@tyroneross/navgator 0.2.2 → 0.10.0

package/dist/audit/self-test.js

@@ -0,0 +1,254 @@
+/**
+ * NavGator audit self-test — Run 4 (2026-09-05).
+ *
+ * "A gate is not evidence until it has failed on a planted defect." This
+ * module clones the stored graph IN MEMORY, plants K known defects per class,
+ * runs the real audit at the stated plan with the planted facts guaranteed to
+ * be inspected, and reports per-class recall of the instrument.
+ *
+ * What it measures: verifier sensitivity — given that a defective fact is
+ * inspected, does the verifier flag it? Sampling power (the chance a random
+ * sample reaches a given defect) is a separate number reported alongside as
+ * `sampling_power`, computed from the plan, not from the plant. Research
+ * packet §2.5(c): a seeded-defect check "measures recall on changes ... it
+ * does not estimate recall on the standing map."
+ *
+ * Nothing is written to disk. MISSED_EDGE is LLM-only and reported not-testable.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { runAudit } from './index.js';
+import { cochranSize, producersRisk, Z } from './sampler.js';
+const PREFIX = '__navgator_selftest_';
+function clone(o) {
+    return JSON.parse(JSON.stringify(o));
+}
+/** Pick a real, existing source file to anchor planted facts to. */
+function pickExistingFile(root, hashes, connections) {
+    const candidates = [];
+    if (hashes?.files)
+        candidates.push(...Object.keys(hashes.files));
+    for (const c of connections)
+        if (c.code_reference?.file)
+            candidates.push(c.code_reference.file);
+    candidates.push('package.json');
+    for (const rel of candidates) {
+        try {
+            if (fs.statSync(path.join(root, rel)).isFile())
+                return rel;
+        }
+        catch {
+            /* try next */
+        }
+    }
+    return null;
+}
+export async function runSelfTest(graph, opts) {
+    const K = opts.K ?? 10;
+    const threshold = opts.threshold ?? 0.9;
+    const plan = opts.plan ?? 'AQL';
+    const notes = [];
+    const components = graph.components.map((c) => clone(c));
+    const connections = graph.connections.map((c) => clone(c));
+    const now = Date.now();
+    const anchorFile = pickExistingFile(opts.projectRoot, opts.hashes, connections);
+    const anchorComp = components[0];
+    if (!anchorComp) {
+        notes.push('graph has no components; nothing to plant');
+    }
+    const planted = {
+        HALLUCINATED_COMPONENT: [],
+        HALLUCINATED_EDGE: [],
+        WRONG_ENDPOINT: [],
+        STALE_REFERENCE: [],
+        DEDUP_COLLISION: [],
+        MISSED_EDGE: [],
+    };
+    const forceComponents = [];
+    const forceConnections = [];
+    const forceFiles = [];
+    // ---- HALLUCINATED_COMPONENT: config file that does not exist ----
+    for (let i = 0; i < K; i++) {
+        const id = `COMP${PREFIX}hc_${i}`;
+        const comp = {
+            component_id: id,
+            name: `${PREFIX}hc_${i}`,
+            type: 'config',
+            role: { purpose: 'self-test plant', layer: 'infra', critical: false },
+            source: { detection_method: 'manual', config_files: [`.navgator-selftest/missing-${i}.json`], confidence: 1 },
+            connects_to: [],
+            connected_from: [],
+            status: 'active',
+            tags: ['selftest'],
+            timestamp: now,
+            last_updated: now,
+        };
+        components.push(comp);
+        forceComponents.push(comp);
+        planted.HALLUCINATED_COMPONENT.push(id);
+    }
+    // ---- HALLUCINATED_EDGE: `to` endpoint not in the graph ----
+    if (anchorComp && anchorFile) {
+        for (let i = 0; i < K; i++) {
+            const id = `CONN${PREFIX}he_${i}`;
+            const conn = {
+                connection_id: id,
+                from: { component_id: anchorComp.component_id, location: { file: anchorFile, line: 1 } },
+                to: { component_id: `COMP${PREFIX}missing_${i}` },
+                connection_type: 'imports',
+                code_reference: { file: anchorFile, symbol: 'selftest' },
+                detected_from: 'selftest',
+                confidence: 1,
+                timestamp: now,
+                last_verified: now,
+            };
+            connections.push(conn);
+            forceConnections.push(conn);
+            planted.HALLUCINATED_EDGE.push(id);
+        }
+    }
+    else
+        notes.push('HALLUCINATED_EDGE not planted: no anchor component/file');
