@pretense/cli 0.6.8 → 0.6.9

package/README.md

@@ -22,6 +22,36 @@ Both install the `pretense` command — the package name is scoped, the binary i
 
 Requires Node.js 20 or newer.
 
+## Verifying a release
+
+The released binaries are signed with Sigstore cosign (keyless — no key to
+fetch or leak). Each release ships a `SHA256SUMS` file plus a
+`SHA256SUMS.cosign.bundle` signature covering it. To verify a download:
+
+```bash
+VERSION=0.6.8
+TARGET=pretense-darwin-arm64
+BASE="https://www.pretense.ai/releases/${VERSION}"
+
+curl -fsSLO "${BASE}/SHA256SUMS"
+curl -fsSLO "${BASE}/SHA256SUMS.cosign.bundle"
+curl -fsSLO "${BASE}/${TARGET}"
+
+cosign verify-blob \
+  --bundle SHA256SUMS.cosign.bundle \
+  --certificate-identity "https://github.com/pretense-a1/pretense/.github/workflows/release.yml@refs/tags/v${VERSION}" \
+  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
+  SHA256SUMS
+
+grep " ${TARGET}$" SHA256SUMS | sha256sum -c -   # shasum -a 256 -c - on macOS
+```
+
+Verify the signature over `SHA256SUMS` *before* trusting any hash inside it —
+checking a binary against an unverified checksum file proves nothing.
+
+Full details, including the regexp form for automation and why npm provenance
+is not used, are in [docs/verifying-releases.md](../docs/verifying-releases.md).
+
 ## First 5 minutes
 
 1. Initialize Pretense in your repo.
@@ -106,5 +136,4 @@ MIT. See [LICENSE](./LICENSE).
 
 - Homepage: https://pretense.ai
 - Docs: https://pretense.ai/docs
-- Source: https://github.com/jimmymalhan/pretense
-- Issues: https://github.com/jimmymalhan/pretense/issues
+- Support: https://pretense.ai/contact

package/dist/index.js

@@ -10383,6 +10383,97 @@ function listPresetIds() {
   return Object.keys(COMPLIANCE_PRESETS);
 }
 
+// ../packages/compliance-engine/dist/detector-frameworks.js
+init_esm_shims();
+var COMPLIANCE_FRAMEWORKS = ["SOC2", "ISO_27001", "ISO_27701", "NIST_800_53", "NIST_800_171", "FedRAMP", "FISMA", "NIS2", "NYDFS_500", "DORA", "APRA_CPS234", "HIPAA", "HITECH", "HITRUST", "GDPR", "UK_GDPR", "CCPA_CPRA", "LGPD", "PIPEDA", "POPIA", "PIPL", "PDPA_SG", "COPPA", "FERPA", "DPDP", "APPI", "PIPA_KR", "AU_PRIVACY", "FADP", "PDPA_TH", "CJIS", "IRS_1075", "SOX", "GLBA", "CMMC_L2", "PCI_DSS"];
+var DETECTOR_FRAMEWORKS = {
+  "aba-routing": ["APRA_CPS234", "DORA", "GLBA", "NYDFS_500", "SOX"],
+  "advertising-id": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "anthropic-api-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "anthropic-api-key-short": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "aws-access-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "aws-secret-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "aws-temp-access-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "azure-connection-string": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "azure-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "bank-account-labeled": ["APRA_CPS234", "DORA", "GLBA", "IRS_1075", "NYDFS_500", "SOX"],
+  "bitcoin-address": ["DORA", "NYDFS_500"],
+  "card-cvv": ["CCPA_CPRA", "GLBA", "PCI_DSS"],
+  "clinical-diagnosis": ["HIPAA", "HITECH", "HITRUST"],
+  "credit-card": ["APRA_CPS234", "CCPA_CPRA", "DORA", "GLBA", "PCI_DSS"],
+  "cui-contract-number": ["CMMC_L2", "NIST_800_171"],
+  "cui-part-number": ["CMMC_L2", "NIST_800_171"],
+  "cui-program-code": ["CMMC_L2", "NIST_800_171"],
+  "database-url": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "dob": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "HIPAA", "HITECH", "HITRUST", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "drivers-license": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "DPDP", "FADP", "FISMA", "GDPR", "IRS_1075", "ISO_27001", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "email": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "GLBA", "HIPAA", "HITECH", "ISO_27001", "ISO_27701", "LGPD", "NIST_800_53", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "email-labeled": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "GLBA", "HIPAA", "HITECH", "ISO_27001", "ISO_27701", "LGPD", "NIST_800_53", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "env-secret": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "env-secret-unquoted": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "eth-wallet": ["DORA", "NYDFS_500"],
