@kontourai/survey 1.14.0 → 1.16.0

package/dist/src/review-workbench/review-workbench.css

@@ -3,149 +3,149 @@
   color-scheme: dark;
 
   /* structure */
-  --k-bg: #0a0e13;
-  --k-panel: #111824;
-  --k-panel-raised: #16202d;
-  --k-line: rgba(150, 180, 210, 0.12);
-  --k-line-strong: rgba(150, 180, 210, 0.22);
-  --k-shadow: 0 26px 60px -42px rgba(0, 0, 0, 0.95);
+  --k-bg: var(--k-bg, #0a0e13);
+  --k-panel: var(--k-panel, #111824);
+  --k-panel-raised: var(--k-panel-raised, #16202d);
+  --k-line: var(--k-line, rgba(150, 180, 210, 0.12));
+  --k-line-strong: var(--k-line-strong, rgba(150, 180, 210, 0.22));
+  --k-shadow: var(--k-shadow, 0 26px 60px -42px rgba(0, 0, 0, 0.95));
 
   /* text */
-  --k-text: #eef3f8;
-  --k-text-muted: #aebccb;
-  --k-text-faint: #72869b;
+  --k-text: var(--k-text, #eef3f8);
+  --k-text-muted: var(--k-text-muted, #aebccb);
+  --k-text-faint: var(--k-text-faint, #72869b);
 
   /* brand */
-  --k-brand: #5ce0c6;
-  --k-brand-contrast: #06080b;
+  --k-brand: var(--k-brand, #5ce0c6);
+  --k-brand-contrast: var(--k-brand-contrast, #06080b);
 
   /* semantic status scale */
-  --k-positive: #34d399;
-  --k-caution: #f3b14b;
-  --k-negative: #ff6f6f;
-  --k-neutral: #6f8095;
-  --k-active: #7aa2ff;
+  --k-positive: var(--k-positive, #34d399);
+  --k-caution: var(--k-caution, #f3b14b);
+  --k-negative: var(--k-negative, #ff6f6f);
+  --k-neutral: var(--k-neutral, #6f8095);
+  --k-active: var(--k-active, #7aa2ff);
   --k-positive-soft: color-mix(in oklab, var(--k-positive) 14%, transparent);
   --k-caution-soft: color-mix(in oklab, var(--k-caution) 14%, transparent);
   --k-negative-soft: color-mix(in oklab, var(--k-negative) 14%, transparent);
   --k-active-soft: color-mix(in oklab, var(--k-active) 14%, transparent);
 
   /* spacing */
-  --k-space-1: 4px;
-  --k-space-2: 8px;
-  --k-space-3: 12px;
-  --k-space-4: 16px;
-  --k-space-5: 24px;
-  --k-space-6: 32px;
+  --k-space-1: var(--k-space-1, 4px);
+  --k-space-2: var(--k-space-2, 8px);
+  --k-space-3: var(--k-space-3, 12px);
+  --k-space-4: var(--k-space-4, 16px);
+  --k-space-5: var(--k-space-5, 24px);
+  --k-space-6: var(--k-space-6, 32px);
 
   /* radius */
-  --k-radius-sm: 9px;
-  --k-radius-md: 14px;
+  --k-radius-sm: var(--k-radius-sm, 9px);
+  --k-radius-md: var(--k-radius-md, 14px);
 
   /* type */
-  --k-text-xs: 11px;
-  --k-text-sm: 12.5px;
-  --k-text-md: 14px;
-  --k-text-lg: 18px;
-  --k-text-xl: 22px;
-  --k-text-2xl: clamp(26px, 3.4vw, 38px);
+  --k-text-xs: var(--k-text-xs, 11px);
+  --k-text-sm: var(--k-text-sm, 12.5px);
+  --k-text-md: var(--k-text-md, 14px);
+  --k-text-lg: var(--k-text-lg, 18px);
+  --k-text-xl: var(--k-text-xl, 22px);
+  --k-text-2xl: var(--k-text-2xl, clamp(26px, 3.4vw, 38px));
 
