@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/harness/catalog/gate-rules.yaml

@@ -0,0 +1,647 @@
+# Gate-rule catalog (P0 phases 02 + 04) — read by `resolveRule` (src/harness/gates/resolve-rule.ts).
+# Spec: docs/spec/sungen_orchestration_engine_spec.md OES-11 · docs/spec/sungen_durable_orchestration_spec.md DOS-13/14.
+#
+# Code computes each gate's CONDITION; the severity below decides what a met condition costs. With no
+# gate-override decision in force the result equals the behavior before the catalog existed:
+#   error   blocks (audit gate / render / delivery)      review  blocks the official render; --preview allowed
+#   warning prints and renders                           info    prints only (reachable through an override)
+#   Sensors map error→fail, warning→warn. A claim/depth `error` blocks only when its ratio is under the focus
+#   threshold (DEPTH_THRESHOLDS); `smoke` focus downgrades the verdict to warn.
+# Two independent axes (OES-11): block-vs-advisory follows `severity`; overridable-vs-not follows `kind`.
+#   kind: hard  never overridable (offAllowed is always false)      kind: soft  overridable with a reason
+#   offAllowed  the closed set of soft rules a gate-override may switch off entirely — ratified in phase 04:
+#               matrix.gate-w.{dimensions-missing,dimensions-long,wording-smell}, matrix.gate-c.too-many-variants,
+#               claim.negative-absence — all advisory (warning) lints of reviewability/wording or a known-noisy
+#               heuristic; switching one off can hide noise, never a blocking defect.
+# since: "<=3.2.34" = present in the release that was inventoried (exact origin not recorded); "p0" = new in P0.
+#
+# Every gate site in the gate files names its rule id literally (exporters/matrix/gates.ts, exporters/matrix/build.ts
+# for gate R, harness/sensors.ts, harness/audit.ts, harness/script-check.ts, harness/journey.ts) and carries no severity of
+# its own; tests/gates/gate-catalog-shape.run.ts proves both, and that each of the 65 sites the phase-02 stub
+# inventoried still maps to the same rule (the stub's `points[]` now live in tests/gates/fixtures/
+# legacy-gate-points.json). Narrative audit findings carry no severity decision and are not catalogued.
+# There is no `oracle.source-weakening` rule: it does not exist in src (red-team #6).
+
+rules:
+  # ───────────────────────── delivery coverage matrix (exporters/matrix/gates.ts) ─────────────────────────
+  - id: matrix.gate-a.background-when-then
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A Background holding When/Then steps hides the action and the oracle from every scenario that inherits it, so the delivered Expected column cannot be derived (Gate A)."
+    fix: "Move the action and oracle steps into the scenarios; keep only Given setup in Background."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-a.no-vp-id
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "Matrix variants are addressed by VP-id; a scenario without one cannot be grouped, dispositioned or traced to a viewpoint (Gate A)."
+    fix: "Prefix the scenario name with its viewpoint id, VP-<CATEGORY>-NNN."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-a.no-oracle
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A variant with no Then step (or a manual one with no Observable/Oracle lines) has no observable oracle, so it cannot be delivered as a test case (Gate A)."
+    fix: "Add a Then step, or numbered 'N. Observable: …' lines under the manual '# Tester verifies:' block."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-a.unlabeled-manual-oracle
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A manual oracle found only in an unlabeled comment is exported verbatim into Expected and reads as generated text."
+    fix: "Write the '# Tester verifies:' block as numbered 'N. Observable: …' lines."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-a.duplicate-vp-id
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "Two scenarios under one VP-id ship as two rows with one testcase id and let a run result attach to the wrong scenario (#694); id reuse is never negotiable."
+    fix: "Give each scenario its own sequence number within its category, then regenerate."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-b.ref-matches-nothing
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A map group that references a variant the .feature no longer has makes the delivered grouping describe tests that do not exist (Gate B)."