+  "gcp-service-account": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "generic-secret": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "generic-secret-assignment": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "github-fine-grained": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "github-token": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "github-token-split": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "google-api-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "google-oauth-refresh": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "iban": ["DORA", "FADP", "GDPR", "GLBA", "UK_GDPR"],
+  "iban-grouped": ["DORA", "FADP", "GDPR", "GLBA", "UK_GDPR"],
+  "iban-spaced": ["DORA", "FADP", "GDPR", "GLBA", "UK_GDPR"],
+  "icd10-bracketed": ["HIPAA", "HITECH", "HITRUST"],
+  "icd10-code": ["HIPAA", "HITECH", "HITRUST"],
+  "imei": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "imsi": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "insurance-member-id": ["HIPAA", "HITECH", "HITRUST"],
+  "ip-address": ["AU_PRIVACY", "CCPA_CPRA", "CJIS", "FISMA", "FedRAMP", "GDPR", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_53", "SOC2", "UK_GDPR"],
+  "ipv6-address": ["AU_PRIVACY", "CCPA_CPRA", "CJIS", "FISMA", "FedRAMP", "GDPR", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_53", "SOC2", "UK_GDPR"],
+  "jwt-token": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "mac-address": ["AU_PRIVACY", "CCPA_CPRA", "CJIS", "FISMA", "FedRAMP", "GDPR", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_53", "SOC2", "UK_GDPR"],
+  "medical-record-number": ["HIPAA", "HITECH", "HITRUST"],
+  "medicare-mbi-labeled": ["HIPAA", "HITECH", "HITRUST"],
+  "national-id": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FISMA", "GDPR", "IRS_1075", "ISO_27001", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "national-id-grouped": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FISMA", "GDPR", "IRS_1075", "ISO_27001", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "npi-labeled": ["HIPAA", "HITECH", "HITRUST"],
+  "openai-api-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "passport": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "DPDP", "FADP", "FISMA", "GDPR", "IRS_1075", "ISO_27001", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "phone-intl": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "GLBA", "HIPAA", "HITECH", "ISO_27001", "ISO_27701", "LGPD", "NIST_800_53", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "phone-intl-labeled": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "GLBA", "HIPAA", "HITECH", "ISO_27001", "ISO_27701", "LGPD", "NIST_800_53", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "phone-us": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "GLBA", "HIPAA", "HITECH", "ISO_27001", "ISO_27701", "LGPD", "NIST_800_53", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "private-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "private-key-block": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "private-key-body": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "sendgrid-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "slack-token": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "slack-webhook-url": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "ssn": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "DPDP", "FADP", "FERPA", "FISMA", "GDPR", "GLBA", "HIPAA", "HITECH", "IRS_1075", "ISO_27001", "ISO_27701", "LGPD", "NIST_800_53", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "stripe-publishable-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "stripe-restricted-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "stripe-secret-key": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "swift-bic": ["FADP", "GDPR", "UK_GDPR"],
