@nimiplatform/nimi-coding 0.3.1 → 0.5.0

package/cli/seeds/seed-policy.yaml

@@ -1,64 +1,10 @@
-policy_id: nimicoding.seed-projection.v1
-description: |
-  Single source of truth for how nimi-coding package source is projected into
-  a host project's .nimi/** bootstrap surface. Every entry under the declared
-  source dirs is projected unless excluded; per-path ownership overrides
-  control whether the projected file stays package-canonical (refresh on sync,
-  drift is an error) or only carries the initial seed (host owns drift).
-
+policy_id: nimicoding.seed-projection.v3
+description: Exact downstream projection registry for canonical authority authoring.
 projections:
-  - source_dir: config
-    output_dir: .nimi/config
-  - source_dir: contracts
-    output_dir: .nimi/contracts
-  - source_dir: methodology
-    output_dir: .nimi/methodology
-
-default_ownership: package_canonical
-
-ownership_semantics:
-  package_canonical:
-    initial_seed: true
-    refresh_on_sync: true
-    drift_is_error: true
-    description: |
-      Package source is canonical truth. nimicoding sync --apply rewrites
-      drifted host copies. nimicoding sync --check exits non-zero on any
-      drift or missing entry. doctor performs byte comparison.
-  host_state_seed:
-    initial_seed: true
-    refresh_on_sync: false
-    drift_is_error: false
-    description: |
-      Package ships an initial seed, but host owns the canonical content
-      after first install. nimicoding sync --apply only writes when the
-      host file is missing. Drift never fails sync or doctor.
-  host_profile_override:
-    initial_seed: true
-    refresh_on_sync: false
-    drift_is_error: false
-    description: |
-      Package ships the generic default, but an admitted host profile may own
-      the canonical content after bootstrap. nimicoding sync --apply only
-      writes when the host file is missing. Drift never fails sync or doctor.
-
-ownership_overrides:
-  - path: .nimi/config/spec-generation-inputs.yaml
-    ownership: host_state_seed
-    reason: |
-      spec-generation-inputs carries host-specific reconstruction inputs
-      (code_roots, docs_roots, human_note_paths, blueprint refs). Package
-      only seeds the initial template; once the host populates real input
-      paths, sync --apply must not overwrite them.
-  - path: .nimi/contracts/domain-admission.schema.yaml
-    ownership: host_profile_override
-    reason: |
-      domain-admission is host-profile-specific. The package owns the generic
-      default project skeleton, while a product host such as Nimi owns its
-      admitted product domain list.
-  - path: .nimi/methodology/spec-reconstruction.yaml
-    ownership: host_profile_override
-    reason: |
-      spec-reconstruction declares host-specific required output domains and
-      generation shape. The package owns the generic default project skeleton,
-      while a product host may own a more specific reconstruction profile.
+  - source: methodology/authority-authoring.yaml
+    output: .nimi/methodology/authority-authoring.yaml
+    ownership: package_canonical
+    downstream_consumer: project AI reads the compact canonical authority authoring guide
+deprecated_projections:
+  - .nimi/config/spec-generation-inputs.yaml
+  - .nimi/contracts/domain-admission.schema.yaml

package/contracts/authority-scope-bindings.schema.yaml

@@ -0,0 +1,15 @@
+version: 1
+contract:
+  id: nimicoding.scope-bindings.v1
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.scope-bindings/v1
+fields:
+  top: [format, scopes]
+  scope: [scope, bindings]
+  binding: [kind, value]
+binding_kinds: [path_glob, module, command]
+text_values:
+  unicode: well_formed_scalar_sequence
+  non_empty: true
+  line_break_code_points: [U+000A, U+000B, U+000C, U+000D, U+0085, U+2028, U+2029]

