audit-tools 0.51.7 → 0.51.9

package/dist/audit/systemic/coveredThemes.d.ts

@@ -0,0 +1,28 @@
+import type { Finding } from "../types.js";
+/** One counted value in the digest — an abstract label plus how often it occurs. */
+export interface CoveredThemeCount {
+    value: string;
+    count: number;
+}
+/**
+ * What the banked improvements already cover, in aggregate. Recorded on the
+ * register and rendered into the next round's prompt as the variation bar's
+ * factual half.
+ */
+export interface SystemicCoveredThemes {
+    /** Distinct lenses the banked set already occupies, path-sorted. */
+    by_lens: CoveredThemeCount[];
+    /** Distinct categories the banked set already occupies, path-sorted. */
+    by_category: CoveredThemeCount[];
+    /** Every component a banked improvement already implicates, path-sorted. */
+    files: string[];
+    /** How many distinct improvements are banked (the digest's own denominator). */
+    finding_count: number;
+}
+/**
+ * Summarize the banked findings into the covered-themes digest. An empty bank
+ * yields an empty digest, never a fabricated one — the first round has covered
+ * nothing and the prompt says so.
+ */
+export declare function summarizeCoveredThemes(findings: readonly Finding[]): SystemicCoveredThemes;
+//# sourceMappingURL=coveredThemes.d.ts.map

package/dist/audit/systemic/coveredThemes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coveredThemes.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/coveredThemes.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAG3C,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,wEAAwE;IACxE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,4EAA4E;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gFAAgF;IAChF,aAAa,EAAE,MAAM,CAAC;CACvB;AAiBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,qBAAqB,CAiBvB"}

package/dist/audit/systemic/coveredThemes.js

@@ -0,0 +1,52 @@
+// Phase E — the COVERED-THEMES digest of the adversary loop.
+//
+// The loop's round prompt renders every banked improvement in full (an adversary
+// cannot avoid repeating what it cannot see), but a flat list answers "what was
+// said", not "what has been covered". Round 3 of the 2026-08-21 lap re-raised
+// round 2's `mapWithConcurrency` item under a fresh id — the list was there and
+// the lane still could not see the GROUND it had already walked. This digest is
+// that ground, stated in aggregate: which lenses and categories the banked set
+// already occupies, and which components it already implicates. A round that
+// wants to be new can name the axis it is departing on.
+//
+// Deterministic and content-derived: every array is ordered by a stable key, so
+// the digest never churns the register's content hash on iteration order (the
+// repo's extractor-ordering invariant). PURE: no IO, no LLM.
+import { compareCodeUnits } from "audit-tools/shared";
+function countBy(findings, select) {
+    const counts = new Map();
+    for (const finding of findings) {
+        const value = select(finding)?.trim();
+        if (!value)
+            continue;
+        counts.set(value, (counts.get(value) ?? 0) + 1);
+    }
+    return [...counts.entries()]
+        .map(([value, count]) => ({ value, count }))
+        .sort((a, b) => compareCodeUnits(a.value, b.value));
+}
+/**
+ * Summarize the banked findings into the covered-themes digest. An empty bank
+ * yields an empty digest, never a fabricated one — the first round has covered
+ * nothing and the prompt says so.
+ */
+export function summarizeCoveredThemes(findings) {
+    if (findings.length === 0) {
+        return { by_lens: [], by_category: [], files: [], finding_count: 0 };
+    }
+    const files = new Set();
+    for (const finding of findings) {
+        for (const file of finding.affected_files ?? []) {
+            const path = file?.path?.trim();
+            if (path)
+                files.add(path);
+        }
+    }
+    return {
+        by_lens: countBy(findings, (finding) => finding.lens),
+        by_category: countBy(findings, (finding) => finding.category),
+        files: [...files].sort(compareCodeUnits),
+        finding_count: findings.length,
+    };
+}
+//# sourceMappingURL=coveredThemes.js.map

package/dist/audit/systemic/coveredThemes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coveredThemes.js","sourceRoot":"","sources":["../../../src/audit/systemic/coveredThemes.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,wDAAwD;AACxD,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,6DAA6D;AAG7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAwBtD,SAAS,OAAO,CACd,QAA4B,EAC5B,MAAgD;IAEhD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA4B;IAE5B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChC,IAAI,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrD,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7D,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACxC,aAAa,EAAE,QAAQ,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC"}

package/dist/audit/systemic/reviewFileMap.d.ts

@@ -0,0 +1,81 @@
+/**
+ * The VERIFIED CALL-SITE MAP a design-review round receives as a read-only,
+ * provenanced input.
