
+ "metadata": {
4117
+ "ruleId": "required-veritas-schema-artifacts",
4118
+ "enforcementLevel": "Require",
4119
+ "classification": "hard-invariant"
4120
+ }
4121
+ },
4122
+ "metadata": {
4123
+ "implemented": true,
4124
+ "enforcementLevel": "Require",
4125
+ "classification": "hard-invariant"
4126
+ }
4127
+ },
4128
+ {
4129
+ "id": "veritas.requirement.ai-instruction-files-synced",
4130
+ "title": "ai-instruction-files-synced",
4131
+ "claimIds": [
4132
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced"
4133
+ ],
4134
+ "required": false,
4135
+ "severity": "high",
4136
+ "status": "verified",
4137
+ "verifiedClaims": [
4138
+ "veritas.policy.veritas.veritas-default.ai-instruction-files-synced"
4139
+ ],
4140
+ "staleClaims": [],
4141
+ "disputedClaims": [],
4142
+ "unsupportedClaims": [],
4143
+ "missingClaimIds": [],
4144
+ "validationStrategy": {
4145
+ "requiredEvidence": [
4146
+ "policy_rule"
4147
+ ],
4148
+ "requiredMethods": [
4149
+ "validation"
4150
+ ],
4151
+ "acceptanceCriteria": [
4152
+ "requirements evaluation"
4153
+ ],
4154
+ "reviewAuthority": "veritas requirements",
4155
+ "metadata": {
4156
+ "ruleId": "ai-instruction-files-synced",
4157
+ "enforcementLevel": "Guide",
4158
+ "classification": "hard-invariant"
4159
+ }
4160
+ },
4161
+ "metadata": {
4162
+ "implemented": true,
4163
+ "enforcementLevel": "Guide",
4164
+ "classification": "hard-invariant"
4165
+ }
4166
+ },
4167
+ {
4168
+ "id": "veritas.requirement.prefer-veritas-routed-delivery",
4169
+ "title": "prefer-veritas-routed-delivery",
4170
+ "claimIds": [
4171
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery"
4172
+ ],
4173
+ "required": false,
4174
+ "severity": "low",
4175
+ "status": "verified",
4176
+ "verifiedClaims": [
4177
+ "veritas.policy.veritas.veritas-default.prefer-veritas-routed-delivery"
4178
+ ],
4179
+ "staleClaims": [],
4180
+ "disputedClaims": [],
4181
+ "unsupportedClaims": [],
4182
+ "missingClaimIds": [],
4183
+ "validationStrategy": {
4184
+ "requiredEvidence": [
4185
+ "policy_rule"
4186
+ ],
4187
+ "requiredMethods": [
4188
+ "validation"
4189
+ ],
4190
+ "acceptanceCriteria": [
4191
+ "requirements evaluation"
4192
+ ],
4193
+ "reviewAuthority": "veritas requirements",
4194
+ "metadata": {
4195
+ "ruleId": "prefer-veritas-routed-delivery",
4196
+ "enforcementLevel": "Observe",
4197
+ "classification": "promotable-policy"
4198
+ }
4199
+ },
4200
+ "metadata": {
4201
+ "implemented": true,
4202
+ "enforcementLevel": "Observe",
4203
+ "classification": "promotable-policy"
4204
+ }
4205
+ },
4206
+ {
4207
+ "id": "veritas.requirement.no-console-log-in-src",
4208
+ "title": "no-console-log-in-src",
4209
+ "claimIds": [
4210
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src"
4211
+ ],
4212
+ "required": false,
4213
+ "severity": "medium",
4214
+ "status": "verified",
4215
+ "verifiedClaims": [
4216
+ "veritas.policy.veritas.veritas-default.no-console-log-in-src"
4217
+ ],
4218
+ "staleClaims": [],
4219
+ "disputedClaims": [],
4220
+ "unsupportedClaims": [],
4221
+ "missingClaimIds": [],
4222
+ "validationStrategy": {
4223
+ "requiredEvidence": [
4224
+ "policy_rule"
4225
+ ],
4226
+ "requiredMethods": [
4227
+ "validation"
4228
+ ],
4229
+ "acceptanceCriteria": [
4230
+ "requirements evaluation"
4231
+ ],
4232
+ "reviewAuthority": "veritas requirements",
4233
+ "metadata": {
4234
+ "ruleId": "no-console-log-in-src",
4235
+ "enforcementLevel": "Guide",
4236
+ "classification": "advisory-pattern"
4237
+ }
4238
+ },
4239
+ "metadata": {
4240
+ "implemented": true,
4241
+ "enforcementLevel": "Guide",
4242
+ "classification": "advisory-pattern"
4243
+ }
4244
+ },
4245
+ {
4246
+ "id": "veritas.requirement.canonical-veritas-vocabulary",
4247
+ "title": "canonical-veritas-vocabulary",
4248
+ "claimIds": [
4249
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary"
4250
+ ],
4251
+ "required": false,
4252
+ "severity": "medium",
4253
+ "status": "verified",
4254
+ "verifiedClaims": [
4255
+ "veritas.policy.veritas.veritas-default.canonical-veritas-vocabulary"
4256
+ ],
4257
+ "staleClaims": [],
4258
+ "disputedClaims": [],
4259