+    // ---- WRONG_ENDPOINT: target exists, but neither symbol nor target name is in the file ----
+    if (anchorComp && anchorFile) {
+        for (let i = 0; i < K; i++) {
+            const targetId = `COMP${PREFIX}we_target_${i}`;
+            const target = {
+                component_id: targetId,
+                name: `${PREFIX}absent_name_${i}`,
+                type: 'service',
+                role: { purpose: 'self-test plant', layer: 'external', critical: false },
+                source: { detection_method: 'manual', config_files: [anchorFile], confidence: 1 },
+                connects_to: [],
+                connected_from: [],
+                status: 'active',
+                tags: ['selftest'],
+                timestamp: now,
+                last_updated: now,
+            };
+            components.push(target);
+            const id = `CONN${PREFIX}we_${i}`;
+            const conn = {
+                connection_id: id,
+                from: { component_id: anchorComp.component_id, location: { file: anchorFile, line: 1 } },
+                to: { component_id: targetId },
+                connection_type: 'service-call',
+                code_reference: { file: anchorFile, symbol: `${PREFIX}absent_symbol_${i}` },
+                detected_from: 'selftest',
+                confidence: 1,
+                timestamp: now,
+                last_verified: now,
+            };
+            connections.push(conn);
+            forceConnections.push(conn);
+            planted.WRONG_ENDPOINT.push(id);
+        }
+    }
+    else
+        notes.push('WRONG_ENDPOINT not planted: no anchor component/file');
+    // ---- STALE_REFERENCE: recorded hash altered for K existing files ----
+    let hashes = opts.hashes ? clone(opts.hashes) : null;
+    if (hashes?.files) {
+        const existing = Object.keys(hashes.files).filter((rel) => {
+            try {
+                return fs.statSync(path.join(opts.projectRoot, rel)).isFile();
+            }
+            catch {
+                return false;
+            }
+        });
+        for (const rel of existing.slice(0, K)) {
+            hashes.files[rel] = { ...hashes.files[rel], hash: `${PREFIX}${'0'.repeat(40)}` };
+            forceFiles.push(rel);
+            planted.STALE_REFERENCE.push(rel);
+        }
+        if (existing.length < K)
+            notes.push(`STALE_REFERENCE: only ${existing.length} recorded files exist on disk (wanted ${K})`);
+    }
+    else {
+        hashes = null;
+        notes.push('STALE_REFERENCE not planted: no hashes.json');
+    }
+    // ---- DEDUP_COLLISION: duplicate (type, name, primary config) triples ----
+    const originals = graph.components.slice(0, K);
+    for (let i = 0; i < originals.length; i++) {
+        const src = originals[i];
+        const id = `COMP${PREFIX}dup_${i}`;
+        const dup = { ...clone(src), component_id: id, stable_id: undefined };
+        components.push(dup);
+        planted.DEDUP_COLLISION.push(id);
+    }
+    // ---- Run the real audit with the planted facts forced into the inspection set ----
+    const auditOpts = {
+        plan,
+        hashes,
+        rand: opts.rand,
+        isMcpMode: opts.isMcpMode,
+        oracles: false,
+        evidenceCap: Number.MAX_SAFE_INTEGER,
+        forceInclude: { components: forceComponents, connections: forceConnections, files: forceFiles },
+        disabledVerifiers: opts.disabledVerifiers,
+        priorAuditCount: 1, // routine sizes; the plant is what we measure, not the sample
+    };
+    const report = await runAudit({ components, connections }, opts.config, opts.projectRoot, auditOpts);
+    if (!report)
+        throw new Error('self-test: audit returned null');
+    const detectedByClass = new Map();
+    for (const e of report.defect_evidence ?? []) {
+        if (e.ok || !e.class)
+            continue;
+        let s = detectedByClass.get(e.class);
+        if (!s) {
+            s = new Set();
+            detectedByClass.set(e.class, s);
+        }
+        s.add(e.id);
+    }
+    const classes = Object.keys(planted).map((cls) => {
+        if (cls === 'MISSED_EDGE') {
+            return { class: cls, testable: false, planted: 0, detected: 0, recall: null, missed_ids: [], note: 'MISSED_EDGE untestable in CLI mode (LLM-only verifier)' };
+        }
+        const ids = planted[cls];
+        if (ids.length === 0)
+            return { class: cls, testable: false, planted: 0, detected: 0, recall: null, missed_ids: [], note: 'nothing planted' };
+        const det = detectedByClass.get(cls) ?? new Set();