package/contracts/authority-source.schema.yaml

@@ -0,0 +1,58 @@
+version: 1
+contract:
+  id: nimicoding.authority-source.v2
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority/v2
+file_suffixes: [.authority.yaml, .authority.md]
+yaml_document:
+  allowed_fields: [format, owner, scope, units]
+  required_fields: [format, units]
+  container_defaults:
+    owner: applies_to_every_unit_that_omits_owner
+    scope: one_scope_value_applied_to_every_active_rule_that_omits_scope
+    definitions_do_not_inherit_scope: true
+  unit_omission_defaults:
+    lifecycle: active
+    relations: []
+  both_levels_absent: fail_closed_no_inference
+  units: non_empty_sequence_of_closed_authority_unit_mappings
+  unit_format_field: forbidden
+  unit_identity: explicit_and_independent_of_file_name_source_index_move_order_or_regroup
+  source_order: non_semantic
+  legacy_top_level_single_unit_mapping: rejected
+markdown_document:
+  units_per_file: 1
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+kinds: [rule, definition]
+lifecycles: [active, removed]
+modalities: [must, must_not]
+text_values:
+  fields: [title, meaning, statement, condition, failure, reason]
+  unicode: well_formed_scalar_sequence
+  non_empty: true
+  trim: no_leading_or_trailing_whitespace
+  line_break_code_points: [U+000A, U+000B, U+000C, U+000D, U+0085, U+2028, U+2029]
+fields:
+  yaml_document: [format, owner, scope, units]
+  unit_common: [id, kind, owner, lifecycle, title, relations]
+  active_definition_required: [meaning]
+  active_rule_required: [modality, scope, statement, condition, failure]
+  removed_required: [reason]
+  yaml_unit_allowed: [id, kind, owner, lifecycle, title, meaning, modality, scope, statement, condition, failure, reason, relations]
+  markdown_frontmatter_allowed: [format, id, kind, owner, lifecycle, modality, scope, relations]
+relation_item_fields: [type, target]
+relation_types:
+  applies_to:
+    source: active_rule
+    target: active_definition
+    minimum_outgoing: 1
+  supersedes:
+    source: active_or_removed_unit
+    target: removed_same_kind
+    maximum_outgoing: 1
+    maximum_incoming: 1
+ordering:
+  unit: id
+  scope: lexical
+  relation: [type, target]

package/contracts/authority-verifier-bindings.schema.yaml

@@ -0,0 +1,31 @@
+version: 2
+contract:
+  id: nimicoding.authority-verifier-bindings.v2
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority-verifier-bindings/v2
+detectors:
+  - minimum-independent-incoming-reference/v1
+  - exact-lexical-invariant/v1
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+token_pattern: '^[\p{L}\p{N}](?:[\p{L}\p{N}_.-]*[\p{L}\p{N}])?$'
+policies: [advisory, blocking]
+lexical_matches: [token, phrase]
+lexical_expectations: [present, absent]
+fields:
+  top: [format, bindings]
+  graph_binding: [id, detector, premise, targets, minimum, policy]
+  lexical_binding: [id, detector, term, match, expectation, policy]
+constraints:
+  bindings: non_empty_closed_detector_binding_list
+  binding_ID: unique_exact_dotted_lowercase_identifier
+  graph_premise: exact_active_rule_ID
+  graph_targets: non_empty_unique_exact_active_definition_IDs
+  graph_minimum: positive_safe_integer
+  lexical_term: non_empty_trimmed_single_line_exact_text
+  lexical_token: token_pattern_when_match_is_token
+  lexical_phrase: exact_case_sensitive_code_point_substring
+  lexical_corpus: active_authority_only
+  lexical_fields: [meaning, statement, condition, failure]
+  policy: advisory_or_blocking
+  extra_fields: forbidden