+ *
+ * A 2026-07-19 design-check step ran four adversarial rounds; each spawned a
+ * FRESH agent that re-grepped the same call-site map from scratch — roughly
+ * 135k subagent tokens a round, nearly all of it identical recon. The instinct
+ * that this buys independence is wrong in one specific way: it conflates
+ * independence of VERDICT with independence of INPUT. What a round must not do
+ * is judge work it authored. Being handed a factual map it did not produce
+ * leaves the verdict entirely its own.
+ *
+ * So the map is derived ONCE, by the tool, from artifacts the round did not
+ * produce either (the repository manifest and the dependency graph the audit
+ * pipeline already extracted), and handed over labelled as prior verified recon.
+ * It is a lane ASSET, not a submission: it is RENDERED into the round's prompt
+ * (`renderReviewFileMap`), never written to a path any lane's write scope covers,
+ * and no submission schema has a field for it — a round has no route by which to
+ * write back, because the only thing it hands over is its own findings. Updates
+ * go through a separate recon pass (the graph builder), which is the only thing
+ * that can change what the next round receives. Otherwise the map quietly
+ * absorbs one reviewer's assumption and reaches the next reviewer as fact.
+ *
+ * Deterministic and content-derived: every array is ordered by a stable key, so
+ * the file does not churn between emissions of an unchanged round. A cap that
+ * drops entries STATES the drop — a silently truncated map reads as a complete
+ * one, which is the failure mode this whole artefact exists to avoid.
+ */
+import type { ArtifactBundle } from "../io/artifacts.js";
+export interface ReviewFileMapAnchor {
+    /** The repo-relative file the call sites below target. */
+    path: string;
+    /** Files that reference it (path-sorted), capped — see `callers_omitted`. */
+    callers: string[];
+    /** How many callers were dropped by the cap (0 when none were). */
+    callers_omitted: number;
+    /** Files it references (path-sorted), capped — see `callees_omitted`. */
+    callees: string[];
+    /** How many callees were dropped by the cap (0 when none were). */
+    callees_omitted: number;
+}
+export interface ReviewFileMap {
+    /** What produced this map — the provenance the reading lane is told to trust. */
+    provenance: {
+        /** `tool` — the map is machine-derived, never authored by a reviewer. */
+        author: "tool";
+        /** The artifacts the edges were read from. */
+        sources: string[];
+        /** Edges consulted, so a thin map is visibly thin rather than silently so. */
+        edge_count: number;
+        /** Whether an edge category was present at all in the graph. */
+        graph_present: boolean;
+    };
+    /** The anchors, path-sorted. */
+    anchors: ReviewFileMapAnchor[];
+    /** Anchors dropped by the top-level cap, if any. */
+    anchors_omitted: number;
+    /**
+     * Authored files the graph records NO edge for, so no anchor could be built.
+     * Always stated: an omission the reading lane has to infer is the silent
+     * truncation this artefact exists to avoid, and these are exactly the files
+     * whose absence a round must not read as "nothing depends on it".
+     */
+    files_without_edges: number;
+}
+/**
+ * Build the map from the dependency graph the audit already extracted. Edges are
+ * read in both directions per anchor — callers and callees — because the review
+ * questions this feeds ("what does this change ripple into") need both and a
+ * round that re-derives one direction has re-derived the whole thing.
+ */
+export declare function buildReviewFileMap(bundle: ArtifactBundle, options?: {
+    maxAnchors?: number;
+}): ReviewFileMap;
+/**
+ * Render the map for a prompt. Returned as text rather than JSON so a lane reads
+ * it as data-that-was-handed-over; the `provenance` block is stated FIRST and in
+ * prose, because the whole point is that this lane did not author it.
