@obsidicore/cascade-engine 0.2.0

package/dist/trust/scoring.js

@@ -0,0 +1,206 @@
+/**
+ * Trust Scoring — SpamAssassin-inspired multi-signal composite
+ *
+ * 6 orthogonal signals → composite 0-1:
+ * 1. Source reputation
+ * 2. Cross-corroboration
+ * 3. Semantic anomaly (distance from topic centroid)
+ * 4. Instruction pattern detection
+ * 5. Temporal consistency
+ * 6. GRADE assessment
+ *
+ * Thresholds: ≥0.7 auto-admit | 0.3-0.7 quarantine | <0.3 reject
+ */
+import { getDb } from '../db/index.js';
+import { detectInstructionPatterns } from './patterns.js';
+// Signal weights — sum to 1.0
+const WEIGHTS = {
+    sourceReputation: 0.20,
+    crossCorroboration: 0.20,
+    semanticAnomaly: 0.15,
+    instructionScore: 0.20,
+    temporalConsistency: 0.10,
+    gradeAssessment: 0.15,
+};
+/**
+ * Compute composite trust score for a finding.
+ */
+export function scoreTrust(claim, sourceUrl, existingClaims, sourceType) {
+    const signals = {
+        sourceReputation: scoreSourceReputation(sourceUrl),
+        crossCorroboration: scoreCrossCorroboration(claim, existingClaims),
+        semanticAnomaly: 1.0, // Default — would need embeddings for real scoring
+        instructionScore: scoreInstructionSafety(claim),
+        temporalConsistency: 1.0, // Default — would compare timestamps
+        gradeAssessment: scoreGradeProxy(sourceType),
+    };
+    const composite = signals.sourceReputation * WEIGHTS.sourceReputation +
+        signals.crossCorroboration * WEIGHTS.crossCorroboration +
+        signals.semanticAnomaly * WEIGHTS.semanticAnomaly +
+        signals.instructionScore * WEIGHTS.instructionScore +
+        signals.temporalConsistency * WEIGHTS.temporalConsistency +
+        signals.gradeAssessment * WEIGHTS.gradeAssessment;
+    // Novel-vs-malicious detection
+    const isNovel = signals.crossCorroboration < 0.3; // Not corroborated
+    const isPrecise = signals.instructionScore > 0.7;
+    const isTrusted = signals.sourceReputation > 0.5;
+    let action;
+    let reason;
+    if (composite >= 0.7) {
+        action = 'admit';
+        reason = 'Trust score above admission threshold';
+    }
+    else if (composite < 0.3) {
+        action = 'reject';
+        reason = composite < 0.2
+            ? 'Trust score critically low — likely injection or unreliable'
+            : 'Trust score below rejection threshold';
+    }
+    else {
+        // Quarantine zone — apply novel-vs-malicious heuristic
+        if (isNovel && isPrecise && isTrusted) {
+            action = 'quarantine';
+            reason = 'Contested novelty — novel claim from trusted source. Needs human review.';
+        }
+        else if (isNovel && !isPrecise && !isTrusted) {
+            action = 'reject';
+            reason = 'Structural anomaly — novel, imprecise, untrusted. Likely attack vector.';
+        }
+        else {
+            action = 'quarantine';
+            reason = 'Moderate trust — quarantined for review';
+        }
+    }
+    // GRADE evidence assessment
+    // Based on PRISMA/GRADE framework: 5 downgrade factors, 3 upgrade factors
+    // Simplified: composite of source quality, corroboration, and precision
+    const gradeLevel = computeGradeLevel(signals, sourceType);
+    return { composite, signals, action, gradeLevel, reason, isNovel };
+}
+/**
+ * Score source reputation based on domain history.
+ */
+function scoreSourceReputation(sourceUrl) {
+    if (!sourceUrl)
+        return 0.3; // Unknown source gets low baseline
+    const db = getDb();
+    let domain;
+    try {
+        domain = new URL(sourceUrl).hostname;
+    }
+    catch {
+        return 0.2; // Invalid URL
+    }
+    // Check known reputation
+    const rep = db.prepare('SELECT reputation_score FROM source_reputation WHERE domain = ?').get(domain);
+    if (rep)
+        return rep.reputation_score;
+    // Known-good domains baseline
+    const knownGood = [
+        'arxiv.org', 'github.com', 'stackoverflow.com', 'docs.python.org',
+        'developer.mozilla.org', 'en.wikipedia.org', 'scholar.google.com',
+        'proceedings.neurips.cc', 'openreview.net', 'dl.acm.org',
+        'ieee.org', 'nature.com', 'science.org',
+    ];
+    if (knownGood.some(d => domain.endsWith(d))) {
+        // Initialize reputation
+        db.prepare('INSERT OR IGNORE INTO source_reputation (domain, reputation_score) VALUES (?, 0.8)')
+            .run(domain);
+        return 0.8;
+    }
+    // Unknown domain — neutral
+    db.prepare('INSERT OR IGNORE INTO source_reputation (domain, reputation_score) VALUES (?, 0.5)')
+        .run(domain);
+    return 0.5;
+}
+/**
+ * Score cross-corroboration — how many existing findings support this claim.