package/methodology/authority-authoring.yaml

@@ -0,0 +1,127 @@
+version: 4
+id: nimicoding.authority-authoring
+purpose: Author explicit .nimi/spec authority without inference.
+authority_boundary:
+  canonical_root: .nimi/spec
+  sources: ["*.authority.yaml", "*.authority.md"]
+  rule: The project owns product meaning; nimicoding formats, validates, and derives read-only results.
+  AI_inputs: [this_guide, task_authority, bounded_discovery, exact_query_or_bounded_context, diagnostics]
+  do_not_read: [complete_authority_corpus, contracts, package_internal_specs]
+
+daily_workflow:
+  - If no exact ID is known, run nimicoding authority discover <path> <query> --max-candidates 10 --max-snippet-terms 24 --max-bytes 131072 --json. Filters are exact; pass --preview-direction, --relations, and --max-edges together. It neither selects nor proves absence.
+  - Select an ID only from task or product authority. Use nimicoding authority query <path> <id> --max-bytes <positive-integer> --json for one unit, or context <path> <id> --max-units <positive-integer> --max-bytes <positive-integer> --json for its declared outgoing applies_to/supersedes closure. Context is not complete task context.
+  - Modify only project-owned canonical authority. Choose every product value before writing; never infer an ID, owner, scope, condition, failure, or relation.
+  - Run nimicoding authority fmt <changed-file> for each changed file.
+  - Run nimicoding authority check <complete-path> [--scope-bindings <file>] --json; then compile. For repository anchors run nimicoding authority anchors <repository-path> --spec <corpus-path> [--scope-bindings <file>] --max-units <positive-safe-integer> --max-anchors <positive-safe-integer> --max-bytes <positive-safe-integer> --json.
+  - For semantic changes, run diff and impact with explicit budgets and complete inputs. Treat returned obligations only as host-owned follow-up targets; run the project's real code, type, test, and gate workflow separately.
+  - Never continue from compiler diagnostics, unknown IDs, budget failures, or partial/guessed results.
+
+source_profiles:
+  yaml:
+    shape: "Closed mapping: format nimicoding.authority/v2; owner?; scope string?; units. Units/IDs/order unchanged."
+    defaults: owner/rule scope inherit; unit overrides; definitions lack scope.
+    omissions: lifecycle active and relations [] may be omitted; removed/reason stay explicit; missing owner/rule scope at both levels fails.
+    format: nimicoding.authority/v2_only_without_legacy_migration_or_history_input
+  markdown:
+    shape: One unit per file. Front matter carries format, id, kind, owner, lifecycle, rule modality/scope, and relations.
+    title: One plain H1.
+    sections:
+      active_definition: [Meaning]
+      active_rule: [Statement, Condition, Failure]
+      removed_unit: [Removal reason]
+    boundary: Each section is one plain-text line; no free prose or unknown structures.
+  shared_text_rule: Text fields are non-empty trimmed single-line Unicode.
+
+common_fields:
+  id: Stable dot-separated lower-case identity; never reuse a removed ID.
+  kind: rule or definition.
+  owner: Accountable dotted lower-case unit or container value.
+  lifecycle: active or explicit removed.
+  title: Required display label.
+  relations: Type/target pairs; omitted means [].
+
+unit_shapes:
+  active_definition:
+    required: [id, kind, title, meaning]
+    fixed: {kind: definition, lifecycle: active}
+    forbidden: [modality, scope, statement, condition, failure, reason]
+  active_rule:
+    required: [id, kind, title, modality, statement, condition, failure]
+    fixed: {kind: rule, lifecycle: active}
+    modality: must or must_not.
+    scope: Non-empty unique unit list or one inherited container value.
+    condition: Write the actual condition; use Always. only when unconditional.
+    failure: State observable failure; never pseudo-success or silent fallback.
+    forbidden: [meaning, reason]
+  removed_tombstone:
+    required: [id, kind, lifecycle, title, reason]
+    fixed: {lifecycle: removed}
+    boundary: Preserve the stable identity and kind. reason is lifecycle rationale, not normative replacement content.
+    forbidden: [meaning, modality, scope, statement, condition, failure]
+
+relation_rules:
+  applies_to: Required one or more times from each active rule to active definitions only.
+  supersedes: Optional from active or removed to one removed unit of the same kind; at most one incoming/outgoing edge, acyclic linear lineage.
+  resolution: Targets resolve by exact ID in the complete input; invalid, dangling, mismatched, cyclic, duplicate, or inferred edges fail.
+
+formatter_and_diagnostics:
+  - fmt canonicalizes; v2 strips redundant unit defaults but keeps container choices.
+  - Any source format other than nimicoding.authority/v2 fails fmt, check, compile, diff, impact, and review admission.
+  - check/compile use the complete path and fail closed; no public or partial AuthorityIR is emitted.
+  - Diagnostics give locations, reasons, conflicts, and repair categories, never product values.
+  - Fix values only from task or product authority. Do not invent container defaults, fallback data, historical inference, internal contracts, or wildcard corpus reading.
+
+change_workflow:
+  diff: nimicoding authority diff <before-path> <after-path> --max-bytes <positive-integer> --json
+  candidates: nimicoding authority change-candidates <before-path> <after-path> --channels <comma-separated-closed-set> --max-candidates <positive-safe-integer> --max-reasons <positive-safe-integer> --max-bytes <positive-safe-integer> --json
+  impact: nimicoding authority impact <before-path> <after-path> --max-bytes <positive-integer> --json
+  boundaries:
+    - Diff compares complete canonical inputs; formatting, profile, file, and order-only changes are semantic zero.
+    - Change candidates are the complete union only for caller-requested exact owner, scope, changed-term, direct-relation, Definition-identity, and Definition-title channels. They are recall inputs for AI or human judgment, never conflict, retirement, authority, absence, or conformance findings.
+    - Impact follows declared reverse applies_to/supersedes only and reports every before/after scope consumer plus one test follow-up target for each impacted active rule.
+    - Diff/impact budgets cover complete compact payloads; budget failure returns no partial result.
+    - Impact accepts no disposition, receipt, external result, test outcome, or completion state. The host owns execution and workflow state.
+
+canonical_examples:
+  complete_yaml_lifecycle: |
+    format: nimicoding.authority/v2
+    scope: api.checkout
+    units:
+      - id: definition.session-v0
+        kind: definition
+        owner: team.identity
+        lifecycle: removed
+        title: Legacy session
+        reason: Replaced by the current session definition.
+      - id: definition.session
+        kind: definition
+        owner: team.identity
+        title: Session
+        meaning: A server-issued identity context presented with a protected request.
+        relations:
+          - type: supersedes
+            target: definition.session-v0
+      - id: rule.checkout-no-anonymous-v0
+        kind: rule
+        owner: team.checkout
+        lifecycle: removed
+        title: Legacy anonymous checkout prohibition
+        reason: Replaced by the current checkout prohibition.
+      - id: rule.checkout-no-anonymous
+        kind: rule
+        owner: team.checkout
+        title: Anonymous checkout is prohibited
+        modality: must_not
+        statement: Checkout creates an order without a valid session.
+        condition: Always.
+        failure: Reject the request before creating an order.
+        relations:
+          - type: applies_to
+            target: definition.session
+          - type: supersedes
+            target: rule.checkout-no-anonymous-v0
+
+final_boundaries:
+  - Authority is only project-authored *.authority.yaml or *.authority.md under .nimi/spec; derived/local output is not authority.
+  - Derived reads are bounded and read-only; none selects authority, supplies complete task context, or proves completion.