+  "twilio-account-sid": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "twilio-auth-token": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "uk-nhs-number-labeled": ["GDPR", "UK_GDPR"],
+  "uk-nino-labeled": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "CJIS", "DPDP", "FADP", "FISMA", "GDPR", "IRS_1075", "ISO_27001", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"],
+  "us-ein": ["APRA_CPS234", "DORA", "GLBA", "IRS_1075", "NYDFS_500", "SOX"],
+  "vat-number": ["FADP", "GDPR", "UK_GDPR"],
+  "vault-token": ["APRA_CPS234", "DORA", "FISMA", "FedRAMP", "HITRUST", "ISO_27001", "ISO_27701", "NIS2", "NIST_800_171", "NIST_800_53", "NYDFS_500", "SOC2", "SOX"],
+  "vehicle-vin": ["APPI", "AU_PRIVACY", "CCPA_CPRA", "COPPA", "DPDP", "FADP", "FERPA", "GDPR", "HIPAA", "HITECH", "HITRUST", "ISO_27701", "LGPD", "PDPA_SG", "PDPA_TH", "PIPA_KR", "PIPEDA", "PIPL", "POPIA", "UK_GDPR"]
+};
+function frameworksForDetector(detector) {
+  return Object.prototype.hasOwnProperty.call(DETECTOR_FRAMEWORKS, detector) ? DETECTOR_FRAMEWORKS[detector] : [];
+}
+function detectorsMatchFramework(detectors, framework) {
+  const want = framework.toUpperCase();
+  return detectors.some((d) => frameworksForDetector(d).some((f) => f.toUpperCase() === want));
+}
+function resolveFrameworkName(input) {
+  const want = input.toUpperCase();
+  return COMPLIANCE_FRAMEWORKS.find((f) => f.toUpperCase() === want) ?? null;
+}
+
 // ../packages/scanner/dist/index.js
 import { gunzipSync } from "zlib";
 var SECRET_LABEL_TAILS = [
@@ -11282,7 +11373,125 @@ var EXTENDED_PATTERNS = [
     pattern: /\b(?:patient|pt|resident|inpatient|outpatient)\b[\s\S]{0,25}?\bdiagnos(?:ed|is)\b(?:\s+(?:with|of))?\s+([A-Za-z][A-Za-z0-9()\- ]{2,45}?)(?=\s*(?:\[|[.;,]|\btoday\b|\bon file\b|$))/gid,
     valueGroup: 1
   },
-  // ── CMMC L2 CUI (controlled unclassified info: part / program / contract) ────
+  // ── CMMC L2 / CUI — REAL marking conventions ────────────────────────────────
+  //
+  // Read this before quoting any CMMC_L2 number.
+  //
+  // The three detectors AFTER this block (`cui-part-number`, `cui-program-code`,
+  // `cui-contract-number`) are fitted to our own corpus generator. Their comment
+  // says so outright: it names the fixtures `PN-9FRUDT`, `PRG-1B3ZEK`,
+  // `CTR-2025-270565`. `PN-`, `PRG-` and `CTR-` are prefixes the generator
+  // invents; they are not a convention any defence contractor uses. Those three
+  // are the ONLY kinds mapped to CMMC_L2 (`_CUI` in compliance.py), so the
+  // framework's score has been the corpus measuring itself. Excluding them,
+  // CMMC_L2 had n = 0.
+  //
+  // The detectors in THIS block are different in kind: every one matches a
+  // marking published in a public standard, so a hit means the same thing in a
+  // real contractor's repository as it does in our corpus.
+  //
+  //   - CUI banner / portion markings ....... 32 CFR Part 2002, DoD CUI Registry
+  //   - Distribution statements A–F ......... DoDI 5230.24
+  //   - ECCN classifications ................ EAR, 15 CFR Part 774 (CCL)
+  //   - ITAR citations ...................... 22 CFR Parts 120–130
+  //   - National Stock Number ............... NATO/DoD 13-digit NSN
+  //   - CAGE code ........................... NATO Commercial And Government Entity
+  //
+  // Bare `CUI` is deliberately NOT matched: three letters that occur in ordinary
+  // prose and identifiers would flood the egress path with false positives. Only
+  // the structured forms — `CUI//CATEGORY` and the `(CUI)` portion mark — are
+  // distinctive enough to be safe.
+  {
+    name: "cui-banner-marking",
+    category: "proprietary",
+    severity: "high",
+    defaultAction: "redact",
+    // `CUI//SP-CTI`, `CUI//SP-PROPIN`, `CUI//SP-EXPT`, `CUI//NOFORN`,
+    // `CONTROLLED//SP-CTI`, and the multi-category `CUI//SP-CTI/SP-EXPT`.
+    pattern: /\b(?:CUI|CONTROLLED)\/\/(?:[A-Z][A-Z0-9-]{1,15})(?:\/[A-Z][A-Z0-9-]{1,15})*\b/g
+  },
+  {
+    name: "cui-portion-marking",
+    category: "proprietary",
+    severity: "medium",
+    defaultAction: "redact",
+    // Portion marks that precede a paragraph: `(CUI)`, `(CUI//SP-CTI)`.
