@nifrajs/core 4.0.2 → 5.1.0

package/README.md

@@ -120,7 +120,9 @@ route. Split groups before the compiler reports `TS2589`, rather than weakening
   client's `transport` option with the same registry. `@nifrajs/core/transport-codec` negotiates
   bounded HTTP representations and supplies the same frame/loader adapters for WebSockets and
   deferred data. Import `richWireCodec()` from `@nifrajs/core/transport-codec-rich`; the separate
-  subpath keeps rich-wire code out of plain JSON bundles.
+  subpath keeps rich-wire code out of plain JSON bundles. The plugin decodes a codec body before
+  routing, so a route's `bodyLimit` and its authentication run after the decode; its own `maxBytes`
+  is the bound on that work.
 - **Typed data seam (opt in).** `@nifrajs/core/data` defines token-only operation contracts,
   `db.read`/`db.write` capability names, an opaque request-local `RlsScope`, typed adapter requests,
   drift snapshots, and `createDataPort(contract, adapter, { beacon: useCapability })`, which emits the
@@ -158,7 +160,9 @@ contract-first registry.
 
 `response` and `errors` are typed by default but are not runtime enforcement by themselves. Install
 `responseContract("enforce")` before the routes it should cover to validate JSON/status payloads and
-prevent extra fields from reaching the wire. `warn` preserves the original payload during migration.
+prevent extra fields from reaching the wire. That covers a `status(...)` or `c.json(...)` reply a
+handler returns or throws, a hook returns, or `onError` answers with. `warn` preserves the original
+payload during migration.
 Raw `Response`, streams, redirects, and `mountFetch` remain explicit transport escape hatches and
 must be governed by assurance/static review.
 

package/dist/assurance.d.ts

@@ -15,6 +15,68 @@ export type { AssuranceAttachment, AssuranceDeclaration, AssuranceEvidence, Assu
 export { withRouteAssurance };
 /** Isolated request executor used by adversarial contract verification. */
 export type InvariantExecutor = (request: Request) => Response | Promise<Response>;
+export type ContractTarget = "headers" | "cookies" | "params" | "body" | "query" | "response";
+export type ContractCaseKind = "input-rejection" | "response-conformance";
+export type ContractAuthContext = "authenticated" | "unauthenticated";
+export interface ContractExpectedResponse {
+    readonly status: number;
+    readonly contentType?: "json" | "text";
+    readonly headers?: Readonly<Record<string, string>>;
+    /** When present, the decoded body is compared byte-structure-wise to this value. */
+    readonly body?: unknown;
+}
+/** A known-good request. Missing body/query values are synthesized from inspectable JSON Schema. */
+export interface ContractWitness {
+    readonly params?: Readonly<Record<string, string>>;
+    readonly query?: unknown;
+    readonly body?: unknown;
+    readonly headers?: ConstructorParameters<typeof Headers>[0];
+    /** Explicit auth state for the prepareRequest hook; the harness never invents credentials. */
+    readonly auth?: ContractAuthContext;
+    /** Expected response for a guard/error witness. Omit for the normal success witness. */
+    readonly expected?: ContractExpectedResponse;
+}
+/** Stable context passed to request/rejection hooks. It contains no request payloads or secrets. */
+export interface ContractCaseContext {
+    readonly seed: number;
+    readonly caseId: string;
+    readonly route: ReflectedRoute;
+    readonly runtime: string;
+    readonly kind: ContractCaseKind;
+    readonly target: ContractTarget;
+    readonly auth?: ContractAuthContext;
+    readonly mutation?: string;
+}
+/** What `invariants.setup` provisions for one L4 run. */
+export interface InvariantSetupResult {
+    /** The isolated target for this run. Replaces `invariants.executor`. */
+    readonly executor?: InvariantExecutor;
+    /** Called once the run ends, after a failure too. */
+    readonly teardown?: () => void | Promise<void>;
+}