+ * Simple text overlap heuristic (would use embeddings in production).
+ */
+function scoreCrossCorroboration(claim, existingClaims) {
+    if (existingClaims.length === 0)
+        return 0.3; // First finding — neutral
+    // Simple word overlap scoring
+    const claimWords = new Set(claim.toLowerCase().split(/\s+/).filter(w => w.length > 4));
+    let maxOverlap = 0;
+    let corroborations = 0;
+    for (const existing of existingClaims) {
+        const existingWords = new Set(existing.toLowerCase().split(/\s+/).filter(w => w.length > 4));
+        let overlap = 0;
+        for (const word of claimWords) {
+            if (existingWords.has(word))
+                overlap++;
+        }
+        const overlapRatio = claimWords.size > 0 ? overlap / claimWords.size : 0;
+        maxOverlap = Math.max(maxOverlap, overlapRatio);
+        if (overlapRatio > 0.3)
+            corroborations++;
+    }
+    // More corroborations = higher score, diminishing returns
+    return Math.min(1.0, 0.3 + corroborations * 0.15 + maxOverlap * 0.3);
+}
+/**
+ * Score instruction safety — detect prompt injection patterns.
+ */
+function scoreInstructionSafety(text) {
+    const patterns = detectInstructionPatterns(text);
+    return Math.max(0, 1.0 + patterns.totalScore); // patterns.totalScore is negative
+}
+/**
+ * Proxy GRADE assessment based on source type.
+ */
+function scoreGradeProxy(sourceType) {
+    switch (sourceType) {
+        case 'primary': return 0.9; // Peer-reviewed, official docs
+        case 'secondary': return 0.6; // Blog posts, tutorials
+        case 'tertiary': return 0.4; // Forum posts, social media
+        default: return 0.5;
+    }
+}
+/**
+ * Compute GRADE evidence level from trust signals.
+ *
+ * GRADE framework (simplified):
+ * Start at HIGH if primary source, MODERATE if secondary, LOW if tertiary.
+ * Downgrade for: low reputation, low corroboration, instruction patterns, low precision.
+ * Upgrade for: high corroboration (≥3 sources), high source reputation, dose-response (multiple signals agree).
+ */
+function computeGradeLevel(signals, sourceType) {
+    // Start level based on source type
+    let level = sourceType === 'primary' ? 3 : sourceType === 'secondary' ? 2 : sourceType === 'tertiary' ? 1 : 2;
+    // Downgrade factors (GRADE: 5 domains)
+    if (signals.sourceReputation < 0.4)
+        level--; // Risk of bias
+    if (signals.crossCorroboration < 0.4)
+        level--; // Inconsistency (not independently confirmed)
+    if (signals.instructionScore < 0.8)
+        level--; // Imprecision (suspicious content)
+    if (signals.gradeAssessment < 0.5)
+        level--; // Indirectness
+    // Upgrade factors (GRADE: 3 domains)
+    if (signals.crossCorroboration > 0.7)
+        level++; // Large effect (strong corroboration)
+    if (signals.sourceReputation > 0.8)
+        level++; // Dose-response (trusted + confirmed)
+    // Clamp and map
+    level = Math.max(0, Math.min(3, level));
+    const grades = ['very_low', 'low', 'moderate', 'high'];
+    return grades[level];
+}
+/**
+ * Update source reputation based on finding outcomes.
+ * Called when human reviews findings (SpamAssassin ham/spam training).
+ */
+export function updateSourceReputation(domain, wasAccurate) {
+    const db = getDb();
+    const direction = wasAccurate ? 0.05 : -0.1; // Penalize inaccuracy more
+    db.prepare(`INSERT INTO source_reputation (domain, reputation_score, total_entries)
+    VALUES (?, ?, 1)
+    ON CONFLICT(domain) DO UPDATE SET
+      reputation_score = MAX(0, MIN(1, reputation_score + ?)),
+      total_entries = total_entries + 1,
+      flagged_entries = flagged_entries + CASE WHEN ? THEN 0 ELSE 1 END,
+      last_updated = datetime('now')`)
+        .run(domain, 0.5 + direction, direction, wasAccurate ? 1 : 0);
+}
+//# sourceMappingURL=scoring.js.map

package/dist/trust/scoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../../src/trust/scoring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAoB1D,8BAA8B;AAC9B,MAAM,OAAO,GAAG;IACd,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,IAAI;IACxB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,IAAI;IACtB,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,IAAI;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,KAAa,EACb,SAA6B,EAC7B,cAAwB,EACxB,UAAmB;IAEnB,MAAM,OAAO,GAAiB;QAC5B,gBAAgB,EAAE,qBAAqB,CAAC,SAAS,CAAC;QAClD,kBAAkB,EAAE,uBAAuB,CAAC,KAAK,EAAE,cAAc,CAAC;QAClE,eAAe,EAAE,GAAG,EAAE,mDAAmD;QACzE,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC;QAC/C,mBAAmB,EAAE,GAAG,EAAE,qCAAqC;QAC/D,eAAe,EAAE,eAAe,CAAC,UAAU,CAAC;KAC7C,CAAC;IAEF,MAAM,SAAS,GACb,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB