@terpjs/spec 0.14.0 → 0.15.0

package/catalog/schema.json

@@ -1,95 +1,95 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://terp.dev/spec/catalog/schema.json",
-  "title": "Terp Standard catalog entry",
-  "description": "One enforced Terp rule as data (ADR 0080). The file lives at catalog/<surface>/<rule>.json and its id must equal '<surface>/<rule>'. The spec version an entry belongs to is the checked-in spec/VERSION.",
-  "type": "object",
-  "required": ["id", "surface", "title", "intent", "layer", "enforcement", "runtime", "corpus"],
-  "additionalProperties": false,
-  "properties": {
-    "id": {
-      "type": "string",
-      "description": "Stack-neutral rule id: backend/<snake_case> or frontend/<kebab-case>. Findings are attributed to this id (see ../findings.schema.json).",
-      "pattern": "^(backend/[a-z0-9_]+|frontend/[a-z0-9-]+)$"
-    },
-    "surface": { "enum": ["backend", "frontend"] },
-    "title": { "type": "string", "minLength": 1 },
-    "intent": { "type": "string", "minLength": 1 },
-    "layer": {
-      "description": "Cheapest faithful verification for a NEW stack: black-box (probe a running app), static-portable (generic source patterns), static-bespoke (needs deep framework knowledge).",
-      "enum": ["black-box", "static-portable", "static-bespoke"]
-    },
-    "enforcement": {
-      "description": "How the reference implementation enforces the rule today. At least one build-time entry; a 'runtime' entry records the fail-closed runtime half of the two-layer discipline, and a 'black-box' entry names the conformance-suite probe.",
-      "type": "array",
-      "minItems": 1,
-      "items": {
-        "type": "object",
-        "required": ["kind", "tool", "ref"],
-        "additionalProperties": false,
-        "properties": {
-          "kind": { "enum": ["build-time", "runtime", "black-box"] },
-          "tool": { "type": "string", "minLength": 1 },
-          "ref": { "type": "string", "minLength": 1 },
-          "reported_as": {
-            "type": "string",
-            "description": "Frontend build-time only: the ESLint rule id violations surface as. Several catalog rules share a core rule id, so conformance findings are attributed via the adapter's catalogRuleId mapping, never this field."
-          }
-        }
-      }
-    },
-    "runtime": {
-      "description": "The rule's runtime-applicability classification: whether the two-layer discipline pairs this build-time rule with a fail-closed runtime control. 'required' means the reference implementation owns such a control and the entry declares it (a kind 'runtime' enforcement entry whose ref must resolve — the parity test fails otherwise). 'not-applicable' means the invariant is a property of the authored artifact (source form, imports, markers, checked-in files) that is erased or already materialised by the time the app runs, so no runtime seam can enforce it — the rationale states why. 'deferred' means a runtime control would add independent fidelity on a seam the framework owns but has not shipped yet — an explicit, reviewed gap, never a silent one. Coherence is held by the spec suite: 'required' iff a kind 'runtime' enforcement entry exists; an exemption always carries a rationale.",
-      "type": "object",
-      "required": ["applicability"],
-      "additionalProperties": false,
-      "properties": {
-        "applicability": { "enum": ["required", "not-applicable", "deferred"] },
-        "rationale": {
-          "type": "string",
-          "description": "Why the rule is exempt from the runtime half (mandatory for 'not-applicable' and 'deferred'; optional for 'required', e.g. to record which vector the control covers).",
-          "minLength": 1
-        },
-        "tracking": {
-          "type": "string",
-          "description": "Where the deferral is tracked (mandatory for 'deferred', held by the spec suite): an issue URL, or the reference implementation's tracker document plus the named seam — so a deferred runtime control has a lifecycle instead of being an open-ended gap.",
-          "minLength": 1
-        }
-      }
-    },
-    "restricted_surface": {