   /* fonts */
-  --k-font-display: "Fraunces", Georgia, "Times New Roman", serif;
-  --k-font-ui: "Hanken Grotesk", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
-  --k-font-mono: "IBM Plex Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+  --k-font-display: var(--k-font-display, "Fraunces", Georgia, "Times New Roman", serif);
+  --k-font-ui: var(--k-font-ui, "Hanken Grotesk", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif);
+  --k-font-mono: var(--k-font-mono, "IBM Plex Mono", ui-monospace, SFMono-Regular, Menlo, monospace);
 
   /* motion */
-  --k-ease: cubic-bezier(0.22, 1, 0.36, 1);
-  --k-dur: 0.16s;
+  --k-ease: var(--k-ease, cubic-bezier(0.22, 1, 0.36, 1));
+  --k-dur: var(--k-dur, 0.16s);
 }
 
 .survey-workbench-embed[data-theme="light"]{
   color-scheme: light;
-  --k-bg: #f5f4ef;
-  --k-panel: #ffffff;
-  --k-panel-raised: #fbfaf7;
-  --k-line: rgba(36, 40, 46, 0.12);
-  --k-line-strong: rgba(36, 40, 46, 0.20);
-  --k-shadow: 0 18px 50px -30px rgba(0, 0, 0, 0.25);
-  --k-text: #202124;
-  --k-text-muted: #5b626b;
-  --k-text-faint: #707782;
-  --k-brand-contrast: #ffffff;
-  --k-positive: #168257;
-  --k-caution: #8a5a00;
-  --k-negative: #c83b3b;
-  --k-neutral: #5f6975;
-  --k-active: #3f6fd6;
+  --k-bg: var(--k-bg, #f5f4ef);
+  --k-panel: var(--k-panel, #ffffff);
+  --k-panel-raised: var(--k-panel-raised, #fbfaf7);
+  --k-line: var(--k-line, rgba(36, 40, 46, 0.12));
+  --k-line-strong: var(--k-line-strong, rgba(36, 40, 46, 0.20));
+  --k-shadow: var(--k-shadow, 0 18px 50px -30px rgba(0, 0, 0, 0.25));
+  --k-text: var(--k-text, #202124);
+  --k-text-muted: var(--k-text-muted, #5b626b);
+  --k-text-faint: var(--k-text-faint, #707782);
+  --k-brand-contrast: var(--k-brand-contrast, #ffffff);
+  --k-positive: var(--k-positive, #168257);
+  --k-caution: var(--k-caution, #8a5a00);
+  --k-negative: var(--k-negative, #c83b3b);
+  --k-neutral: var(--k-neutral, #5f6975);
+  --k-active: var(--k-active, #3f6fd6);
 }
 
 
 .survey-workbench-embed.theme-survey{
-  --k-bg: #06080b;
-  --k-brand: #5ce0c6;
-  --k-text-faint: #6f8095;
+  --k-bg: var(--k-bg, #06080b);
+  --k-brand: var(--k-brand, #5ce0c6);
+  --k-text-faint: var(--k-text-faint, #6f8095);
 }
 
