@zanii/walls 0.1.2 → 0.1.3

package/README.md

@@ -38,6 +38,7 @@ classifier for higher assurance. `wallManifestHash` is order-independent (stable
 
 ## Changelog
 
+- **0.1.3** — Presets for CBUAE, VARA, DoH, DHA, SDAIA, SAMA, CMA, ADEK/KHDA, UK FCA Consumer Duty, SEC Marketing Rule and FINRA; defineWall builder; Arabic-aware output checks with normalised spelling; drift between evaluation runs; signed wall certificates.
 - **0.1.2** — now depends on `@zanii/core` 0.5 (protocol 1.2), so it shares one core with `@zanii/sdk` 0.5 instead of pulling in a second, older copy. No API change.
 - **0.1.0** — initial release: `WALLS` (sca-trading, rera, tdra, legal, consumer, difc, adgm), `wallPolicy`, `wallManifestHash`, `checkOutput`, `buildEvalReceipt`.
 

package/dist/assurance.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Keeping walls standing: a builder for any regulated vertical, Arabic-aware output checks
+ * (Gulf dialects, normalised spelling), drift between evaluation runs and a signed wall
+ * certificate for a period. Evaluation cases are yours; nothing here ships test content.
+ */
+import { type SignedObject } from '@zanii/core';
+import { type OutputCheck, type Wall } from './index.js';
+/**
+ * Define a wall for any vertical. Rejects ids that are not slugs and granted scopes a deny
+ * swallows whole (a grant that can never be used). Carve-outs, a broad grant with a narrower
+ * deny inside it, are fine: the deny wins.
+ */
+export declare function defineWall(w: Wall): Wall & {
+    manifest_hash: string;
+};
+/** Normalise Arabic for matching: strip diacritics and tatweel, unify alef, ta marbuta and alef maqsura forms. */
+export declare function normaliseArabic(text: string): string;
+/** Arabic (MSA and Gulf) phrases for the investment walls: the same "never advise" rule in the languages customers use. */
+export declare const ARABIC_FORBIDDEN: Record<string, string[]>;
+/** `checkOutput` plus normalised Arabic phrases for the wall (from `ARABIC_FORBIDDEN` or your own list). */
+export declare function checkOutputMultilingual(wall: Wall, text: string, arabic?: string[]): OutputCheck;
+/**
+ * Run your evaluation outputs through the wall and compare with the previous run: a lower pass
+ * rate, or a case that passed before and fails now, is drift.
+ */
+export declare function wallDrift(wall: Wall, outputs: Array<{
+    id: string;
+    text: string;
+}>, previous?: {
+    passRate: number;
+    failing: string[];
+}): {
+    wall: string;
+    manifest_hash: string;
+    cases: number;
+    passRate: number;
+    failing: string[];
+    regressions: string[];
+    drifted: boolean;
+};
+export type WallCertificate = SignedObject<{
+    v: 1;
+    type: 'wall.certificate';
+    wall: string;
+    regulator: string;
+    manifest_hash: string;
+    from: string;
+    to: string;
+    runs: number;
+    cases: number;
+    failures: number;
+    ts: string;
+}>;
+/** A signed statement for a regulator: the wall's manifest held for the period, with the evaluation totals. */
+export declare function wallCertificate(wall: Wall, input: {
+    from: string;
+    to: string;
+    runs: Array<{
+        cases: number;
+        failing: string[];
+    }>;
+    ts?: string;
+}, privateKey: Uint8Array): WallCertificate;
+/** Signed, and the wall's current manifest is the one certified. */
+export declare function verifyWallCertificate(c: WallCertificate, wall: Wall, trustedSigners?: string[]): boolean;
+//# sourceMappingURL=assurance.d.ts.map

package/dist/assurance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assurance.d.ts","sourceRoot":"","sources":["../src/assurance.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAA+C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAiC,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAExF;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,CAMpE;AAED,kHAAkH;AAClH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED,2HAA2H;AAC3H,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAIrD,CAAC;AAEF,4GAA4G;AAC5G,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,EAAoC,GAAG,WAAW,CAKjI;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,QAAQ,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE;;;;;;;;EAKrI;AAED,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5N,+GAA+G;AAC/G,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,UAAU,EAAE,UAAU,GAAG,eAAe,CAKxL;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAExG"}

