audit-tools 0.51.7 → 0.51.9

package/dist/shared/types/finding.d.ts

@@ -5,6 +5,77 @@ export type FindingSeverity = z.infer<typeof FindingSeveritySchema>;
 /** Canonical finding confidence vocabulary (most-confident-first). */
 export declare const FindingConfidenceSchema: z.ZodEnum<["high", "medium", "low"]>;
 export type FindingConfidence = z.infer<typeof FindingConfidenceSchema>;
+/**
+ * Which producer CONTRACT a finding came from, named by the one difference that
+ * matters downstream: whether that contract carries an `evidence` array.
+ *
+ * The two lanes do not share an evidence channel, and the asymmetry is by
+ * design. The per-file worker contract requires `evidence` (`WorkerFindingSchema`
+ * enforces `min(1)`); the design-review lanes do not — their contract lists no
+ * `evidence` at all (`findingsEnvelopeExample`) and their evidence channel is
+ * `affected_files`, certified by `groundDesignFinding`. A consumer that tests
+ * `evidence` therefore tests a field half its inputs were never asked for, and
+ * reads the other half's silence as a failed claim.
+ *
+ * TOOL-DERIVED at each producer's ingest (`markDesignEvidenceLane` for the
+ * design-review lanes, the field's default for per-file results) — never
+ * host-supplied, which is why every submission schema omits it. It is recorded
+ * rather than inferred at the reader because by the time a finding reaches
+ * synthesis the producer is no longer recoverable from its content: findings
+ * from both lanes sit in one array, and any content heuristic would be
+ * inference dressed as provenance.
+ */
+export declare const FindingEvidenceLaneSchema: z.ZodEnum<["per-file-lane", "design-review-lane"]>;
+export type FindingEvidenceLane = z.infer<typeof FindingEvidenceLaneSchema>;
+/**
+ * Lineage of a finding a DETERMINISTIC producer emitted — which producer, and
+ * over what source content. This is what makes such a finding a LEAD; it is
+ * stamped by the producing code (`stampLeadLineage`), and it is ENFORCED to be
+ * tool-only — every schema that parses a submitted finding omits this field and
+ * refuses it by name, and the design-review ingest strips it where the array
+ * door does not parse a schema at all. See `FindingSchema.lead_lineage` for the
+ * three sites; the enforcement is the point, because the claim "a host cannot
+ * author this" is exactly the kind that decays into prose if nothing tests it.
+ *
+ * WHY IT IS NOT JUST BOOKKEEPING. A deterministic graph heuristic (a cut-edge
+ * bridge, a co-change pair with no structural edge, a behaviorally-smeared
+ * doc grouping) computes over a GENERATION of the repo. Its verdict is
+ * falsifiable only against that generation: the same heuristic over a moved
+ * tree is a different claim, and a finding with no generation recorded cannot
+ * be re-checked at all — a reader cannot tell a live lead from one whose
+ * evidence was deleted three commits ago. The `source_hash` is the identity
+ * that lets a later pass re-derive the same signal and confirm or refute it.
+ *
+ * `producer` is the detector, not the artifact: `design_assessment` carries
+ * nine unrelated detectors, and naming only the artifact would leave a reader
+ * unable to tell a cut-edge fragility claim from a complexity-hotspot one.
+ */
+export declare const FindingLeadLineageSchema: z.ZodObject<{
+    /** Detector that emitted the lead (e.g. `detectSeams`, `detectHiddenCoupling`). */
+    producer: z.ZodString;
+    /**
+     * Content hash of the signal the producer read — the deterministic source
+     * this lead is bound to. Two runs over identical inputs produce the same
+     * hash; any input move produces a different one.
+     */
+    source_hash: z.ZodString;
+    /**
+     * `lead` — deterministic output awaiting semantic confirmation (the
+     * default for every graph heuristic). `confirmed` is never set by a
+     * deterministic producer: only a semantic pass may promote a lead, and it
+     * records the promotion on its own verdict, not here.