+    fix: "Update or remove the stale reference in the delivery map."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-b.double-mapped
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A variant in two groups is counted twice in coverage; exactly one owner is required (Gate B)."
+    fix: "Keep the variant in one group only."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-b.unmapped
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "Delivery requires 100% source disposition: every variant is in a group or carries an explicit disposition, otherwise coverage silently drops it (Gate B)."
+    fix: "Add the variant to a group or give it a disposition in the delivery map."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-b.grouped-and-disposed
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A variant that is both grouped and disposed has two contradictory fates in the deliverable (Gate B)."
+    fix: "Pick one: drop the disposition or the group membership."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-b.stale-disposition
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A disposition for a VP-id with no scenario is leftover noise that can hide real mapping drift."
+    fix: "Delete the stale disposition entry."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-c.mixed-layers
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "Grouping variants from different test layers makes one deliverable row claim two kinds of evidence (Gate C hard signature)."
+    fix: "Split the group by test layer."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-c.precondition-profiles
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "Equivalence of variants with different preconditions was inferred, not declared; QA must confirm it (Gate C heuristic)."
+    fix: "Confirm the grouping is safe (sungen delivery --approve) or split the group."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-c.oracle-shapes
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "Variants asserting different oracle shapes may not be one oracle family; the grouping was inferred (Gate C heuristic)."
+    fix: "Confirm they are one oracle family (approve) or split the group."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-c.sequence-sensitive
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "An ordered, sequence-sensitive scenario grouped with others can pass in a different order than the customer reads; it stays solo unless QA confirms."
+    fix: "Keep it as a solo item, or confirm the group (approve)."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-c.too-many-variants
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A group above MAX_VARIANTS_PER_ITEM is hard to review; the warning is a reviewability lint, not a correctness check."
+    fix: "Split the group into smaller items."
+    since: "<=3.2.34"
+    offAllowed: true
+  - id: matrix.gate-d.no-precondition
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A tester cannot establish the start state without a Background, auth tag or Given (api-first variants are exempt), so the case is not executable (Gate D)."
+    fix: "Add a Background, an auth tag or a Given step."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-d.no-trigger
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A variant with no When step (or Setup/Action comment for manual) has no action a tester can perform (Gate D)."
+    fix: "Add the When step, or Setup/Action comment lines for a manual case."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-d.unresolved-var
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A {{var}} that resolves nowhere makes the variant not reproducible for a tester (Gate D)."
+    fix: "Add the key to test-data, or bind it at run time with remember … as."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-d.template-token-remains
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A template token surviving into a rendered cell makes the export non-deterministic for a tester (Gate D, review B-04)."
+    fix: "Resolve the token in test-data or reword the step so no {{…}} reaches the output."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-e.map-unstamped
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "Approved groups with no stamped map fingerprint cannot prove the reviewed wording is the delivered wording (Gate E)."
+    fix: "Run sungen delivery --approve to record the reviewed wording."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-e.map-drift
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "Map wording or grouping edited after approval must be re-reviewed, not silently published (Gate E, review GAP-09)."
+    fix: "Re-review the map, then sungen delivery --approve."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-e.variant-unstamped
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "An approved group whose variant has no stamped fingerprint cannot detect later drift (Gate E)."
+    fix: "Run sungen delivery --approve after review."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-e.variant-drift
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "A variant changed since its group was approved; the approval no longer covers what will be delivered (Gate E)."
+    fix: "Re-review the grouping, then approve again."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-g.groups-proposed
+    stage: deliver
+    severity: review
+    kind: soft
+    rationale: "The official render needs every group approved by QA; --preview renders the rest with a DRAFT watermark (Gate G)."
+    fix: "Approve the proposed groups, or render with --preview."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-k.category-mismatch
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A VP-SEC or VP-NFR scenario filed under another category empties the Coverage sheet's security/nfr column and reports a gap the unit does not have (Gate K)."
+    fix: "Set the group's category to the one the source viewpoint class decides."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-w.dimensions-missing
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A parent row with more than three variants and no dimensions digest forces the reviewer to expand it to learn what it covers; a readability lint."