-      "type": "array",
-      "description": "The restricted-surface.json keys this rule realises (frontend prohibition rules only). The structural half of the citation: the spec suite resolves each key against the refused surface and requires every key to be claimed by some rule, so the linkage never depends on parsing prose.",
-      "minItems": 1,
-      "items": {
-        "enum": [
-          "restrictedElements",
-          "restrictedAttributes",
-          "restrictedGlobals",
-          "restrictedMemberCalls",
-          "styleImportExtensions",
-          "deepImportPathSegments"
-        ]
-      }
-    },
-    "reference": {
-      "type": "string",
-      "description": "Reference-implementation metadata: the compliant realisation the reference stack offers (component / helper names). Not normative — the title and intent state the stack-neutral invariant; another stack ships its own realisation.",
-      "minLength": 1
-    },
-    "opt_out": {
-      "type": "string",
-      "description": "The reference realisation of the abstract escape-hatch contract: a justified inline marker naming the CATALOG RULE NAME (the <rule> half of the id — never a tool-internal rule id, mirroring findings attribution), counted against the app's checked-in budget ratchet. Another stack implements the same contract with its own comment syntax; only the semantics are normative. Omitted exactly by the escape-hatch governance rules themselves (the budget ratchet, the ungoverned-marker condition) — governance cannot be waived by the mechanism it governs. The spec suite holds both the derivation and the omissions.",
-      "minLength": 1
-    },
-    "guide_topic": {
-      "type": "string",
-      "description": "Reference-implementation metadata (backend only): the `terp guide` topic teaching the compliant pattern. Not normative for other stacks.",
-      "minLength": 1
-    },
-    "corpus": {
-      "type": "boolean",
-      "description": "Whether corpus/<id>/ cases exist (held to the directory truth by the parity test; a covered rule needs at least one violation-* AND one compliant-* case)."
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://terp.dev/spec/catalog/schema.json",
+  "title": "Terp Standard catalog entry",
+  "description": "One enforced Terp rule as data (ADR 0080). The file lives at catalog/<surface>/<rule>.json and its id must equal '<surface>/<rule>'. The spec version an entry belongs to is the checked-in spec/VERSION.",
+  "type": "object",
+  "required": ["id", "surface", "title", "intent", "layer", "enforcement", "runtime", "corpus"],
+  "additionalProperties": false,
+  "properties": {
+    "id": {
+      "type": "string",
+      "description": "Stack-neutral rule id: backend/<snake_case> or frontend/<kebab-case>. Findings are attributed to this id (see ../findings.schema.json).",
+      "pattern": "^(backend/[a-z0-9_]+|frontend/[a-z0-9-]+)$"
+    },
+    "surface": { "enum": ["backend", "frontend"] },
+    "title": { "type": "string", "minLength": 1 },
+    "intent": { "type": "string", "minLength": 1 },
+    "layer": {
+      "description": "Cheapest faithful verification for a NEW stack: black-box (probe a running app), static-portable (generic source patterns), static-bespoke (needs deep framework knowledge).",
+      "enum": ["black-box", "static-portable", "static-bespoke"]
+    },
+    "enforcement": {
+      "description": "How the reference implementation enforces the rule today. At least one build-time entry; a 'runtime' entry records the fail-closed runtime half of the two-layer discipline, and a 'black-box' entry names the conformance-suite probe.",
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["kind", "tool", "ref"],
+        "additionalProperties": false,
+        "properties": {
+          "kind": { "enum": ["build-time", "runtime", "black-box"] },
+          "tool": { "type": "string", "minLength": 1 },
+          "ref": { "type": "string", "minLength": 1 },
+          "reported_as": {
+            "type": "string",