+/** Provisions a throwaway L4 target. Called once, before the first L4 request - never on import. */
+export type InvariantSetup = () => Promise<InvariantSetupResult | undefined | void>;
+/** Fixture options handed to the L4 contract runner (`runAdversarialContract` in `@nifrajs/testing`). */
+export interface InvariantRunOptions {
+    /** Known-good request values keyed by `"METHOD /path"`. Required for opaque Standard Schemas. */
+    readonly witnesses?: Readonly<Record<string, ContractWitness>>;
+    /** Attach a session, real row ids or signed tokens. Return a new Request. */
+    readonly prepareRequest?: (request: Request, context: ContractCaseContext) => Request | Promise<Request>;
+    /** Override rejection semantics, for an app with a custom validation response. */
+    readonly isRejected?: (response: Response, context: ContractCaseContext) => boolean | Promise<boolean>;
+    /** Run L4 on a subset of the reflected routes. */
+    readonly include?: (route: ReflectedRoute) => boolean;
+    /** Maximum validator-proven mutations per body/query schema. Default 32. */
+    readonly maxMutationsPerInput?: number;
+}
+/** L4 configuration: an isolated `executor`, a `setup` that provisions one, or both. */
+export type InvariantsConfig = InvariantRunOptions & ({
+    readonly executor: InvariantExecutor;
+    readonly setup?: InvariantSetup;
+} | {
+    readonly executor?: InvariantExecutor;
+    readonly setup: InvariantSetup;
+});
 /** Canonical evidence ids emitted by Nifra's official middleware modules. */
 export declare const NIFRA_ASSURANCE: Readonly<{
     readonly AUTHENTICATED: "nifra.authenticated";
@@ -46,8 +108,14 @@ export declare const NIFRA_ASSURANCE: Readonly<{
  */
 export declare function assure(app: unknown, evidence: AssuranceAttachment | readonly AssuranceAttachment[]): void;
 export interface AssuranceRouteSelector {
-    /** Omit for every method. */
-    readonly methods?: readonly Method[];
+    /** Omit for every method. `"WS"` selects WebSocket routes. */
+    readonly methods?: readonly (Method | "WS")[];
+    /**
+     * Skip routes under these methods; `"WS"` skips WebSocket routes. Every other method matches, a
+     * custom one such as `PURGE` included, so `["GET", "HEAD", "OPTIONS", "WS"]` selects every route
+     * that can change state.
+     */
+    readonly exceptMethods?: readonly (Method | "WS")[];
     /** Absolute route globs. `*` matches one segment; final `**` matches zero or more. */
     readonly paths?: readonly string[];
     /** Restrict the rule to MCP tool routes (`true`) or non-tool routes (`false`). */
@@ -90,6 +158,12 @@ export interface AssuranceRouteSelector {
      * already carries `schema.body`, so this reads what the route declared, not where it lives.
      */
     readonly hasBody?: boolean;
+    /**
+     * Match routes by whether they declare a success `response` schema - the routes a response contract
+     * can hold to anything. Pair it with `require: ["nifra.response-contract"]` to say "every route
+     * that declares a response enforces it" without listing the routes that declare none.
+     */
+    readonly hasResponse?: boolean;
     /**
      * Match routes by their effective transport body policy. `"unlimited"` is the explicit
      * streaming/upload exemption; `"bounded"` is any finite cap (an explicit number or the inherited
@@ -137,6 +211,13 @@ export interface AssuranceRule {
 export interface AssurancePolicy {
     /** First matching rule owns a route. Put exceptions before broad defaults. */
     readonly rules: readonly AssuranceRule[];
+    /**
+     * Rules checked on EVERY route they match, in addition to the first-match rule that owns it - for a
+     * requirement that holds across classes ("every route declaring a response enforces it"), which
+     * first-match-wins would otherwise make you repeat in each rule. A baseline rule does not classify a
+     * route: one no `rules` entry matches is still unclassified. Names share one namespace with `rules`.