+        const hit = ids.filter((id) => det.has(id));
+        return {
+            class: cls,
+            testable: true,
+            planted: ids.length,
+            detected: hit.length,
+            recall: hit.length / ids.length,
+            missed_ids: ids.filter((id) => !det.has(id)).slice(0, 10),
+        };
+    });
+    const testable = classes.filter((c) => c.testable);
+    const pass = testable.length > 0 && testable.every((c) => (c.recall ?? 0) >= threshold);
+    const N_components = graph.components.length;
+    const N_connections = graph.connections.length;
+    const n_components = report.precision?.n_components ?? 0;
+    const n_connections = report.precision?.n_connections ?? 0;
+    return {
+        K,
+        plan,
+        threshold,
+        pass,
+        classes,
+        sampling_power: {
+            N_components,
+            N_connections,
+            n_components,
+            n_connections,
+            p_single_component: N_components > 0 ? Math.min(1, n_components / N_components) : 0,
+            p_single_connection: N_connections > 0 ? Math.min(1, n_connections / N_connections) : 0,
+            screen_power_at_ltpd: producersRisk(report.screen?.n ?? 45, 0.05),
+        },
+        notes: [
+            'five deterministic classes tested (HALLUCINATED_COMPONENT, HALLUCINATED_EDGE, WRONG_ENDPOINT, STALE_REFERENCE, DEDUP_COLLISION); MISSED_EDGE untestable in CLI mode (LLM-only)',
+            ...notes,
+            `founding connection sample for this population would be n=${N_connections > 0 ? cochranSize(0.9, 0.03, Z.Z_95, N_connections) : 0}`,
+        ],
+        audit: { sampled: report.sampled, defects: report.defects, verdict: report.verdict },
+    };
+}
+//# sourceMappingURL=self-test.js.map

package/dist/audit/self-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-test.js","sourceRoot":"","sources":["../../src/audit/self-test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAqC,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAkD7D,MAAM,MAAM,GAAG,sBAAsB,CAAC;AAEtC,SAAS,KAAK,CAAI,CAAI;IACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAM,CAAC;AAC5C,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAoC,EAAE,WAAkD;IAC9H,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,MAAM,EAAE,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAChG,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,GAAG,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAA+G,EAC/G,IAAqB;IAErB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACxC,MAAM,IAAI,GAAc,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,UAAU,GAA4B,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAA6B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAkC;QAC7C,sBAAsB,EAAE,EAAE;QAC1B,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,MAAM,eAAe,GAA4B,EAAE,CAAC;IACpD,MAAM,gBAAgB,GAA6B,EAAE,CAAC;IACtD,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,oEAAoE;IACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,OAAO,MAAM,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAA0B;YAClC,YAAY,EAAE,EAAE;YAChB,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE;YACxB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrE,MAAM,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;YAC7G,WAAW,EAAE,EAAE;YACf,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,GAAG;SAClB,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,8DAA8D;IAC9D,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,OAAO,MAAM,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAA2B;gBACnC,aAAa,EAAE,EAAE;gBACjB,IAAI,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;gBACxF,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,MAAM,WAAW,CAAC,EAAE,EAAE;gBACjD,eAAe,EAAE,SAAS;gBAC1B,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;gBACxD,aAAa,EAAE,UAAU;gBACzB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,GAAG;gBACd,aAAa,EAAE,GAAG;aACnB,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;;QAAM,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAE7E,6FAA6F;IAC7F,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,OAAO,MAAM,aAAa,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAA0B;gBACpC,YAAY,EAAE,QAAQ;gBACtB,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE;gBACjC,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACxE,MAAM,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;gBACjF,WAAW,EAAE,EAAE;gBACf,cAAc,EAAE,EAAE;gBAClB,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,SAAS,EAAE,GAAG;gBACd,YAAY,EAAE,GAAG;aAClB,CAAC;YACF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,OAAO,MAAM,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAA2B;gBACnC,aAAa,EAAE,EAAE;gBACjB,IAAI,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;gBACxF,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;gBAC9B,eAAe,EAAE,cAAc;gBAC/B,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;gBAC3E,aAAa,EAAE,UAAU;gBACzB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,GAAG;gBACd,aAAa,EAAE,GAAG;aACnB,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;;QAAM,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAE1E,wEAAwE;IACxE,IAAI,MAAM,GAAqB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YACxD,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAE,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAClF,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,QAAQ,CAAC,MAAM,yCAAyC,CAAC,GAAG,CAAC,CAAC;IAC7H,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC5D,CAAC;IAED,4EAA4E;IAC5E,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,MAAM,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAA2B,CAAC;QAC/F,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,qFAAqF;IACrF,MAAM,SAAS,GAAiB;QAC9B,IAAI;QACJ,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,MAAM,CAAC,gBAAgB;QACpC,YAAY,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE;QAC/F,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,eAAe,EAAE,CAAC,EAAE,8DAA8D;KACnF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAE/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACd,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAA2B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACzF,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;QAChK,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC7I,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,MAAM;YACnB,QAAQ,EAAE,GAAG,CAAC,MAAM;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM;YAC/B,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;IAExF,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,EAAE,YAAY,IAAI,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,aAAa,IAAI,CAAC,CAAC;IAE3D,OAAO;QACL,CAAC;QACD,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,OAAO;QACP,cAAc,EAAE;YACd,YAAY;YACZ,aAAa;YACb,YAAY;YACZ,aAAa;YACb,kBAAkB,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,mBAAmB,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC;SAClE;QACD,KAAK,EAAE;YACL,gLAAgL;YAChL,GAAG,KAAK;YACR,6DAA6D,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SACrI;QACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;KACrF,CAAC;AACJ,CAAC"}

package/dist/audit/spc.d.ts

@@ -0,0 +1,92 @@
+/**
+ * NavGator audit SPC — Run 2 / D5, rewritten in Run 4 (2026-09-05).
+ *
+ * One state object per stratum persisted on `index.json.ewma[stratum]`.
+ * Three detectors run on every Phase II point:
+ *
+ *   Shewhart p-chart (or u-chart)  — catches the single catastrophic scan
+ *   EWMA (λ=0.2, L=2.7)            — catches the slow slide
+ *   tabular CUSUM (k=0.5σ, h=5σ)   — NIST: better than Shewhart for shifts ≤ 2σ
+ *
+ * Run rules: Western Electric Rule 1 (beyond 3σ) and Rule 4 (8 on one side)
+ * only — the full set false-alarms ~1 in 53 points, which on per-commit
+ * scanning is an alarm every other day (research packet §3.5, source [26]).
+ *
+ * Phase I / Phase II (packet §3.1, protocol step 12): limits are NOT computed
+ * from the first few scans. The series is `provisional` until PHASE1_SUBGROUPS
+ * points have accumulated; provisional series cannot breach. At freeze,
+ * p̄ = ΣD_i / Σn_i (NIST §6.3.3.1, source [3]) floored at P_FLOOR so an all-zero
+ * Phase I can never produce zero-width limits (Run 4 defect 1: atomize-ai
+ * `connection-services` breached on its first non-zero point because eight
+ * zeros gave mean 0, variance 0).
+ *
+ * Re-baseline (protocol step 15): a NavGator version change is a
+ * measurement-system change. When `version` differs from the stored one the
+ * series resets to provisional and records `rebaselined_from`.
+ *
+ * Sources (packet "Sources" numbering):
+ *   [3]  NIST §6.3.3.1 p-chart: UCL/LCL = p̄ ± 3√(p̄(1−p̄)/n)
+ *   [28] u-chart: ū ± 3√(ū/n_i)
+ *   [5]  NIST §6.3.2.3 tabular CUSUM: S_hi = max(0, S_hi + x − μ₀ − k), S_lo = max(0, S_lo + μ₀ − k − x)
+ *   [6]  NIST §6.3.2.4 EWMA: σ²_ewma = (λ/(2−λ))·σ²; λ 0.2–0.3; L from Lucas & Saccucci
+ *   [26] Western Electric rules and their combined false-alarm rate
+ *   Hawkins & Wu 2014 for λ=0.2, L=2.7 (small-shift ARL optimum) — retained from Run 2.