;QACnD,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB;QACvD,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe;QACjD,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB;QACnD,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB;QACzD,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAEpD,+BAA+B;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC,mBAAmB;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,GAAG,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAEjD,IAAI,MAA6B,CAAC;IAClC,IAAI,MAAc,CAAC;IAEnB,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,OAAO,CAAC;QACjB,MAAM,GAAG,uCAAuC,CAAC;IACnD,CAAC;SAAM,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3B,MAAM,GAAG,QAAQ,CAAC;QAClB,MAAM,GAAG,SAAS,GAAG,GAAG;YACtB,CAAC,CAAC,6DAA6D;YAC/D,CAAC,CAAC,uCAAuC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,uDAAuD;QACvD,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,YAAY,CAAC;YACtB,MAAM,GAAG,0EAA0E,CAAC;QACtF,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,GAAG,QAAQ,CAAC;YAClB,MAAM,GAAG,yEAAyE,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,YAAY,CAAC;YACtB,MAAM,GAAG,yCAAyC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE1D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,SAA6B;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,mCAAmC;IAE/D,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,CAAC,cAAc;IAC5B,CAAC;IAED,yBAAyB;IACzB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;IAC7G,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC;IAErC,8BAA8B;IAC9B,MAAM,SAAS,GAAG;QAChB,WAAW,EAAE,YAAY,EAAE,mBAAmB,EAAE,iBAAiB;QACjE,uBAAuB,EAAE,kBAAkB,EAAE,oBAAoB;QACjE,wBAAwB,EAAE,gBAAgB,EAAE,YAAY;QACxD,UAAU,EAAE,YAAY,EAAE,aAAa;KACxC,CAAC;IAEF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,wBAAwB;QACxB,EAAE,CAAC,OAAO,CAAC,oFAAoF,CAAC;aAC7F,GAAG,CAAC,MAAM,CAAC,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,2BAA2B;IAC3B,EAAE,CAAC,OAAO,CAAC,oFAAoF,CAAC;SAC7F,GAAG,CAAC,MAAM,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,KAAa,EAAE,cAAwB;IACtE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,0BAA0B;IAEvE,8BAA8B;IAC9B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,YAAY,GAAG,GAAG;YAAE,cAAc,EAAE,CAAC;IAC3C,CAAC;IAED,0DAA0D;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,cAAc,GAAG,IAAI,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,kCAAkC;AACnF,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,UAA8B;IACrD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAG,+BAA+B;QAC7D,KAAK,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,wBAAwB;QACtD,KAAK,UAAU,CAAC,CAAC,OAAO,GAAG,CAAC,CAAE,4BAA4B;QAC1D,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,OAAqB,EACrB,UAA8B;IAE9B,mCAAmC;IACnC,IAAI,KAAK,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9G,uCAAuC;IACvC,IAAI,OAAO,CAAC,gBAAgB,GAAG,GAAG;QAAE,KAAK,EAAE,CAAC,CAAW,eAAe;IACtE,IAAI,OAAO,CAAC,kBAAkB,GAAG,GAAG;QAAE,KAAK,EAAE,CAAC,CAAU,8CAA8C;IACtG,IAAI,OAAO,CAAC,gBAAgB,GAAG,GAAG;QAAE,KAAK,EAAE,CAAC,CAAa,mCAAmC;IAC5F,IAAI,OAAO,CAAC,eAAe,GAAG,GAAG;QAAE,KAAK,EAAE,CAAC,CAAc,eAAe;IAExE,qCAAqC;IACrC,IAAI,OAAO,CAAC,kBAAkB,GAAG,GAAG;QAAE,KAAK,EAAE,CAAC,CAAW,sCAAsC;IAC/F,IAAI,OAAO,CAAC,gBAAgB,GAAG,GAAG;QAAE,KAAK,EAAE,CAAC,CAAa,sCAAsC;IAE/F,gBAAgB;IAChB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAgC,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,WAAoB;IAEpB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,2BAA2B;IAExE,EAAE,CAAC,OAAO,CAAC;;;;;;qCAMwB,CAAC;SACjC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@obsidicore/cascade-engine",
+  "version": "0.2.0",
+  "description": "Progressive deep research engine with knowledge graph, trust scoring, and self-regulation. MCP server for Claude Code, OpenClaw, or any MCP client.",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "cascade-engine": "dist/cli.js"
+  },
+  "files": [
+    "dist/**/*.js",
+    "dist/**/*.d.ts",
+    "dist/**/*.js.map",
+    "dist/db/schema.sql",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc && node -e \"require('fs').copyFileSync('src/db/schema.sql','dist/db/schema.sql')\"",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run typecheck && npm test && npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "better-sqlite3": "^11.9.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.15.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.1.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/geoff-obsidicore/Research-Cascade.git"
+  },
+  "keywords": [
+    "mcp",
+    "research",
+    "knowledge-graph",
+    "ai-agent",
+    "memory",
+    "sqlite",
+    "cascade",
+    "trust-scoring",
+    "self-regulation"
+  ],
+  "author": "Obsidicore",
+  "license": "MIT"
+}