+    pattern: /\((?:CUI|CUI\/\/[A-Z][A-Z0-9-]{1,15})\)/g
+  },
+  {
+    name: "cui-distribution-statement",
+    category: "proprietary",
+    severity: "high",
+    defaultAction: "redact",
+    // DoDI 5230.24. Statement A is public-release, but its PRESENCE still marks
+    // the document as controlled-technical-data governed, so all of A–F match.
+    pattern: /\bDISTRIBUTION\s+STATEMENT\s+[A-F]\b/gi
+  },
+  {
+    name: "export-control-eccn",
+    category: "proprietary",
+    severity: "high",
+    defaultAction: "redact",
+    // Commerce Control List entries: one digit, a letter A–E, three digits
+    // (`5A002`, `3A001`, `9D515`). That shape is NOT distinctive on its own — it
+    // collides with version strings and identifiers, which this detector proved
+    // when the label was optional:
+    //
+    //   "release 5A002 build"  → matched      ← false positive
+    //   "v1.2.3 and 9D515"     → matched      ← false positive
+    //
+    // So the ECCN label is REQUIRED, matching the label-anchoring rule the rest
+    // of this file follows for non-self-shaped kinds. Real documents carry it;
+    // ECCNs are quoted as "ECCN 5A002", not bare.
+    //
+    // EAR99 is a separate detector below rather than an alternative here: with a
+    // `valueGroup`, an alternative that does not participate in the capture
+    // yields no value and the match is dropped — which is exactly what happened
+    // when the two were combined (EAR99 silently stopped matching).
+    pattern: /\b(?:ECCN|Export\s+Control\s+Classification\s+Number)\s*[:#=]?\s*(\d[A-E]\d{3}(?:\.[a-z](?:\.\d+)?)?)\b/gid,
+    valueGroup: 1
+  },
+  {
+    name: "export-control-ear99",
+    category: "proprietary",
+    severity: "medium",
+    defaultAction: "redact",
+    // A fixed literal, not a shape, so it needs no label anchor and cannot
+    // collide with version strings the way the numeric ECCN form does.
+    pattern: /\bEAR99\b/g
+  },
+  {
+    name: "itar-citation",
+    category: "proprietary",
+    severity: "high",
+    defaultAction: "redact",
+    // ITAR lives at 22 CFR 120–130; USML categories are Roman numerals I–XXI.
+    pattern: /\b(?:ITAR\b|22\s*C\.?F\.?R\.?\s*(?:Part\s*)?1[2-3]\d\b|USML\s+Category\s+(?:X{0,2}(?:IX|IV|V?I{0,3}))\b)/gi
+  },
+  {
+    name: "national-stock-number",
+    category: "proprietary",
+    severity: "medium",
+    defaultAction: "redact",
+    // NSN: 4-digit FSC, 2-digit NCB, 7-digit item number, conventionally written
+    // NNNN-NN-NNN-NNNN. Self-shaped and distinctive enough to need no label.
+    pattern: /\b\d{4}-\d{2}-\d{3}-\d{4}\b/g
+  },
+  {
+    name: "cage-code",
+    category: "proprietary",
+    severity: "medium",
+    defaultAction: "redact",
+    // A CAGE code is 5 alphanumerics — far too generic to match unanchored, so
+    // this requires the label. Same reasoning as the other label-gated kinds.
+    pattern: /\bCAGE(?:\s*(?:code|CD))?\s*[:#=]?\s*([0-9A-Z]{5})\b/gid,
+    valueGroup: 1
+  },
+  // ── LEGACY: corpus-fitted CUI detectors ─────────────────────────────────────
+  // These match prefixes our own generator invents. Kept so the historical
+  // baseline stays comparable, but a CMMC_L2 figure resting on them is not a
+  // measurement — see the block above. Prefer the standards-based detectors.