+ */
+export declare function renderReviewFileMap(map: ReviewFileMap): string[];
+//# sourceMappingURL=reviewFileMap.d.ts.map

package/dist/audit/systemic/reviewFileMap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewFileMap.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/reviewFileMap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAKzD,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mEAAmE;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mEAAmE;IACnE,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,iFAAiF;IACjF,UAAU,EAAE;QACV,yEAAyE;QACzE,MAAM,EAAE,MAAM,CAAC;QACf,8CAA8C;QAC9C,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,8EAA8E;QAC9E,UAAU,EAAE,MAAM,CAAC;QACnB,gEAAgE;QAChE,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,gCAAgC;IAChC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAKD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,aAAa,CAmEf;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAwEhE"}

package/dist/audit/systemic/reviewFileMap.js

@@ -0,0 +1,169 @@
+/**
+ * The VERIFIED CALL-SITE MAP a design-review round receives as a read-only,
+ * provenanced input.
+ *
+ * A 2026-07-19 design-check step ran four adversarial rounds; each spawned a
+ * FRESH agent that re-grepped the same call-site map from scratch — roughly
+ * 135k subagent tokens a round, nearly all of it identical recon. The instinct
+ * that this buys independence is wrong in one specific way: it conflates
+ * independence of VERDICT with independence of INPUT. What a round must not do
+ * is judge work it authored. Being handed a factual map it did not produce
+ * leaves the verdict entirely its own.
+ *
+ * So the map is derived ONCE, by the tool, from artifacts the round did not
+ * produce either (the repository manifest and the dependency graph the audit
+ * pipeline already extracted), and handed over labelled as prior verified recon.
+ * It is a lane ASSET, not a submission: it is RENDERED into the round's prompt
+ * (`renderReviewFileMap`), never written to a path any lane's write scope covers,
+ * and no submission schema has a field for it — a round has no route by which to
+ * write back, because the only thing it hands over is its own findings. Updates
+ * go through a separate recon pass (the graph builder), which is the only thing
+ * that can change what the next round receives. Otherwise the map quietly
+ * absorbs one reviewer's assumption and reaches the next reviewer as fact.
+ *
+ * Deterministic and content-derived: every array is ordered by a stable key, so
+ * the file does not churn between emissions of an unchanged round. A cap that
+ * drops entries STATES the drop — a silently truncated map reads as a complete
+ * one, which is the failure mode this whole artefact exists to avoid.
+ */
+import { compareCodeUnits } from "audit-tools/shared";
+/** How many call sites per anchor are listed before the drop is stated. */
+const MAX_CALLERS_PER_ANCHOR = 25;
+/** How many authored files are mapped before the drop is stated. */
+const MAX_ANCHORS = 60;
+/**
+ * Build the map from the dependency graph the audit already extracted. Edges are
+ * read in both directions per anchor — callers and callees — because the review
+ * questions this feeds ("what does this change ripple into") need both and a
+ * round that re-derives one direction has re-derived the whole thing.
+ */
+export function buildReviewFileMap(bundle, options = {}) {
+    const maxAnchors = options.maxAnchors ?? MAX_ANCHORS;
+    const graphs = bundle.graph_bundle?.graphs;
+    const sources = [];
+    const outgoing = new Map();
+    const incoming = new Map();
+    let edgeCount = 0;
+    for (const [kind, edges] of Object.entries(graphs ?? {})) {
+        if (!Array.isArray(edges))
+            continue;
+        let kindCount = 0;
+        for (const edge of edges) {
+            if (typeof edge !== "object" ||
+                edge === null ||
+                typeof edge.from !== "string" ||
+                typeof edge.to !== "string") {
+                continue;
+            }
+            const { from, to } = edge;
+            if (from === to)
+                continue;
+            (outgoing.get(from) ?? outgoing.set(from, new Set()).get(from)).add(to);
+            (incoming.get(to) ?? incoming.set(to, new Set()).get(to)).add(from);
+            kindCount += 1;
+        }
+        if (kindCount > 0)
+            sources.push(`${kind} (${kindCount} edge(s))`);
+        edgeCount += kindCount;
+    }
+    sources.sort(compareCodeUnits);
+    // Anchors are the files this repository actually authored — the manifest is the
+    // authority on that, not the graph's node vocabulary, which may include
+    // synthetic roots and external specifiers.