+ */
+import type { EwmaStateSnapshot } from '../types.js';
+/** Phase I length before limits are frozen (Montgomery convention ~25–30; packet §3.1). */
+export declare const PHASE1_SUBGROUPS = 25;
+/** Prior floor for p̄ / ū: max(observed, 0.01). Prevents zero-width limits. */
+export declare const P_FLOOR = 0.01;
+/**
+ * EWMA / chart state. Field names `mean`, `variance`, `n`, `points`,
+ * `breach_pending` keep their Run 2 meaning; everything else is Run 4 and
+ * optional (see EwmaStateSnapshot in types.ts).
+ */
+export type EwmaState = EwmaStateSnapshot;
+export interface ChartObservation {
+    /** Observed rate for this subgroup (defects / inspected, or defects per edge). */
+    x: number;
+    /** Inspected units n_i (sample size for p-chart; edges for u-chart). */
+    n?: number;
+    /** Defect count (defaults to round(x·n)). */
+    defects?: number;
+}
+export interface UpdateOptions {
+    /** NavGator version producing the point; a change triggers re-baseline. */
+    version?: string;
+    /** 'p' (default) for defect fraction, 'u' for defects per edge. */
+    kind?: 'p' | 'u';
+    /** Prior floor for the centre line. */
+    floor?: number;
+    /** Phase I length override (tests). */
+    phase1?: number;
+}
+export interface UpdateResult {
+    state: EwmaState;
+    /** True when at least one signal fired on this update. */
+    breach: boolean;
+    /** EWMA statistic as a deviation from the centre line (legacy `points` convention). */
+    z: number;
+    /** Shewhart limits used for this point (0 while provisional). */
+    ucl: number;
+    lcl: number;
+    /** Run 4 additions. */
+    phase: 'provisional' | 'frozen';
+    center: number;
+    signals: string[];
+    ewma_ucl: number;
+    ewma_lcl: number;
+}
+/** Initial state for a new stratum. */
+export declare function newEwmaState(lambda?: number, L?: number): EwmaState;
+/**
+ * Legacy entry point (Run 2 signature). Treats `x` as a rate observed on a
+ * subgroup of unknown size; σ then comes from the Phase I sample variance of
+ * x floored at the binomial σ for n=LEGACY_N. Prefer `updateChart`.
+ */
+export declare function updateEwma(prev: EwmaState, x: number): UpdateResult;
+/**
+ * Update one stratum's chart with a new subgroup. Returns a NEW state.
+ */
+export declare function updateChart(prev: EwmaState, obs: ChartObservation, opts?: UpdateOptions): UpdateResult;
+//# sourceMappingURL=spc.d.ts.map

package/dist/audit/spc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spc.d.ts","sourceRoot":"","sources":["../../src/audit/spc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,+EAA+E;AAC/E,eAAO,MAAM,OAAO,OAAO,CAAC;AAI5B;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,CAAC,EAAE,MAAM,CAAC;IACV,wEAAwE;IACxE,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,IAAI,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;IACjB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,uFAAuF;IACvF,CAAC,EAAE,MAAM,CAAC;IACV,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,uBAAuB;IACvB,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uCAAuC;AACvC,wBAAgB,YAAY,CAAC,MAAM,SAAM,EAAE,CAAC,SAAM,GAAG,SAAS,CAc7D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,YAAY,CAEnE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,GAAE,aAAkB,GAAG,YAAY,CAoK1G"}

package/dist/audit/spc.js

@@ -0,0 +1,225 @@
+/**
+ * NavGator audit SPC — Run 2 / D5, rewritten in Run 4 (2026-09-05).
+ *
+ * One state object per stratum persisted on `index.json.ewma[stratum]`.
+ * Three detectors run on every Phase II point:
+ *
+ *   Shewhart p-chart (or u-chart)  — catches the single catastrophic scan
+ *   EWMA (λ=0.2, L=2.7)            — catches the slow slide
+ *   tabular CUSUM (k=0.5σ, h=5σ)   — NIST: better than Shewhart for shifts ≤ 2σ
+ *
+ * Run rules: Western Electric Rule 1 (beyond 3σ) and Rule 4 (8 on one side)
+ * only — the full set false-alarms ~1 in 53 points, which on per-commit
+ * scanning is an alarm every other day (research packet §3.5, source [26]).