+     */
+    confirmation: z.ZodLiteral<"lead">;
+}, "strict", z.ZodTypeAny, {
+    producer: string;
+    source_hash: string;
+    confirmation: "lead";
+}, {
+    producer: string;
+    source_hash: string;
+    confirmation: "lead";
+}>;
+export type FindingLeadLineage = z.infer<typeof FindingLeadLineageSchema>;
 export declare const FindingLocationObjectSchema: z.ZodObject<{
     path: z.ZodString;
     line_start: z.ZodOptional<z.ZodNumber>;
@@ -294,6 +365,20 @@ export declare const FindingSchema: z.ZodObject<{
     title: z.ZodString;
     category: z.ZodString;
     severity: z.ZodEnum<["critical", "high", "medium", "low", "info"]>;
+    /**
+     * The severity the tool moved this finding DOWN from, when a synthesis-time
+     * bar re-graded it (audit's `CRITICAL_EVIDENCE_BAR`). Present ONLY on a
+     * downgrade, and written by the tool that performed it.
+     *
+     * Why a sibling field rather than the severity alone: without it a
+     * tool-moved `high` is byte-identical to a judge-authored `high`, so
+     * `audit-findings.json` — and any reader of `work_blocks.max_severity` —
+     * cannot tell a claim the tool refused to let stand from one the judge never
+     * made. The severity is still the reported truth; this records that it was
+     * CHANGED and from what, so the deliverable states the qualification instead
+     * of hiding it in a diff nobody kept.
+     */
+    severity_downgraded_from: z.ZodOptional<z.ZodEnum<["critical", "high", "medium", "low", "info"]>>;
     confidence: z.ZodEnum<["high", "medium", "low"]>;
     /** Audit lens; the auditor narrows this to its `Lens` union. */
     lens: z.ZodString;
@@ -382,6 +467,15 @@ export declare const FindingSchema: z.ZodObject<{
         status: "grounded" | "ungrounded" | "refuted";
         reason?: string | undefined;
     }>>;
+    /**
+     * The producer contract this finding arrived on — see
+     * {@link FindingEvidenceLaneSchema}. Absent on a per-file result (the lane
+     * whose contract requires `evidence`), so its absence is the default rather
+     * than a claim; stamped `design-review-lane` at that lane's ingest. Read by
+     * synthesis's `CRITICAL_EVIDENCE_BAR`, which applies only to the lane whose
+     * contract carries the field it tests.
+     */
+    evidence_lane: z.ZodOptional<z.ZodEnum<["per-file-lane", "design-review-lane"]>>;
     /**
      * Whether the defect this finding names is present at HEAD. TOOL-DERIVED at
      * conceptual ingest from the judge's per-candidate verification claims — host
@@ -493,6 +587,46 @@ export declare const FindingSchema: z.ZodObject<{
         snippet_hash: string;
         rule?: string | undefined;
     }>>;
+    /**
+     * Lineage of a finding a DETERMINISTIC producer emitted: which detector, over
+     * what source content, as an unconfirmed lead. TOOL-STAMPED by the producer,
+     * and host supply is REFUSED at every door into a finding array, because the
+     * field decides its own row's trust class: a submission that could set it
+     * would let a claim it made itself wear provenance it never had, and one that
+     * could omit it would let a real lead read as a first-hand finding. The
+     * refusals are `WorkerFindingSchema` (omit + `WORKER_REFUSED_FINDING_VERDICTS`,
+     * which `.strict()` turns into a rejection), `ConceptualSubmittedFindingSchema`
+     * (omit + `refuseSuppliedToolVerdict`), and the strip in `groundDesignFindings`
+     * for the design-review arrays, which reach ingestion through an array check
+     * rather than a parsing schema — see each site for why its door needs the shape
+     * it has. Absent on host-authored findings (per-file and design-review lanes),
+     * which are claims in their own right rather than leads awaiting confirmation.
+     */
+    lead_lineage: z.ZodOptional<z.ZodObject<{
+        /** Detector that emitted the lead (e.g. `detectSeams`, `detectHiddenCoupling`). */
+        producer: z.ZodString;
+        /**
+         * Content hash of the signal the producer read — the deterministic source
+         * this lead is bound to. Two runs over identical inputs produce the same
+         * hash; any input move produces a different one.
+         */
+        source_hash: z.ZodString;
+        /**
+         * `lead` — deterministic output awaiting semantic confirmation (the
+         * default for every graph heuristic). `confirmed` is never set by a
+         * deterministic producer: only a semantic pass may promote a lead, and it
+         * records the promotion on its own verdict, not here.