+     */
+    readonly baseline?: readonly AssuranceRule[];
     /** Default `error`: an unclassified route fails closed. */
     readonly unmatched?: "error" | "ignore";
     /** Default false: reject an empty reflected source so a wrong import cannot pass CI silently. */
@@ -202,9 +283,7 @@ export interface AssuranceConfig {
         readonly signer?: (keyRef: string) => NifraManifestSigner | Promise<NifraManifestSigner>;
     };
     /** Dynamic invariant execution is opt-in and must use a disposable/sandboxed target. */
-    readonly invariants?: {
-        readonly executor: InvariantExecutor;
-    };
+    readonly invariants?: InvariantsConfig;
     /** Optional application-supplied rule packs appended after built-in verification rules. */
     readonly rulePacks?: readonly AssuranceRulePack[];
     /** Optional sink for an assurance bundle. The CLI validates the callable shape at runtime. */
@@ -219,6 +298,7 @@ export declare function defineAssurancePolicy(policy: AssurancePolicy): Assuranc
 /** Identity helper for a `nifra.assurance.ts` default export. */
 export declare function defineAssuranceConfig(config: AssuranceConfig): AssuranceConfig;
 export declare function matchesAssuranceSelector(route: Pick<ReflectedRoute, "method" | "path" | "tool" | "capabilities" | "classification" | "schema">, selector: AssuranceRouteSelector, definitions?: ReadonlyMap<string, CapabilityDefinition>): boolean;
-/** Evaluate reflected route evidence against the first matching policy rule. */
+/** Evaluate reflected route evidence against the first matching policy rule, plus every matching
+ * baseline rule. */
 export declare function evaluateRouteAssurance(source: unknown, policyInput: AssurancePolicy, options?: AssuranceEvaluationOptions): AssuranceReport;
 //# sourceMappingURL=assurance.d.ts.map

package/dist/assurance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assurance.d.ts","sourceRoot":"","sources":["../src/assurance.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAGpB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACf,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAOL,kBAAkB,EACnB,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,iBAAiB,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAA;AAC5F,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAE7B,2EAA2E;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAElF,6EAA6E;AAC7E,eAAO,MAAM,eAAe;;;;;;;;;;EAAsB,CAAA;AAOlD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,MAAM,CACpB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,mBAAmB,GAAG,SAAS,mBAAmB,EAAE,GAC7D,IAAI,CAwBN;AAED,MAAM,WAAW,sBAAsB;IACrC,6BAA6B;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,sFAAsF;IACtF,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAClC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAA;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,kBAAkB,CAAA;IACnD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAA;CACvD;AAED,+EAA+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACtD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC5C;AAmBD,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAA;IACtC,yCAAyC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,UAAU,CAAA;IAC3D;;;;OAIG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAA;CAChD;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;IACxC,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;IACvC,iGAAiG;IACjG,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAA;CACjD;AAED,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,wBAAwB,CAAA;AAE5B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,sFAAsF;IACtF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,WAAW,CAAA;CAC7D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAC9C,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAA;CAClD;AAED,uGAAuG;AACvG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAA;CACrE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAA;IACxC,mGAAmG;IACnG,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,qCAAqC;QACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;QACtB,+EAA+E;QAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;KACzF,CAAA;IACD,wFAAwF;IACxF,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;KACrC,CAAA;IACD,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACjD,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IACrD,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAA;CACpC;AAsBD,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CAuL9E;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CAiH9E;AAsBD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,IAAI,CACT,cAAc,EACd,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAC1E,EACD,QAAQ,EAAE,sBAAsB,EAChC,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,GACtD,OAAO,CA+BT;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,0BAA0B,GACnC,eAAe,CAqIjB"}
+{"version":3,"file":"assurance.d.ts","sourceRoot":"","sources":["../src/assurance.