@wowok/agent-mcp 2.7.1 → 2.7.2

package/dist/knowledge/arbitration-risk.js

@@ -1,423 +1 @@
-import { MAX_VOTING_GUARD_COUNT, } from "@wowok/wowok";
-import { isTerminalArbStatus, isValidArbStatusTransition, } from "./arbitration-ledger.js";
-const R_AB_1_01 = {
-    id: "R-AB-1-01",
-    category: "structural",
-    trigger: "voting_guard count exceeds MAX_VOTING_GUARD_COUNT (50)",
-    check: (ctx) => {
-        if (!ctx.voting_guard)
-            return null;
-        if (ctx.voting_guard.op === "add" || ctx.voting_guard.op === "set") {
-            const newCount = ctx.voting_guard.op === "set"
-                ? ctx.voting_guard.guards.length
-                : (ctx.current_voting_guard_count ?? 0) + ctx.voting_guard.guards.length;
-            if (newCount > MAX_VOTING_GUARD_COUNT) {
-                return {
-                    id: "R-AB-1-01",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "voting_guard count exceeds limit",
-                    description: `voting_guard would have ${newCount} entries, exceeds MAX_VOTING_GUARD_COUNT ${MAX_VOTING_GUARD_COUNT}`,
-                    affected_stakeholders: ["owner", "arbiter"],
-                    scenario: "Adding too many voting guards",
-                    mitigation: `Remove unused guards before adding new ones; max ${MAX_VOTING_GUARD_COUNT}`,
-                    evidence: `count=${newCount}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_AB_1_02 = {
-    id: "R-AB-1-02",
-    category: "structural",
-    trigger: "Dispute fee below arbitration.fee threshold",
-    check: (ctx) => {
-        if (!ctx.dispute || ctx.current_arbitration_fee === undefined)
-            return null;
-        const feeRequired = typeof ctx.current_arbitration_fee === "string"
-            ? BigInt(ctx.current_arbitration_fee)
-            : BigInt(ctx.current_arbitration_fee);
-        const feeProvided = typeof ctx.dispute.fee === "object" && ctx.dispute.fee !== null && "balance" in ctx.dispute.fee
-            ? BigInt(ctx.dispute.fee.balance ?? 0)
-            : BigInt(0);
-        if (feeProvided < feeRequired) {
-            return {
-                id: "R-AB-1-02",
-                level: "CRITICAL",
-                category: "structural",
-                title: "Dispute fee insufficient (E_FEE_NOT_ENOUGH)",
-                description: `Provided fee ${feeProvided.toString()} < required ${feeRequired.toString()}`,
-                affected_stakeholders: ["disputant"],
-                scenario: "Filing dispute with insufficient fee",
-                mitigation: `Increase dispute.fee.balance to >= ${feeRequired.toString()}`,
-                evidence: `provided=${feeProvided.toString()}, required=${feeRequired.toString()}`,
-            };
-        }
-        return null;
-    },
-};
-const R_AB_1_03 = {
-    id: "R-AB-1-03",
-    category: "structural",
-    trigger: "Arbitration paused (bPaused=true) — dispute will fail with E_PAUSED",
-    check: (ctx) => {
-        if (ctx.dispute && ctx.current_bPaused === true) {
-            return {
-                id: "R-AB-1-03",
-                level: "HIGH",
-                category: "structural",
-                title: "Arbitration paused — cannot file dispute",
-                description: "Arbitration.bPaused=true; dispute() will abort with E_PAUSED",
-                affected_stakeholders: ["disputant"],
-                scenario: "Filing dispute against a paused Arbitration",
-                mitigation: "Call pause(false) (requires ARBITRATION_PAUSE=356) to resume",
-                evidence: `bPaused=true`,
-            };
-        }
-        return null;
-    },
-};
-const R_AB_1_04 = {
-    id: "R-AB-1-04",
-    category: "structural",
-    trigger: "voting_deadline in the past — vote will be rejected",
-    check: (ctx) => {
-        const deadline = ctx.confirm?.voting_deadline ?? ctx.voting_deadline_change?.voting_deadline;
-        if (deadline !== undefined && deadline !== null && ctx.current_timestamp_ms !== undefined) {
-            if (deadline < ctx.current_timestamp_ms) {
-                return {
-                    id: "R-AB-1-04",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "voting_deadline in the past",