+         */
+        confirmation: z.ZodLiteral<"lead">;
+    }, "strict", z.ZodTypeAny, {
+        producer: string;
+        source_hash: string;
+        confirmation: "lead";
+    }, {
+        producer: string;
+        source_hash: string;
+        confirmation: "lead";
+    }>>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     confidence: "high" | "low" | "medium";
@@ -509,6 +643,7 @@ export declare const FindingSchema: z.ZodObject<{
         quoted_text?: string | undefined;
         hash_at_plan_time?: string | undefined;
     }[];
+    severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
     impact?: string | undefined;
     likelihood?: string | undefined;
     evidence?: string[] | undefined;
@@ -522,6 +657,7 @@ export declare const FindingSchema: z.ZodObject<{
         status: "grounded" | "ungrounded" | "refuted";
         reason?: string | undefined;
     } | undefined;
+    evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
     verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
     executable_anchor?: {
         command: string[];
@@ -548,6 +684,11 @@ export declare const FindingSchema: z.ZodObject<{
         snippet_hash: string;
         rule?: string | undefined;
     } | undefined;
+    lead_lineage?: {
+        producer: string;
+        source_hash: string;
+        confirmation: "lead";
+    } | undefined;
 }, {
     id: string;
     confidence: "high" | "low" | "medium";
@@ -564,6 +705,7 @@ export declare const FindingSchema: z.ZodObject<{
         quoted_text?: string | undefined;
         hash_at_plan_time?: string | undefined;
     }[];
+    severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
     impact?: string | undefined;
     likelihood?: string | undefined;
     evidence?: string[] | undefined;
@@ -577,6 +719,7 @@ export declare const FindingSchema: z.ZodObject<{
         status: "grounded" | "ungrounded" | "refuted";
         reason?: string | undefined;
     } | undefined;
+    evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
     verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
     executable_anchor?: {
         command: string[];
@@ -603,6 +746,11 @@ export declare const FindingSchema: z.ZodObject<{
         snippet_hash: string;
         rule?: string | undefined;
     } | undefined;
+    lead_lineage?: {
+        producer: string;
+        source_hash: string;
+        confirmation: "lead";
+    } | undefined;
 }>;
 export type Finding = z.infer<typeof FindingSchema>;
 /** Report-level grouping of findings into parallelizable units of work. */
@@ -820,15 +968,15 @@ export declare const LensCoverageEntrySchema: z.ZodObject<{
     findings_count: z.ZodNumber;
     outcome: z.ZodEnum<["clean", "findings", "degraded", "not_run", "not_applicable"]>;
 }, "strict", z.ZodTypeAny, {
-    outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
     lens: string;
     selected: boolean;
     findings_count: number;
-}, {
     outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
+}, {
     lens: string;
     selected: boolean;
     findings_count: number;
+    outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
 }>;
 export type LensCoverageEntry = z.infer<typeof LensCoverageEntrySchema>;
 export declare const AuditFindingsSummarySchema: z.ZodObject<{
@@ -877,15 +1025,15 @@ export declare const AuditFindingsSummarySchema: z.ZodObject<{
         findings_count: z.ZodNumber;
         outcome: z.ZodEnum<["clean", "findings", "degraded", "not_run", "not_applicable"]>;
     }, "strict", z.ZodTypeAny, {
-        outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         lens: string;
         selected: boolean;
         findings_count: number;
-    }, {
         outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
+    }, {
         lens: string;
         selected: boolean;
         findings_count: number;
+        outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     finding_count: number;
@@ -898,10 +1046,10 @@ export declare const AuditFindingsSummarySchema: z.ZodObject<{
     grounding_status_breakdown?: Record<string, number> | undefined;
     verification_status_breakdown?: Record<string, number> | undefined;
     lens_coverage?: {
-        outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         lens: string;
         selected: boolean;
         findings_count: number;
+        outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
     }[] | undefined;
 }, {
     finding_count: number;
@@ -914,10 +1062,10 @@ export declare const AuditFindingsSummarySchema: z.ZodObject<{
     grounding_status_breakdown?: Record<string, number> | undefined;
     verification_status_breakdown?: Record<string, number> | undefined;
     lens_coverage?: {
-        outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         lens: string;
