@olurabian/audit 0.1.0 → 0.1.1

package/dist/score.js

@@ -357,6 +357,14 @@ function openness(verdicts, dims, exposedIf, partialIf) {
         return "closed";
     return "unknown";
 }
+/** "a", "a and b", "a, b, and c". Three clauses need the commas to read. */
+function joinAnd(parts) {
+    if (parts.length <= 1)
+        return parts.join("");
+    if (parts.length === 2)
+        return `${parts[0]} and ${parts[1]}`;
+    return `${parts.slice(0, -1).join(", ")}, and ${parts[parts.length - 1]}`;
+}
 function cap1(s) {
     return s.length ? s.charAt(0).toUpperCase() + s.slice(1) : s;
 }
@@ -426,8 +434,8 @@ export function score(rawIntake) {
         misdirectionClauses.push("the agent approves its own requests");
     if (approvalNoneBound)
         misdirectionClauses.push("large spends execute against bound grants without a person");
-    const forgerySentence = forgeryClauses.length ? `${cap1(forgeryClauses.join(" and "))}, so a poisoned instruction can forge a spend.` : undefined;
-    const misdirectionSentence = misdirectionClauses.length ? `${cap1(misdirectionClauses.join(" and "))}, so the agent can misdirect a spend it is allowed to request.` : undefined;
+    const forgerySentence = forgeryClauses.length ? `${cap1(joinAnd(forgeryClauses))}, so a poisoned instruction can forge a spend.` : undefined;
+    const misdirectionSentence = misdirectionClauses.length ? `${cap1(joinAnd(misdirectionClauses))}, so the agent can misdirect a spend it is allowed to request.` : undefined;
     let why;
     if (forgerySentence && misdirectionSentence)
         why = `${forgerySentence} ${misdirectionSentence}`;
@@ -442,8 +450,8 @@ export function score(rawIntake) {
     else
         why = "Custody stops forgery and binding stops misdirection.";
     const lastLine = shortestPath.length > 0
-        ? `Start with the first step. If you want this done for you, https://olurabian.com/work`
-        : `Nothing to close from what was described. If you want it verified hands-on, https://olurabian.com/work`;
+        ? `Start with the first step. If you want this done for you, https://olurabian.com/deadlatch`
+        : `Nothing to close from what was described. If you want it verified hands-on, https://olurabian.com/deadlatch`;
     const notes = [];
     const noteOf = (dimension, text) => { if (text?.trim())
         notes.push({ dimension, text: text.trim() }); };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@olurabian/audit",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "The Agent Payment Security Audit as a runnable. Can a compromised agent move money outside policy? Eight dimensions, honest Unknowns, blast radius in your own numbers.",
   "type": "module",
   "main": "./dist/index.js",