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAGpB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACf,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAOL,kBAAkB,EACnB,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,iBAAiB,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAA;AAC5F,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAE7B,2EAA2E;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAElF,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAC7F,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,GAAG,sBAAsB,CAAA;AACzE,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,iBAAiB,CAAA;AAErE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,oFAAoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3D,8FAA8F;IAC9F,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAA;IACnC,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAA;CAC7C;AAED,oGAAoG;AACpG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IACrC,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/C;AAED,oGAAoG;AACpG,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,oBAAoB,GAAG,SAAS,GAAG,IAAI,CAAC,CAAA;AAEnF,yGAAyG;AACzG,MAAM,WAAW,mBAAmB;IAClC,iGAAiG;IACjG,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAA;IAC9D,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,CACxB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,mBAAmB,KACzB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,kFAAkF;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,CACpB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,mBAAmB,KACzB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAA;IACrD,4EAA4E;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CACvC;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,GAChD,CACI;IAAE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAC5E,CAAA;AAEH,6EAA6E;AAC7E,eAAO,MAAM,eAAe;;;;;;;;;;EAAsB,CAAA;AAOlD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,MAAM,CACpB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,mBAAmB,GAAG,SAAS,mBAAmB,EAAE,GAC7D,IAAI,CAwBN;AAED,MAAM,WAAW,sBAAsB;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;IACnD,sFAAsF;IACtF,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAClC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAA;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,kBAAkB,CAAA;IACnD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAA;CACvD;AAED,+EAA+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACtD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC5C;AAqBD,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAA;IACtC,yCAAyC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,UAAU,CAAA;IAC3D;;;;OAIG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAA;CAChD;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;IAC5C,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;IACvC,iGAAiG;IACjG,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAA;CACjD;AAED,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,wBAAwB,CAAA;AAE5B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,sFAAsF;IACtF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,WAAW,CAAA;CAC7D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAC9C,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAA;CAClD;AAED,uGAAuG;AACvG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAA;CACrE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAA;IACxC,mGAAmG;IACnG,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,qCAAqC;QACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;QACtB,+EAA+E;QAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;KACzF,CAAA;IACD,wFAAwF;IACxF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;IACtC,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACjD,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IACrD,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAA;CACpC;AAuCD,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CA+L9E;AA2DD,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CA+G9E;AAsBD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,IAAI,CACT,cAAc,EACd,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAC1E,EACD,QAAQ,EAAE,sBAAsB,EAChC,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,GACtD,OAAO,CAkCT;AAuDD;oBACoB;AACpB,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,0BAA0B,GACnC,eAAe,CA2FjB"}

package/dist/assurance.js

@@ -55,12 +55,27 @@ const CLASS_SELECTOR_KEYS = ["access", "zone"];
 const usesClassSelector = (selector) => selector.access !== undefined || selector.zone !== undefined;
 /** The rules whose selector needs capability definitions to mean anything. */
 function rulesNeedingDefinitions(policy) {
-    return policy.rules.filter((rule) => usesClassSelector(rule.match)).map((rule) => rule.name);
+    return [...policy.rules, ...(policy.baseline ?? [])]
+        .filter((rule) => usesClassSelector(rule.match))
+        .map((rule) => rule.name);
 }
 function definitionMap(definitions) {
     return new Map((definitions ?? []).map((definition) => [definition.id, definition]));
 }
 const nonEmpty = (value) => value.trim() !== "";
+/** A selector's method list, upper-cased. Standard methods and `"WS"` only, so a typo throws rather
+ * than leaving a rule that never matches. */
+function selectorMethods(values) {
+    if (values === undefined)
+        return undefined;
+    return Object.freeze(values.map((value) => {
+        const method = value.toUpperCase();
+        if (method !== "WS" && !validMethod(method)) {
+            throw new Error(`route assurance: unsupported HTTP method ${JSON.stringify(method)}`);
+        }
+        return method;
+    }));
+}
 function normalizeEvidenceIds(values, label) {
     const out = [];
     const seen = new Set();
@@ -89,8 +104,11 @@ export function defineAssurancePolicy(policy) {
         typeof policy.flagClassifiedWithoutEvidence !== "boolean") {
         throw new Error(`route assurance: flagClassifiedWithoutEvidence must be boolean`);
     }
+    if (policy.baseline !== undefined && !Array.isArray(policy.baseline)) {
+        throw new Error("route assurance: baseline must be an array of rules");
+    }
     const names = new Set();
-    const rules = policy.rules.map((rule) => {
+    const normalize = (rule) => {
         if (typeof rule.name !== "string" || !nonEmpty(rule.name)) {
             throw new Error("route assurance: rule name must be non-empty");
         }
@@ -103,12 +121,14 @@ export function defineAssurancePolicy(policy) {
         // swallow everything after it. A misspelled key is a policy hole, so it is refused here.