         selected: boolean;
         findings_count: number;
+        outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
     }[] | undefined;
 }>;
 export type AuditFindingsSummary = z.infer<typeof AuditFindingsSummarySchema>;
@@ -974,15 +1122,15 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             findings_count: z.ZodNumber;
             outcome: z.ZodEnum<["clean", "findings", "degraded", "not_run", "not_applicable"]>;
         }, "strict", z.ZodTypeAny, {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
-        }, {
             outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
+        }, {
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         finding_count: number;
@@ -995,10 +1143,10 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         grounding_status_breakdown?: Record<string, number> | undefined;
         verification_status_breakdown?: Record<string, number> | undefined;
         lens_coverage?: {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }[] | undefined;
     }, {
         finding_count: number;
@@ -1011,10 +1159,10 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         grounding_status_breakdown?: Record<string, number> | undefined;
         verification_status_breakdown?: Record<string, number> | undefined;
         lens_coverage?: {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }[] | undefined;
     }>;
     findings: z.ZodArray<z.ZodObject<{
@@ -1022,6 +1170,20 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         title: z.ZodString;
         category: z.ZodString;
         severity: z.ZodEnum<["critical", "high", "medium", "low", "info"]>;
+        /**
+         * The severity the tool moved this finding DOWN from, when a synthesis-time
+         * bar re-graded it (audit's `CRITICAL_EVIDENCE_BAR`). Present ONLY on a
+         * downgrade, and written by the tool that performed it.
+         *
+         * Why a sibling field rather than the severity alone: without it a
+         * tool-moved `high` is byte-identical to a judge-authored `high`, so
+         * `audit-findings.json` — and any reader of `work_blocks.max_severity` —
+         * cannot tell a claim the tool refused to let stand from one the judge never
+         * made. The severity is still the reported truth; this records that it was
+         * CHANGED and from what, so the deliverable states the qualification instead
+         * of hiding it in a diff nobody kept.
+         */
+        severity_downgraded_from: z.ZodOptional<z.ZodEnum<["critical", "high", "medium", "low", "info"]>>;
         confidence: z.ZodEnum<["high", "medium", "low"]>;
         /** Audit lens; the auditor narrows this to its `Lens` union. */
         lens: z.ZodString;
@@ -1110,6 +1272,15 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         }>>;
+        /**
+         * The producer contract this finding arrived on — see
+         * {@link FindingEvidenceLaneSchema}. Absent on a per-file result (the lane
+         * whose contract requires `evidence`), so its absence is the default rather
+         * than a claim; stamped `design-review-lane` at that lane's ingest. Read by
+         * synthesis's `CRITICAL_EVIDENCE_BAR`, which applies only to the lane whose
+         * contract carries the field it tests.
+         */
+        evidence_lane: z.ZodOptional<z.ZodEnum<["per-file-lane", "design-review-lane"]>>;
         /**
          * Whether the defect this finding names is present at HEAD. TOOL-DERIVED at
          * conceptual ingest from the judge's per-candidate verification claims — host
@@ -1221,6 +1392,46 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         }>>;
+        /**
+         * Lineage of a finding a DETERMINISTIC producer emitted: which detector, over
+         * what source content, as an unconfirmed lead. TOOL-STAMPED by the producer,
+         * and host supply is REFUSED at every door into a finding array, because the
+         * field decides its own row's trust class: a submission that could set it
+         * would let a claim it made itself wear provenance it never had, and one that
+         * could omit it would let a real lead read as a first-hand finding. The
+         * refusals are `WorkerFindingSchema` (omit + `WORKER_REFUSED_FINDING_VERDICTS`,
+         * which `.strict()` turns into a rejection), `ConceptualSubmittedFindingSchema`
+         * (omit + `refuseSuppliedToolVerdict`), and the strip in `groundDesignFindings`
+         * for the design-review arrays, which reach ingestion through an array check
+         * rather than a parsing schema — see each site for why its door needs the shape
+         * it has. Absent on host-authored findings (per-file and design-review lanes),
+         * which are claims in their own right rather than leads awaiting confirmation.