+            "description": "Frontend build-time only: the ESLint rule id violations surface as. Several catalog rules share a core rule id, so conformance findings are attributed via the adapter's catalogRuleId mapping, never this field."
+          }
+        }
+      }
+    },
+    "runtime": {
+      "description": "The rule's runtime-applicability classification: whether the two-layer discipline pairs this build-time rule with a fail-closed runtime control. 'required' means the reference implementation owns such a control and the entry declares it (a kind 'runtime' enforcement entry whose ref must resolve — the parity test fails otherwise). 'not-applicable' means the invariant is a property of the authored artifact (source form, imports, markers, checked-in files) that is erased or already materialised by the time the app runs, so no runtime seam can enforce it — the rationale states why. 'deferred' means a runtime control would add independent fidelity on a seam the framework owns but has not shipped yet — an explicit, reviewed gap, never a silent one. Coherence is held by the spec suite: 'required' iff a kind 'runtime' enforcement entry exists; an exemption always carries a rationale.",
+      "type": "object",
+      "required": ["applicability"],
+      "additionalProperties": false,
+      "properties": {
+        "applicability": { "enum": ["required", "not-applicable", "deferred"] },
+        "rationale": {
+          "type": "string",
+          "description": "Why the rule is exempt from the runtime half (mandatory for 'not-applicable' and 'deferred'; optional for 'required', e.g. to record which vector the control covers).",
+          "minLength": 1
+        },
+        "tracking": {
+          "type": "string",
+          "description": "Where the deferral is tracked (mandatory for 'deferred', held by the spec suite): an issue URL, or the reference implementation's tracker document plus the named seam — so a deferred runtime control has a lifecycle instead of being an open-ended gap.",
+          "minLength": 1
+        }
+      }
+    },
+    "restricted_surface": {
+      "type": "array",
+      "description": "The restricted-surface.json keys this rule realises (frontend prohibition rules only). The structural half of the citation: the spec suite resolves each key against the refused surface and requires every key to be claimed by some rule, so the linkage never depends on parsing prose.",
+      "minItems": 1,
+      "items": {
+        "enum": [
+          "restrictedElements",
+          "restrictedAttributes",
+          "restrictedGlobals",
+          "restrictedMemberCalls",
+          "styleImportExtensions",
+          "deepImportPathSegments"
+        ]
+      }
+    },
+    "reference": {
+      "type": "string",
+      "description": "Reference-implementation metadata: the compliant realisation the reference stack offers (component / helper names). Not normative — the title and intent state the stack-neutral invariant; another stack ships its own realisation.",
+      "minLength": 1
+    },
+    "opt_out": {
+      "type": "string",
+      "description": "The reference realisation of the abstract escape-hatch contract: a justified inline marker naming the CATALOG RULE NAME (the <rule> half of the id — never a tool-internal rule id, mirroring findings attribution), counted against the app's checked-in budget ratchet. Another stack implements the same contract with its own comment syntax; only the semantics are normative. Omitted exactly by the escape-hatch governance rules themselves (the budget ratchet, the ungoverned-marker condition) — governance cannot be waived by the mechanism it governs. The spec suite holds both the derivation and the omissions.",
+      "minLength": 1
+    },
+    "guide_topic": {
+      "type": "string",
+      "description": "Reference-implementation metadata (backend only): the `terp guide` topic teaching the compliant pattern. Not normative for other stacks.",
+      "minLength": 1
+    },
+    "corpus": {
+      "type": "boolean",
+      "description": "Whether corpus/<id>/ cases exist (held to the directory truth by the parity test; a covered rule needs at least one violation-* AND one compliant-* case)."
+    }
+  }
+}