         const unknown = Object.keys(rule.match).filter((key) => ![
             "methods",
+            "exceptMethods",
             "paths",
             "tools",
             "capabilities",
             ...CLASS_SELECTOR_KEYS,
             "classificationAtLeast",
             "hasBody",
+            "hasResponse",
             "bodyLimit",
         ].includes(key));
         if (unknown.length > 0) {
@@ -119,8 +139,10 @@ export function defineAssurancePolicy(policy) {
         if (rule.match.tools !== undefined && typeof rule.match.tools !== "boolean") {
             throw new Error(`route assurance: rule ${JSON.stringify(name)} tools selector must be boolean`);
         }
-        if (rule.match.hasBody !== undefined && typeof rule.match.hasBody !== "boolean") {
-            throw new Error(`route assurance: rule ${JSON.stringify(name)} hasBody selector must be boolean`);
+        for (const key of ["hasBody", "hasResponse"]) {
+            if (rule.match[key] !== undefined && typeof rule.match[key] !== "boolean") {
+                throw new Error(`route assurance: rule ${JSON.stringify(name)} ${key} selector must be boolean`);
+            }
         }
         if (rule.match.bodyLimit !== undefined &&
             rule.match.bodyLimit !== "bounded" &&
@@ -130,18 +152,14 @@ export function defineAssurancePolicy(policy) {
         }
         // An empty list matches nothing, so the rule is inert and its routes fall through to whatever
         // laxer rule comes next - the same hole as a dropped key, the other way round.
-        for (const key of ["methods", "paths"]) {
+        for (const key of ["methods", "exceptMethods", "paths"]) {
             const list = rule.match[key];
             if (list !== undefined && (!Array.isArray(list) || list.length === 0)) {
                 throw new Error(`route assurance: rule ${JSON.stringify(name)} ${key} selector must be a non-empty array`);
             }
         }
-        const methods = rule.match.methods?.map((method) => method.toUpperCase());
-        for (const method of methods ?? []) {
-            if (!validMethod(method)) {
-                throw new Error(`route assurance: unsupported HTTP method ${JSON.stringify(method)}`);
-            }
-        }
+        const methods = selectorMethods(rule.match.methods);
+        const exceptMethods = selectorMethods(rule.match.exceptMethods);
         const paths = rule.match.paths?.map((path) => {
             routeGlob(path);
             return path;
@@ -189,21 +207,33 @@ export function defineAssurancePolicy(policy) {
         if (overlap !== undefined) {
             throw new Error(`route assurance: rule ${JSON.stringify(name)} both requires and forbids ${overlap}`);
         }
+        const match = {};
+        if (methods !== undefined)
+            match.methods = methods;
+        if (exceptMethods !== undefined)
+            match.exceptMethods = exceptMethods;
+        if (paths !== undefined)
+            match.paths = Object.freeze(paths);
+        if (rule.match.tools !== undefined)
+            match.tools = rule.match.tools;
+        if (capabilities !== undefined)
+            match.capabilities = Object.freeze([...capabilities]);
+        if (access !== undefined)
+            match.access = access;
+        if (zone !== undefined)
+            match.zone = zone;
+        if (rule.match.classificationAtLeast !== undefined) {
+            match.classificationAtLeast = rule.match.classificationAtLeast;
+        }
+        if (rule.match.hasBody !== undefined)
+            match.hasBody = rule.match.hasBody;
+        if (rule.match.hasResponse !== undefined)
+            match.hasResponse = rule.match.hasResponse;
+        if (rule.match.bodyLimit !== undefined)
+            match.bodyLimit = rule.match.bodyLimit;
         return Object.freeze({
             name,
-            match: Object.freeze({
-                ...(methods !== undefined ? { methods: Object.freeze(methods) } : {}),
-                ...(paths !== undefined ? { paths: Object.freeze(paths) } : {}),
-                ...(rule.match.tools !== undefined ? { tools: rule.match.tools } : {}),
-                ...(capabilities !== undefined ? { capabilities: Object.freeze([...capabilities]) } : {}),
-                ...(access !== undefined ? { access } : {}),