package/dist/assurance.js

@@ -0,0 +1,65 @@
+/**
+ * Keeping walls standing: a builder for any regulated vertical, Arabic-aware output checks
+ * (Gulf dialects, normalised spelling), drift between evaluation runs and a signed wall
+ * certificate for a period. Evaluation cases are yours; nothing here ships test content.
+ */
+import { scopeCovers, signObject, verifySignedObject } from '@zanii/core';
+import { checkOutput, wallManifestHash } from './index.js';
+/**
+ * Define a wall for any vertical. Rejects ids that are not slugs and granted scopes a deny
+ * swallows whole (a grant that can never be used). Carve-outs, a broad grant with a narrower
+ * deny inside it, are fine: the deny wins.
+ */
+export function defineWall(w) {
+    if (!/^[a-z0-9-]{3,48}$/.test(w.id))
+        throw new Error('walls: id must be a lower-case slug');
+    if (!w.regulator || w.denies.length === 0)
+        throw new Error('walls: a wall needs a regulator and at least one denied scope');
+    const clash = w.scopes.filter((s) => w.denies.some((d) => scopeCovers(d, s)));
+    if (clash.length)
+        throw new Error(`walls: granted scopes fall entirely inside the wall: ${clash.join(', ')}`);
+    return { ...w, forbidden: w.forbidden.map((p) => p.toLowerCase()), manifest_hash: wallManifestHash(w) };
+}
+/** Normalise Arabic for matching: strip diacritics and tatweel, unify alef, ta marbuta and alef maqsura forms. */
+export function normaliseArabic(text) {
+    return text
+        .replace(/[ً-ْٰـ]/g, '')
+        .replace(/[آأإ]/g, 'ا')
+        .replace(/ة/g, 'ه')
+        .replace(/ى/g, 'ي');
+}
+/** Arabic (MSA and Gulf) phrases for the investment walls: the same "never advise" rule in the languages customers use. */
+export const ARABIC_FORBIDDEN = {
+    'sca-trading': ['اشتري هذا', 'بيع هذا', 'ربح مضمون', 'عائد مضمون', 'لازم تشتري', 'انصحك تشتري', 'اشتريه الحين'],
+    'cma-ksa': ['اشتري هذا', 'بيع هذا', 'ربح مضمون', 'عائد مضمون', 'لازم تشتري'],
+    'vara-marketing': ['ربح مضمون', 'عائد مضمون', 'بدون مخاطر', 'ما تخسر'],
+};
+/** `checkOutput` plus normalised Arabic phrases for the wall (from `ARABIC_FORBIDDEN` or your own list). */
+export function checkOutputMultilingual(wall, text, arabic = ARABIC_FORBIDDEN[wall.id] ?? []) {
+    const base = checkOutput(wall, text);
+    const norm = normaliseArabic(text);
+    const ar = arabic.filter((p) => norm.includes(normaliseArabic(p)));
+    return { ok: base.ok && ar.length === 0, violations: [...base.violations, ...ar] };
+}
+/**
+ * Run your evaluation outputs through the wall and compare with the previous run: a lower pass
+ * rate, or a case that passed before and fails now, is drift.
+ */
+export function wallDrift(wall, outputs, previous) {
+    const failing = outputs.filter((o) => !checkOutputMultilingual(wall, o.text).ok).map((o) => o.id);
+    const passRate = outputs.length ? Math.round(((outputs.length - failing.length) / outputs.length) * 1000) / 1000 : 1;
+    const regressions = previous ? failing.filter((id) => !previous.failing.includes(id)) : [];
+    return { wall: wall.id, manifest_hash: wallManifestHash(wall), cases: outputs.length, passRate, failing, regressions, drifted: !!previous && (passRate < previous.passRate || regressions.length > 0) };
+}
+/** A signed statement for a regulator: the wall's manifest held for the period, with the evaluation totals. */
+export function wallCertificate(wall, input, privateKey) {
+    return signObject({
+        v: 1, type: 'wall.certificate', wall: wall.id, regulator: wall.regulator, manifest_hash: wallManifestHash(wall), from: input.from, to: input.to,
+        runs: input.runs.length, cases: input.runs.reduce((s, r) => s + r.cases, 0), failures: input.runs.reduce((s, r) => s + r.failing.length, 0), ts: input.ts ?? new Date().toISOString(),
+    }, privateKey);
+}
+/** Signed, and the wall's current manifest is the one certified. */
+export function verifyWallCertificate(c, wall, trustedSigners) {
+    return verifySignedObject(c) && c.manifest_hash === wallManifestHash(wall) && (!trustedSigners || trustedSigners.includes(c.signer));
+}
+//# sourceMappingURL=assurance.js.map