 .survey-workbench-embed.theme-console{
-  --k-font-ui: "Aptos Narrow", "DIN Condensed", "IBM Plex Sans Condensed", "Gill Sans", sans-serif;
-  --k-font-display: "Aptos Narrow", "DIN Condensed", "IBM Plex Sans Condensed", "Gill Sans", sans-serif;
-  --k-radius-sm: 0;
-  --k-radius-md: 0;
-  --k-brand: #c9ff4a;
-  --k-brand-contrast: #11120f;
-  --k-bg: #11120f;
-  --k-panel: #191b16;
-  --k-panel-raised: #20231e;
-  --k-line: #3a4035;
-  --k-line-strong: #8ea36e;
-  --k-text: #f2f0e8;
-  --k-text-muted: #a6ab9c;
-  --k-text-faint: #747a6c;
-  --k-positive: #a6d37b;
-  --k-caution: #e8c15f;
-  --k-negative: #ee776f;
-  --k-active: #84d8c8;
+  --k-font-ui: var(--k-font-ui, "Aptos Narrow", "DIN Condensed", "IBM Plex Sans Condensed", "Gill Sans", sans-serif);
+  --k-font-display: var(--k-font-display, "Aptos Narrow", "DIN Condensed", "IBM Plex Sans Condensed", "Gill Sans", sans-serif);
+  --k-radius-sm: var(--k-radius-sm, 0);
+  --k-radius-md: var(--k-radius-md, 0);
+  --k-brand: var(--k-brand, #c9ff4a);
+  --k-brand-contrast: var(--k-brand-contrast, #11120f);
+  --k-bg: var(--k-bg, #11120f);
+  --k-panel: var(--k-panel, #191b16);
+  --k-panel-raised: var(--k-panel-raised, #20231e);
+  --k-line: var(--k-line, #3a4035);
+  --k-line-strong: var(--k-line-strong, #8ea36e);
+  --k-text: var(--k-text, #f2f0e8);
+  --k-text-muted: var(--k-text-muted, #a6ab9c);
+  --k-text-faint: var(--k-text-faint, #747a6c);
+  --k-positive: var(--k-positive, #a6d37b);
+  --k-caution: var(--k-caution, #e8c15f);
+  --k-negative: var(--k-negative, #ee776f);
+  --k-active: var(--k-active, #84d8c8);
 }
 
 .survey-workbench-embed.theme-flow{
-  --k-brand: #2f88a6;
+  --k-brand: var(--k-brand, #2f88a6);
 }
 
 .survey-workbench-embed.theme-surface{
-  --k-brand: #14a37a;
+  --k-brand: var(--k-brand, #14a37a);
 }
 
 .survey-workbench-embed[data-theme="light"].theme-survey,
 .survey-workbench-embed[data-theme="light"] .theme-survey{
-  --k-brand: #16806f;
+  --k-brand: var(--k-brand, #16806f);
 }
 
 .survey-workbench-embed[data-theme="light"].theme-console,
 .survey-workbench-embed[data-theme="light"] .theme-console{
-  --k-brand: #6c9400;
-  --k-brand-contrast: #ffffff;
-  --k-bg: #f3f5eb;
-  --k-panel: #fbfcf7;
-  --k-panel-raised: #eef2e6;
-  --k-line: #ccd5bf;
-  --k-line-strong: #8fa36f;
-  --k-text: #1e2319;
-  --k-text-muted: #596250;
-  --k-text-faint: #77816d;
-  --k-positive: #2f7d32;
-  --k-caution: #8a6500;
-  --k-negative: #b93a36;
-  --k-active: #247f75;
+  --k-brand: var(--k-brand, #6c9400);
+  --k-brand-contrast: var(--k-brand-contrast, #ffffff);
+  --k-bg: var(--k-bg, #f3f5eb);
+  --k-panel: var(--k-panel, #fbfcf7);
+  --k-panel-raised: var(--k-panel-raised, #eef2e6);
+  --k-line: var(--k-line, #ccd5bf);
+  --k-line-strong: var(--k-line-strong, #8fa36f);
+  --k-text: var(--k-text, #1e2319);
+  --k-text-muted: var(--k-text-muted, #596250);
+  --k-text-faint: var(--k-text-faint, #77816d);
+  --k-positive: var(--k-positive, #2f7d32);
+  --k-caution: var(--k-caution, #8a6500);
+  --k-negative: var(--k-negative, #b93a36);
+  --k-active: var(--k-active, #247f75);
 }
 
 .survey-workbench-embed[data-theme="light"].theme-flow,
 .survey-workbench-embed[data-theme="light"] .theme-flow{
-  --k-brand: #1f6f88;
+  --k-brand: var(--k-brand, #1f6f88);
 }
 
 .survey-workbench-embed[data-theme="light"].theme-surface,
 .survey-workbench-embed[data-theme="light"] .theme-surface{
-  --k-brand: #0f6b52;
+  --k-brand: var(--k-brand, #0f6b52);
 }
 