+    fix: "Add a short dimensions digest, for example 'required x3 · format x9'."
+    since: "<=3.2.34"
+    offAllowed: true
+  - id: matrix.gate-w.dimensions-long
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A dimensions digest over 120 characters stops being a digest; a readability lint."
+    fix: "Shorten the dimensions digest to 120 characters or fewer."
+    since: "<=3.2.34"
+    offAllowed: true
+  - id: matrix.gate-w.wording-smell
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "Intent/oracle/dimensions text containing {{tokens}}, generator labels, DSL phrasing or [selector] refs reads machine-generated to the customer; a wording lint."
+    fix: "Rewrite the field in plain product language using the visible UI label."
+    since: "<=3.2.34"
+    offAllowed: true
+  - id: matrix.gate-r.requirement-gap
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A requirement id from requirements/spec.md with no tracing variant and no recorded status is a coverage gap the deliverable would hide (Gate R, exporters/matrix/build.ts)."
+    fix: "Tag the scenario that proves it with @spec:<id>, or record a status in the delivery map's requirements: section."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: matrix.gate-r.covered-unbacked
+    stage: deliver
+    severity: warning
+    kind: soft
+    rationale: "A requirement declared covered with no variant tracing to it is prose, not traceability — nothing notices when the proving scenario changes (Gate R)."
+    fix: "Add @spec:<id> to the scenario that proves it, or use covered_elsewhere / partially_covered with a named reference."
+    since: "<=3.2.34"
+    offAllowed: false
+
+  # ───────────────────────── claim-proof sensor (harness/sensors.ts CLAIM_RULES) ─────────────────────────
+  # A scenario TITLE makes a claim; its STEPS must prove it. `error` rows block only when the unit's claim
+  # ratio is below the focus threshold; `warning` rows never block.
+  - id: claim.unchanged-preserved
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "'Unchanged/preserved' is an exactness claim; a `contains` substring match cannot tell unchanged from prefixed (#599)."
+    fix: "Swap `contains {{v}}` for `with {{v}}` on the continuity rows, or reword the title."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.ordering-sort
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "An order claim is invisible to a presence check; the steps must assert rows in sequence or the sort state (#810)."
+    fix: "Assert the expected row order with `table match data:`, `is sorted ascending|descending`, or positional row checks."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.limit-cap
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "A limit/cap claim is a count claim; presence of the list does not prove the boundary."
+    fix: "Assert the count at the cap, or the rejection when one more is attempted."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.all-every-each
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "An all/every/each claim needs an assertion across all matched elements, not one."
+    fix: "Use `User see all …` or the all-card DSL for per-card structure."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.only-belong-to
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "An only/belongs-to claim needs an all-match; 'no item outside the facet' is often UI-limited."
+    fix: "Use `User see all … contains …`, verify through API/DB, or mark @manual with a reason."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.single-exactly-one
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "A 'single/exactly one' claim is a quantity claim; presence does not prove the count."
+    fix: "Assert the count (count is 1) instead of presence."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.correct-matching-identity
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "A correct/matching/same claim needs capture and compare; asserting only the target proves nothing about the source."
+    fix: "`User remember … as {{v}}` on the source, then assert {{v}} on the target."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.changes-toggles
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "A changes/toggles claim needs a state delta, otherwise before and after cannot be told apart."
+    fix: "Capture the before-state and assert the after-state differs, or assert the visible-to-hidden transition."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.no-side-effect
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "The absence of a state-changing action (no duplicate, no re-submit) is not observable from a positive page assertion; it needs a count or contrast proof."
+    fix: "Prove the record/request count is unchanged, or mark @manual with a setup-action-assert-no-duplicate oracle."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.hidden-rejected
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "A hidden/closed/rejected claim needs the absence asserted, not an unrelated visible element."
+    fix: "Assert the `… is hidden` state the title claims."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.cleared-emptied
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "A cleared/emptied claim needs the value shown to be gone, not just that the action ran."