+    const authored = (bundle.repo_manifest?.files ?? [])
+        .map((file) => file.path)
+        .sort(compareCodeUnits);
+    const anchors = [];
+    let filesWithoutEdges = 0;
+    for (const path of authored) {
+        const callers = [...(incoming.get(path) ?? [])].sort(compareCodeUnits);
+        const callees = [...(outgoing.get(path) ?? [])].sort(compareCodeUnits);
+        if (callers.length === 0 && callees.length === 0) {
+            filesWithoutEdges += 1;
+            continue;
+        }
+        anchors.push({
+            path,
+            callers: callers.slice(0, MAX_CALLERS_PER_ANCHOR),
+            callers_omitted: Math.max(0, callers.length - MAX_CALLERS_PER_ANCHOR),
+            callees: callees.slice(0, MAX_CALLERS_PER_ANCHOR),
+            callees_omitted: Math.max(0, callees.length - MAX_CALLERS_PER_ANCHOR),
+        });
+    }
+    return {
+        provenance: {
+            author: "tool",
+            sources,
+            edge_count: edgeCount,
+            graph_present: graphs !== undefined,
+        },
+        anchors: anchors.slice(0, maxAnchors),
+        anchors_omitted: Math.max(0, anchors.length - maxAnchors),
+        files_without_edges: filesWithoutEdges,
+    };
+}
+/**
+ * Render the map for a prompt. Returned as text rather than JSON so a lane reads
+ * it as data-that-was-handed-over; the `provenance` block is stated FIRST and in
+ * prose, because the whole point is that this lane did not author it.
+ */
+export function renderReviewFileMap(map) {
+    const lines = [
+        "### Verified call-site map (provenance: machine-derived prior recon — you did NOT author this)",
+        "",
+        "This map was produced by the audit tool from the dependency graph and the repository manifest " +
+            "extracted earlier in this run. It is a factual input, handed to you so this round spends its " +
+            "budget on judgment instead of re-deriving the same call-site map from scratch. You are " +
+            "expected to TRUST it as a starting point, not to reproduce it.",
+        "",
+        "**You cannot write back to it.** It is not part of your submission and nothing you return " +
+            "modifies it; a correction reaches the next round only through a fresh extraction pass. So if " +
+            "it disagrees with what you find in the source, say so explicitly in your finding — name the " +
+            "file and the symbol that contradicts the map. Silence would let a wrong map stand as an " +
+            "unchallenged premise for the next round. Your VERDICT remains entirely your own; only the " +
+            "recon is shared.",
+        "",
+        `Edges consulted: ${map.provenance.edge_count}` +
+            (map.provenance.sources.length > 0
+                ? ` — from ${map.provenance.sources.join(", ")}.`
+                : map.provenance.graph_present
+                    ? " — the dependency graph carried no edges."
+                    : " — no dependency graph was available."),
+        "",
+    ];
+    const noEdgeLine = (count) => `${count} authored file(s) carry no graph edge and are NOT listed — their absence is a gap ` +
+        "in this extraction, not a finding that nothing depends on them.";
+    if (map.anchors.length === 0) {
+        lines.push("No call sites are mapped (no graph edges connect the authored files). Treat this as NO " +
+            "RECON rather than as a map showing everything is unconnected — the absence of an edge in " +
+            "this repository's extraction is not evidence that no caller exists.", "");
+        if (map.files_without_edges > 0) {
+            lines.push(noEdgeLine(map.files_without_edges), "");
+        }
+        return lines;
+    }
+    for (const anchor of map.anchors) {
+        lines.push(`- **${anchor.path}**`);
+        lines.push(`  - referenced by: ${anchor.callers.join(", ") || "(none recorded)"}` +
+            (anchor.callers_omitted > 0
+                ? ` — and ${anchor.callers_omitted} more not listed`
+                : ""));
+        lines.push(`  - references: ${anchor.callees.join(", ") || "(none recorded)"}` +
+            (anchor.callees_omitted > 0
+                ? ` — and ${anchor.callees_omitted} more not listed`
+                : ""));
+    }
+    if (map.anchors_omitted > 0) {
+        lines.push("", `⚠ ${map.anchors_omitted} further file(s) with call sites are NOT listed above (this map is ` +
+            "capped). Their absence is a cap, not a finding — do not report an unlisted file as having " +
+            "no connections.");
+    }
+    if (map.files_without_edges > 0) {
+        // Distinct from the cap above: these are not omitted by a budget, they are
+        // files the graph has no edge for at all. Both are drops, so both are stated.