+  //
   // K2 precision: raised the shape floors so short ticket/Jira-style refs don't
   // match. part/program require 5+ chars AND at least one letter after the prefix
   // (excludes `PN-1234`); contract requires the full `CTR-<4-digit-year>-<4+>`
@@ -14833,11 +15042,13 @@ var AuditStore = class {
       INSERT INTO audit_log
         (timestamp, request_id, provider, model, direction,
          original_size, processed_size, secrets_blocked, pii_redacted,
-         mutations_applied, scan_duration_ms, mutation_duration_ms, action, details)
+         mutations_applied, scan_duration_ms, mutation_duration_ms, action, details,
+         detector_kinds)
       VALUES
         (@timestamp, @requestId, @provider, @model, @direction,
          @originalSize, @processedSize, @secretsBlocked, @piiRedacted,
-         @mutationsApplied, @scanDurationMs, @mutationDurationMs, @action, @details)
+         @mutationsApplied, @scanDurationMs, @mutationDurationMs, @action, @details,
+           @detectorKinds)
     `);
     this.pruneByAgeStmt = this.db.prepare(
       `DELETE FROM audit_log WHERE id IN (
@@ -14868,7 +15079,8 @@ var AuditStore = class {
         scan_duration_ms    REAL NOT NULL DEFAULT 0,
         mutation_duration_ms REAL NOT NULL DEFAULT 0,
         action              TEXT NOT NULL DEFAULT 'forwarded',
-        details             TEXT
+        details             TEXT,
+        detector_kinds      TEXT
       );
 
       CREATE INDEX IF NOT EXISTS idx_timestamp ON audit_log(timestamp);
@@ -14898,7 +15110,11 @@ var AuditStore = class {
       scanDurationMs: entry.scanDurationMs,
       mutationDurationMs: entry.mutationDurationMs,
       action: entry.action,
-      details: entry.details ? JSON.stringify(entry.details) : null
+      details: entry.details ? JSON.stringify(entry.details) : null,
+      // Deduped + sorted so the column is stable for a given set of findings:
+      // two requests that tripped the same detectors serialise identically,
+      // which keeps grouping and diffing meaningful.
+      detectorKinds: entry.detectorKinds && entry.detectorKinds.length > 0 ? JSON.stringify([...new Set(entry.detectorKinds)].sort()) : null
     });
     if (this.pruneEveryInserts > 0 && ++this.insertsSincePrune >= this.pruneEveryInserts) {
       this.insertsSincePrune = 0;
@@ -15030,7 +15246,20 @@ var AuditStore = class {
       scanDurationMs: row["scan_duration_ms"],
       mutationDurationMs: row["mutation_duration_ms"],
       action: row["action"],
-      details: row["details"] ? JSON.parse(row["details"]) : void 0
+      details: row["details"] ? JSON.parse(row["details"]) : void 0,
+      // Tolerate a malformed/legacy value rather than throwing: a corrupt column
+      // in ONE row must not make the whole audit log unreadable, which is the
+      // opposite of what an audit trail is for.
+      detectorKinds: (() => {
+        const raw2 = row["detector_kinds"];
+        if (typeof raw2 !== "string" || raw2.length === 0) return void 0;
+        try {
+          const parsed = JSON.parse(raw2);
+          return Array.isArray(parsed) ? parsed : void 0;
+        } catch {
+          return void 0;
+        }
+      })()
     };
   }
 };
@@ -16238,6 +16467,11 @@ Upgrade to ${_upgradeTier === "enterprise" ? "Enterprise" : "Pro"} for ${_upgrad
     if (deep.scanIncomplete) {
       const reasons = [...deep.incompleteReasons];
       safeLog({
+        // The detector names that fired. The proxy already collected these in
+        // `foundTypes` for telemetry; the audit row discarded them, which is why
+        // an audit trail could not be filtered by compliance framework — frameworks
+        // are defined over KINDS, and counts alone cannot say which kind was seen.
+        detectorKinds: [...foundTypes],
         timestamp: Date.now(),
         requestId,
         provider,
@@ -16278,6 +16512,11 @@ Upgrade to ${_upgradeTier === "enterprise" ? "Enterprise" : "Pro"} for ${_upgrad
     }
     if (config.blockMode === "reject" && sensitiveFound > 0) {
       safeLog({
+        // The detector names that fired. The proxy already collected these in
+        // `foundTypes` for telemetry; the audit row discarded them, which is why
+        // an audit trail could not be filtered by compliance framework — frameworks
+        // are defined over KINDS, and counts alone cannot say which kind was seen.