package/dist/assurance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assurance.js","sourceRoot":"","sources":["../src/assurance.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAA+B,MAAM,YAAY,CAAC;AAExF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAO;IAChC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI;SACR,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,aAAa,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC;IAC/G,SAAS,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC;IAC5E,gBAAgB,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;CACvE,CAAC;AAEF,4GAA4G;AAC5G,MAAM,UAAU,uBAAuB,CAAC,IAAU,EAAE,IAAY,EAAE,SAAmB,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;IAClH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAU,EAAE,OAA4C,EAAE,QAAkD;IACpI,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AAC1M,CAAC;AAID,+GAA+G;AAC/G,MAAM,UAAU,eAAe,CAAC,IAAU,EAAE,KAAmG,EAAE,UAAsB;IACrK,OAAO,UAAU,CAAC;QAChB,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,kBAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;QACjK,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtL,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,CAAkB,EAAE,IAAU,EAAE,cAAyB;IAC7F,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,KAAK,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACvI,CAAC"}

package/dist/index.d.ts

@@ -36,4 +36,5 @@ export declare function buildEvalReceipt(wall: Wall, results: {
     target: string;
     payload: Record<string, unknown>;
 };
+export * from './assurance.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oFAAoF;IACpF,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAgDtC,CAAC;AAEF,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,CAE5H;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAEnD;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAIjE;AAED,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAS9J"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oFAAoF;IACpF,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CA8HtC,CAAC;AAEF,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,CAE5H;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAEnD;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAIjE;AAED,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAS9J;AACD,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -59,6 +59,84 @@ export const WALLS = {
         scopes: ['data.process.adgm.*'], denies: ['data.export.nonadequate.*'], forbidden: [],
         note: 'ADGM free-zone data protection; select per deployment (not federal PDPL)',
     },
+    // Further presets: starting points for each regulator's rules; confirm scope and wording with counsel.
+    'cbuae-consumer': {
+        id: 'cbuae-consumer', regulator: 'CBUAE (Consumer Protection)',
+        scopes: ['banking.inform.*', 'banking.service.*'],
+        denies: ['banking.credit.decide.*', 'banking.product.push.*'],
+        forbidden: ['you are pre-approved', 'no risk at all', 'limited time only, sign now', 'hidden fees do not apply'],
+        note: 'informs and services; credit decisions stay with a person; no pressure selling; disclose fees',
+    },
+    'vara-marketing': {
+        id: 'vara-marketing', regulator: 'VARA (Dubai)',
+        scopes: ['va.education.*', 'va.market.read.*'],
+        denies: ['va.advise.*', 'va.execute.*', 'va.promote.unlicensed.*'],
+        forbidden: ['guaranteed return', 'guaranteed profit', 'risk-free', 'cannot lose', 'buy this token', 'to the moon'],
+        note: 'virtual-asset marketing must be fair and carry risk disclaimers; no advice or execution without a licence',
+    },
+    'doh-health': {
+        id: 'doh-health', regulator: 'DoH Abu Dhabi',
+        scopes: ['health.inform.*', 'health.triage.assist.*'],
+        denies: ['health.diagnose.*', 'health.prescribe.*'],
+        forbidden: ['you have', 'your diagnosis is', 'take this medication', 'no need to see a doctor'],