package/corpus/PENDING.json

@@ -1,4 +1,4 @@
-{
-  "_comment": "The corpus-coverage ratchet: every catalog rule still WITHOUT corpus cases, exactly. Seeding a rule's corpus removes it here (the list only shrinks); a new rule without corpus must be added here explicitly, so uncovered rules stay visible and reviewed. Held to the catalog truth by tests/architecture/test_spec_catalog.py.",
-  "pending": []
-}
+{
+  "_comment": "The corpus-coverage ratchet: every catalog rule still WITHOUT corpus cases, exactly. Seeding a rule's corpus removes it here (the list only shrinks); a new rule without corpus must be added here explicitly, so uncovered rules stay visible and reviewed. Held to the catalog truth by tests/architecture/test_spec_catalog.py.",
+  "pending": []
+}

package/corpus/RESIDUALS.json

@@ -1,21 +1,21 @@
-{
-  "_comment": "The detector-residual ratchet: the statically-erased or renamed forms DELIBERATELY outside the corpus contract, per rule — known limits of precise, low-false-positive detection, recorded as data so a second implementation neither over-fits nor under-claims. Governed like corpus/PENDING.json: the list only shrinks — closing a residual means seeding the corpus case that contracts it and deleting the entry here, never silently. Every key must be a catalog rule id; held to the catalog by tests/test_standard.py.",
-  "residuals": {
-    "backend/no_dynamic_sql": [
-      "an alias-renamed symbol import (`from sqlalchemy import text as sql_text`) is not required to be resolved to `text`"
-    ],
-    "backend/no_raw_outbound_http": [
-      "dynamic import (`importlib.import_module(\"httpx\")`) is not required to be seen as an import"
-    ],
-    "frontend/generated-client-only": [
-      "egress through receivers other than `window`/`globalThis` (`self.fetch`) is not required"
-    ],
-    "frontend/no-dom-html-injection": [
-      "a computed sink (`el[\"innerHTML\"] = ...`) is not required to be recognised"
-    ],
-    "frontend/no-eval": [
-      "`Function(\"...\")` called without `new` is not required",
-      "a computed global (`window[\"eval\"]`) is not required to be recognised"
-    ]
-  }
-}
+{
+  "_comment": "The detector-residual ratchet: the statically-erased or renamed forms DELIBERATELY outside the corpus contract, per rule — known limits of precise, low-false-positive detection, recorded as data so a second implementation neither over-fits nor under-claims. Governed like corpus/PENDING.json: the list only shrinks — closing a residual means seeding the corpus case that contracts it and deleting the entry here, never silently. Every key must be a catalog rule id; held to the catalog by tests/test_standard.py.",
+  "residuals": {
+    "backend/no_dynamic_sql": [
+      "an alias-renamed symbol import (`from sqlalchemy import text as sql_text`) is not required to be resolved to `text`"
+    ],
+    "backend/no_raw_outbound_http": [
+      "dynamic import (`importlib.import_module(\"httpx\")`) is not required to be seen as an import"
+    ],
+    "frontend/generated-client-only": [
+      "egress through receivers other than `window`/`globalThis` (`self.fetch`) is not required"
+    ],
+    "frontend/no-dom-html-injection": [
+      "a computed sink (`el[\"innerHTML\"] = ...`) is not required to be recognised"
+    ],
+    "frontend/no-eval": [
+      "`Function(\"...\")` called without `new` is not required",
+      "a computed global (`window[\"eval\"]`) is not required to be recognised"
+    ]
+  }
+}

package/corpus/backend/alembic_downgrades_not_empty/compliant-01/modules/notes/migrations/versions/0001_change.py

@@ -1,6 +1,6 @@
-def upgrade():
-    op.add_column("notes", column)
-
-
-def downgrade():
-    op.drop_column("notes", "title")
+def upgrade():
+    op.add_column("notes", column)
+
+
+def downgrade():
+    op.drop_column("notes", "title")

package/corpus/backend/alembic_downgrades_not_empty/violation-01/modules/notes/migrations/versions/0001_change.py

@@ -1,6 +1,6 @@
-def upgrade():
-    op.add_column("notes", column)
-
-
-def downgrade():
-    pass
+def upgrade():
+    op.add_column("notes", column)
+
+
+def downgrade():
+    pass

package/corpus/backend/base_query_not_overridden/compliant-01/modules/notes/service.py

@@ -1,8 +1,8 @@
-from terp.core import BaseService
-
-
-class NoteService(BaseService):
-    model = Note
-
-    def business_filters(self):
-        return [Note.archived == False]
+from terp.core import BaseService
+
+
+class NoteService(BaseService):
+    model = Note
+
+    def business_filters(self):
+        return [Note.archived == False]

package/corpus/backend/base_query_not_overridden/compliant-02/modules/notes/service.py

@@ -1,8 +1,8 @@
-from terp.core import BaseService
-
-
-class NoteService(BaseService):
-    model = Note
-
-    def business_filters(self):
-        return [Note.archived == False]
+from terp.core import BaseService
+
+
+class NoteService(BaseService):
+    model = Note
+
+    def business_filters(self):
+        return [Note.archived == False]

package/corpus/backend/base_query_not_overridden/violation-01/modules/notes/service.py

@@ -1,8 +1,8 @@
-from terp.core import BaseService
-
-
-class NoteService(BaseService):
-    model = Note
-
-    def base_query(self):
-        return super().base_query().where(Note.archived == False)
+from terp.core import BaseService
+
+
+class NoteService(BaseService):
+    model = Note
+
+    def base_query(self):
+        return super().base_query().where(Note.archived == False)

package/corpus/backend/base_query_not_overridden/violation-02/expected-findings.json

@@ -1,7 +1,7 @@
-[
-  {
-    "rule": "backend/base_query_not_overridden",
-    "path": "modules/notes/service.py",
-    "line": 7
-  }
-]
+[
+  {
+    "rule": "backend/base_query_not_overridden",
+    "path": "modules/notes/service.py",
+    "line": 7
+  }
+]

package/corpus/backend/base_query_not_overridden/violation-02/modules/notes/service.py