+        detectorKinds: [...foundTypes],
         timestamp: Date.now(),
         requestId,
         provider,
@@ -16350,6 +16589,11 @@ Upgrade to ${_upgradeTier === "enterprise" ? "Enterprise" : "Pro"} for ${_upgrad
     const riskResult = riskScorer.score(riskCtx);
     if (riskResult.recommendation === "block") {
       safeLog({
+        // The detector names that fired. The proxy already collected these in
+        // `foundTypes` for telemetry; the audit row discarded them, which is why
+        // an audit trail could not be filtered by compliance framework — frameworks
+        // are defined over KINDS, and counts alone cannot say which kind was seen.
+        detectorKinds: [...foundTypes],
         timestamp: Date.now(),
         requestId,
         provider,
@@ -16413,6 +16657,11 @@ Upgrade to ${_upgradeTier === "enterprise" ? "Enterprise" : "Pro"} for ${_upgrad
       });
     } catch {
       safeLog({
+        // The detector names that fired. The proxy already collected these in
+        // `foundTypes` for telemetry; the audit row discarded them, which is why
+        // an audit trail could not be filtered by compliance framework — frameworks
+        // are defined over KINDS, and counts alone cannot say which kind was seen.
+        detectorKinds: [...foundTypes],
         timestamp: Date.now(),
         requestId,
         provider,
@@ -16445,6 +16694,11 @@ Upgrade to ${_upgradeTier === "enterprise" ? "Enterprise" : "Pro"} for ${_upgrad
     const anyTokenized = tokensMutated > 0 || sensitiveFound > 0;
     const action = anyTokenized ? "mutated" : "forwarded";
     safeLog({
+      // The detector names that fired. The proxy already collected these in
+      // `foundTypes` for telemetry; the audit row discarded them, which is why
+      // an audit trail could not be filtered by compliance framework — frameworks
+      // are defined over KINDS, and counts alone cannot say which kind was seen.
+      detectorKinds: [...foundTypes],
       timestamp: Date.now(),
       requestId,
       provider,
@@ -17155,15 +17409,17 @@ function getNestedValue(obj, key) {
 }
 function setNestedValue(obj, key, value) {
   const parts = key.split(".");
+  const leaf = parts.pop();
+  if (leaf === void 0) return;
   let cur = obj;
-  for (let i = 0; i < parts.length - 1; i++) {
-    const p = parts[i];
-    if (cur[p] == null || typeof cur[p] !== "object" || Array.isArray(cur[p])) {
+  for (const p of parts) {
+    const child = cur[p];
+    if (child == null || typeof child !== "object" || Array.isArray(child)) {
       cur[p] = {};
     }
     cur = cur[p];
   }
-  cur[parts[parts.length - 1]] = value;
+  cur[leaf] = value;
 }
 function parseValue(raw2) {
   if (raw2.startsWith("[") && raw2.endsWith("]")) {
@@ -17391,10 +17647,12 @@ async function resolvePlanTier(opts = {}) {
   }
   return tierFromBackend(apiKey);
 }
+var QUOTA_PERIOD_DAYS = 7;
 function collectUsage(dbPath) {
   const now = /* @__PURE__ */ new Date();
-  const monthStartTs = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1, 0, 0, 0, 0);
-  const sinceMs = Date.now() - monthStartTs;
+  const periodMs = QUOTA_PERIOD_DAYS * 24 * 60 * 60 * 1e3;
+  const monthStartTs = Date.now() - periodMs;
+  const sinceMs = periodMs;
   let store = null;
   try {
     store = new AuditStore(dbPath);
@@ -17403,8 +17661,10 @@ function collectUsage(dbPath) {
       monthStartTs,
       metrics: {
         tenantId: "local",
+        // The trailing window these numbers actually cover — previously the
+        // calendar month, which did not match the aggregation OR the quota.