+ *
+ * Phase I / Phase II (packet §3.1, protocol step 12): limits are NOT computed
+ * from the first few scans. The series is `provisional` until PHASE1_SUBGROUPS
+ * points have accumulated; provisional series cannot breach. At freeze,
+ * p̄ = ΣD_i / Σn_i (NIST §6.3.3.1, source [3]) floored at P_FLOOR so an all-zero
+ * Phase I can never produce zero-width limits (Run 4 defect 1: atomize-ai
+ * `connection-services` breached on its first non-zero point because eight
+ * zeros gave mean 0, variance 0).
+ *
+ * Re-baseline (protocol step 15): a NavGator version change is a
+ * measurement-system change. When `version` differs from the stored one the
+ * series resets to provisional and records `rebaselined_from`.
+ *
+ * Sources (packet "Sources" numbering):
+ *   [3]  NIST §6.3.3.1 p-chart: UCL/LCL = p̄ ± 3√(p̄(1−p̄)/n)
+ *   [28] u-chart: ū ± 3√(ū/n_i)
+ *   [5]  NIST §6.3.2.3 tabular CUSUM: S_hi = max(0, S_hi + x − μ₀ − k), S_lo = max(0, S_lo + μ₀ − k − x)
+ *   [6]  NIST §6.3.2.4 EWMA: σ²_ewma = (λ/(2−λ))·σ²; λ 0.2–0.3; L from Lucas & Saccucci
+ *   [26] Western Electric rules and their combined false-alarm rate
+ *   Hawkins & Wu 2014 for λ=0.2, L=2.7 (small-shift ARL optimum) — retained from Run 2.
+ */
+/** Phase I length before limits are frozen (Montgomery convention ~25–30; packet §3.1). */
+export const PHASE1_SUBGROUPS = 25;
+/** Prior floor for p̄ / ū: max(observed, 0.01). Prevents zero-width limits. */
+export const P_FLOOR = 0.01;
+/** Subgroup size assumed when an observation carries no `n` (legacy callers). */
+const LEGACY_N = 30;
+/** Initial state for a new stratum. */
+export function newEwmaState(lambda = 0.2, L = 2.7) {
+    return {
+        lambda,
+        L,
+        mean: 0,
+        variance: 0,
+        n: 0,
+        points: [],
+        breach_pending: false,
+        kind: 'p',
+        phase: 'provisional',
+        phase1_defects: 0,
+        phase1_units: 0,
+    };
+}
+/**
+ * Legacy entry point (Run 2 signature). Treats `x` as a rate observed on a
+ * subgroup of unknown size; σ then comes from the Phase I sample variance of
+ * x floored at the binomial σ for n=LEGACY_N. Prefer `updateChart`.
+ */
+export function updateEwma(prev, x) {
+    return updateChart(prev, { x }, {});
+}
+/**
+ * Update one stratum's chart with a new subgroup. Returns a NEW state.
+ */
+export function updateChart(prev, obs, opts = {}) {
+    const phase1Len = opts.phase1 ?? PHASE1_SUBGROUPS;
+    const floor = opts.floor ?? P_FLOOR;
+    // ---- Re-baseline on measurement-system change (protocol step 15) ----
+    let base = prev;
+    if (opts.version && prev.version && prev.version !== opts.version) {
+        base = {
+            ...newEwmaState(prev.lambda, prev.L),
+            kind: opts.kind ?? prev.kind ?? 'p',
+            rebaselined_from: prev.version,
+            rebaselined_at: Date.now(),
+        };
+    }
+    const version = opts.version ?? base.version;
+    const kind = opts.kind ?? base.kind ?? 'p';
+    const lambda = base.lambda;
+    const L = base.L;
+    const n = base.n + 1;
+    const units = obs.n !== undefined && obs.n > 0 ? obs.n : undefined;
+    const x = Number.isFinite(obs.x) ? Math.max(0, obs.x) : 0;
+    const defects = obs.defects ?? (units ? Math.round(x * units) : 0);
+    const phaseFrozen = base.phase === 'frozen';
+    if (!phaseFrozen) {
+        // ---------------- Phase I: accumulate, never breach ----------------
+        const delta = x - base.mean;
+        const mean = base.mean + delta / n;
+        const delta2 = x - mean;
+        const variance = ((n - 1) * base.variance + delta * delta2) / n; // Welford, population form
+        const phase1_defects = (base.phase1_defects ?? 0) + defects;
+        const phase1_units = (base.phase1_units ?? 0) + (units ?? 0);
+        // Provisional EWMA around the running mean, for plotting only.