+        note: 'assists clinicians and informs patients; never diagnoses or prescribes; a licensed professional decides',
+    },
+    'dha-health': {
+        id: 'dha-health', regulator: 'DHA (Dubai)',
+        scopes: ['health.inform.*', 'health.triage.assist.*'],
+        denies: ['health.diagnose.*', 'health.prescribe.*'],
+        forbidden: ['your diagnosis is', 'take this medication', 'no need to see a doctor'],
+        note: 'assists, never replaces, the licensed clinician',
+    },
+    'sdaia-ethics': {
+        id: 'sdaia-ethics', regulator: 'SDAIA (KSA AI Ethics Principles)',
+        scopes: ['ai.assist.*'],
+        denies: ['ai.profile.sensitive.*', 'ai.decide.unreviewed.*'],
+        forbidden: [],
+        note: 'fairness, privacy, transparency and human oversight; no sensitive profiling; decisions reviewable',
+    },
+    'sama-banking': {
+        id: 'sama-banking', regulator: 'SAMA',
+        scopes: ['banking.inform.*', 'banking.service.*'],
+        denies: ['banking.credit.decide.*', 'banking.data.share.unconsented.*'],
+        forbidden: ['you are pre-approved', 'no risk at all'],
+        note: 'consumer protection for bank customers; consented data sharing only',
+    },
+    'cma-ksa': {
+        id: 'cma-ksa', regulator: 'CMA (KSA)',
+        scopes: ['securities.education.*', 'market.read.*'],
+        denies: ['securities.advise.*', 'securities.execute.*'],
+        forbidden: ['buy this', 'sell this', 'guaranteed return', 'guaranteed profit'],
+        note: 'education only; securities advice and dealing are authorised activities',
+    },
+    'adek-khda-education': {
+        id: 'adek-khda-education', regulator: 'ADEK / KHDA',
+        scopes: ['education.tutor.*', 'education.inform.*'],
+        denies: ['education.grade.final.*', 'education.profile.minor.*'],
+        forbidden: ['i will write your exam', 'submit this as your own'],
+        note: 'tutors and informs; teachers decide final grades; no profiling of minors',
+    },
+    'fca-consumer-duty': {
+        id: 'fca-consumer-duty', regulator: 'UK FCA (Consumer Duty)',
+        scopes: ['finance.inform.*', 'finance.service.*'],
+        denies: ['finance.advise.unregulated.*', 'finance.sludge.*'],
+        forbidden: ['no risk at all', 'act now or lose out', 'guaranteed return'],
+        note: 'good outcomes for retail customers: fair value, understanding, support, no sludge',
+    },
+    'sec-marketing': {
+        id: 'sec-marketing', regulator: 'US SEC (Marketing Rule 206(4)-1)',
+        scopes: ['adviser.marketing.*'],
+        denies: ['adviser.marketing.testimonial.undisclosed.*', 'adviser.marketing.hypothetical.unsupported.*'],
+        forbidden: ['guaranteed return', 'guaranteed profit', 'cannot lose', 'past performance guarantees'],
+        note: 'no untrue or misleading statements; performance shown fairly with required disclosures',
+    },
+    'finra-genai': {
+        id: 'finra-genai', regulator: 'FINRA (Rule 2210, gen AI guidance)',
+        scopes: ['broker.communications.*'],
+        denies: ['broker.communications.unreviewed.*'],
+        forbidden: ['guaranteed return', 'risk-free', 'cannot lose'],
+        note: 'communications fair and balanced; supervision and record-keeping apply to AI-generated content',
+    },
 };
 /** A `@zanii/policy` config that denies everything the wall forbids. Pass to `createPolicyEngine`. */
 export function wallPolicy(wall) {
@@ -85,4 +163,5 @@ export function buildEvalReceipt(wall, results) {
         },
     };
 }