+    fix: "Return to the screen and assert the field is empty."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.restored-preserved
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "A restored/persists claim needs the value re-asserted after the transition."
+    fix: "Assert the field still holds the typed value after the reload or return."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.independent-separate
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "Independence across tabs or contexts is rarely expressible in the DSL and needs a multi-context proof."
+    fix: "Prove it with tab A versus tab B, or mark @manual with a clear setup, action and oracle."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.sanitized-inert
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "A sanitized/inert claim needs the payload shown as literal text and no execution."
+    fix: "Assert the field value equals the payload and that nothing was triggered."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.announces-aria
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "An announces/aria claim is usually not DSL-expressible; it needs an aria assertion or a screen-reader oracle."
+    fix: "Assert aria attributes if possible, else @manual with an NVDA/VoiceOver oracle."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: claim.negative-absence
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "A catch-all heuristic for negative titles; a positive proxy is sometimes a valid negative proof, so it stays advisory and may be switched off."
+    fix: "Assert the contrast (hidden, empty, error shown, count unchanged) or mark @manual."
+    since: "<=3.2.34"
+    offAllowed: true
+  - id: claim.partial-proof
+    stage: create
+    severity: warning
+    kind: soft
+    rationale: "The right proof shape exists but only on a singular element under an each/every claim; a partial proof."
+    fix: "Wrap the actions with the all-card DSL `User see all [Card] contain [Action]`."
+    since: "<=3.2.34"
+    offAllowed: false
+
+  # ───────────────────────── audit gate (harness/audit.ts gateStatus) ─────────────────────────
+  - id: audit.viewpoint-coverage
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "A page-type viewpoint theme with no scenario (missing) or only visibility (shallow) fails the design gate."
+    fix: "Add the missing scenarios, or deepen the shallow ones with a data assertion."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: audit.assertion-depth
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "Data-correctness scenarios must assert data, not visibility; under the focus threshold the gate fails (warn only for smoke)."
+    fix: "Add a real data assertion to the shallow business-critical scenarios."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: audit.claim-proof
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "Under the focus threshold, with at least one fail-level unproven claim, titles that claim more than their steps prove fail the gate (CLAIM-UNPROVEN; otherwise CLAIM-WEAK warns)."
+    fix: "Make the steps prove what the title claims, or reword the title."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: audit.spec-coverage
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "Spec clauses and must-have requirements with no scenario fail the gate (verdict computed in spec-coverage.ts)."
+    fix: "Add scenarios for the uncovered requirements, or confirm they are out of scope."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: audit.taxonomy-mismatch
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "When scenarios use IDs the project's test-viewpoint.md does not declare, coverage and traceability measure the wrong thing."
+    fix: "Use the viewpoint file's IDs in scenario names, or update the viewpoint file."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: audit.gate-sensor-error
+    stage: create
+    severity: error
+    kind: hard
+    rationale: "A capability-registered gate sensor (api, db, …) reporting an error-level finding fails the shared gate. Hard since the phase-04 review: the finding is the driver's own verdict, which a project-level override cannot second-guess."
+    fix: "Fix the finding the sensor names; its message carries its own code and remedy."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: audit.scenario-id-reuse
+    stage: create
+    severity: error
+    kind: hard
+    rationale: "Two different scenarios under one VP id reach the customer as two rows with one testcase id and let a run result attach to the wrong scenario (#694); id reuse is never negotiable."
+    fix: "Give each scenario its own sequence number within its category, then regenerate."
+    since: "<=3.2.34"
+    offAllowed: false
+
+  # ───────────────────────── faithfulness (harness/script-check.ts status) ─────────────────────────
+  - id: script.no-spec
+    stage: generate
+    severity: error
+    kind: hard
+    rationale: "With no committed generated spec nothing shows the Gherkin was compiled, so no later gate can be trusted (#387)."
