@research-engineering/agentic-proofkit 0.1.151 → 0.1.152

package/docs/specs/proofkit-supply-chain-quality/overview.md

@@ -45,9 +45,11 @@ vulnerability absence, or consumer rollout safety by itself.
   inventory admission, command semantic routes without owner-declared proof
   identities, route-index-derived semantic proof identities, direct app
   semantic routes outside the command-scoped app test, package-level semantic
-  routes outside the descriptor-owned command package, and missing matching
-  semantic command evidence without claiming line coverage or exhaustive test
-  semantic completeness.
+  routes outside the descriptor-owned command package, semantic command routes
+  whose parsed Go test body lacks the source-owned executable oracle marker for
+  the exact emitted command route fact, and missing matching semantic command
+  evidence without claiming line coverage or exhaustive test semantic
+  completeness.
 - `REQ-PROOFKIT-QUALITY-011`: CI separates the OS-independent full
   source/package gate from macOS platform smoke, uses explicit hosted runner
   labels instead of floating latest labels, and exposes one fail-closed

package/docs/specs/proofkit-supply-chain-quality/requirements.v1.json

@@ -129,7 +129,7 @@
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-010",
       "ownerId": "proofkit.supply-chain-quality",
-      "invariant": "Coverage metrics report requirement, binding, witness, CLI inventory linkage, and descriptor-owned command semantic-route coverage from admitted test-evidence-inventory rows, failing closed on explicit requirement/proof linkage dead zones, failed command-route inventory admission, command semantic routes without owner-declared proof identities, route-index-derived semantic proof identities, direct app semantic routes outside the command-scoped app test, package-level semantic routes outside the descriptor-owned command package, or missing matching semantic command evidence without claiming line coverage or exhaustive test semantic completeness.",
+      "invariant": "Coverage metrics report requirement, binding, witness, CLI inventory linkage, and descriptor-owned command semantic-route coverage from admitted test-evidence-inventory rows, failing closed on explicit requirement/proof linkage dead zones, failed command-route inventory admission, command semantic routes without owner-declared proof identities, route-index-derived semantic proof identities, direct app semantic routes outside the command-scoped app test, package-level semantic routes outside the descriptor-owned command package, semantic command routes whose parsed Go test body lacks the source-owned executable oracle marker for the exact emitted command ref, selector, source path, falsifier ids, oracle id, and expected public outcome, or missing matching semantic command evidence without claiming line coverage or exhaustive test semantic completeness.",
       "claimLevel": "blocking",
       "riskClass": "medium",
       "proofBindingRefs": ["proofkit/requirement-bindings.json"],

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@research-engineering/agentic-proofkit",
   "description": "Reusable proof profile, report, graph, and witness-planning primitives.",
-  "version": "0.1.151",
+  "version": "0.1.152",
   "type": "module",
   "license": "MIT",
   "sideEffects": false,

package/proofkit/witness-plan.json

@@ -719,8 +719,12 @@
       "commandId": "proofkit.coverage-metrics",
       "inputSelectors": [
         "docs/specs",
+        "internal/app",
         "internal/app/command_coverage_routes.go",
+        "internal/app/command_coverage_source.go",
         "internal/app/command_registry.go",
+        "internal/command",
+        "internal/testsupport/commandcoverage",
         "internal/tools/coveragemetrics",
         "proofkit/cli-contract.v1.json",
         "proofkit/requirement-bindings.json",