+export * from './assurance.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AActC,MAAM,CAAC,MAAM,KAAK,GAAyB;IACzC,aAAa,EAAE;QACb,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK;QACnC,MAAM,EAAE,CAAC,qBAAqB,EAAE,eAAe,CAAC;QAChD,MAAM,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC;QACxE,SAAS,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB;YAC5F,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,CAAC;QAClG,IAAI,EAAE,2FAA2F;KAClG;IACD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU;QACxC,MAAM,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;QAC5C,MAAM,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;QAC5C,SAAS,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,eAAe,CAAC;QAC3D,IAAI,EAAE,wDAAwD;KAC/D;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM;QACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC;QAClC,MAAM,EAAE,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;QAC9D,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,wCAAwC;KAC/C;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe;QAChD,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,MAAM,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;QAC3C,SAAS,EAAE,CAAC,qBAAqB,EAAE,gBAAgB,EAAE,gCAAgC,CAAC;QACtF,IAAI,EAAE,oCAAoC;KAC3C;IACD,cAAc,EAAE;QACd,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,oCAAoC;QACnE,MAAM,EAAE,CAAC,sBAAsB,CAAC;QAChC,MAAM,EAAE,CAAC,wBAAwB,CAAC;QAClC,SAAS,EAAE,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC;QAC5E,IAAI,EAAE,4CAA4C;KACnD;IACD,iEAAiE;IACjE,SAAS,EAAE;QACT,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB;QAC9C,MAAM,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,SAAS,EAAE,EAAE;QACrF,IAAI,EAAE,0EAA0E;KACjF;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB;QAC/C,MAAM,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,SAAS,EAAE,EAAE;QACrF,IAAI,EAAE,0EAA0E;KACjF;CACF,CAAC;AAEF,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC;AAOD,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,IAAU,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,OAA2D;IACtG,OAAO;QACL,MAAM,EAAE,QAAQ,IAAI,CAAC,EAAE,OAAO;QAC9B,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;YACrE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;YACrF,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;SAC/C;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AActC,MAAM,CAAC,MAAM,KAAK,GAAyB;IACzC,aAAa,EAAE;QACb,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK;QACnC,MAAM,EAAE,CAAC,qBAAqB,EAAE,eAAe,CAAC;QAChD,MAAM,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC;QACxE,SAAS,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB;YAC5F,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,CAAC;QAClG,IAAI,EAAE,2FAA2F;KAClG;IACD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU;QACxC,MAAM,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;QAC5C,MAAM,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;QAC5C,SAAS,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,eAAe,CAAC;QAC3D,IAAI,EAAE,wDAAwD;KAC/D;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM;QACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC;QAClC,MAAM,EAAE,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;QAC9D,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,wCAAwC;KAC/C;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe;QAChD,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,MAAM,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;QAC3C,SAAS,EAAE,CAAC,qBAAqB,EAAE,gBAAgB,EAAE,gCAAgC,CAAC;QACtF,IAAI,EAAE,oCAAoC;KAC3C;IACD,cAAc,EAAE;QACd,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,oCAAoC;QACnE,MAAM,EAAE,CAAC,sBAAsB,CAAC;QAChC,MAAM,EAAE,CAAC,wBAAwB,CAAC;QAClC,SAAS,EAAE,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC;QAC5E,IAAI,EAAE,4CAA4C;KACnD;IACD,iEAAiE;IACjE,SAAS,EAAE;QACT,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB;QAC9C,MAAM,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,SAAS,EAAE,EAAE;QACrF,IAAI,EAAE,0EAA0E;KACjF;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB;QAC/C,MAAM,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,SAAS,EAAE,EAAE;QACrF,IAAI,EAAE,0EAA0E;KACjF;IACD,uGAAuG;IACvG,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,6BAA6B;QAC9D,MAAM,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QACjD,MAAM,EAAE,CAAC,yBAAyB,EAAE,wBAAwB,CAAC;