 
@@ -434,6 +434,7 @@
 .survey-workbench-embed .field[data-state="accepted"] .stripe{ background: var(--k-positive); }
 .survey-workbench-embed .field[data-state="kept"] .stripe{ background: var(--k-faint); }
 .survey-workbench-embed .field[data-state="rejected"] .stripe{ background: var(--k-negative); }
+.survey-workbench-embed .field[data-state="could-not-confirm"] .stripe{ background: var(--k-caution); }
 .survey-workbench-embed .field[data-state="review"] .stripe{ background: var(--k-brand); }
 
 .survey-workbench-embed .fbody{
@@ -488,6 +489,7 @@
 .survey-workbench-embed .chip.accepted{ color: var(--k-positive); background: var(--k-positive-wash); }
 .survey-workbench-embed .chip.kept{ color: var(--k-muted); background: var(--k-sunken); }
 .survey-workbench-embed .chip.rejected{ color: var(--k-negative); background: var(--k-negative-wash); }
+.survey-workbench-embed .chip.could-not-confirm{ color: var(--k-caution); background: var(--k-caution-wash); }
 
 .survey-workbench-embed .frow1 .push{
   margin-left: auto;
@@ -752,6 +754,12 @@
   background: var(--k-panel-raised, var(--k-raised));
 }
 
+.survey-workbench-embed .btn.unconfirmed{
+  border-color: var(--k-caution);
+  color: var(--k-caution);
+  background: var(--k-caution-wash);
+}
+
 /* "Suggestion was wrong" — optional quiet calibration toggle on Keep current.
    Ticking it turns a keep-current decision into the reject signal. Not a third action. */
 .survey-workbench-embed .wrong{