-                    description: `Deadline ${deadline} is before current time ${ctx.current_timestamp_ms}`,
-                    affected_stakeholders: ["voter", "arbiter"],
-                    scenario: "Setting voting deadline to an already-elapsed timestamp",
-                    mitigation: "Use a future timestamp (e.g. now + 7 days in ms)",
-                    evidence: `deadline=${deadline}, now=${ctx.current_timestamp_ms}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_AB_2_01 = {
-    id: "R-AB-2-01",
-    category: "semantic",
-    trigger: "voting_guard misconfiguration — dispute cannot be resolved",
-    check: (ctx) => {
-        if (ctx.vote && ctx.vote.voting_guard) {
-            if (!ctx.current_voting_guard_addresses || ctx.current_voting_guard_addresses.length === 0) {
-                return {
-                    id: "R-AB-2-01",
-                    level: "HIGH",
-                    category: "semantic",
-                    title: "voting_guard misconfiguration — dispute cannot be resolved",
-                    description: "vote.voting_guard provided but Arbitration.voting_guard is empty; E_VOTING_GUARD_NOT_FOUND will abort",
-                    affected_stakeholders: ["voter", "arbiter", "disputant"],
-                    scenario: "voting_guard misconfiguration prevents vote — dispute stuck",
-                    mitigation: "Either add the Guard to voting_guard list (354) or use open vote() without voting_guard",
-                    evidence: `vote.voting_guard=${ctx.vote.voting_guard}`,
-                };
-            }
-            if (!ctx.current_voting_guard_addresses.includes(ctx.vote.voting_guard)) {
-                return {
-                    id: "R-AB-2-01",
-                    level: "HIGH",
-                    category: "semantic",
-                    title: "voting_guard misconfiguration — dispute cannot be resolved",
-                    description: `vote.voting_guard ${ctx.vote.voting_guard} not in Arbitration.voting_guard list`,
-                    affected_stakeholders: ["voter", "arbiter", "disputant"],
-                    scenario: "Voter's Guard not registered — vote will fail with E_VOTING_GUARD_NOT_FOUND",
-                    mitigation: `Add guard ${ctx.vote.voting_guard} via voting_guard_add (354), or use a registered guard`,
-                    evidence: `provided=${ctx.vote.voting_guard}, registered=${ctx.current_voting_guard_addresses.join(",")}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_AB_2_03 = {
-    id: "R-AB-2-03",
-    category: "semantic",
-    trigger: "VoteValue.GuardIdentifier with non-numeric Guard submission type",
-    check: (ctx) => {
-        if (ctx.voting_guard && (ctx.voting_guard.op === "add" || ctx.voting_guard.op === "set")) {
-            for (const g of ctx.voting_guard.guards) {
-                const vw = g.vote_weight;
-                if ("GuardIdentifier" in vw && vw.GuardIdentifier !== undefined) {
-                    if (vw.GuardIdentifier > 255) {
-                        return {
-                            id: "R-AB-2-03",
-                            level: "HIGH",
-                            category: "semantic",
-                            title: "GuardIdentifier index > u8::max (255)",
-                            description: `GuardIdentifier ${vw.GuardIdentifier} exceeds u8 max (255)`,
-                            affected_stakeholders: ["owner"],
-                            scenario: "Setting GuardIdentifier index beyond u8 range",
-                            mitigation: "Use GuardIdentifier index 0-255",
-                            evidence: `identifier=${vw.GuardIdentifier}`,
-                        };
-                    }
-                }
-                if ("FixedValue" in vw && vw.FixedValue !== undefined) {
-                    if (vw.FixedValue > 4294967295) {
-                        return {
-                            id: "R-AB-2-03",
-                            level: "HIGH",
-                            category: "semantic",
-                            title: "FixedValue > u32::max (4294967295)",
-                            description: `FixedValue ${vw.FixedValue} exceeds u32 max`,
-                            affected_stakeholders: ["owner"],