+ "unsupportedClaims": [],
4260
+ "missingClaimIds": [],
4261
+ "validationStrategy": {
4262
+ "requiredEvidence": [
4263
+ "policy_rule"
4264
+ ],
4265
+ "requiredMethods": [
4266
+ "validation"
4267
+ ],
4268
+ "acceptanceCriteria": [
4269
+ "requirements evaluation"
4270
+ ],
4271
+ "reviewAuthority": "veritas requirements",
4272
+ "metadata": {
4273
+ "ruleId": "canonical-veritas-vocabulary",
4274
+ "enforcementLevel": "Guide",
4275
+ "classification": "advisory-pattern"
4276
+ }
4277
+ },
4278
+ "metadata": {
4279
+ "implemented": true,
4280
+ "enforcementLevel": "Guide",
4281
+ "classification": "advisory-pattern"
4282
+ }
4283
+ },
4284
+ {
4285
+ "id": "veritas.requirement.repeatable-governance-uses-veritas-primitives",
4286
+ "title": "repeatable-governance-uses-veritas-primitives",
4287
+ "claimIds": [
4288
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
4289
+ ],
4290
+ "required": false,
4291
+ "severity": "medium",
4292
+ "status": "verified",
4293
+ "verifiedClaims": [
4294
+ "veritas.policy.veritas.veritas-default.repeatable-governance-uses-veritas-primitives"
4295
+ ],
4296
+ "staleClaims": [],
4297
+ "disputedClaims": [],
4298
+ "unsupportedClaims": [],
4299
+ "missingClaimIds": [],
4300
+ "validationStrategy": {
4301
+ "requiredEvidence": [
4302
+ "policy_rule"
4303
+ ],
4304
+ "requiredMethods": [
4305
+ "validation"
4306
+ ],
4307
+ "acceptanceCriteria": [
4308
+ "requirements evaluation"
4309
+ ],
4310
+ "reviewAuthority": "veritas requirements",
4311
+ "metadata": {
4312
+ "ruleId": "repeatable-governance-uses-veritas-primitives",
4313
+ "enforcementLevel": "Guide",
4314
+ "classification": "promotable-policy"
4315
+ }
4316
+ },
4317
+ "metadata": {
4318
+ "implemented": true,
4319
+ "enforcementLevel": "Guide",
4320
+ "classification": "promotable-policy"
4321
+ }
4322
+ }
4323
+ ],
4324
+ "summary": {
4325
+ "totalRequirements": 10,
4326
+ "requiredRequirements": 5,
4327
+ "verifiedRequirements": 10,
4328
+ "staleRequirements": 0,
4329
+ "disputedRequirements": 0,
4330
+ "unsupportedRequirements": 0,
4331
+ "missingClaims": 0,
4332
+ "verificationCoverage": 1
4333
+ },
4334
+ "description": "Veritas requirements projected as Surface trust claims.",
4335
+ "metadata": {
4336
+ "producer": "veritas",
4337
+ "repoStandards": {
4338
+ "name": "veritas-default",
4339
+ "version": 1,
4340
+ "rule_count": 9
4341
+ },
4342
+ "repoMap": {
4343
+ "name": "veritas",
4344
+ "kind": "repo-map",
4345
+ "report_transport": "local-json",
4346
+ "default_resolution": {
4347
+ "phase": "Phase 0 (Bootstrap)",
4348
+ "workstream": "Initial Project Setup",
4349
+ "matchedArtifacts": [
4350
+ "README.md"
4351
+ ]
4352
+ },
4353
+ "non_sliceable_invariants": [
4354
+ "baseline evidenceCheck",
4355
+ "repo-local guidance",
4356
+ "tracked policy artifacts"
4357
+ ],
4358
+ "evidenceChecks": [
4359
+ {
4360
+ "id": "required-evidence-check",
4361
+ "runner": "bash",
4362
+ "label": "npm run verify",
4363
+ "command": "npm run verify",
4364
+ "method": "validation",
4365
+ "surface_claim_ids": [],
4366
+ "summary": "Runs npm run verify."
4367
+ },
4368
+ {
4369
+ "id": "fallow-advisory",
4370
+ "runner": "bash",
4371
+ "label": "npm run veritas:fallow:advisory",
4372
+ "command": "npm run veritas:fallow:advisory",
4373
+ "method": "auditability",
4374
+ "surface_claim_ids": [],
4375
+ "summary": "Runs Fallow as advisory codebase-intelligence evidence."
4376
+ },
4377
+ {
4378
+ "id": "vocabulary-consistency",
4379
+ "runner": "bash",
4380
+ "label": "npm run veritas:vocab:check",
4381
+ "command": "npm run veritas:vocab:check",
4382
+ "method": "validation",
4383
+ "surface_claim_ids": [],
4384
+ "summary": "Checks first-contact Veritas docs for canonical product vocabulary."
4385
+ }
4386
+ ],
4387
+ "required_evidence_check_ids": [
4388
+ "required-evidence-check"
4389
+ ],
4390
+ "default_evidence_check_ids": [
4391
+ "required-evidence-check",
4392
+ "vocabulary-consistency",
4393
+ "fallow-advisory"
4394
+ ],
4395
+ "evidence_check_routes": [],
4396
+ "uncovered_path_policy": "warn"
4397
+ }
4398
+ }
4399
+ }
4400
+ ]
4401
+ }
4402
+ }
4403
+ }