-                ...(zone !== undefined ? { zone } : {}),
-                ...(rule.match.classificationAtLeast !== undefined
-                    ? { classificationAtLeast: rule.match.classificationAtLeast }
-                    : {}),
-                ...(rule.match.hasBody !== undefined ? { hasBody: rule.match.hasBody } : {}),
-                ...(rule.match.bodyLimit !== undefined ? { bodyLimit: rule.match.bodyLimit } : {}),
-            }),
+            match: Object.freeze(match),
             require: required,
             forbid: forbidden,
             ...(rule.requireProvenance !== undefined
@@ -211,14 +241,61 @@ export function defineAssurancePolicy(policy) {
                 : {}),
             ...(rule.requireCsrfWithAuthenticated === true ? { requireCsrfWithAuthenticated: true } : {}),
         });
-    });
+    };
+    const rules = policy.rules.map(normalize);
+    const baseline = (policy.baseline ?? []).map(normalize);
     return Object.freeze({
         rules: Object.freeze(rules),
+        ...(baseline.length > 0 ? { baseline: Object.freeze(baseline) } : {}),
         unmatched: policy.unmatched ?? "error",
         allowEmpty: policy.allowEmpty ?? false,
         flagClassifiedWithoutEvidence: policy.flagClassifiedWithoutEvidence ?? false,
     });
 }
+const INVARIANT_FUNCTIONS = [
+    "executor",
+    "setup",
+    "prepareRequest",
+    "isRejected",
+    "include",
+];
+function assertInvariantsConfig(invariants) {
+    if (invariants === null || typeof invariants !== "object") {
+        throw new TypeError("route assurance: invariants must be an object");
+    }
+    for (const name of INVARIANT_FUNCTIONS) {
+        const value = invariants[name];
+        if (value !== undefined && typeof value !== "function") {
+            throw new TypeError(name === "executor"
+                ? "route assurance: invariant executor must be a function"
+                : `route assurance: invariants.${name} must be a function`);
+        }
+    }
+    if (invariants.executor === undefined && invariants.setup === undefined) {
+        throw new TypeError("route assurance: invariants needs an executor or a setup");
+    }
+    const witnesses = invariants.witnesses;
+    if (witnesses !== undefined) {
+        if (witnesses === null || typeof witnesses !== "object" || Array.isArray(witnesses)) {
+            throw new TypeError('route assurance: invariants.witnesses must map "METHOD /path" to a witness');
+        }
+        for (const [key, witness] of Object.entries(witnesses)) {
+            if (witness === null || typeof witness !== "object" || Array.isArray(witness)) {
+                throw new TypeError(`route assurance: invariants.witnesses[${JSON.stringify(key)}] must be an object`);
+            }
+        }
+    }
+    const max = invariants.maxMutationsPerInput;
+    if (max !== undefined && (!Number.isSafeInteger(max) || max < 1)) {
+        throw new RangeError("route assurance: invariants.maxMutationsPerInput must be a positive integer");
+    }
+}
+function frozenInvariantsConfig(invariants) {
+    const witnesses = invariants.witnesses;
+    return Object.freeze(witnesses === undefined
+        ? { ...invariants }
+        : { ...invariants, witnesses: Object.freeze({ ...witnesses }) });
+}
 /** Identity helper for a `nifra.assurance.ts` default export. */
 export function defineAssuranceConfig(config) {
     if (config.manifest?.path !== undefined && config.manifest.path.trim() === "") {
@@ -227,9 +304,8 @@ export function defineAssuranceConfig(config) {
     if (config.manifest?.signer !== undefined && typeof config.manifest.signer !== "function") {
         throw new Error("route assurance: manifest signer must be a function");
     }
-    if (config.invariants !== undefined && typeof config.invariants.executor !== "function") {
-        throw new Error("route assurance: invariant executor must be a function");
-    }
+    if (config.invariants !== undefined)
+        assertInvariantsConfig(config.invariants);
     if (config.rulePacks !== undefined) {
         if (!Array.isArray(config.rulePacks))
             throw new TypeError("route assurance: rulePacks must be an array");
@@ -286,7 +362,7 @@ export function defineAssuranceConfig(config) {
     // that passes capability assurance, so the rule would match nothing.