-                            scenario: "Setting FixedValue beyond u32 range",
-                            mitigation: "Use FixedValue 0-4294967295",
-                            evidence: `fixed=${vw.FixedValue}`,
-                        };
-                    }
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_AB_3_01 = {
-    id: "R-AB-3-01",
-    category: "authority",
-    trigger: "Arbiter collusion — single voter controls >50% of total weight",
-    check: (ctx) => {
-        if (!ctx.voting_guard || ctx.voting_guard.op !== "add" && ctx.voting_guard.op !== "set")
-            return null;
-        const guards = ctx.voting_guard.guards;
-        if (guards.length < 2)
-            return null;
-        const fixedWeights = guards
-            .filter(g => "FixedValue" in g.vote_weight && g.vote_weight.FixedValue !== undefined)
-            .map(g => g.vote_weight.FixedValue);
-        if (fixedWeights.length === 0)
-            return null;
-        const total = fixedWeights.reduce((a, b) => a + b, 0);
-        const max = Math.max(...fixedWeights);
-        if (total > 0 && max / total > 0.5) {
-            return {
-                id: "R-AB-3-01",
-                level: "MEDIUM",
-                category: "authority",
-                title: "Arbiter collusion risk — single guard controls >50% weight",
-                description: `One voting_guard has ${max} of ${total} total weight (${((max / total) * 100).toFixed(1)}%)`,
-                affected_stakeholders: ["owner", "disputant"],
-                scenario: "Weighted voting with dominant arbiter — can single-handedly decide rulings",
-                mitigation: "Distribute weight more evenly, or require multi-arbiter consensus",
-                evidence: `max=${max}, total=${total}, ratio=${((max / total) * 100).toFixed(1)}%`,
-            };
-        }
-        return null;
-    },
-};
-const R_AB_3_02 = {
-    id: "R-AB-3-02",
-    category: "authority",
-    trigger: "Permission over-concentration — single admin (owner)",
-    check: (ctx) => {
-        if (ctx.builder) {
-            return {
-                id: "R-AB-3-02",
-                level: "HIGH",
-                category: "authority",
-                title: "Arbitration ownership transfer — IRREVERSIBLE",
-                description: `Transferring Arbitration to ${ctx.builder}; original owner loses all control permanently`,
-                affected_stakeholders: ["owner"],
-                scenario: "Transferring Arbitration ownership",
-                mitigation: "1) Verify new owner twice. 2) Confirm new owner has 350-368 permissions configured. 3) Coordinate before transfer.",
-                evidence: `new_owner=${ctx.builder}`,
-            };
-        }
-        return null;
-    },
-};
-const R_AB_3_03 = {
-    id: "R-AB-3-03",
-    category: "authority",
-    trigger: "ARBITRATION_ARBITRATION (359) granted to wide audience",
-    check: (ctx) => {
-        if (ctx.arbitration && !ctx.current_voting_guard_addresses?.length) {
-            return {
-                id: "R-AB-3-03",
-                level: "MEDIUM",
-                category: "authority",
-                title: "Ruling without voting_guard — single-arbiter can rule unchallenged",
-                description: "make_ruling (359) without voting_guard means any permission holder can unilaterally decide",
-                affected_stakeholders: ["disputant", "voter"],
-                scenario: "Single-arbiter Arbitration without consensus check",
-                mitigation: "Configure voting_guard (354) to require multi-arbiter consensus before ruling",
-                evidence: `voting_guard=empty`,
-            };
-        }
-        return null;
-    },
-};
-const R_AB_4_01 = {
-    id: "R-AB-4-01",
-    category: "lifecycle",
-    trigger: "Invalid Arb status transition (7-state flow violation)",
-    check: (ctx) => {
-        if (!ctx.current_arb_status || !ctx.expected_arb_status)
-            return null;
-        if (ctx.current_arb_status === ctx.expected_arb_status)
-            return null;
-        if (!isValidArbStatusTransition(ctx.current_arb_status, ctx.expected_arb_status)) {
-            return {
-                id: "R-AB-4-01",
-                level: "CRITICAL",