         periodStart: new Date(monthStartTs).toISOString().split("T")[0],
-        periodEnd: new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() + 1, 0)).toISOString().split("T")[0],
+        periodEnd: (/* @__PURE__ */ new Date()).toISOString().split("T")[0],
         mutationsApplied: stats.totalMutationsApplied,
         secretsBlocked: stats.totalSecretsBlocked,
         piiRedacted: stats.totalPiiRedacted,
@@ -17420,9 +17680,8 @@ function collectUsage(dbPath) {
     store?.close();
   }
 }
-function nextMonthReset() {
-  const now = /* @__PURE__ */ new Date();
-  return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() + 1, 1)).toISOString().split("T")[0];
+function resetCadenceLabel() {
+  return `every ${QUOTA_PERIOD_DAYS} days`;
 }
 function priceLabel(tier) {
   const cents = PLAN_CONFIGS[tier].pricePerSeatCents;
@@ -17471,7 +17730,8 @@ function emptyUsagePayload(resolution) {
     ...resolution.detail ? { tierDetail: resolution.detail } : {},
     periodStart: null,
     periodEnd: null,
-    resetDate: nextMonthReset(),
+    resetDate: null,
+    resetCadenceDays: QUOTA_PERIOD_DAYS,
     usage: {
       mutations: { current: 0, limit: planConfig ? planConfig.mutationsPerMonth : null, percent: 0, allowed: true },
       scans: { current: 0, limit: planConfig ? planConfig.scansPerMonth : null, percent: 0, allowed: true }
@@ -17508,7 +17768,8 @@ function usageCommand() {
             ...resolution.detail ? { tierDetail: resolution.detail } : {},
             periodStart: usageMetrics.periodStart,
             periodEnd: usageMetrics.periodEnd,
-            resetDate: nextMonthReset(),
+            resetDate: null,
+            resetCadenceDays: QUOTA_PERIOD_DAYS,
             usage: {
               mutations: {
                 current: usageMetrics.mutationsApplied,
@@ -17532,7 +17793,7 @@ function usageCommand() {
       );
       return;
     }
-    const resetDate = nextMonthReset();
+    const resetDate = resetCadenceLabel();
     console.log(
       chalk7.cyan(
         "\n  Pretense Usage \u2014 " + (/* @__PURE__ */ new Date()).toLocaleDateString("en-US", { month: "long", year: "numeric" })
@@ -18905,11 +19166,34 @@ function toSafeAuditRow(e) {
     mutationsApplied: e.mutationsApplied,
     secretsBlocked: e.secretsBlocked,
     piiRedacted: e.piiRedacted,
-    scanDurationMs: e.scanDurationMs
+    scanDurationMs: e.scanDurationMs,
+    // Detector NAMES only. This stays leak-proof: "ssn" records that a social
+    // security number was seen, never the number. Carrying it is what lets the
+    // row be attributed to a compliance framework at all.
+    detectorKinds: e.detectorKinds ?? []
   };
 }
 function auditCommand() {
-  return new Command17("audit").description("Show recent mutation/tokenization audit entries (leak-proof; JSONL with --json)").option("-l, --limit <n>", "Number of entries to show", "20").option("--json", "Output as JSONL (one JSON object per line, jq-pipeable)", false).option("--db <path>", "Path to the audit database (default: ~/.pretense/audit.db)").action((opts) => {
+  return new Command17("audit").description("Show recent mutation/tokenization audit entries (leak-proof; JSONL with --json)").option("-l, --limit <n>", "Number of entries to show", "20").option("--json", "Output as JSONL (one JSON object per line, jq-pipeable)", false).option("--db <path>", "Path to the audit database (default: ~/.pretense/audit.db)").option(
+    "--framework <name>",
+    "Only entries whose detectors map to this compliance framework (e.g. HIPAA, SOC2, PCI_DSS). Use --list-frameworks to see all 36."