package/methodology/core.yaml

@@ -1,33 +1,40 @@
-version: 3
+version: 6
 methodology:
   id: nimi-coding
-  mission: Preserve explicit product authority while AI-assisted changes are designed, implemented, and verified by the host environment.
+  mission: Preserve explicit project-authored canonical authority through deterministic formatting, compilation, and fail-closed gates.
   package_boundary:
     owns:
-      - methodology_principles
-      - spec_construction_contracts
-      - managed_methodology_and_contract_projections
-      - deterministic_spec_and_governance_validation
+      - compact_canonical_authority_authoring_methodology
+      - exact_package_projection_and_managed_instruction_blocks
+      - canonical_authority_formatter_and_conformance_gate
+      - bounded_deterministic_exact_filtered_lexical_candidate_discovery_with_SourceMapped_field_snippets_and_optional_direct_authored_relation_preview
+      - private_compiler_filtered_lexical_discovery_and_exact_query
+      - immutable_per_invocation_compiler_snapshots_transient_exact_indexes_and_change_derived_candidate_recall
+      - complete_declared_outgoing_interpretation_closure
+      - bounded_explicit_relation_graph_navigation
+      - project_bound_deterministic_authority_audit_and_SARIF_projection
+      - semantic_diff_and_declared_review_obligations
+      - optional_L3_repository_governance_checks
     does_not_own:
-      - task_planning
-      - task_state
-      - agent_delegation
-      - implementation_execution
-      - review_or_approval_state
-      - provider_runtime
-  principles:
-    - authority_before_convenience
-    - explicit_complexity_over_ambiguous_simplicity
-    - root_cause_over_local_patch
-    - no_pseudo_success
-    - evidence_must_not_override_authority
-    - generated_views_are_never_canonical
-    - unresolved_semantic_forks_fail_closed
+      - project_product_semantics
+      - historical_document_reconstruction_or_inference
+      - profile_specific_authority_validation
+      - task_planning_or_state
+      - agent_delegation_or_AI_execution
+      - implementation_or_review_completion
+      - host_workflow_commands
+      - storage_semantic_search_visualization_or_Atlas
   authority_order:
-    - host_product_spec
-    - package_methodology_and_contracts
-    - local_non_authority_evidence
-    - implementation
-  host_integration:
-    execution_owner: host_native_capabilities
-    constraint: nimi-coding_outputs_may_inform_but_must_not_orchestrate_host_execution
+    - host_canonical_authority_under_.nimi/spec
+    - projected_compact_authoring_methodology
+    - package_internal_compiler_contracts
+    - local_derived_output
+  boundaries:
+    discovery: bounded_exact_filtered_lexical_candidates_with_SourceMapped_field_snippets_and_optional_M1_direct_authored_relation_preview_not_semantic_search_selection_context_complete_recall_or_absence_proof
+    change_candidates: complete_union_for_explicit_requested_exact_channels_not_conflict_retirement_authority_or_conformance_judgment
+    context: complete_declared_outgoing_interpretation_closure_not_complete_task_context
+    graph: bounded_explicit_relation_navigation_not_semantic_inference_or_raw_IR
+    audit: explicit_project_verifier_bindings_not_prose_inference_plugin_execution_or_product_authority
+    impact: declared_relation_impact_and_host_follow_up_targets_not_implementation_consumer_or_test_sync_proof
+    authority_admission: nimicoding_authority_check_on_complete_canonical_root
+    optional_repository_governance: separate_L3_not_authority_admission