+         */
+        lead_lineage: z.ZodOptional<z.ZodObject<{
+            /** Detector that emitted the lead (e.g. `detectSeams`, `detectHiddenCoupling`). */
+            producer: z.ZodString;
+            /**
+             * Content hash of the signal the producer read — the deterministic source
+             * this lead is bound to. Two runs over identical inputs produce the same
+             * hash; any input move produces a different one.
+             */
+            source_hash: z.ZodString;
+            /**
+             * `lead` — deterministic output awaiting semantic confirmation (the
+             * default for every graph heuristic). `confirmed` is never set by a
+             * deterministic producer: only a semantic pass may promote a lead, and it
+             * records the promotion on its own verdict, not here.
+             */
+            confirmation: z.ZodLiteral<"lead">;
+        }, "strict", z.ZodTypeAny, {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        }, {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        }>>;
     }, "strip", z.ZodTypeAny, {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -1237,6 +1448,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -1250,6 +1462,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -1276,6 +1489,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }, {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -1292,6 +1510,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -1305,6 +1524,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -1331,6 +1551,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }>, "many">;
     coherence_trace: z.ZodObject<{
         normalized_items: z.ZodArray<z.ZodObject<{
@@ -1463,6 +1688,20 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         title: z.ZodString;
         category: z.ZodString;
         severity: z.ZodEnum<["critical", "high", "medium", "low", "info"]>;
+        /**
+         * The severity the tool moved this finding DOWN from, when a synthesis-time
+         * bar re-graded it (audit's `CRITICAL_EVIDENCE_BAR`). Present ONLY on a
+         * downgrade, and written by the tool that performed it.
+         *
+         * Why a sibling field rather than the severity alone: without it a
+         * tool-moved `high` is byte-identical to a judge-authored `high`, so
+         * `audit-findings.json` — and any reader of `work_blocks.max_severity` —
+         * cannot tell a claim the tool refused to let stand from one the judge never
+         * made. The severity is still the reported truth; this records that it was
+         * CHANGED and from what, so the deliverable states the qualification instead
+         * of hiding it in a diff nobody kept.
+         */
+        severity_downgraded_from: z.ZodOptional<z.ZodEnum<["critical", "high", "medium", "low", "info"]>>;
         confidence: z.ZodEnum<["high", "medium", "low"]>;
         /** Audit lens; the auditor narrows this to its `Lens` union. */
         lens: z.ZodString;
@@ -1551,6 +1790,15 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         }>>;
+        /**
+         * The producer contract this finding arrived on — see
+         * {@link FindingEvidenceLaneSchema}. Absent on a per-file result (the lane
+         * whose contract requires `evidence`), so its absence is the default rather
+         * than a claim; stamped `design-review-lane` at that lane's ingest. Read by
+         * synthesis's `CRITICAL_EVIDENCE_BAR`, which applies only to the lane whose
+         * contract carries the field it tests.
+         */
+        evidence_lane: z.ZodOptional<z.ZodEnum<["per-file-lane", "design-review-lane"]>>;
         /**
          * Whether the defect this finding names is present at HEAD. TOOL-DERIVED at
          * conceptual ingest from the judge's per-candidate verification claims — host
@@ -1662,6 +1910,46 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         }>>;
+        /**
+         * Lineage of a finding a DETERMINISTIC producer emitted: which detector, over
+         * what source content, as an unconfirmed lead. TOOL-STAMPED by the producer,
+         * and host supply is REFUSED at every door into a finding array, because the
+         * field decides its own row's trust class: a submission that could set it
+         * would let a claim it made itself wear provenance it never had, and one that
+         * could omit it would let a real lead read as a first-hand finding. The
+         * refusals are `WorkerFindingSchema` (omit + `WORKER_REFUSED_FINDING_VERDICTS`,
+         * which `.strict()` turns into a rejection), `ConceptualSubmittedFindingSchema`
+         * (omit + `refuseSuppliedToolVerdict`), and the strip in `groundDesignFindings`
+         * for the design-review arrays, which reach ingestion through an array check
+         * rather than a parsing schema — see each site for why its door needs the shape
+         * it has. Absent on host-authored findings (per-file and design-review lanes),
+         * which are claims in their own right rather than leads awaiting confirmation.