-                category: "lifecycle",
-                title: "Invalid Arb status transition",
-                description: `${ctx.current_arb_status} → ${ctx.expected_arb_status} is not a valid 7-state flow transition`,
-                affected_stakeholders: ["arbiter", "disputant"],
-                scenario: "Attempting operation out of order (e.g. vote before confirm)",
-                mitigation: "Follow the 7-state flow: Principal_confirming → Arbitrator_confirming → Voting → Arbitrated → Objectionable → Finished/Withdrawn",
-                evidence: `${ctx.current_arb_status} → ${ctx.expected_arb_status}`,
-            };
-        }
-        return null;
-    },
-};
-const R_AB_4_02 = {
-    id: "R-AB-4-02",
-    category: "lifecycle",
-    trigger: "Operation on terminal Arb status (Finished/Withdrawn)",
-    check: (ctx) => {
-        if (!ctx.current_arb_status)
-            return null;
-        if (isTerminalArbStatus(ctx.current_arb_status)) {
-            const allowedOpOnTerminal = ctx.arb_withdraw;
-            if (!allowedOpOnTerminal && (ctx.vote || ctx.confirm || ctx.arbitration || ctx.reset || ctx.feedback)) {
-                return {
-                    id: "R-AB-4-02",
-                    level: "HIGH",
-                    category: "lifecycle",
-                    title: "Operation on terminal Arb status — irreversible",
-                    description: `Arb is in terminal status ${ctx.current_arb_status}; only arb_withdraw is allowed`,
-                    affected_stakeholders: ["arbiter", "disputant"],
-                    scenario: "Voting/ruling/reset on a Finished or Withdrawn Arb",
-                    mitigation: "Open a new Arb case via dispute() if further arbitration is needed",
-                    evidence: `status=${ctx.current_arb_status}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_AB_4_03 = {
-    id: "R-AB-4-03",
-    category: "lifecycle",
-    trigger: "reset operation — may indefinitely extend arbitration",
-    check: (ctx) => {
-        if (!ctx.reset)
-            return null;
-        return {
-            id: "R-AB-4-03",
-            level: "MEDIUM",
-            category: "lifecycle",
-            title: "reset operation — arbitration lifecycle extended",
-            description: `reset on Arb ${ctx.reset.arb} restarts lifecycle to Principal_confirming; feedback required`,
-            affected_stakeholders: ["arbiter", "disputant"],
-            scenario: "Disputant objects to ruling and resubmits materials",
-            mitigation: "Track reset count — consider capping resets to prevent abuse",
-            evidence: `arb=${ctx.reset.arb}`,
-        };
-    },
-};
-const R_AB_5_01 = {
-    id: "R-AB-5-01",
-    category: "cross_object",
-    trigger: "fees_alloc/fees_transfer unfair distribution — destination not verified",
-    check: (ctx) => {
-        if (!ctx.fees_transfer)
-            return null;
-        const dest = "allocation" in ctx.fees_transfer.to
-            ? `Allocation ${ctx.fees_transfer.to.allocation}`
-            : `Treasury ${ctx.fees_transfer.to.treasury}`;
-        return {
-            id: "R-AB-5-01",
-            level: "MEDIUM",
-            category: "cross_object",
-            title: "fees_alloc/fees_transfer — verify destination fairness",
-            description: `All Arbitration.balance will be transferred to ${dest}; ensure destination policy is fair to arbiters`,
-            affected_stakeholders: ["arbiter", "owner"],
-            scenario: "Distributing arbitration fees without verifying allocation rules",
-            mitigation: `Verify ${dest} has fair distribution policy; consider allocating to arbiters' Allocation`,
-            evidence: `dest=${dest}, remark=${ctx.fees_transfer.payment_remark}`,
-        };
-    },
-};
-const R_AB_5_02 = {
-    id: "R-AB-5-02",
-    category: "cross_object",
-    trigger: "Dispute filed but Order op permission not verified — E_OP_PERMISSION",
-    check: (ctx) => {
-        if (!ctx.dispute)
-            return null;
-        return {
-            id: "R-AB-5-02",
-            level: "HIGH",
-            category: "cross_object",
-            title: "Order op permission required for dispute",