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@nimiplatform/nimi-coding",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "private": false,
-  "description": "AI-native methodology, spec construction, and deterministic governance validation.",
+  "description": "Canonical authority methodology, formatter, compiler primitives, and deterministic gates.",
   "license": "MIT",
   "homepage": "https://docs.nimi.ai/nimicoding",
   "repository": {
@@ -24,6 +24,7 @@
   "bin": {
     "nimicoding": "bin/nimicoding.mjs"
   },
+  "exports": {},
   "packageManager": "pnpm@10.32.1",
   "engines": {
     "node": ">=24.0.0",
@@ -43,7 +44,6 @@
   "files": [
     "bin",
     "cli",
-    "config",
     "contracts",
     "methodology",
     "spec",
@@ -56,8 +56,12 @@
     "LICENSE"
   ],
   "scripts": {
-    "test": "node ./cli/dev/run-suite.mjs",
-    "check:ci": "pnpm test && pnpm check:pack && node ./cli/dev/run-cli-smoke.mjs",
-    "check:pack": "npm pack --dry-run"
+    "check:authority-surface": "node ./cli/dev/check-authority-surface.mjs",
+    "check:product-conformance": "node ./cli/dev/check-product-conformance.mjs",
+    "check:product-conformance:packed": "node ./cli/dev/check-product-conformance.mjs --packed",
+    "check:ci": "pnpm test && pnpm check:pack && pnpm check:product-conformance:packed && node ./cli/dev/run-cli-smoke.mjs",
+    "check:pack": "npm pack --dry-run",
+    "prepack": "node ./cli/dev/check-authority-surface.mjs && node ./cli/dev/check-product-conformance.mjs",
+    "test": "node ./cli/dev/run-suite.mjs"
   }
 }