+         */
+        lead_lineage: z.ZodOptional<z.ZodObject<{
+            /** Detector that emitted the lead (e.g. `detectSeams`, `detectHiddenCoupling`). */
+            producer: z.ZodString;
+            /**
+             * Content hash of the signal the producer read — the deterministic source
+             * this lead is bound to. Two runs over identical inputs produce the same
+             * hash; any input move produces a different one.
+             */
+            source_hash: z.ZodString;
+            /**
+             * `lead` — deterministic output awaiting semantic confirmation (the
+             * default for every graph heuristic). `confirmed` is never set by a
+             * deterministic producer: only a semantic pass may promote a lead, and it
+             * records the promotion on its own verdict, not here.
+             */
+            confirmation: z.ZodLiteral<"lead">;
+        }, "strict", z.ZodTypeAny, {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        }, {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        }>>;
     }, "strip", z.ZodTypeAny, {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -1678,6 +1966,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -1691,6 +1980,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -1717,6 +2007,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }, {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -1733,6 +2028,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -1746,6 +2042,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -1772,6 +2069,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }>, "many">>;
     /** Paths excluded from the audit per the intent checkpoint, with reasons. */
     excluded_scope: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -1806,7 +2108,6 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
     executive_summary: z.ZodOptional<z.ZodString>;
     top_risks: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
-    contract_version: string;
     findings: {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -1823,6 +2124,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -1836,6 +2138,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -1862,6 +2165,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[];
     summary: {
         finding_count: number;
@@ -1874,12 +2182,13 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         grounding_status_breakdown?: Record<string, number> | undefined;
         verification_status_breakdown?: Record<string, number> | undefined;
         lens_coverage?: {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }[] | undefined;
     };
+    contract_version: string;
     coherence_trace: {
         normalized_items: {
             id: string;
@@ -1934,6 +2243,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -1947,6 +2257,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -1973,13 +2284,17 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[] | undefined;
     excluded_scope?: {
         path: string;
         reason: string;
     }[] | undefined;
 }, {
-    contract_version: string;
     findings: {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -1996,6 +2311,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -2009,6 +2325,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -2035,6 +2352,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[];
     summary: {
         finding_count: number;
@@ -2047,12 +2369,13 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         grounding_status_breakdown?: Record<string, number> | undefined;
         verification_status_breakdown?: Record<string, number> | undefined;
         lens_coverage?: {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }[] | undefined;
     };
+    contract_version: string;
     coherence_trace: {
         normalized_items: {
             id: string;
@@ -2107,6 +2430,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -2120,6 +2444,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -2146,13 +2471,17 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[] | undefined;
     excluded_scope?: {
         path: string;
         reason: string;
     }[] | undefined;
 }>, {
-    contract_version: string;
     findings: {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -2169,6 +2498,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -2182,6 +2512,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -2208,6 +2539,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[];
     summary: {
         finding_count: number;
@@ -2220,12 +2556,13 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         grounding_status_breakdown?: Record<string, number> | undefined;
         verification_status_breakdown?: Record<string, number> | undefined;
         lens_coverage?: {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }[] | undefined;
     };
+    contract_version: string;
     coherence_trace: {
         normalized_items: {
             id: string;
@@ -2280,6 +2617,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -2293,6 +2631,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -2319,13 +2658,17 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[] | undefined;
     excluded_scope?: {
         path: string;
         reason: string;
     }[] | undefined;
 }, {
-    contract_version: string;
     findings: {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -2342,6 +2685,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -2355,6 +2699,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -2381,6 +2726,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[];
     summary: {
         finding_count: number;
@@ -2393,12 +2743,13 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
         grounding_status_breakdown?: Record<string, number> | undefined;
         verification_status_breakdown?: Record<string, number> | undefined;
         lens_coverage?: {
-            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
             lens: string;
             selected: boolean;
             findings_count: number;
+            outcome: "clean" | "findings" | "degraded" | "not_run" | "not_applicable";
         }[] | undefined;
     };
+    contract_version: string;
     coherence_trace: {
         normalized_items: {
             id: string;
@@ -2453,6 +2804,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -2466,6 +2818,7 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -2492,6 +2845,11 @@ export declare const AuditFindingsReportSchema: z.ZodEffects<z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[] | undefined;
     excluded_scope?: {
         path: string;