-            description: `dispute on Order ${ctx.dispute.order} requires order::assert_op_permission; signer must have Order's dispute permission`,
-            affected_stakeholders: ["disputant"],
-            scenario: "Filing dispute without Order op permission",
-            mitigation: "Ensure signer has Order's dispute operation permission (custom index or builtin)",
-            evidence: `order=${ctx.dispute.order}`,
-        };
-    },
-};
-const ALL_RULES = [
-    R_AB_1_01, R_AB_1_02, R_AB_1_03, R_AB_1_04,
-    R_AB_2_01, R_AB_2_03,
-    R_AB_3_01, R_AB_3_02, R_AB_3_03,
-    R_AB_4_01, R_AB_4_02, R_AB_4_03,
-    R_AB_5_01, R_AB_5_02,
-];
-export const ARBITRATION_RISK_VERSION = "1.0.0";
-export function getAllRiskRules() {
-    return [...ALL_RULES];
-}
-export function getRiskRulesCount() {
-    return ALL_RULES.length;
-}
-export function getRiskRulesByCategory(category) {
-    return ALL_RULES.filter(r => r.category === category);
-}
-export function assessArbitrationRisks(ctx) {
-    const risks = [];
-    for (const rule of ALL_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    const overall = risks.length === 0
-        ? "LOW"
-        : risks.some(r => r.level === "CRITICAL") ? "CRITICAL"
-            : risks.some(r => r.level === "HIGH") ? "HIGH"
-                : risks.some(r => r.level === "MEDIUM") ? "MEDIUM"
-                    : "LOW";
-    const byCategory = {};
-    for (const r of risks) {
-        byCategory[r.category] = (byCategory[r.category] ?? 0) + 1;
-    }
-    const advice = {};
-    for (const r of risks) {
-        for (const s of r.affected_stakeholders) {
-            if (!advice[s])
-                advice[s] = [];
-            advice[s].push(`${r.id}: ${r.mitigation}`);
-        }
-    }
-    return {
-        summary: `Assessed ${risks.length} risk(s) across ${Object.keys(byCategory).length} categories`,
-        risks,
-        overall_risk: overall,
-        risks_by_category: byCategory,
-        stakeholder_advice: advice,
-        needs_human_review: risks.some(r => r.level === "CRITICAL" || r.level === "HIGH"),
-    };
-}
+import{MAX_VOTING_GUARD_COUNT}from'@wowok/wowok';import{isTerminalArbStatus,isValidArbStatusTransition}from'./arbitration-ledger.js';const R_AB_1_01={'id':'R-AB-1-01','category':'structural','trigger':'voting_guard\x20count\x20exceeds\x20MAX_VOTING_GUARD_COUNT\x20(50)','check':a=>{if(!a['voting_guard'])return null;if(a['voting_guard']['op']==='add'||a['voting_guard']['op']==='set'){const b=a['voting_guard']['op']==='set'?a['voting_guard']['guards']['length']:(a['current_voting_guard_count']??0x0)+a['voting_guard']['guards']['length'];if(b>MAX_VOTING_GUARD_COUNT)return{'id':'R-AB-1-01','level':'HIGH','category':'structural','title':'voting_guard\x20count\x20exceeds\x20limit','description':'voting_guard\x20would\x20have\x20'+b+'\x20entries,\x20exceeds\x20MAX_VOTING_GUARD_COUNT\x20'+MAX_VOTING_GUARD_COUNT,'affected_stakeholders':['owner','arbiter'],'scenario':'Adding\x20too\x20many\x20voting\x20guards','mitigation':'Remove\x20unused\x20guards\x20before\x20adding\x20new\x20ones;\x20max\x20'+MAX_VOTING_GUARD_COUNT,'evidence':'count='+b};}return null;}},R_AB_1_02={'id':'R-AB-1-02','category':'structural','trigger':'Dispute\x20fee\x20below\x20arbitration.fee\x20threshold','check':a=>{if(!a['dispute']||a['current_arbitration_fee']===undefined)return null;const b=typeof a['current_arbitration_fee']==='string'?BigInt(a['current_arbitration_fee']):BigInt(a['current_arbitration_fee']),c=typeof a['dispute']['fee']==='object'&&a['dispute']['fee']!==null&&'balance'in a['dispute']['fee']?BigInt(a['dispute']['fee']['balance']??0x0):BigInt(0x0);if(c<b)return{'id':'R-AB-1-02','level':'CRITICAL','category':'structural','title':'Dispute\x20fee\x20insufficient\x20(E_FEE_NOT_ENOUGH)','description':'Provided\x20fee\x20'+c['toString']()+'\x20<\x20required\x20'+b['toString'](),'affected_stakeholders':['disputant'],'scenario':'Filing\x20dispute\x20with\x20insufficient\x20fee','mitigation':'Increase\x20dispute.fee.balance\x20to\x20>=\x20'+b['toString'](),'evidence':'provided='+c['toString']()+',\x20required='+b['toString']()};return