@@ -1,8 +1,8 @@
-from terp.core import BaseService
-
-
-class NoteService(BaseService):
-    model = Note
-
-    async def base_query(self):
-        return (await super().base_query()).where(Note.archived == False)
+from terp.core import BaseService
+
+
+class NoteService(BaseService):
+    model = Note
+
+    async def base_query(self):
+        return (await super().base_query()).where(Note.archived == False)

package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/models.py

@@ -1,6 +1,6 @@
-from sqlmodel import Field
-from terp.core import BaseTable
-
-
-class Note(BaseTable, table=True):
-    title: str = Field(max_length=200)
+from sqlmodel import Field
+from terp.core import BaseTable
+
+
+class Note(BaseTable, table=True):
+    title: str = Field(max_length=200)

package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/module.py

@@ -1,7 +1,7 @@
-from terp.core import ModuleSpec, Policy, Roles
-
-spec = ModuleSpec(
-    name="notes",
-    router=router,
-    policy=Policy(read=Roles.VIEWER, write=Roles.EDITOR),
-)
+from terp.core import ModuleSpec, Policy, Roles
+
+spec = ModuleSpec(
+    name="notes",
+    router=router,
+    policy=Policy(read=Roles.VIEWER, write=Roles.EDITOR),
+)

package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/router.py

@@ -1,3 +1,3 @@
-@router.get('/', response_model=Page[NoteRead])
-def list_notes() -> Page[NoteRead]:
-    return Page()
+@router.get('/', response_model=Page[NoteRead])
+def list_notes() -> Page[NoteRead]:
+    return Page()

package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/schemas.py

@@ -1,10 +1,10 @@
-from sqlmodel import Field
-from terp.core import BaseSchema
-
-
-class NoteCreate(BaseSchema):
-    title: str = Field(max_length=200)
-
-
-class NoteRead(BaseSchema):
-    title: str
+from sqlmodel import Field
+from terp.core import BaseSchema
+
+
+class NoteCreate(BaseSchema):
+    title: str = Field(max_length=200)
+
+
+class NoteRead(BaseSchema):
+    title: str

package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/service.py

@@ -1,5 +1,5 @@
-from terp.core import BaseService
-
-
-class NoteService(BaseService):
-    model = Note
+from terp.core import BaseService
+
+
+class NoteService(BaseService):
+    model = Note

package/corpus/backend/canonical_module_shape/violation-01/modules/notes/router.py

@@ -1,3 +1,3 @@
-@router.get('/', response_model=Page[NoteRead])
-def list_notes() -> Page[NoteRead]:
-    return Page()
+@router.get('/', response_model=Page[NoteRead])
+def list_notes() -> Page[NoteRead]:
+    return Page()

package/corpus/backend/datetime_columns_are_timezone_aware/compliant-01/modules/notes/models.py

@@ -1,12 +1,12 @@
-from datetime import datetime
-
-from sqlalchemy import DateTime
-from sqlmodel import Field
-
-from terp.core import BaseTable
-
-
-class Note(BaseTable, table=True):
-    title: str = Field(max_length=200)
-    # The column type pins the zone, so the stored moment stays unambiguous.
-    due_at: datetime | None = Field(default=None, sa_type=DateTime(timezone=True))
+from datetime import datetime
+
+from sqlalchemy import DateTime
+from sqlmodel import Field
+
+from terp.core import BaseTable
+
+
+class Note(BaseTable, table=True):
+    title: str = Field(max_length=200)
+    # The column type pins the zone, so the stored moment stays unambiguous.
+    due_at: datetime | None = Field(default=None, sa_type=DateTime(timezone=True))

package/corpus/backend/datetime_columns_are_timezone_aware/violation-01/modules/notes/models.py

@@ -1,12 +1,12 @@
-from datetime import datetime
-
-from sqlmodel import Field
-
-from terp.core import BaseTable
-
-
-class Note(BaseTable, table=True):
-    title: str = Field(max_length=200)
-    # No column type is named, so this maps to naive storage: the database
-    # drops the zone of whatever aware value the service hands it.
-    due_at: datetime | None = Field(default=None, index=True)
+from datetime import datetime
+
+from sqlmodel import Field
+
+from terp.core import BaseTable
+
+
+class Note(BaseTable, table=True):
+    title: str = Field(max_length=200)
+    # No column type is named, so this maps to naive storage: the database
+    # drops the zone of whatever aware value the service hands it.
+    due_at: datetime | None = Field(default=None, index=True)

package/corpus/backend/datetime_columns_are_timezone_aware/violation-02/modules/notes/models.py