+        lines.push("", `⚠ ${noEdgeLine(map.files_without_edges)}`);
+    }
+    lines.push("");
+    return lines;
+}
+//# sourceMappingURL=reviewFileMap.js.map

package/dist/audit/systemic/reviewFileMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewFileMap.js","sourceRoot":"","sources":["../../../src/audit/systemic/reviewFileMap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,2EAA2E;AAC3E,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAwClC,oEAAoE;AACpE,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAsB,EACtB,UAAmC,EAAE;IAErC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IACE,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,IAAI;gBACb,OAAQ,IAA2B,CAAC,IAAI,KAAK,QAAQ;gBACrD,OAAQ,IAAyB,CAAC,EAAE,KAAK,QAAQ,EACjD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,IAAoC,CAAC;YAC1D,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YAC1B,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrE,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,SAAS,WAAW,CAAC,CAAC;QAClE,SAAS,IAAI,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE/B,gFAAgF;IAChF,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC;SACjD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE1B,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,iBAAiB,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;YACjD,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC;YACrE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;YACjD,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,UAAU,EAAE;YACV,MAAM,EAAE,MAAM;YACd,OAAO;YACP,UAAU,EAAE,SAAS;YACrB,aAAa,EAAE,MAAM,KAAK,SAAS;SACpC;QACD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;QACrC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QACzD,mBAAmB,EAAE,iBAAiB;KACvC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAkB;IACpD,MAAM,KAAK,GAAa;QACtB,gGAAgG;QAChG,EAAE;QACF,gGAAgG;YAC9F,+FAA+F;YAC/F,yFAAyF;YACzF,gEAAgE;QAClE,EAAE;QACF,4FAA4F;YAC1F,+FAA+F;YAC/F,8FAA8F;YAC9F,0FAA0F;YAC1F,4FAA4F;YAC5F,kBAAkB;QACpB,EAAE;QACF,oBAAoB,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE;YAC7C,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC,WAAW,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACjD,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa;oBAC5B,CAAC,CAAC,2CAA2C;oBAC7C,CAAC,CAAC,uCAAuC,CAAC;QAChD,EAAE;KACH,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,GAAG,KAAK,oFAAoF;QAC5F,iEAAiE,CAAC;IAEpE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,yFAAyF;YACvF,2FAA2F;YAC3F,qEAAqE,EACvE,EAAE,CACH,CAAC;QACF,IAAI,GAAG,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,EAAE;YACpE,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC;gBACzB,CAAC,CAAC,UAAU,MAAM,CAAC,eAAe,kBAAkB;gBACpD,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;QACF,KAAK,CAAC,IAAI,CACR,mBAAmB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,EAAE;YACjE,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC;gBACzB,CAAC,CAAC,UAAU,MAAM,CAAC,eAAe,kBAAkB;gBACpD,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,EAAE,EACF,KAAK,GAAG,CAAC,eAAe,qEAAqE;YAC3F,4FAA4F;YAC5F,iBAAiB,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;QAChC,2EAA2E;QAC3E,8EAA8E;QAC9E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/systemic/secondOrderAdversaryPrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secondOrderAdversaryPrompt.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/secondOrderAdversaryPrompt.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAiG1E;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,sBAAsB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,GAAG,MAAM,CAsFT"}
+{"version":3,"file":"secondOrderAdversaryPrompt.d.ts","sourceRoot":"","sources":["../../../src/audit/systemic/secondOrderAdversaryPrompt.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAwK1E;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,sBAAsB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,GAAG,MAAM,CA+IT"}

package/dist/audit/systemic/secondOrderAdversaryPrompt.js

@@ -1,9 +1,13 @@
+// sites-pinned: tests/audit/systemic-evidence-projection.test.ts
 // Phase E — SECOND-ORDER ADVERSARY prompt (host_delegation).
 //
 // The adversary is a SEPARATE agent and receives the evidence the earlier
 // design-review contributors actually produced. Aggregate metrics remain leads,
 // never a substitute for charters, candidate dispositions, prior findings, and
 // direct repository/source verification.
+import { summarizeCoveredThemes, } from "./coveredThemes.js";
+import { buildReviewFileMap, renderReviewFileMap } from "./reviewFileMap.js";
+import { SYSTEMIC_FINDING_ID_PREFIX } from "./systemicChallengeLoop.js";
 function priorFindings(bundle) {
     const candidates = [
         ...(bundle.design_assessment?.contract_findings ?? []),
@@ -28,37 +32,70 @@ function renderPriorFindings(findings) {
         return `- **${finding.id} — ${finding.title}** (${finding.lens}/${finding.severity}): ${finding.summary} [${files || "no files"}]`;
     });
 }
+/**
+ * The COVERED-THEMES digest — the variation bar's factual half.