package/dist/src/review-workbench/review-workbench.js

@@ -1,4 +1,5 @@
 import { canonicalJson } from "./canonical.js";
+import { assertReviewResolutionConsistency } from "../producer-discipline.js";
 import { candidateForDecision, buildReviewSessionEvent, buildReviewSessionEvents, buildReviewSessionResource, currentReviewWorkbenchState, defaultReviewSessionName, effectiveValueForDecision, initialReviewQueueSessionState, replayReviewSessionEvents, reviewWorkbenchSessionStorageKey, workbenchDecisionDefinitions, } from "./review-queue-session.js";
 import { validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
 import { buildSurfaceProjectionPreview, formatValue, } from "./review-surface-preview.js";
@@ -16,13 +17,16 @@ export function buildReviewDecision(state) {
         return undefined;
     }
     const definition = workbenchDecisionDefinitions[state.decision];
+    if (state.decision === "could-not-confirm" && !state.note.trim()) {
+        throw new Error("Could not confirm requires a non-empty reason.");
+    }
     const candidate = candidateForDecision(state.item, state.decision);
     const projection = {
         ...candidate.projection,
         reviewOutcomeId: candidate.projection?.reviewOutcomeId
             ?? `${state.item.metadata.name}:${state.decision}:review-outcome`,
     };
-    return {
+    const reviewDecision = {
         apiVersion: reviewResourceApiVersion,
         kind: "ReviewDecision",
         metadata: {
@@ -34,6 +38,13 @@ export function buildReviewDecision(state) {
             reviewItemName: state.item.metadata.name,
             candidateId: candidate.id,
             status: definition.status,
+            ...(state.decision === "could-not-confirm"
+                ? {
+                    resolution: "could_not_confirm",
+                    resolutionReason: state.note.trim(),
+                    ...(state.attemptEvidenceIds?.length ? { attemptEvidenceIds: [...state.attemptEvidenceIds] } : {}),
+                }
+                : {}),
             actor: {
                 id: state.actorId,
             },
@@ -47,6 +58,15 @@ export function buildReviewDecision(state) {
             appliedToClaimIds: candidate.projection?.claimId ? [candidate.projection.claimId] : undefined,
         },
     };
+    assertReviewResolutionConsistency(`ReviewDecision ${reviewDecision.metadata.name}`, {
+        status: reviewDecision.spec.status,
+        resolution: reviewDecision.spec.resolution,
+        resolutionReason: reviewDecision.spec.resolutionReason,
+        attemptEvidenceIds: reviewDecision.spec.attemptEvidenceIds,
+        actor: reviewDecision.spec.actor?.id,
+        reviewedAt: reviewDecision.spec.reviewedAt,
+    });
+    return reviewDecision;
 }
 /**
  * Stable versioned prompt identifier for the workbench decision card control.
@@ -177,6 +197,9 @@ function duplicateTargetIssues(items) {
     return issues;
 }
 function mapReviewApplyResultToActions(input) {
+    if (input.result.decision === "could-not-confirm") {
+        return [];
+    }
     const context = buildReviewApplyActionContext(input.result, input.itemByName, input.issues);
     if (!context || input.options.skip?.(context)) {
         return [];
@@ -442,6 +465,8 @@ function fieldCardState(item, decision) {
         return "kept";
     if (decision === "reject-proposed")
         return "rejected";
+    if (decision === "could-not-confirm")
+        return "could-not-confirm";
     if (item.spec.candidateSetStatus === "resolved")
         return "kept";
     return "review";
@@ -451,6 +476,7 @@ function chipLabel(state) {
         case "accepted": return "Accepted";
         case "kept": return "Kept current";
         case "rejected": return "Kept — flagged wrong";
+        case "could-not-confirm": return "Could not confirm";
         default: return "Needs review";
     }
 }
@@ -540,6 +566,7 @@ function renderFieldCard(item, session, presentationAdapter) {
             <input type="checkbox" class="wrongbox" data-testid="wrong-toggle" data-item-name="${escapeHtml(item.metadata.name)}">
             Suggestion was wrong
           </label>
+          <button class="btn unconfirmed" type="button" data-testid="could-not-confirm" data-item-name="${escapeHtml(item.metadata.name)}">Could not confirm</button>
         </div>
         <div class="decided">
           <span class="chip ${state}" data-testid="decided-chip">${chipLabel(state)}</span>
@@ -813,7 +840,7 @@ function renderProducerFeedbackTags(item) {
   `;
 }
 function renderFooterTally(session) {
-    const counts = { review: 0, accepted: 0, kept: 0, rejected: 0 };
+    const counts = { review: 0, accepted: 0, kept: 0, rejected: 0, "could-not-confirm": 0 };
     for (const item of session.items) {
         const state = fieldCardState(item, session.decisionsByItemName[item.metadata.name]);
         counts[state] += 1;
@@ -824,6 +851,7 @@ function renderFooterTally(session) {
         <span>Accepted <b data-testid="tally-accepted">${counts.accepted}</b></span>
         <span>Kept <b data-testid="tally-kept">${counts.kept}</b></span>
         <span>Flagged <b data-testid="tally-rejected">${counts.rejected}</b></span>
+        <span>Unconfirmed <b data-testid="tally-could-not-confirm">${counts["could-not-confirm"]}</b></span>
         <span>Remaining <b data-testid="tally-review">${counts.review}</b></span>