+        const prevEwma = base.last?.ewma ?? mean;
+        const ewma = lambda * x + (1 - lambda) * prevEwma;
+        const z = ewma - mean;
+        const points = [...base.points, z];
+        if (points.length > 50)
+            points.shift();
+        let next = {
+            ...base,
+            version,
+            kind,
+            mean,
+            variance,
+            n,
+            points,
+            breach_pending: false,
+            phase: 'provisional',
+            phase1_defects,
+            phase1_units,
+            last: { x, n: units ?? 0, ucl: 0, lcl: 0, ewma, ewma_ucl: 0, ewma_lcl: 0 },
+            signals: [],
+        };
+        if (n >= phase1Len) {
+            // ---- Freeze: p̄ = ΣD_i / Σn_i (NIST §6.3.3.1) floored at the prior ----
+            const observed = phase1_units > 0 ? phase1_defects / phase1_units : mean;
+            const center = Math.max(observed, floor);
+            next = {
+                ...next,
+                phase: 'frozen',
+                center,
+                floor_active: observed < floor,
+                cusum: { s_hi: 0, s_lo: 0, k: 0.5, h: 5 },
+                run_side: 0,
+                last: { ...next.last, ewma: center },
+            };
+        }
+        return {
+            state: next,
+            breach: false,
+            z,
+            ucl: 0,
+            lcl: 0,
+            phase: next.phase,
+            center: next.center ?? mean,
+            signals: [],
+            ewma_ucl: 0,
+            ewma_lcl: 0,
+        };
+    }
+    // ---------------- Phase II: frozen limits, three detectors ----------------
+    const center = base.center ?? Math.max(base.mean, floor);
+    const floorActive = !!base.floor_active;
+    // σ for this subgroup. p-chart: √(p̄(1−p̄)/n_i) [3]; u-chart: √(ū/n_i) [28].
+    let sigma;
+    if (units) {
+        sigma = kind === 'u' ? Math.sqrt(center / units) : Math.sqrt((center * (1 - center)) / units);
+    }
+    else {
+        const legacy = Math.sqrt(Math.max(base.variance, 0));
+        const binomialAtLegacyN = Math.sqrt((center * (1 - center)) / LEGACY_N);
+        sigma = Math.max(legacy, binomialAtLegacyN);
+    }
+    if (!(sigma > 0))
+        sigma = Math.sqrt((floor * (1 - floor)) / LEGACY_N);
+    const signals = [];
+    // Rule 1 — Shewhart 3σ.
+    const ucl = center + 3 * sigma;
+    const lcl = Math.max(0, center - 3 * sigma);
+    if (x > ucl)
+        signals.push('rule1-high');
+    // A non-zero low-side breach is a real signal (scan silently missed part of
+    // the repo — packet §3.3). Suppressed when the centre is the floor prior:
+    // observations below a prior carry no information about the process.
+    if (lcl > 0 && x < lcl && !floorActive)
+        signals.push('rule1-low');
+    // Rule 4 — 8 consecutive points on one side of the centre line.
+    const side = x > center ? 1 : x < center ? -1 : 0;
+    const prevRun = base.run_side ?? 0;
+    const run_side = side === 0 ? 0 : Math.sign(prevRun) === side ? prevRun + side : side;
+    if (run_side >= 8)
+        signals.push('rule4-high');
+    if (run_side <= -8 && !floorActive)
+        signals.push('rule4-low');
+    // EWMA on the raw rate; σ_ewma = σ√(λ/(2−λ)) (NIST §6.3.2.4, asymptotic form).