null;}},R_AB_1_03={'id':'R-AB-1-03','category':'structural','trigger':'Arbitration\x20paused\x20(bPaused=true)\x20—\x20dispute\x20will\x20fail\x20with\x20E_PAUSED','check':a=>{if(a['dispute']&&a['current_bPaused']===!![])return{'id':'R-AB-1-03','level':'HIGH','category':'structural','title':'Arbitration\x20paused\x20—\x20cannot\x20file\x20dispute','description':'Arbitration.bPaused=true;\x20dispute()\x20will\x20abort\x20with\x20E_PAUSED','affected_stakeholders':['disputant'],'scenario':'Filing\x20dispute\x20against\x20a\x20paused\x20Arbitration','mitigation':'Call\x20pause(false)\x20(requires\x20ARBITRATION_PAUSE=356)\x20to\x20resume','evidence':'bPaused=true'};return null;}},R_AB_1_04={'id':'R-AB-1-04','category':'structural','trigger':'voting_deadline\x20in\x20the\x20past\x20—\x20vote\x20will\x20be\x20rejected','check':a=>{const b=a['confirm']?.['voting_deadline']??a['voting_deadline_change']?.['voting_deadline'];if(b!==undefined&&b!==null&&a['current_timestamp_ms']!==undefined){if(b<a['current_timestamp_ms'])return{'id':'R-AB-1-04','level':'HIGH','category':'structural','title':'voting_deadline\x20in\x20the\x20past','description':'Deadline\x20'+b+'\x20is\x20before\x20current\x20time\x20'+a['current_timestamp_ms'],'affected_stakeholders':['voter','arbiter'],'scenario':'Setting\x20voting\x20deadline\x20to\x20an\x20already-elapsed\x20timestamp','mitigation':'Use\x20a\x20future\x20timestamp\x20(e.g.\x20now\x20+\x207\x20days\x20in\x20ms)','evidence':'deadline='+b+',\x20now='+a['current_timestamp_ms']};}return null;}},R_AB_2_01={'id':'R-AB-2-01','category':'semantic','trigger':'voting_guard\x20misconfiguration\x20—\x20dispute\x20cannot\x20be\x20resolved','check':a=>{if(a['vote']&&a['vote']['voting_guard']){if(!a['current_voting_guard_addresses']||a['current_voting_guard_addresses']['length']===0x0)return{'id':'R-AB-2-01','level':'HIGH','category':'semantic','title':'voting_guard\x20misconfiguration\x20—\x20dispute\x20cannot\x20be\x20resolved','description':'vote.voting_guard\x20provided\x20but\x20Arbitration.voting_guard\x20is\x20empty;\x20E_VOTING_GUARD_NOT_FOUND\x20will\x20abort','affected_stakeholders':['voter','arbiter','disputant'],'scenario':'voting_guard\x20misconfiguration\x20prevents\x20vote\x20—\x20dispute\x20stuck','mitigation':'Either\x20add\x20the\x20Guard\x20to\x20voting_guard\x20list\x20(354)\x20or\x20use\x20open\x20vote()\x20without\x20voting_guard','evidence':'vote.voting_guard='+a['vote']['voting_guard']};if(!a['current_voting_guard_addresses']['includes'](a['vote']['voting_guard']))return{'id':'R-AB-2-01','level':'HIGH','category':'semantic','title':'voting_guard\x20misconfiguration\x20—\x20dispute\x20cannot\x20be\x20resolved','description':'vote.voting_guard\x20'+a['vote']['voting_guard']+'\x20not\x20in\x20Arbitration.voting_guard\x20list','affected_stakeholders':['voter','arbiter','disputant'],'scenario':'Voter\x27s\x20Guard\x20not\x20registered\x20—\x20vote\x20will\x20fail\x20with\x20E_VOTING_GUARD_NOT_FOUND','mitigation':'Add\x20guard\x20'+a['vote']['voting_guard']+'\x20via\x20voting_guard_add\x20(354),\x20or\x20use\x20a\x20registered\x20guard','evidence':'provided='+a['vote']['voting_guard']+',\x20registered='+a['current_voting_guard_addresses']['join'](',')};}return null;}},R_AB_2_03={'id':'R-AB-2-03','category':'semantic','trigger':'VoteValue.GuardIdentifier\x20with\x20non-numeric\x20Guard\x20submission\x20type','check':a=>{if(a['voting_guard']&&(a['voting_guard']['op']==='add'||a['voting_guard']['op']==='set'))for(const b of a['voting_guard']['guards']){const c=b['vote_weight'];if('GuardIdentifier'in c&&c['GuardIdentifier']!==undefined){if(c['GuardIdentifier']>0xff)return{'id':'R-AB-2-03','level':'HIGH','category':'semantic','title':'GuardIdentifier\x20index\x20>\x20u8::max\x20(255)','description':'GuardIdentifier\x20'+c['GuardIdentifier']+'\x20exceeds\x20u8\x20max\x20(255)','affected_stakeholders':['owner'],'scenario':'Setting\x20GuardIdentifier\x20index\x20beyond\x20u8\x20range','mitigation':'Use\x20GuardIdentifier\x20index\x200-255','evidence':'identifier='+c['GuardIdentifier']};}if('FixedValue'in c&&c['FixedValue']!