+ *
+ * The banked set is already rendered in full below, and that alone did not stop
+ * the loop from re-treading the same ground: round 3 of the 2026-08-21 lap
+ * re-raised round 2's item under a fresh id. A flat list answers "what was
+ * said"; this answers "what ground is taken", so a round can name the axis it is
+ * departing on instead of inferring it from a wall of prose.
+ */
+function renderCoveredThemes(themes) {
+    if (themes.finding_count === 0) {
+        return [
+            "Nothing is banked yet — this round SETS the coverage rather than departing from it.",
+        ];
+    }
+    const counts = (entries) => entries.map((entry) => `${entry.value} (${entry.count})`).join(", ") || "none";
+    return [
+        `${themes.finding_count} improvement(s) are banked, covering:`,
+        "",
+        `- **Lenses already used:** ${counts(themes.by_lens)}`,
+        `- **Categories already used:** ${counts(themes.by_category)}`,
+        `- **Components already implicated:** ${themes.files.join(", ") || "none"}`,
+        "",
+        "That is COVERED GROUND. Re-raising any of it — in the same words or in different ones — " +
+            "is not a new finding and will not keep this loop open. This round owes a DEPARTURE: a " +
+            "different axis, a different component, or a categorically better approach to something " +
+            "the list above does not already name.",
+    ];
+}
 function renderCharterProjection(bundle) {
     const register = bundle.charter_register;
     if (!register || register.status === "omitted") {
         return ["No charter register was produced for this run."];
     }
+    // The three lane goal DAGs unmerged, the correspondences between them, and the
+    // verified differences — the accounts stand side by side (never a unified telos).
     const projection = {
-        subsystems: register.subsystems.map((subsystem) => ({
-            node_id: subsystem.node_id,
-            members: subsystem.members,
-            charters: subsystem.charters.map((charter) => ({
-                charter_id: charter.charter_id,
-                kind: charter.kind,
-                purpose: charter.purpose,
-                confidence: charter.confidence,
-                provenance: charter.provenance,
-                nominated_alternative: charter.nominated_alternative,
-                nominated_cost: charter.nominated_cost,
+        lanes: register.lanes.map((lane) => ({
+            kind: lane.kind,
+            nodes: lane.nodes.map((n) => ({
+                node_id: n.node_id,
+                purpose: n.purpose,
+                premise_height: n.premise_height,
+                files: n.files,
+                confidence: n.confidence,
             })),
+            edges: lane.edges.map((e) => ({ from: e.from, to: e.to })),
         })),
-        goal_graph: register.goal_graph,
-        deltas: register.deltas.map((delta) => ({
-            delta_id: delta.delta_id,
-            node_id: delta.node_id,
-            goal_node_id: delta.goal_node_id,
-            pair: delta.pair,
-            kind: delta.kind,
-            routed_to: delta.routed_to,
-            summary: delta.summary,
+        correspondences: register.correspondences.map((c) => ({
+            correspondence_id: c.correspondence_id,
+            members: c.members,
+            basis: c.basis,
+        })),
+        differences: register.differences.map((d) => ({
+            difference_id: d.difference_id,
+            correspondence_id: d.correspondence_id,
+            dimension: d.dimension,
+            relation: d.relation,
+            split: d.split,
+            accounts: d.accounts.map((a) => ({ kind: a.kind, claim: a.claim })),
+            gap: d.gap,
+            routed_to: d.routed_to,
+            fidelity: d.fidelity?.verdict,
         })),
-        triangulated: register.triangulated,
-        disagreement: register.disagreement,
         validation_issues: register.validation_issues,
     };
     return ["```json", JSON.stringify(projection, null, 2), "```"];
@@ -89,6 +126,35 @@ function renderAdjudication(bundle) {
         "```",
     ];
 }
+/**
+ * WHO the reading lane is — stated to the LANE, not only to the host dispatching it.