     if (capabilities !== undefined) {
         const defined = new Set(capabilities.definitions.map((definition) => definition.id));
-        for (const rule of policy.rules) {
+        for (const rule of [...policy.rules, ...(policy.baseline ?? [])]) {
             const undefinedToken = rule.match.capabilities?.find((token) => !defined.has(token));
             if (undefinedToken !== undefined) {
                 throw new Error(`route assurance: rule ${JSON.stringify(rule.name)} selects capability ${JSON.stringify(undefinedToken)}, which the capability policy does not define`);
@@ -312,7 +388,7 @@ export function defineAssuranceConfig(config) {
             }
             : {}),
         ...(config.invariants !== undefined
-            ? { invariants: Object.freeze({ executor: config.invariants.executor }) }
+            ? { invariants: frozenInvariantsConfig(config.invariants) }
             : {}),
         ...(config.rulePacks !== undefined ? { rulePacks: Object.freeze([...config.rulePacks]) } : {}),
         ...(config.assureSink !== undefined ? { assureSink: config.assureSink } : {}),
@@ -345,15 +421,19 @@ function effectiveBodyLimit(schema) {
 }
 export function matchesAssuranceSelector(route, selector, definitions) {
     const { methods, paths, tools, capabilities, access, zone, classificationAtLeast } = selector;
-    const { hasBody, bodyLimit } = selector;
+    const { exceptMethods, hasBody, hasResponse, bodyLimit } = selector;
     if (methods !== undefined && !methods.includes(route.method))
         return false;
+    if (exceptMethods?.some((method) => method === route.method) === true)
+        return false;
     if (paths !== undefined && !paths.some((pattern) => routeGlob(pattern).test(route.path)))
         return false;
     if (tools !== undefined && (route.tool !== undefined) !== tools)
         return false;
     if (hasBody !== undefined && (route.schema?.body !== undefined) !== hasBody)
         return false;
+    if (hasResponse !== undefined && (route.schema?.response !== undefined) !== hasResponse)
+        return false;
     if (bodyLimit !== undefined && effectiveBodyLimit(route.schema) !== bodyLimit)
         return false;
     if (classificationAtLeast !== undefined &&
@@ -381,7 +461,49 @@ export function matchesAssuranceSelector(route, selector, definitions) {
     }
     return true;
 }
-/** Evaluate reflected route evidence against the first matching policy rule. */
+/** One rule's missing and forbidden evidence on one route, each also reported as a finding. */
+function checkAssuranceRule(rule, route, evidence, evidenceIds, findings) {
+    const requiredProvenance = rule.requireProvenance ?? "any";
+    const missing = (rule.require ?? []).filter((id) => {
+        if (!evidenceIds.has(id))
+            return true;
+        if (requiredProvenance === "any")
+            return false;
+        return !evidence.some((item) => item.id === id && evidenceProvenance(item) === requiredProvenance);
+    });
+    const forbidden = (rule.forbid ?? []).filter((id) => evidenceIds.has(id));
+    if (rule.requireCsrfWithAuthenticated === true &&
+        evidenceIds.has(NIFRA_ASSURANCE_IDS.AUTHENTICATED) &&
+        !evidence.some((item) => item.id === NIFRA_ASSURANCE_IDS.CSRF && evidenceProvenance(item) === "runtime") &&
+        !missing.includes(NIFRA_ASSURANCE_IDS.CSRF)) {
+        missing.push(NIFRA_ASSURANCE_IDS.CSRF);
+    }
+    for (const id of missing) {
+        findings.push({
+            code: "missing-evidence",
+            method: route.method,
+            path: route.path,
+            rule: rule.name,
+            evidence: id,
+            message: requiredProvenance === "any"
+                ? `${route.method} ${route.path} (${rule.name}) is missing ${id}`
+                : `${route.method} ${route.path} (${rule.name}) is missing ${requiredProvenance} evidence for ${id}`,
+        });
+    }
+    for (const id of forbidden) {
+        findings.push({
+            code: "forbidden-evidence",
+            method: route.method,
+            path: route.path,
+            rule: rule.name,
+            evidence: id,
+            message: `${route.method} ${route.path} (${rule.name}) carries forbidden ${id}`,
+        });
+    }
+    return { missing, forbidden };
+}
+/** Evaluate reflected route evidence against the first matching policy rule, plus every matching
+ * baseline rule. */
 export function evaluateRouteAssurance(source, policyInput, options) {
     const policy = defineAssurancePolicy(policyInput);
     const definitions = definitionMap(options?.definitions);
@@ -408,6 +530,17 @@ export function evaluateRouteAssurance(source, policyInput, options) {
         const rule = policy.rules.find((candidate) => matchesAssuranceSelector(route, candidate.match, definitions));
         const evidence = route.assurance ?? [];
         const evidenceIds = new Set(evidence.map((item) => item.id));
+        const missing = [];
+        const forbidden = [];
+        const hold = (candidate) => {
+            const outcome = checkAssuranceRule(candidate, route, evidence, evidenceIds, findings);