+    fix: "Run sungen generate (or /sungen:run-test) first."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: script.count-mismatch
+    stage: generate
+    severity: error
+    kind: hard
+    rationale: "The automated scenario count differs from the test() blocks, so the suite no longer maps 1:1 to the Gherkin (#387)."
+    fix: "Regenerate the spec; never hand-edit generated code."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: script.missing-in-spec
+    stage: generate
+    severity: error
+    kind: hard
+    rationale: "A scenario with no test() block is a stale spec: the testcase is reported but never runs (#387)."
+    fix: "Regenerate the spec from the .feature."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: script.extra-in-spec
+    stage: generate
+    severity: error
+    kind: hard
+    rationale: "A test() with no scenario is a hand-edited spec: code the QA never reviewed in Gherkin (#387)."
+    fix: "Delete the extra test or add its scenario to the .feature, then regenerate."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: script.drift
+    stage: generate
+    severity: error
+    kind: hard
+    rationale: "The committed spec differs from a fresh regenerate: it was hand-edited or the .feature changed without sungen generate, so the code no longer reflects the Gherkin (#387)."
+    fix: "Run sungen generate and commit the regenerated spec; do not edit it by hand."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: script.bypass
+    stage: generate
+    severity: error
+    kind: hard
+    rationale: "A non-manual test with zero assertions, or a step that emitted no code, is present but proves nothing; masking it would fake an automated testcase (#387)."
+    fix: "Make the Gherkin assert something and regenerate, or mark the scenario @manual with a reason."
+    since: "<=3.2.34"
+    offAllowed: false
+
+  # ───────────────────────── phase gates (harness/journey.ts PHASE_REQUIRED) ─────────────────────────
+  # A required obligation that is neither satisfied nor waived halts the phase. Waiver is today's override.
+  - id: journey.phase-create
+    stage: create
+    severity: error
+    kind: soft
+    rationale: "Post-create halt: spec, coverage, depth and trace obligations must be satisfied or waived with a reason."
+    fix: "Self-correct the open obligation, or waive it with a reason (sungen journey --waive)."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: journey.phase-run
+    stage: run
+    severity: error
+    kind: soft
+    rationale: "Post-run halt: the design obligations plus automation coverage must be satisfied or waived with a reason."
+    fix: "Self-correct (repair / run-test), or waive with a reason."
+    since: "<=3.2.34"
+    offAllowed: false
+  - id: journey.phase-deliver
+    stage: deliver
+    severity: error
+    kind: soft
+    rationale: "Pre-delivery halt: everything automated must be satisfied or waived with a reason, plus the single human sign-off, which is given (sungen journey --signoff), never waived."
+    fix: "Close or waive the open obligations, then a human signs off: sungen journey --screen <unit> --signoff --by <name>."
+    since: "<=3.2.34"
+    offAllowed: false
+
+  # ───────────────────────── new P0 rules (decision.* + gate.override-rejected wired in phase 04; contract.* in 06/08) ─────────────────────────
+  - id: contract.hash-changed
+    stage: run
+    severity: review
+    kind: hard
+    rationale: "The normalized scenario changed but not for the worse (DOS-14.4); QA must re-approve, and the rule is locked at review so it can be neither downgraded nor switched off."
+    fix: "Review the change and run sungen contract approve (TTY)."
+    since: "p0"
+    offAllowed: false
+  - id: contract.lock-uncommitted
+    stage: run
+    severity: error
+    kind: hard
+    rationale: "A lock entry that differs from git HEAD was not reviewed in a commit; an agent could have edited it to match a weakened test (DOS-14.4)."
+    fix: "Commit the lock change through review, or restore it from git."
+    since: "p0"
+    offAllowed: false
+  - id: contract.oracle-weakened
+    stage: run
+    severity: error
+    kind: hard
+    rationale: "A check was made weaker than the approved contract; the run can still be green, which is exactly the failure the contract exists to catch (#387, DOS-14.4)."
+    fix: "Restore the stronger assertion, or have QA approve the weaker contract (TTY)."