+ *
+ * The adversary's whole value is that it is not the agent that drove the audit:
+ * the one voice with no sunk cost in the design the audit just produced. Every
+ * other design-review lane says so in its own body (`renderConceptualReviewPrompt`
+ * and the perspective/judge prompts open by naming who the reader is and what they
+ * must NOT have authored). This lane's constraint lived only in the dispatch
+ * envelope (`nextStepCommand.ts`, "must NOT be the agent that drove this audit"),
+ * which the HOST reads — so a host that executed the lane inline in its own session
+ * satisfied the envelope's letter while breaking its point, and the round's
+ * findings were self-review with nothing on any surface recording that. A
+ * constraint the worker must obey belongs in the worker's prompt; the
+ * auditor-agnostic rule does not let it rest on the dispatcher relaying it.
+ */
+function adversaryIdentityLines() {
+    return [
+        "## Who you are (this is not optional)",
+        "",
+        "You are a SEPARATE agent from the one that drove this audit. You did not author the audit's " +
+            "findings, its charters, its adjudication, or any prior round's improvements — they are all " +
+            "inputs handed to you, and you are free to challenge every one of them.",
+        "",
+        "If you ARE the agent that drove this audit, stop and say so instead of answering: a " +
+            "self-review reports this lane compliant while delivering the opposite of what it exists " +
+            "for, and nothing downstream can tell the difference from your output alone.",
+        "",
+    ];
+}
 /**
  * Render one systemic challenge round. `evidencePaths` are also granted in the
  * host step's read set; the prompt names them so the adversary can inspect the
@@ -100,12 +166,14 @@ export function renderSecondOrderAdversaryPrompt(opts) {
     metricLines.push(`- Max fan-out (out-degree): ${opts.metrics.max_fan_out}`);
     const bankedFindings = priorFindings(opts.bundle);
     const evidencePaths = [...new Set(opts.evidencePaths)].sort();
+    const fileMap = buildReviewFileMap(opts.bundle);
     return [
         "# Design review — systemic improvement-seeking challenge (second-order adversary)",
         "",
         `You are a SEPARATE second-order adversary. This is challenge round ${opts.round}.`,
         `The audit already banked ${bankedFindings.length} distinct finding(s). Push HARDER for what those findings and their contributors missed.`,
         "",
+        ...adversaryIdentityLines(),
         "## Mandate — optimization / better-way, NOT defect-finding",
         "",
         "Do NOT hunt ordinary bugs (other lenses own that). Re-interrogate the system with human-grade pressure for SUPERIOR ALTERNATIVES to things that currently work:",
@@ -121,6 +189,9 @@ export function renderSecondOrderAdversaryPrompt(opts) {
         "Read these full artifacts before concluding the round. They include the charter register, persisted conceptual judge/adjudication record, and every current-round perspective result:",
         ...evidencePaths.map((path) => `- \`${path}\``),
         "",
+        "## Prior verified recon — read this BEFORE re-deriving anything",
+        "",
+        ...renderReviewFileMap(fileMap),
         "## Stated-purpose / goal / delta projection",
         "",
         "This projection comes from `charter_register.json`, not `docs_digest.json`. Treat triangulated telos as a lead, preserve disagreement, and inspect the full artifact when the projection raises a question:",
@@ -134,9 +205,28 @@ export function renderSecondOrderAdversaryPrompt(opts) {
         "",
         ...renderPriorFindings(bankedFindings),
         "",
+        "## Covered themes — what this round must depart from",
+        "",
+        ...renderCoveredThemes(summarizeCoveredThemes(bankedFindings)),
+        "",
+        "## Variation bar (required)",
+        "",
+        "For every finding you submit, you must be able to state — in its `summary` — which axis it " +
+            "departs on relative to the covered themes above: a component no banked finding names, a " +
+            "mechanism class none of them addresses, or a categorically different approach to something " +
+            "they only patch. A finding that cannot name its axis is a restatement, and this loop closes " +
+            "on restatements rather than counting them as progress.",
+        "",
         "## Repository/source verification (required)",
         "",
-        "Use the repository and the strongest structural tools available. For every proposed improvement, inspect exact source sites, trace relevant callers and callees in both directions, and verify the affected paths. Before any negative or exhaustive claim, check structural-index coverage/freshness and directly read every reported gap. If equivalent symbol search, bidirectional tracing, exact snippets, or coverage accounting is unavailable, state that limitation and do not present the claim as comprehensive. Aggregate counts and prior-review consensus are never proof.",