package/spec/authority-anchors.yaml

@@ -0,0 +1,99 @@
+version: 1
+spec:
+  id: nimicoding.authority-anchors.v1
+  owner: nimi-coding
+  status: active
+product_claim: bounded_static_lexical_anchor_validation_against_one_exact_Git_tracked_file_inventory_and_root_package_scripts
+command: nimicoding authority anchors <repository-path> --spec <corpus-path> [--scope-bindings <file>] [--embedded-paths] --max-units <positive-safe-integer> --max-anchors <positive-safe-integer> --max-bytes <positive-safe-integer> [--json]
+surface:
+  report_format: nimicoding.authority-anchors/v1
+  corpus_root: repository_authority_corpus_only
+  boolean_flags: [json, embedded-paths]
+  value_flags: [spec, scope-bindings]
+  integer_flags: [max-units, max-anchors, max-bytes]
+  repeatable_flags: []
+  findings_change_exit_code: true
+inputs:
+  repository:
+    shape: exact_non_symlink_Git_worktree_root
+    tracked_files: one_complete_git_ls_files_cached_NUL_inventory
+    Git_environment: inherited_Git_overrides_traces_replacements_lazy_fetch_prompts_and_locale_are_sanitized_as_for_authority_snapshots
+    writes_or_execution: forbidden
+  corpus:
+    root: exact_repository_relative_.nimi/spec_resolved_realpath
+    admission: complete_authority_compile_required
+    units: active_only
+    fields:
+      shared_lexicon: normative_field_set_is_one_shared_definition_across_report_products
+      active_definition: [meaning]
+      active_rule: [statement, condition, failure]
+      removed: []
+  scope_bindings:
+    required: false
+    structural_contract: nimicoding.scope-bindings/v1
+    evaluated_kinds: [path_glob]
+    declaration_only_kinds: [module, command]
+lexical_grammar:
+  token: maximal_non_whitespace_sequence
+  class_A:
+    name: tracked_file_path
+    requirements:
+      - token_contains_at_least_one_forward_slash
+      - token_ends_exactly_with_one_known_lowercase_extension
+    excluded_prefixes:
+      - any_leading_tilde_including_tilde_forward_slash
+      - POSIX_absolute_forward_slash
+      - ASCII_letter_colon_forward_or_back_slash_Windows_drive
+      - two_leading_backslashes_UNC
+    exclusion_evaluation: deterministic_exact_prefix_checks_before_class_A_admission
+    extensions: [mjs, js, ts, tsx, rs, go, yaml, yml, md, json, proto, ps1]
+    resolution: exact_byte_text_membership_in_the_decoded_Git_tracked_file_inventory
+    normalization_or_inference: forbidden
+  class_B:
+    name: root_package_script
+    phrase: pnpm_followed_by_exactly_one_ASCII_space_then_one_maximal_non_whitespace_script_name_token
+    script_name_admission: contains_colon_OR_fully_matches_[a-z][a-z0-9:-]*
+    builtin_subcommands_excluded: [add, audit, create, dlx, exec, install, link, list, outdated, patch, publish, remove, run, update, why]
+    resolution: exact_own_key_membership_in_repository_root_package.json_scripts
+    execution: forbidden
+  class_C:
+    name: embedded_repository_path
+    admission: opt_in_via_--embedded-paths
+    shape: maximal_embedded_<root>/<segment>(/<segment>)*.<extension>_substring
+    segment_alphabet: shared_lexicon_[A-Za-z0-9_.-]
+    roots: Git_tracked_top_level_segments_plus_.nimi
+    left_boundary:
+      segment_character: rejected_as_mid_segment_start
+      separator_run_after_a_longer_path: rejected_as_foreign_tail
+      relative_prefix_dot_or_dot_dot: admitted
+    excluded_context: glob_star_or_angle_bracket_placeholder
+    resolution: exact_byte_text_membership_in_the_decoded_Git_tracked_file_inventory
+scope_path_globs:
+  candidates: complete_Git_tracked_file_inventory
+  matching: whole_repository_relative_path_case_sensitive
+  operators:
+    star: zero_or_more_non_slash_characters
+    question: one_non_slash_character
+    double_star: zero_or_more_characters_including_slash
+    double_star_slash: zero_or_more_complete_path_segments
+  zero_matches: diagnostic_lists_exact_scope_and_glob
+result:
+  trackedPathSetDigest: sha256_hex_of_nimicoding.repository-inventory/v1_canonical_tracked_path_set_preimage
+  summary_fields: [units, anchorsChecked, diagnostics]
+  diagnostic_location: exact_unit_ID_field_SourceMap_range_and_source_pointer
+  anchor_diagnostic_fields: [unitId, field, anchor]
+  scope_diagnostic_fields: [scope, glob]
+  ordering:
+    anchors: [unit_ID, anchor_text, field, class]
+    scope_globs: [scope, glob]
+  unresolved_anchor_or_glob: complete_invalid_product_exit_1
+  human_and_json: required
+budgets:
+  max_units: complete_active_unit_count
+  max_anchors: complete_extracted_anchor_occurrence_count
+  max_bytes: UTF-8_size_of_compact_format_complete_summary_and_diagnostics_product
+  overflow: refused_exit_1_with_required_and_admitted_values
+  N_and_N_minus_1: exact_symmetric_boundary
+  truncation_or_partial_result: forbidden
+usage_failure: missing_repeated_unknown_or_invalid_CLI_argument_exit_2_without_anchor_product
+not_claimed: [semantic_path_inference, module_resolution, command_binding_resolution, command_execution, test_execution, code_conformance]