       </div>
     </footer>
@@ -973,10 +1001,13 @@ function createReviewWorkbenchController(root, startState, options) {
         // effectiveValue from snapshot + events alone. setDecision updates the
         // session before this runs, so the edit is already in state.
         const editedValue = itemName && decision === "accept-proposed" ? session.editedValuesByItemName?.[itemName] : undefined;
+        const attemptEvidenceIds = itemName && decision === "could-not-confirm"
+            ? session.attemptEvidenceIdsByItemName?.[itemName]
+            : undefined;
         const defaultData = decision
             ? (editedValue !== undefined
                 ? { workbenchDecision: decision, workbenchEditedValue: editedValue }
-                : { workbenchDecision: decision })
+                : { workbenchDecision: decision, ...(attemptEvidenceIds?.length ? { attemptEvidenceIds } : {}) })
             : undefined;
         events = [
             ...events,
@@ -989,6 +1020,13 @@ function createReviewWorkbenchController(root, startState, options) {
                 reviewDecisionName: item && decision ? `${item.metadata.name}-${decision}` : undefined,
                 candidateId: candidate?.id,
                 status: definition?.status,
+                ...(decision === "could-not-confirm"
+                    ? {
+                        resolution: "could_not_confirm",
+                        resolutionReason: note?.trim(),
+                        ...(attemptEvidenceIds ? { attemptEvidenceIds: [...attemptEvidenceIds] } : {}),
+                    }
+                    : {}),
                 rationale: note,
                 data: dataOverride ?? defaultData,
             }),
@@ -998,6 +1036,9 @@ function createReviewWorkbenchController(root, startState, options) {
         session = update(session);
     };
     const setDecision = (itemName, decision, rawEditedValue) => {
+        if (decision === "could-not-confirm" && !session.notesByItemName[itemName]?.trim()) {
+            throw new Error("Could not confirm requires a non-empty reason.");
+        }
         applySessionUpdate((current) => {
             const item = current.items.find((entry) => entry.metadata.name === itemName);
             const proposed = item?.spec.candidates.find((candidate) => candidate.role === "proposed");
@@ -1025,11 +1066,14 @@ function createReviewWorkbenchController(root, startState, options) {
             delete remainingDecisions[itemName];
             const remainingEdits = { ...current.editedValuesByItemName };
             delete remainingEdits[itemName];
+            const remainingAttemptEvidenceIds = { ...current.attemptEvidenceIdsByItemName };
+            delete remainingAttemptEvidenceIds[itemName];
             return {
                 ...current,
                 activeItemName: itemName,
                 decisionsByItemName: remainingDecisions,
                 editedValuesByItemName: remainingEdits,
+                attemptEvidenceIdsByItemName: remainingAttemptEvidenceIds,
             };
         });
         appendEvent("decision-changed", itemName, { workbenchDecision: null });
@@ -1082,6 +1126,9 @@ function queueSessionFromStartState(startState) {
         editedValuesByItemName: startState.editedValue !== undefined
             ? { [startState.item.metadata.name]: startState.editedValue }
             : {},
+        ...(startState.attemptEvidenceIds?.length
+            ? { attemptEvidenceIdsByItemName: { [startState.item.metadata.name]: [...startState.attemptEvidenceIds] } }
+            : {}),
         reviewedAt: startState.reviewedAt,
         actorId: startState.actorId,
     };
@@ -1125,6 +1172,23 @@ function bindFieldCardInteractions(root, controller) {
             controller.renderCurrentState();
         });
     });
+    root.querySelectorAll("[data-testid='could-not-confirm']").forEach((button) => {
+        button.addEventListener("click", () => {
+            const itemName = button.dataset.itemName ?? "";
+            const note = controller.currentSession().notesByItemName[itemName]?.trim() ?? "";
+            const field = button.closest("[data-testid='review-field']");
+            const textarea = field?.querySelector("[data-testid='reviewer-note']");
+            if (!note) {
+                textarea?.setCustomValidity?.("A reason is required when you could not confirm.");
+                textarea?.reportValidity?.();
+                textarea?.focus();
+                return;
+            }
+            textarea?.setCustomValidity?.("");
+            controller.setDecision(itemName, "could-not-confirm");
+            controller.renderCurrentState();
+        });
+    });
     root.querySelectorAll("[data-testid='undo-decision']").forEach((button) => {
         button.addEventListener("click", () => {
             controller.clearDecision(button.dataset.itemName ?? "");
@@ -1133,6 +1197,7 @@ function bindFieldCardInteractions(root, controller) {
     });
     root.querySelectorAll("[data-testid='reviewer-note']").forEach((textarea) => {
         textarea.addEventListener("input", () => {
+            textarea.setCustomValidity?.("");
             const itemName = textarea.dataset.itemName ?? "";
             controller.updateReviewerNote(itemName, textarea.value);
             refreshAuditPayloadForItem(textarea, controller, itemName);