QAC7D,SAAS,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,0BAA0B,CAAC;QAChH,IAAI,EAAE,+FAA+F;KACtG;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc;QAC/C,MAAM,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC9C,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,yBAAyB,CAAC;QAClE,SAAS,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,CAAC;QAClH,IAAI,EAAE,2GAA2G;KAClH;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe;QAC5C,MAAM,EAAE,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;QACrD,MAAM,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;QACnD,SAAS,EAAE,CAAC,UAAU,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,yBAAyB,CAAC;QAC/F,IAAI,EAAE,yGAAyG;KAChH;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa;QAC1C,MAAM,EAAE,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;QACrD,MAAM,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;QACnD,SAAS,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,yBAAyB,CAAC;QACnF,IAAI,EAAE,iDAAiD;KACxD;IACD,cAAc,EAAE;QACd,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,kCAAkC;QACjE,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,MAAM,EAAE,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;QAC5D,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,mGAAmG;KAC1G;IACD,cAAc,EAAE;QACd,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM;QACrC,MAAM,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QACjD,MAAM,EAAE,CAAC,yBAAyB,EAAE,kCAAkC,CAAC;QACvE,SAAS,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QACrD,IAAI,EAAE,qEAAqE;KAC5E;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW;QACrC,MAAM,EAAE,CAAC,wBAAwB,EAAE,eAAe,CAAC;QACnD,MAAM,EAAE,CAAC,qBAAqB,EAAE,sBAAsB,CAAC;QACvD,SAAS,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;QAC9E,IAAI,EAAE,yEAAyE;KAChF;IACD,qBAAqB,EAAE;QACrB,EAAE,EAAE,qBAAqB,EAAE,SAAS,EAAE,aAAa;QACnD,MAAM,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;QACnD,MAAM,EAAE,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;QAChE,SAAS,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QAChE,IAAI,EAAE,0EAA0E;KACjF;IACD,mBAAmB,EAAE;QACnB,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,wBAAwB;QAC5D,MAAM,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QACjD,MAAM,EAAE,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;QAC5D,SAAS,EAAE,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC;QACzE,IAAI,EAAE,mFAAmF;KAC1F;IACD,eAAe,EAAE;QACf,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,kCAAkC;QAClE,MAAM,EAAE,CAAC,qBAAqB,CAAC;QAC/B,MAAM,EAAE,CAAC,6CAA6C,EAAE,8CAA8C,CAAC;QACvG,SAAS,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,aAAa,EAAE,6BAA6B,CAAC;QACnG,IAAI,EAAE,wFAAwF;KAC/F;IACD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,oCAAoC;QAClE,MAAM,EAAE,CAAC,yBAAyB,CAAC;QACnC,MAAM,EAAE,CAAC,oCAAoC,CAAC;QAC9C,SAAS,EAAE,CAAC,mBAAmB,EAAE,WAAW,EAAE,aAAa,CAAC;QAC5D,IAAI,EAAE,gGAAgG;KACvG;CACF,CAAC;AAEF,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC;AAOD,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,IAAU,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,OAA2D;IACtG,OAAO;QACL,MAAM,EAAE,QAAQ,IAAI,CAAC,EAAE,OAAO;QAC9B,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;YACrE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;YACrF,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;SAC/C;KACF,CAAC;AACJ,CAAC;AACD,cAAc,gBAAgB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/walls",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "UAE vertical 'wall' presets as enforceable, auditable artifacts - scopes never granted + a policy config + a manifest_hash + a receipted eval. SCA trading ('education only, never buy this'), RERA, TDRA, Legal, Consumer, DIFC/ADGM.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -31,7 +31,7 @@
     "vitest": "^3.0.9"
   },
   "dependencies": {
-    "@zanii/core": "^0.5.2"
+    "@zanii/core": "^0.5.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/assurance.ts