+        "Use the repository and the strongest structural tools available. The call-site map above is " +
+            "your starting recon — verify the sites it names and the claims you build on them, rather " +
+            "than rebuilding it. For every proposed improvement, inspect exact source sites, trace " +
+            "relevant callers and callees in both directions, and verify the affected paths. Before any " +
+            "negative or exhaustive claim, check structural-index coverage/freshness and directly read " +
+            "every reported gap. If equivalent symbol search, bidirectional tracing, exact snippets, or " +
+            "coverage accounting is unavailable, state that limitation and do not present the claim as " +
+            "comprehensive. Aggregate counts and prior-review consensus are never proof.",
         "",
         "## Aggregate metrics (supporting evidence — necessary, NOT sufficient)",
         "",
@@ -155,7 +245,30 @@ export function renderSecondOrderAdversaryPrompt(opts) {
         "",
         "## Loop-until-dry",
         "",
-        "The review is done only when consecutive rounds yield NOTHING NEW. If genuine source-backed pressure finds no new improvement this round, submit an empty `findings` array. Otherwise submit only new improvements, each anchored to at least one real component.",
+        "The review is done only when consecutive rounds yield NOTHING NEW. If genuine source-backed " +
+            "pressure finds no new improvement this round, submit an empty `findings` array — that is a " +
+            "QUIET round, and quiet rounds are how this loop ends. Do NOT manufacture a finding to look " +
+            "productive, and do NOT withhold a real one to end the loop sooner: either turns the dry " +
+            "signal into noise, and the dry signal is the loop's only evidence that the work is done. " +
+            "Otherwise submit only new improvements, each anchored to at least one real component.",
+        "",
+        "The tool also bounds this loop at a fixed number of rounds, so the loop ends whether or not " +
+            "it is dry. Stopping early by hand is still yours to do, and it is RECORDED as yours:",
+        "",
+        "- **If this round reaches nothing new** — submit `\"findings\": []` and stop normally.",
+        "- **If you are stopping before the loop is dry** (budget spent, no further yield available, " +
+            "the remaining ground genuinely exhausted by judgment) — say so explicitly with a top-level " +
+            "`stop` object (see Output below) and state the reason. That ending is recorded as a " +
+            "HOST-FORCED stop, distinct from convergence. Never submit an empty `findings` array to " +
+            "mean \"I am stopping\": an empty array asserts the round found nothing new, and if that is " +
+            "not true you have corrupted the loop's only convergence evidence.",
+        "",
+        "## Finding ids",
+        "",
+        "Finding ids are MINTED BY THE TOOL, not by you: whatever you write is namespaced into " +
+            `\`${SYSTEMIC_FINDING_ID_PREFIX}<round>-<your id>\`, so the same id in two different rounds ` +
+            "can never stand for two different findings. Supply a short, stable id of your own only to " +
+            "keep your own submission legible; it will be prefixed.",
         "",
         "## Output",
         "",
@@ -164,19 +277,29 @@ export function renderSecondOrderAdversaryPrompt(opts) {
         "```json",
         "{",
         '  "findings": [{',
-        '    "id": "<stable id>",',
+        '    "id": "<your short id; the tool prefixes it with the round>",',
         '    "title": "<the improvement>",',
         '    "category": "systemic_improvement",',
         '    "severity": "low|medium|high",',
         '    "confidence": "low|medium|high",',
         '    "lens": "<the TRUE lens: tests|performance|operability|...>",',
-        '    "summary": "<what to do, why it is better, and source verification>",',
+        '    "summary": "<what to do, why it is better, which axis it departs on, and source verification>",',
         '    "evidence": ["<symbol you read, the file holding it, and what you found there>"],',
         '    "affected_files": [{ "path": "<a real repo path>" }]',
         "  }]",
         "}",
         "```",
         "",
+        "To stop the loop early — include this ALONGSIDE any findings you are submitting, so the work " +
+            "you did deliver is still banked:",
+        "",
+        "```json",
+        "{",
+        '  "findings": [ /* ... */ ],',
+        '  "stop": { "forced": true, "reason": "<why the loop is being stopped before it is dry>" }',
+        "}",
+        "```",
+        "",
     ].join("\n");
 }
 //# sourceMappingURL=secondOrderAdversaryPrompt.js.map