+    since: "p0"
+    offAllowed: false
+  - id: contract.target-changed
+    stage: run
+    severity: error
+    kind: hard
+    rationale: "The element being checked changed relative to the approved contract (DOS-14.4); the test may now prove something else."
+    fix: "Restore the original target, or have QA approve the change (TTY)."
+    since: "p0"
+    offAllowed: false
+  - id: contract.assertion-lost
+    stage: run
+    severity: error
+    kind: hard
+    rationale: "An approved assertion disappeared; the scenario passes with less proof than QA signed off (DOS-14.4)."
+    fix: "Restore the assertion, or have QA approve its removal (TTY)."
+    since: "p0"
+    offAllowed: false
+  - id: contract.opaque-step
+    stage: run
+    severity: review
+    kind: hard
+    rationale: "A check on a JS value, API or canvas result is not tied to an element and cannot be compared automatically (DOS-14.6); it always goes to review and is locked at review."
+    fix: "QA reviews the verbatim step and its file:line, then approves."
+    since: "p0"
+    offAllowed: false
+  - id: contract.nondeterministic
+    stage: run
+    severity: warning
+    kind: soft
+    rationale: "Two runs of the same test took different branches; the derived steps may not be stable (DOS-14.6)."
+    fix: "Remove the branch or make the data deterministic; compare the two traces."
+    since: "p0"
+    offAllowed: false
+  - id: contract.unproven
+    stage: run
+    severity: error
+    kind: hard
+    rationale: "A free or impl:code test has no usable trace, so its contract match is unknown; absence of evidence is never clean (DOS-14.6). Applies only to those two implementation paths."
+    fix: "Re-run with --trace on, then sungen contract check --trace."
+    since: "p0"
+    offAllowed: false
+  - id: contract.inconclusive
+    stage: run
+    severity: warning
+    kind: soft
+    rationale: "The last attempt did not pass or the trace was cut short, so conformance cannot be judged this run (DOS-14.6)."
+    fix: "Re-run until the test passes with a complete trace."
+    since: "p0"
+    offAllowed: false
+  - id: decision.id-reuse
+    stage: create
+    severity: error
+    kind: hard
+    rationale: "A decision id is the hash of its content; the same id with different content means the append-only record was rewritten (DOS-13)."
+    fix: "Restore the original entry; record the new decision as a new entry that supersedes it."
+    since: "p0"
+    offAllowed: false
+  - id: decision.mutated
+    stage: create
+    severity: error
+    kind: hard
+    rationale: "A decision already in git HEAD was edited or deleted; the decision layer is append-only so history stays auditable (DOS-13)."
+    fix: "Restore the entry from git and add a superseding entry instead."
+    since: "p0"
+    offAllowed: false
+  - id: decision.in-run
+    stage: deliver
+    severity: error
+    kind: hard
+    rationale: "A waiver, gate-override or contract-approval created inside the run being delivered, or not yet in git HEAD, lets the run approve itself (DOS-13, red-team #3)."
+    fix: "Commit the decision through review before delivering, or pass --accept-in-run on a TTY with confirmation."
+    since: "p0"
+    offAllowed: false
+  - id: gate.override-rejected
+    stage: create
+    severity: error
+    kind: hard
+    rationale: "An override that targets a hard rule, uses a wildcard scope, lacks a reason of at least 15 characters, or switches off a rule outside the offAllowed set is invalid and must not silently widen the gate (OES-11)."
+    fix: "Narrow the scope to one unit, give a real reason, and override only soft rules."
+    since: "p0"
+    offAllowed: false

package/dist/harness/counted-assertions.d.ts

@@ -0,0 +1,2 @@
+export declare function countedAssertions(stepsText: string): number;
+//# sourceMappingURL=counted-assertions.d.ts.map

package/dist/harness/counted-assertions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"counted-assertions.d.ts","sourceRoot":"","sources":["../../src/harness/counted-assertions.ts"],"names":[],"mappings":"AAqBA,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAW3D"}