package/dist/src/review-workbench/review-workbench.standalone.css

@@ -283,6 +283,7 @@ h1, h2, h3, p {
 .field[data-state="accepted"] .stripe { background: var(--k-positive); }
 .field[data-state="kept"] .stripe { background: var(--k-faint); }
 .field[data-state="rejected"] .stripe { background: var(--k-negative); }
+.field[data-state="could-not-confirm"] .stripe { background: var(--k-caution); }
 .field[data-state="review"] .stripe { background: var(--k-brand); }
 
 .fbody {
@@ -337,6 +338,7 @@ h1, h2, h3, p {
 .chip.accepted { color: var(--k-positive); background: var(--k-positive-wash); }
 .chip.kept { color: var(--k-muted); background: var(--k-sunken); }
 .chip.rejected { color: var(--k-negative); background: var(--k-negative-wash); }
+.chip.could-not-confirm { color: var(--k-caution); background: var(--k-caution-wash); }
 
 .frow1 .push {
   margin-left: auto;
@@ -601,6 +603,12 @@ h1, h2, h3, p {
   background: var(--k-panel-raised, var(--k-raised));
 }
 
+.btn.unconfirmed {
+  border-color: var(--k-caution);
+  color: var(--k-caution);
+  background: var(--k-caution-wash);
+}
+
 /* "Suggestion was wrong" — optional quiet calibration toggle on Keep current.
    Ticking it turns a keep-current decision into the reject signal. Not a third action. */
 .wrong {

package/dist/src/to-surface.js

@@ -27,11 +27,16 @@ export function buildSurveyTrustBundle(input, options = {}) {
         const extraction = requireMapValue(extractions, candidate.extractionId, "extraction");
         const rawSource = requireMapValue(rawSources, extraction.sourceId, "raw source");
         const review = selectReview(reviewsByCandidateSet.get(candidateSet.id) ?? [], candidate.id);
-        const status = projection.status ?? statusFor({ candidateSet, candidate, review });
-        assertProducerDiscipline({ status, review, extraction, rawSource, projection });
+        const projectionReview = review?.resolution === "could_not_confirm" ? undefined : review;
+        const unreviewedStatus = statusFor({ candidateSet, candidate });
+        const status = projection.status
+            ?? (review?.resolution === "could_not_confirm"
+                ? (unreviewedStatus === "disputed" ? unreviewedStatus : review.status)
+                : statusFor({ candidateSet, candidate, review }));
+        assertProducerDiscipline({ status, review, candidateSet, extraction, rawSource, projection });
         const claimValue = projection.value ?? candidate.value;
         const createdAt = projection.createdAt ?? extraction.extractedAt;
-        const updatedAt = projection.updatedAt ?? review?.reviewedAt ?? input.generatedAt;
+        const updatedAt = projection.updatedAt ?? projectionReview?.reviewedAt ?? input.generatedAt;
         const evidenceId = `${projection.id}.evidence.source`;
         const claim = {
             id: projection.id,
@@ -57,7 +62,15 @@ export function buildSurveyTrustBundle(input, options = {}) {
             },
             metadata: {
                 ...projection.metadata,
-                survey: buildSurveyMetadata({ projection, rawSource, extraction, candidateSet, candidate, review }),
+                survey: buildSurveyMetadata({
+                    projection,
+                    rawSource,
+                    extraction,
+                    candidateSet,
+                    candidate,
+                    review: projectionReview,
+                    comfortZoneReview: review,
+                }),
             },
         };
         // Promote the review's comfort-zone signal — and, when calibration is
@@ -82,7 +95,7 @@ export function buildSurveyTrustBundle(input, options = {}) {
             }
             : undefined;
         const affirmedConclusion = status === "verified" || status === "assumed";
-        const calibrated = calibrationMetrics && review && affirmedConclusion
+        const calibrated = calibrationMetrics && projectionReview && affirmedConclusion
             ? lookupCalibratedValue(calibrationMetrics, extraction.extractor, extraction.target, calibrationMinSamples)
             : undefined;
         if (comfortZone || calibrated) {
@@ -91,13 +104,16 @@ export function buildSurveyTrustBundle(input, options = {}) {
                 ...(comfortZone ? { comfortZone } : {}),
             };
         }
-        if (options.reviewProofs && review) {
+        // Could-not-confirm stays byte-quiet at the Surface boundary. In particular,
+        // do not attach an anchor whose public observedAt would disclose review time;
+        // callers can persist/recompute Survey's canonical v3 proof separately.
+        if (options.reviewProofs && projectionReview) {
             claim.currentIntegrityAnchor = buildReviewProofAnchor({
                 rawSource,
                 extraction,
                 candidate,
                 candidateSet,
-                reviewOutcome: review,
+                reviewOutcome: projectionReview,
                 claim: {
                     ...projection,
                     value: claimValue,
@@ -129,16 +145,16 @@ export function buildSurveyTrustBundle(input, options = {}) {
                 confidence: candidate.confidence ?? extraction.confidence,
             },
         });
-        const rationale = review?.rationale ?? candidateSet.rationale;
+        const rationale = projectionReview?.rationale ?? candidateSet.rationale;
         events.push({
             id: `${projection.id}.event.${status}`,
             claimId: projection.id,
             status,
-            actor: projection.actor ?? review?.actor ?? projection.collectedBy,
+            actor: projection.actor ?? projectionReview?.actor ?? projection.collectedBy,
             method: projection.eventMethod ?? eventMethodFor(status, candidateSet),
-            evidenceIds: review?.evidenceIds?.length ? review.evidenceIds : [evidenceId],
-            createdAt: review?.reviewedAt ?? input.generatedAt,
-            verifiedAt: status === "verified" || status === "assumed" ? review?.reviewedAt ?? input.generatedAt : undefined,
+            evidenceIds: projectionReview?.evidenceIds?.length ? projectionReview.evidenceIds : [evidenceId],
+            createdAt: projectionReview?.reviewedAt ?? input.generatedAt,
+            verifiedAt: status === "verified" || status === "assumed" ? projectionReview?.reviewedAt ?? input.generatedAt : undefined,
             notes: rationale,
         });
     }
@@ -357,11 +373,11 @@ function buildSurveyMetadata(input) {
                 },
             }
             : {}),
-        ...(input.review?.withinComfortZone === false
+        ...(input.comfortZoneReview?.withinComfortZone === false
             ? {
                 comfortZone: {
                     withinComfortZone: false,
-                    ...(input.review.comfortZoneNote ? { note: input.review.comfortZoneNote } : {}),
+                    ...(input.comfortZoneReview.comfortZoneNote ? { note: input.comfortZoneReview.comfortZoneNote } : {}),
                 },
             }
             : {}),
@@ -384,6 +400,7 @@ function assertProducerDiscipline(input) {
         subject: `Claim ${input.projection.id}`,
         status: input.status,
         review: input.review,
+        candidateSetStatus: input.candidateSet.status,
     });
     if (input.rawSource.kind !== "manual-entry" && !input.extraction.locator) {
         throw new Error(`Claim ${input.projection.id} needs a source locator for ${input.rawSource.kind}`);