==undefined){if(c['FixedValue']>0xffffffff)return{'id':'R-AB-2-03','level':'HIGH','category':'semantic','title':'FixedValue\x20>\x20u32::max\x20(4294967295)','description':'FixedValue\x20'+c['FixedValue']+'\x20exceeds\x20u32\x20max','affected_stakeholders':['owner'],'scenario':'Setting\x20FixedValue\x20beyond\x20u32\x20range','mitigation':'Use\x20FixedValue\x200-4294967295','evidence':'fixed='+c['FixedValue']};}}return null;}},R_AB_3_01={'id':'R-AB-3-01','category':'authority','trigger':'Arbiter\x20collusion\x20—\x20single\x20voter\x20controls\x20>50%\x20of\x20total\x20weight','check':a=>{if(!a['voting_guard']||a['voting_guard']['op']!=='add'&&a['voting_guard']['op']!=='set')return null;const b=a['voting_guard']['guards'];if(b['length']<0x2)return null;const c=b['filter'](f=>'FixedValue'in f['vote_weight']&&f['vote_weight']['FixedValue']!==undefined)['map'](f=>f['vote_weight']['FixedValue']);if(c['length']===0x0)return null;const d=c['reduce']((f,g)=>f+g,0x0),e=Math['max'](...c);if(d>0x0&&e/d>0.5)return{'id':'R-AB-3-01','level':'MEDIUM','category':'authority','title':'Arbiter\x20collusion\x20risk\x20—\x20single\x20guard\x20controls\x20>50%\x20weight','description':'One\x20voting_guard\x20has\x20'+e+'\x20of\x20'+d+'\x20total\x20weight\x20('+(e/d*0x64)['toFixed'](0x1)+'%)','affected_stakeholders':['owner','disputant'],'scenario':'Weighted\x20voting\x20with\x20dominant\x20arbiter\x20—\x20can\x20single-handedly\x20decide\x20rulings','mitigation':'Distribute\x20weight\x20more\x20evenly,\x20or\x20require\x20multi-arbiter\x20consensus','evidence':'max='+e+',\x20total='+d+',\x20ratio='+(e/d*0x64)['toFixed'](0x1)+'%'};return null;}},R_AB_3_02={'id':'R-AB-3-02','category':'authority','trigger':'Permission\x20over-concentration\x20—\x20single\x20admin\x20(owner)','check':a=>{if(a['builder'])return{'id':'R-AB-3-02','level':'HIGH','category':'authority','title':'Arbitration\x20ownership\x20transfer\x20—\x20IRREVERSIBLE','description':'Transferring\x20Arbitration\x20to\x20'+a['builder']+';\x20original\x20owner\x20loses\x20all\x20control\x20permanently','affected_stakeholders':['owner'],'scenario':'Transferring\x20Arbitration\x20ownership','mitigation':'1)\x20Verify\x20new\x20owner\x20twice.\x202)\x20Confirm\x20new\x20owner\x20has\x20350-368\x20permissions\x20configured.\x203)\x20Coordinate\x20before\x20transfer.','evidence':'new_owner='+a['builder']};return null;}},R_AB_3_03={'id':'R-AB-3-03','category':'authority','trigger':'ARBITRATION_ARBITRATION\x20(359)\x20granted\x20to\x20wide\x20audience','check':a=>{if(a['arbitration']&&!a['current_voting_guard_addresses']?.['length'])return{'id':'R-AB-3-03','level':'MEDIUM','category':'authority','title':'Ruling\x20without\x20voting_guard\x20—\x20single-arbiter\x20can\x20rule\x20unchallenged','description':'make_ruling\x20(359)\x20without\x20voting_guard\x20means\x20any\x20permission\x20holder\x20can\x20unilaterally\x20decide','affected_stakeholders':['disputant','voter'],'scenario':'Single-arbiter\x20Arbitration\x20without\x20consensus\x20check','mitigation':'Configure\x20voting_guard\x20(354)\x20to\x20require\x20multi-arbiter\x20consensus\x20before\x20ruling','evidence':'voting_guard=empty'};return null;}},R_AB_4_01={'id':'R-AB-4-01','category':'lifecycle','trigger':'Invalid\x20Arb\x20status\x20transition\x20(7-state\x20flow\x20violation)','check':a=>{if(!a['current_arb_status']||!a['expected_arb_status'])return null;if(a['current_arb_status']===a['expected_arb_status'])return null;if(!isValidArbStatusTransition(a['current_arb_status'],a['expected_arb_status']))return{'id':'R-AB-4-01','level':'CRITICAL','category':'lifecycle','title':'Invalid\x20Arb\x20status\x20transition','description':a['current_arb_status']+'\x20→\x20'+a['expected_arb_status']+'\x20is\x20not\x20a\x20valid\x207-state\x20flow\x20transition','affected_stakeholders':['arbiter','disputant'],'scenario':'Attempting\x20operation\x20out\x20of\x20order\x20(e.g.\x20vote\x20before\x20confirm)','mitigation':'Follow\x20the\x207-state\x20flow:\x20Principal_confirming\x20→\x20Arbitrator_confirming\x20→\x20Voting\x20→\x20Arbitrated\x20→\x20Objectionable\x20→\x20Finished/Withdrawn','evidence':a['current_arb_status']+'\x20→\x20'+a['expected_arb_status']};return null;}},R_AB_4_02={'id':'R-AB-4-02','category':'lifecycle','trigger':'Operation\x20on\x20terminal\x20Arb\x20status\x20(Finished/Withdrawn)','check':a=>{if(!a['current_arb_status'])return null;if(isTerminalArbStatus(a['current_arb_status'])){const