@@ -0,0 +1,70 @@
+/**
+ * Keeping walls standing: a builder for any regulated vertical, Arabic-aware output checks
+ * (Gulf dialects, normalised spelling), drift between evaluation runs and a signed wall
+ * certificate for a period. Evaluation cases are yours; nothing here ships test content.
+ */
+import { scopeCovers, signObject, verifySignedObject, type SignedObject } from '@zanii/core';
+import { checkOutput, wallManifestHash, type OutputCheck, type Wall } from './index.js';
+
+/**
+ * Define a wall for any vertical. Rejects ids that are not slugs and granted scopes a deny
+ * swallows whole (a grant that can never be used). Carve-outs, a broad grant with a narrower
+ * deny inside it, are fine: the deny wins.
+ */
+export function defineWall(w: Wall): Wall & { manifest_hash: string } {
+  if (!/^[a-z0-9-]{3,48}$/.test(w.id)) throw new Error('walls: id must be a lower-case slug');
+  if (!w.regulator || w.denies.length === 0) throw new Error('walls: a wall needs a regulator and at least one denied scope');
+  const clash = w.scopes.filter((s) => w.denies.some((d) => scopeCovers(d, s)));
+  if (clash.length) throw new Error(`walls: granted scopes fall entirely inside the wall: ${clash.join(', ')}`);
+  return { ...w, forbidden: w.forbidden.map((p) => p.toLowerCase()), manifest_hash: wallManifestHash(w) };
+}
+
+/** Normalise Arabic for matching: strip diacritics and tatweel, unify alef, ta marbuta and alef maqsura forms. */
+export function normaliseArabic(text: string): string {
+  return text
+    .replace(/[ً-ْٰـ]/g, '')
+    .replace(/[آأإ]/g, 'ا')
+    .replace(/ة/g, 'ه')
+    .replace(/ى/g, 'ي');
+}
+
+/** Arabic (MSA and Gulf) phrases for the investment walls: the same "never advise" rule in the languages customers use. */
+export const ARABIC_FORBIDDEN: Record<string, string[]> = {
+  'sca-trading': ['اشتري هذا', 'بيع هذا', 'ربح مضمون', 'عائد مضمون', 'لازم تشتري', 'انصحك تشتري', 'اشتريه الحين'],
+  'cma-ksa': ['اشتري هذا', 'بيع هذا', 'ربح مضمون', 'عائد مضمون', 'لازم تشتري'],
+  'vara-marketing': ['ربح مضمون', 'عائد مضمون', 'بدون مخاطر', 'ما تخسر'],
+};
+
+/** `checkOutput` plus normalised Arabic phrases for the wall (from `ARABIC_FORBIDDEN` or your own list). */
+export function checkOutputMultilingual(wall: Wall, text: string, arabic: string[] = ARABIC_FORBIDDEN[wall.id] ?? []): OutputCheck {
+  const base = checkOutput(wall, text);
+  const norm = normaliseArabic(text);
+  const ar = arabic.filter((p) => norm.includes(normaliseArabic(p)));
+  return { ok: base.ok && ar.length === 0, violations: [...base.violations, ...ar] };
+}
+
+/**
+ * Run your evaluation outputs through the wall and compare with the previous run: a lower pass
+ * rate, or a case that passed before and fails now, is drift.
+ */
+export function wallDrift(wall: Wall, outputs: Array<{ id: string; text: string }>, previous?: { passRate: number; failing: string[] }) {
+  const failing = outputs.filter((o) => !checkOutputMultilingual(wall, o.text).ok).map((o) => o.id);
+  const passRate = outputs.length ? Math.round(((outputs.length - failing.length) / outputs.length) * 1000) / 1000 : 1;
+  const regressions = previous ? failing.filter((id) => !previous.failing.includes(id)) : [];
+  return { wall: wall.id, manifest_hash: wallManifestHash(wall), cases: outputs.length, passRate, failing, regressions, drifted: !!previous && (passRate < previous.passRate || regressions.length > 0) };
+}
+
+export type WallCertificate = SignedObject<{ v: 1; type: 'wall.certificate'; wall: string; regulator: string; manifest_hash: string; from: string; to: string; runs: number; cases: number; failures: number; ts: string }>;
+
+/** A signed statement for a regulator: the wall's manifest held for the period, with the evaluation totals. */
+export function wallCertificate(wall: Wall, input: { from: string; to: string; runs: Array<{ cases: number; failing: string[] }>; ts?: string }, privateKey: Uint8Array): WallCertificate {
+  return signObject({
+    v: 1 as const, type: 'wall.certificate' as const, wall: wall.id, regulator: wall.regulator, manifest_hash: wallManifestHash(wall), from: input.from, to: input.to,
+    runs: input.runs.length, cases: input.runs.reduce((s, r) => s + r.cases, 0), failures: input.runs.reduce((s, r) => s + r.failing.length, 0), ts: input.ts ?? new Date().toISOString(),
+  }, privateKey);
+}
+
+/** Signed, and the wall's current manifest is the one certified. */
+export function verifyWallCertificate(c: WallCertificate, wall: Wall, trustedSigners?: string[]): boolean {
+  return verifySignedObject(c) && c.manifest_hash === wallManifestHash(wall) && (!trustedSigners || trustedSigners.includes(c.signer));
+}