+  ).option("--list-frameworks", "List the compliance frameworks that can be filtered on", false).action((opts) => {
+    if (opts.listFrameworks) {
+      for (const f of COMPLIANCE_FRAMEWORKS) console.log(f);
+      return;
+    }
+    let framework = null;
+    if (opts.framework) {
+      framework = resolveFrameworkName(opts.framework);
+      if (!framework) {
+        console.error(
+          chalk16.red(`
+  x Unknown framework: "${opts.framework}"
+`) + chalk16.dim("  Run ") + chalk16.cyan("pretense audit --list-frameworks") + chalk16.dim(" to see all 36.\n")
+        );
+        process.exit(1);
+      }
+    }
     const limit = parseInt(opts.limit ?? "20", 10);
     if (!Number.isFinite(limit) || limit <= 0) {
       console.error(chalk16.red(`
@@ -18921,7 +19205,11 @@ function auditCommand() {
     let rows;
     try {
       const store = new AuditStore(dbPath);
-      rows = store.getRecentEntries(limit).map(toSafeAuditRow);
+      const readLimit = framework ? Math.max(limit * 20, 500) : limit;
+      rows = store.getRecentEntries(readLimit).map(toSafeAuditRow);
+      if (framework) {
+        rows = rows.filter((r) => detectorsMatchFramework(r.detectorKinds ?? [], framework)).slice(0, limit);
+      }
       store.close();
     } catch {
       if (opts.json) {
@@ -19009,7 +19297,8 @@ function creditsCommand() {
             tier,
             tierSource: resolution.source,
             ...resolution.detail ? { tierDetail: resolution.detail } : {},
-            resetDate: nextMonthReset(),
+            resetDate: null,
+            resetCadenceDays: QUOTA_PERIOD_DAYS,
             mutations: {
               used: m.mutationsApplied,
               limit: tier ? mutationLimit : null,
@@ -19028,7 +19317,7 @@ function creditsCommand() {
       return;
     }
     console.log(chalk17.cyan("\n  Pretense Credits"));
-    console.log(chalk17.dim(`  Plan: ${tierLabel(tier)}  |  Resets: ${nextMonthReset()}
+    console.log(chalk17.dim(`  Plan: ${tierLabel(tier)}  |  Resets: ${resetCadenceLabel()}
 `));
     if (!tier) {
       for (const line of unverifiedNote(resolution.detail)) {
@@ -19110,8 +19399,8 @@ function upgradeCommand() {
     console.log("  " + chalk18.dim("\u2500".repeat(18 + col * TIERS.length)));
     const rows = [
       ["Price", (t) => priceLabel(t)],
-      ["Mutations/mo", (t) => quota(PLAN_CONFIGS[t].mutationsPerMonth)],
-      ["Requests/mo", (t) => quota(PLAN_CONFIGS[t].scansPerMonth)],
+      ["Mutations/7d", (t) => quota(PLAN_CONFIGS[t].mutationsPerMonth)],
+      ["Requests/7d", (t) => quota(PLAN_CONFIGS[t].scansPerMonth)],
       ["Seats", (t) => seats(PLAN_CONFIGS[t].maxSeats)],
       ["SSO", (t) => yesNo(PLAN_CONFIGS[t].ssoEnabled)],
       ["On-prem", (t) => yesNo(PLAN_CONFIGS[t].onPremEnabled)]
@@ -19170,7 +19459,7 @@ function findClosestCommand(input, knownCommands) {
   return bestDist <= 3 ? best : null;
 }
 var program = new Command20();
-program.name("pretense").description(chalk19.bold("AI firewall") + " \u2014 mutates proprietary code before LLM API calls").version("0.6.8", "-v, --version").addHelpText("after", `
+program.name("pretense").description(chalk19.bold("AI firewall") + " \u2014 mutates proprietary code before LLM API calls").version("0.6.9", "-v, --version").addHelpText("after", `
 ${chalk19.bold("Quick start:")}
   ${chalk19.cyan("pretense scan")} ${chalk19.dim("<file|dir>")}        Scan for secrets and PII
   ${chalk19.cyan("pretense mutate")} ${chalk19.dim("<file>")}           Preview code mutations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pretense/cli",
-  "version": "0.6.8",
+  "version": "0.6.9",
   "description": "Local-first AI firewall that mutates proprietary code before sending to LLM APIs",
   "type": "module",
   "bin": {
@@ -23,9 +23,9 @@
     "tsx": "^4.0.0",
     "typescript": "^5.4.0",
     "vitest": "^1.0.0",
+    "@pretense/billing": "0.1.0",
     "@pretense/compliance-engine": "0.1.0",
     "@pretense/protocol": "0.1.0",
-    "@pretense/billing": "0.1.0",
     "@pretense/learner": "0.2.0",
     "@pretense/mutator": "0.2.0",
     "@pretense/proxy": "0.1.0",
@@ -76,6 +76,6 @@
     "dev": "tsx src/index.ts",
     "postinstall": "node -e \"fs.existsSync('dist/postinstall.js') && import('./dist/postinstall.js')\" || true",
     "test": "vitest run",
-    "lint": "tsc --noEmit"
+    "lint": "tsc --noEmit -p tsconfig.lint.json"
   }
 }