package/dist/src/types.d.ts

@@ -49,6 +49,7 @@ export interface CandidateSet {
     metadata?: Record<string, unknown>;
 }
 export type ReviewStatus = Extract<TrustStatus, "verified" | "assumed" | "rejected" | "proposed">;
+export type ReviewResolution = "accepted" | "rejected" | "held" | "could_not_confirm";
 export type ReviewAuthorizingKind = "explicit-statement" | "exchange" | "authorized-action";
 export interface ReviewAuthorizingExplicitStatement {
     kind: "explicit-statement";
@@ -74,6 +75,13 @@ export interface ReviewOutcome {
     candidateSetId: string;
     candidateId?: string;
     status: ReviewStatus;
+    /** Explicit terminal resolution for this review round. Absent outcomes retain
+     *  the legacy status-inference behavior. */
+    resolution?: ReviewResolution;
+    /** Required, non-empty explanation when resolution is `could_not_confirm`. */
+    resolutionReason?: string;
+    /** Evidence of attempts made before the reviewer concluded they could not confirm. */
+    attemptEvidenceIds?: string[];
     actor?: string;
     reviewedAt?: string;
     rationale?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontourai/survey",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "description": "Producer-side source, extraction, candidate, and review contracts for projecting verified claims into Surface.",
   "license": "Apache-2.0",
   "type": "module",