package/src/index.ts

@@ -72,6 +72,84 @@ export const WALLS: Record<string, Wall> = {
     scopes: ['data.process.adgm.*'], denies: ['data.export.nonadequate.*'], forbidden: [],
     note: 'ADGM free-zone data protection; select per deployment (not federal PDPL)',
   },
+  // Further presets: starting points for each regulator's rules; confirm scope and wording with counsel.
+  'cbuae-consumer': {
+    id: 'cbuae-consumer', regulator: 'CBUAE (Consumer Protection)',
+    scopes: ['banking.inform.*', 'banking.service.*'],
+    denies: ['banking.credit.decide.*', 'banking.product.push.*'],
+    forbidden: ['you are pre-approved', 'no risk at all', 'limited time only, sign now', 'hidden fees do not apply'],
+    note: 'informs and services; credit decisions stay with a person; no pressure selling; disclose fees',
+  },
+  'vara-marketing': {
+    id: 'vara-marketing', regulator: 'VARA (Dubai)',
+    scopes: ['va.education.*', 'va.market.read.*'],
+    denies: ['va.advise.*', 'va.execute.*', 'va.promote.unlicensed.*'],
+    forbidden: ['guaranteed return', 'guaranteed profit', 'risk-free', 'cannot lose', 'buy this token', 'to the moon'],
+    note: 'virtual-asset marketing must be fair and carry risk disclaimers; no advice or execution without a licence',
+  },
+  'doh-health': {
+    id: 'doh-health', regulator: 'DoH Abu Dhabi',
+    scopes: ['health.inform.*', 'health.triage.assist.*'],
+    denies: ['health.diagnose.*', 'health.prescribe.*'],
+    forbidden: ['you have', 'your diagnosis is', 'take this medication', 'no need to see a doctor'],
+    note: 'assists clinicians and informs patients; never diagnoses or prescribes; a licensed professional decides',
+  },
+  'dha-health': {
+    id: 'dha-health', regulator: 'DHA (Dubai)',
+    scopes: ['health.inform.*', 'health.triage.assist.*'],
+    denies: ['health.diagnose.*', 'health.prescribe.*'],
+    forbidden: ['your diagnosis is', 'take this medication', 'no need to see a doctor'],
+    note: 'assists, never replaces, the licensed clinician',
+  },
+  'sdaia-ethics': {
+    id: 'sdaia-ethics', regulator: 'SDAIA (KSA AI Ethics Principles)',
+    scopes: ['ai.assist.*'],
+    denies: ['ai.profile.sensitive.*', 'ai.decide.unreviewed.*'],
+    forbidden: [],
+    note: 'fairness, privacy, transparency and human oversight; no sensitive profiling; decisions reviewable',
+  },
+  'sama-banking': {
+    id: 'sama-banking', regulator: 'SAMA',
+    scopes: ['banking.inform.*', 'banking.service.*'],
+    denies: ['banking.credit.decide.*', 'banking.data.share.unconsented.*'],
+    forbidden: ['you are pre-approved', 'no risk at all'],
+    note: 'consumer protection for bank customers; consented data sharing only',
+  },
+  'cma-ksa': {
+    id: 'cma-ksa', regulator: 'CMA (KSA)',
+    scopes: ['securities.education.*', 'market.read.*'],
+    denies: ['securities.advise.*', 'securities.execute.*'],
+    forbidden: ['buy this', 'sell this', 'guaranteed return', 'guaranteed profit'],
+    note: 'education only; securities advice and dealing are authorised activities',
+  },
+  'adek-khda-education': {
+    id: 'adek-khda-education', regulator: 'ADEK / KHDA',
+    scopes: ['education.tutor.*', 'education.inform.*'],
+    denies: ['education.grade.final.*', 'education.profile.minor.*'],
+    forbidden: ['i will write your exam', 'submit this as your own'],
+    note: 'tutors and informs; teachers decide final grades; no profiling of minors',
+  },
+  'fca-consumer-duty': {
+    id: 'fca-consumer-duty', regulator: 'UK FCA (Consumer Duty)',
+    scopes: ['finance.inform.*', 'finance.service.*'],
+    denies: ['finance.advise.unregulated.*', 'finance.sludge.*'],
+    forbidden: ['no risk at all', 'act now or lose out', 'guaranteed return'],
+    note: 'good outcomes for retail customers: fair value, understanding, support, no sludge',
+  },
+  'sec-marketing': {
+    id: 'sec-marketing', regulator: 'US SEC (Marketing Rule 206(4)-1)',
+    scopes: ['adviser.marketing.*'],
+    denies: ['adviser.marketing.testimonial.undisclosed.*', 'adviser.marketing.hypothetical.unsupported.*'],
+    forbidden: ['guaranteed return', 'guaranteed profit', 'cannot lose', 'past performance guarantees'],
+    note: 'no untrue or misleading statements; performance shown fairly with required disclosures',
+  },
+  'finra-genai': {
+    id: 'finra-genai', regulator: 'FINRA (Rule 2210, gen AI guidance)',
+    scopes: ['broker.communications.*'],
+    denies: ['broker.communications.unreviewed.*'],
+    forbidden: ['guaranteed return', 'risk-free', 'cannot lose'],
+    note: 'communications fair and balanced; supervision and record-keeping apply to AI-generated content',
+  },
 };
 
 /** A `@zanii/policy` config that denies everything the wall forbids. Pass to `createPolicyEngine`. */
@@ -107,3 +185,4 @@ export function buildEvalReceipt(wall: Wall, results: { passed: number; failed:
     },
   };
 }
+export * from './assurance.js';