@@ -1,13 +1,13 @@
-from datetime import datetime
-
-from sqlalchemy import DateTime
-from sqlmodel import Field
-
-from terp.core import BaseTable
-
-
-class Note(BaseTable, table=True):
-    title: str = Field(max_length=200)
-    # An explicit column type that is declared without a timezone is naive
-    # storage just as thoroughly as naming no type at all.
-    due_at: datetime = Field(sa_type=DateTime(timezone=False))
+from datetime import datetime
+
+from sqlalchemy import DateTime
+from sqlmodel import Field
+
+from terp.core import BaseTable
+
+
+class Note(BaseTable, table=True):
+    title: str = Field(max_length=200)
+    # An explicit column type that is declared without a timezone is naive
+    # storage just as thoroughly as naming no type at all.
+    due_at: datetime = Field(sa_type=DateTime(timezone=False))

package/corpus/backend/datetime_columns_are_timezone_aware/violation-03/modules/notes/models.py

@@ -1,15 +1,15 @@
-from datetime import datetime
-
-from sqlmodel import Field
-
-from terp.core import BaseTable
-
-
-class ArchivedMixin:
-    # Declaring the column one class up does not change where it lands: the
-    # table still gets a naive timestamp column.
-    archived_at: datetime | None = Field(default=None)
-
-
-class Note(ArchivedMixin, BaseTable, table=True):
-    title: str = Field(max_length=200)
+from datetime import datetime
+
+from sqlmodel import Field
+
+from terp.core import BaseTable
+
+
+class ArchivedMixin:
+    # Declaring the column one class up does not change where it lands: the
+    # table still gets a naive timestamp column.
+    archived_at: datetime | None = Field(default=None)
+
+
+class Note(ArchivedMixin, BaseTable, table=True):
+    title: str = Field(max_length=200)

package/corpus/backend/escape_hatch_budget/compliant-01/escape-hatch-budget.json

@@ -1,3 +1,3 @@
-{
-  "arch-allow-no-dynamic-sql": 1
-}
+{
+  "arch-allow-no-dynamic-sql": 1
+}

package/corpus/backend/escape_hatch_budget/compliant-01/modules/notes/service.py

@@ -1,2 +1,2 @@
-def legacy_report(session, sql):
-    return session.execute(text(sql))  # arch-allow-no-dynamic-sql: legacy reporting query, parameterised upstream
+def legacy_report(session, sql):
+    return session.execute(text(sql))  # arch-allow-no-dynamic-sql: legacy reporting query, parameterised upstream

package/corpus/backend/escape_hatch_budget/compliant-02/escape-hatch-budget.json

@@ -1 +1 @@
-{}
+{}

package/corpus/backend/escape_hatch_budget/compliant-02/modules/notes/service.py

@@ -1,4 +1,4 @@
-def render_help():
-    # Marker-shaped text inside a string is not counted by the budget ratchet:
-    # with an empty budget this app is exactly in balance.
-    return "suppress with '# arch-allow-no-dynamic-sql: <reason>' after review"
+def render_help():
+    # Marker-shaped text inside a string is not counted by the budget ratchet:
+    # with an empty budget this app is exactly in balance.
+    return "suppress with '# arch-allow-no-dynamic-sql: <reason>' after review"

package/corpus/backend/escape_hatch_budget/violation-01/escape-hatch-budget.json

@@ -1 +1 @@
-{}
+{}

package/corpus/backend/escape_hatch_budget/violation-01/modules/notes/service.py

@@ -1,2 +1,2 @@
-def legacy_report(session, sql):
-    return session.execute(text(sql))  # arch-allow-no-dynamic-sql: legacy reporting query, parameterised upstream
+def legacy_report(session, sql):
+    return session.execute(text(sql))  # arch-allow-no-dynamic-sql: legacy reporting query, parameterised upstream

package/corpus/backend/escape_hatch_budget/violation-02/escape-hatch-budget.json

@@ -1,3 +1,3 @@
-{
-  "arch-allow-made-up-rule": 1
-}
+{
+  "arch-allow-made-up-rule": 1
+}

package/corpus/backend/escape_hatch_budget/violation-02/modules/notes/service.py

@@ -1,4 +1,4 @@
-def legacy_report():
-    # A marker (or budget key) that names no rule with a governed opt-out is
-    # refused outright - it can never be budgeted into legitimacy.
-    return None  # arch-allow-made-up-rule: stale name
+def legacy_report():
+    # A marker (or budget key) that names no rule with a governed opt-out is
+    # refused outright - it can never be budgeted into legitimacy.
+    return None  # arch-allow-made-up-rule: stale name