b=a['arb_withdraw'];if(!b&&(a['vote']||a['confirm']||a['arbitration']||a['reset']||a['feedback']))return{'id':'R-AB-4-02','level':'HIGH','category':'lifecycle','title':'Operation\x20on\x20terminal\x20Arb\x20status\x20—\x20irreversible','description':'Arb\x20is\x20in\x20terminal\x20status\x20'+a['current_arb_status']+';\x20only\x20arb_withdraw\x20is\x20allowed','affected_stakeholders':['arbiter','disputant'],'scenario':'Voting/ruling/reset\x20on\x20a\x20Finished\x20or\x20Withdrawn\x20Arb','mitigation':'Open\x20a\x20new\x20Arb\x20case\x20via\x20dispute()\x20if\x20further\x20arbitration\x20is\x20needed','evidence':'status='+a['current_arb_status']};}return null;}},R_AB_4_03={'id':'R-AB-4-03','category':'lifecycle','trigger':'reset\x20operation\x20—\x20may\x20indefinitely\x20extend\x20arbitration','check':a=>{if(!a['reset'])return null;return{'id':'R-AB-4-03','level':'MEDIUM','category':'lifecycle','title':'reset\x20operation\x20—\x20arbitration\x20lifecycle\x20extended','description':'reset\x20on\x20Arb\x20'+a['reset']['arb']+'\x20restarts\x20lifecycle\x20to\x20Principal_confirming;\x20feedback\x20required','affected_stakeholders':['arbiter','disputant'],'scenario':'Disputant\x20objects\x20to\x20ruling\x20and\x20resubmits\x20materials','mitigation':'Track\x20reset\x20count\x20—\x20consider\x20capping\x20resets\x20to\x20prevent\x20abuse','evidence':'arb='+a['reset']['arb']};}},R_AB_5_01={'id':'R-AB-5-01','category':'cross_object','trigger':'fees_alloc/fees_transfer\x20unfair\x20distribution\x20—\x20destination\x20not\x20verified','check':a=>{if(!a['fees_transfer'])return null;const b='allocation'in a['fees_transfer']['to']?'Allocation\x20'+a['fees_transfer']['to']['allocation']:'Treasury\x20'+a['fees_transfer']['to']['treasury'];return{'id':'R-AB-5-01','level':'MEDIUM','category':'cross_object','title':'fees_alloc/fees_transfer\x20—\x20verify\x20destination\x20fairness','description':'All\x20Arbitration.balance\x20will\x20be\x20transferred\x20to\x20'+b+';\x20ensure\x20destination\x20policy\x20is\x20fair\x20to\x20arbiters','affected_stakeholders':['arbiter','owner'],'scenario':'Distributing\x20arbitration\x20fees\x20without\x20verifying\x20allocation\x20rules','mitigation':'Verify\x20'+b+'\x20has\x20fair\x20distribution\x20policy;\x20consider\x20allocating\x20to\x20arbiters\x27\x20Allocation','evidence':'dest='+b+',\x20remark='+a['fees_transfer']['payment_remark']};}},R_AB_5_02={'id':'R-AB-5-02','category':'cross_object','trigger':'Dispute\x20filed\x20but\x20Order\x20op\x20permission\x20not\x20verified\x20—\x20E_OP_PERMISSION','check':a=>{if(!a['dispute'])return null;return{'id':'R-AB-5-02','level':'HIGH','category':'cross_object','title':'Order\x20op\x20permission\x20required\x20for\x20dispute','description':'dispute\x20on\x20Order\x20'+a['dispute']['order']+'\x20requires\x20order::assert_op_permission;\x20signer\x20must\x20have\x20Order\x27s\x20dispute\x20permission','affected_stakeholders':['disputant'],'scenario':'Filing\x20dispute\x20without\x20Order\x20op\x20permission','mitigation':'Ensure\x20signer\x20has\x20Order\x27s\x20dispute\x20operation\x20permission\x20(custom\x20index\x20or\x20builtin)','evidence':'order='+a['dispute']['order']};}},ALL_RULES=[R_AB_1_01,R_AB_1_02,R_AB_1_03,R_AB_1_04,R_AB_2_01,R_AB_2_03,R_AB_3_01,R_AB_3_02,R_AB_3_03,R_AB_4_01,R_AB_4_02,R_AB_4_03,R_AB_5_01,R_AB_5_02];export const ARBITRATION_RISK_VERSION='1.0.0';export function getAllRiskRules(){return[...ALL_RULES];}export function getRiskRulesCount(){return ALL_RULES['length'];}export function getRiskRulesByCategory(a){return ALL_RULES['filter'](b=>b['category']===a);}export function assessArbitrationRisks(a){const b=[];for(const f of ALL_RULES){const g=f['check'](a);if(g)b['push'](g);}const c=b['length']===0x0?'LOW':b['some'](h=>h['level']==='CRITICAL')?'CRITICAL':b['some'](h=>h['level']==='HIGH')?'HIGH':b['some'](h=>h['level']==='MEDIUM')?'MEDIUM':'LOW',d={};for(const h of b){d[h['category']]=(d[h['category']]??0x0)+0x1;}const e={};for(const i of b){for(const j of i['affected_stakeholders']){if(!e[j])e[j]=[];e[j]['push'](i['id']+':\x20'+i['mitigation']);}}return{'summary':'Assessed\x20'+b['length']+'\x20risk(s)\x20across\x20'+Object['keys'](d)['length']+'\x20categories','risks':b,'overall_risk':c,'risks_by_category':d,'stakeholder_advice':e,'needs_human_review':b['some'](k=>k['level']==='CRITICAL'||k['level']==='HIGH')};}