+            for (const id of outcome.missing)
+                if (!missing.includes(id))
+                    missing.push(id);
+            for (const id of outcome.forbidden)
+                if (!forbidden.includes(id))
+                    forbidden.push(id);
+        };
         if (rule === undefined) {
             if (policy.unmatched !== "ignore") {
                 findings.push({
@@ -417,75 +550,33 @@ export function evaluateRouteAssurance(source, policyInput, options) {
                     message: `${route.method} ${route.path} is not classified by an assurance rule`,
                 });
             }
-            routes.push({
-                method: route.method,
-                path: route.path,
-                evidence,
-                missing: [],
-                forbidden: [],
-                ...(route.schema?.response !== undefined || route.schema?.errors !== undefined
-                    ? { responseContract: route.responseContract ?? "unchecked" }
-                    : {}),
-            });
-            continue;
-        }
-        const requiredProvenance = rule.requireProvenance ?? "any";
-        let missing = (rule.require ?? []).filter((id) => {
-            if (!evidenceIds.has(id))
-                return true;
-            if (requiredProvenance === "any")
-                return false;
-            return !evidence.some((item) => item.id === id && evidenceProvenance(item) === requiredProvenance);
-        });
-        const forbidden = (rule.forbid ?? []).filter((id) => evidenceIds.has(id));
-        if (rule.requireCsrfWithAuthenticated === true &&
-            evidenceIds.has(NIFRA_ASSURANCE_IDS.AUTHENTICATED) &&
-            !evidence.some((item) => item.id === NIFRA_ASSURANCE_IDS.CSRF && evidenceProvenance(item) === "runtime")) {
-            const id = NIFRA_ASSURANCE_IDS.CSRF;
-            if (!missing.includes(id))
-                missing = [...missing, id];
-        }
-        for (const id of missing) {
-            findings.push({
-                code: "missing-evidence",
-                method: route.method,
-                path: route.path,
-                rule: rule.name,
-                evidence: id,
-                message: requiredProvenance === "any"
-                    ? `${route.method} ${route.path} (${rule.name}) is missing ${id}`
-                    : `${route.method} ${route.path} (${rule.name}) is missing ${requiredProvenance} evidence for ${id}`,
-            });
         }
-        for (const id of forbidden) {
-            findings.push({
-                code: "forbidden-evidence",
-                method: route.method,
-                path: route.path,
-                rule: rule.name,
-                evidence: id,
-                message: `${route.method} ${route.path} (${rule.name}) carries forbidden ${id}`,
-            });
+        else {
+            hold(rule);
+            // Opt-in visibility: a pure-classification rule (no require + no forbid) matching a route with
+            // zero evidence is a "label without proof". Surface it so the gap isn't silently green. A rule
+            // that expects or forbids evidence already speaks for itself, so it's excluded here.
+            if (policy.flagClassifiedWithoutEvidence === true &&
+                evidence.length === 0 &&
+                (rule.require ?? []).length === 0 &&
+                (rule.forbid ?? []).length === 0) {
+                findings.push({
+                    code: "classified-no-evidence",
+                    method: route.method,
+                    path: route.path,
+                    rule: rule.name,
+                    message: `${route.method} ${route.path} (${rule.name}) is classified but carries no enforcement evidence`,
+                });
+            }
         }
-        // Opt-in visibility: a pure-classification rule (no require + no forbid) matching a route with zero
-        // evidence is a "label without proof". Surface it so the gap isn't silently green. A rule that expects
-        // or forbids evidence already speaks for itself via the loops above, so it's excluded here.
-        if (policy.flagClassifiedWithoutEvidence === true &&
-            evidence.length === 0 &&
-            (rule.require ?? []).length === 0 &&
-            (rule.forbid ?? []).length === 0) {
-            findings.push({
-                code: "classified-no-evidence",
-                method: route.method,
-                path: route.path,
-                rule: rule.name,
-                message: `${route.method} ${route.path} (${rule.name}) is classified but carries no enforcement evidence`,
-            });
+        for (const candidate of policy.baseline ?? []) {
+            if (matchesAssuranceSelector(route, candidate.match, definitions))
+                hold(candidate);
         }
         routes.push({
             method: route.method,
             path: route.path,
-            rule: rule.name,
+            ...(rule === undefined ? {} : { rule: rule.name }),
             evidence,
             missing: Object.freeze(missing),
             forbidden: Object.freeze(forbidden),