package/spec/authority-audit.yaml

@@ -0,0 +1,89 @@
+version: 2
+spec:
+  id: nimicoding.authority-audit.v2
+  owner: nimi-coding
+  status: active
+product_claim: complete_admitted_authority_and_one_explicit_closed_binding_list_produce_only_deterministic_violation_findings_and_narrow_counts
+command: nimicoding authority audit <path> --bindings <file> --max-units <positive-safe-integer> --max-edges <positive-safe-integer> --max-bytes <positive-safe-integer> [--json|--sarif]
+surface:
+  report_format: nimicoding.authority-audit/v2
+  corpus_root: complete_input_authority_corpus
+  boolean_flags: [json, sarif]
+  value_flags: [bindings]
+  integer_flags: [max-units, max-edges, max-bytes]
+  repeatable_flags: []
+  blocking_findings_change_exit_code: true
+  advisory_findings_change_exit_code: false
+runtime:
+  function: auditAuthorityPath(authorityPath_bindingsPath_budgets)
+  source: one_complete_package_private_AuthorityIR_SourceMap_and_one_closed_binding_document
+binding:
+  format: nimicoding.authority-verifier-bindings/v2
+  authority: package://@nimiplatform/nimi-coding/contracts/authority-verifier-bindings.schema.yaml
+  top_level_fields: [format, bindings]
+  bindings: non_empty
+  binding_ID: unique_exact_dotted_lowercase_identifier
+  unknown_detector_extra_field_invalid_authority_ref_or_empty_list: refused_with_null_audit
+detectors:
+  minimum-independent-incoming-reference/v1:
+    binding_fields: [id, detector, premise, targets, minimum, policy]
+    premise: exact_active_rule_selected_by_binding
+    targets: non_empty_unique_exact_active_definitions_selected_by_binding
+    attachment: premise_must_have_direct_applies_to_each_target
+    measurement: distinct_other_active_rule_sources_with_direct_applies_to_target
+    minimum: positive_safe_integer_from_binding
+  exact-lexical-invariant/v1:
+    binding_fields: [id, detector, term, match, expectation, policy]
+    corpus: complete_active_authority
+    fields: [meaning, statement, condition, failure]
+    case: sensitive
+    match:
+      token: exact_literal_with_boundaries_outside_Unicode_letter_number_underscore_dot_or_hyphen
+      phrase: exact_non_overlapping_code_point_substring
+    expectation: [present, absent]
+    no_synonym_stemming_embedding_normalization_or_diff_derived_policy: true
+result:
+  format: nimicoding.authority-audit/v2
+  top_level_fields: [format, operationStatus, blockingStatus, findings, counts, budgets]
+  operationStatus: completed
+  blockingStatus:
+    blocked: at_least_one_blocking_finding
+    clear: no_blocking_finding_advisory_findings_may_still_exist
+  common_item_fields: [code, fingerprint, detector, binding, premise, basis, message, policy, authorityRefs, primaryLocation, relatedLocations, witness]
+  location_fields: [file, range, sourcePointer]
+  related_location_fields: [role, location]
+  basis: configured
+  positive_binding_records_or_pass_witnesses: forbidden
+  findings:
+    - premise_target_direct_attachment_missing
+    - minimum_independent_incoming_reference_not_met
+    - exact_lexical_expectation_violation
+  ordering:
+    findings: [binding_ID, target_ID_when_present, code]
+  fingerprint:
+    algorithm: SHA-256_with_sha256_colon_prefix
+    excludes: [file, range, sourcePointer, policy, message, corpus_digest, run_identity]
+  counts:
+    fields: [bindings, returned, traversal]
+    binding_fields: [configured, evaluated]
+    returned_fields: [findings]
+    traversal_fields: [units, edges]
+budgets:
+  required: [maxUnits, maxEdges, maxBytes]
+  values: positive_safe_integers
+  units: distinct_units_inspected_by_all_configured_detectors
+  edges: distinct_authored_edges_inspected_by_graph_detectors
+  bytes: UTF-8_bytes_of_compact_JSON.stringify_audit
+  overflow: AUTH_AUDIT_BUDGET_with_null_audit_and_partial_false
+outcomes:
+  clear: audit_present_blockingStatus_clear_exit_0
+  blocked: audit_present_blockingStatus_blocked_exit_1
+  refused: invalid_corpus_binding_authority_reference_or_budget_with_null_audit_exit_1
+  partial: forbidden
+boundaries:
+  writes_authority: false
+  binding_is_canonical_product_authority: false
+  natural_language_contradiction_or_business_completeness: not_evaluated
+  detector_plugin_DSL_exception_filter_external_result_or_dynamic_execution: forbidden
+  blocking_policy_inference_from_diff: forbidden
+  public_JS_exports: none