+    const prevEwma = base.last?.ewma ?? center;
+    const ewma = lambda * x + (1 - lambda) * prevEwma;
+    const sigmaEwma = sigma * Math.sqrt(lambda / (2 - lambda));
+    const ewma_ucl = center + L * sigmaEwma;
+    const ewma_lcl = Math.max(0, center - L * sigmaEwma);
+    if (ewma > ewma_ucl)
+        signals.push('ewma-high');
+    if (ewma_lcl > 0 && ewma < ewma_lcl && !floorActive)
+        signals.push('ewma-low');
+    // Standardised tabular CUSUM (NIST §6.3.2.3): u = (x − μ₀)/σ, k = 0.5, h = 5 (σ units).
+    const c = base.cusum ?? { s_hi: 0, s_lo: 0, k: 0.5, h: 5 };
+    const u = (x - center) / sigma;
+    let s_hi = Math.max(0, c.s_hi + u - c.k);
+    let s_lo = floorActive ? 0 : Math.max(0, c.s_lo - u - c.k);
+    if (s_hi > c.h) {
+        signals.push('cusum-high');
+        s_hi = 0; // restart after signal
+    }
+    if (s_lo > c.h) {
+        signals.push('cusum-low');
+        s_lo = 0;
+    }
+    const breach = signals.length > 0;
+    const z = ewma - center;
+    const points = [...base.points, z];
+    if (points.length > 50)
+        points.shift();
+    const next = {
+        ...base,
+        version,
+        kind,
+        n,
+        points,
+        breach_pending: breach,
+        phase: 'frozen',
+        center,
+        cusum: { s_hi, s_lo, k: c.k, h: c.h },
+        run_side,
+        last: { x, n: units ?? 0, ucl, lcl, ewma, ewma_ucl, ewma_lcl },
+        signals,
+    };
+    return { state: next, breach, z, ucl, lcl, phase: 'frozen', center, signals, ewma_ucl, ewma_lcl };
+}
+//# sourceMappingURL=spc.js.map

package/dist/audit/spc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spc.js","sourceRoot":"","sources":["../../src/audit/spc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAIH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC;AAC5B,iFAAiF;AACjF,MAAM,QAAQ,GAAG,EAAE,CAAC;AA8CpB,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG;IAChD,OAAO;QACL,MAAM;QACN,CAAC;QACD,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;QACX,CAAC,EAAE,CAAC;QACJ,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,KAAK;QACrB,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,aAAa;QACpB,cAAc,EAAE,CAAC;QACjB,YAAY,EAAE,CAAC;KAChB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,CAAS;IACnD,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,GAAqB,EAAE,OAAsB,EAAE;IAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC;IAEpC,wEAAwE;IACxE,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAClE,IAAI,GAAG;YACL,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG;YACnC,gBAAgB,EAAE,IAAI,CAAC,OAAO;YAC9B,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;IAC7C,MAAM,IAAI,GAAc,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IAE5C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,sEAAsE;QACtE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC;QACxB,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B;QAC5F,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC;QAC5D,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,QAAQ,CAAC;QAClD,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAEvC,IAAI,IAAI,GAAc;YACpB,GAAG,IAAI;YACP,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,CAAC;YACD,MAAM;YACN,cAAc,EAAE,KAAK;YACrB,KAAK,EAAE,aAAa;YACpB,cAAc;YACd,YAAY;YACZ,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC1E,OAAO,EAAE,EAAE;SACZ,CAAC;QAEF,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;YACnB,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,GAAG;gBACL,GAAG,IAAI;gBACP,KAAK,EAAE,QAAQ;gBACf,MAAM;gBACN,YAAY,EAAE,QAAQ,GAAG,KAAK;gBAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE;gBACzC,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAK,EAAE,IAAI,EAAE,MAAM,EAAE;aACtC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,KAAK;YACb,CAAC;YACD,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,IAAI,CAAC,KAAM;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAExC,6EAA6E;IAC7E,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;QACxE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,wBAAwB;IACxB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,4EAA4E;IAC5E,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAElE,gEAAgE;IAChE,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,QAAQ,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,QAAQ,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE9E,wFAAwF;IACxF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC;IAC/B,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB;IACnC,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;IACxB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAc;QACtB,GAAG,IAAI;QACP,OAAO;QACP,IAAI;QACJ,CAAC;QACD,MAAM;QACN,cAAc,EAAE,MAAM;QACtB,KAAK,EAAE,QAAQ;QACf,MAAM;QACN,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACrC,QAAQ;QACR,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC9D,OAAO;KACR,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACpG,CAAC"}