audrey 1.1.2 → 1.2.0

package/scripts/verify-paper-claims.mjs

@@ -1,254 +0,0 @@
-import { existsSync, readFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { validateSchema } from '../benchmarks/validate-guardbench-artifacts.mjs';
-import { verifyGuardBenchPublicationArtifacts } from '../benchmarks/verify-publication-artifacts.mjs';
-
-const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
-const DEFAULT_REGISTER = 'docs/paper/claim-register.json';
-const DEFAULT_SCHEMA = 'docs/paper/claim-register.schema.json';
-const SEEDED_SECRET = 'sk-guardbench-secret-0000000000000000000000000000';
-
-function fromRoot(path) {
-  return resolve(ROOT, path);
-}
-
-function readText(path) {
-  const absolute = fromRoot(path);
-  if (!existsSync(absolute)) throw new Error(`Missing required file: ${path}`);
-  return readFileSync(absolute, 'utf-8');
-}
-
-function readJson(path) {
-  return JSON.parse(readText(path));
-}
-
-function parseArgs(argv = process.argv.slice(2)) {
-  const args = {
-    register: DEFAULT_REGISTER,
-    schema: DEFAULT_SCHEMA,
-    json: false,
-  };
-
-  for (let i = 0; i < argv.length; i++) {
-    const token = argv[i];
-    if (token === '--register' && argv[i + 1]) args.register = argv[++i];
-    else if (token === '--schema' && argv[i + 1]) args.schema = argv[++i];
-    else if (token === '--json') args.json = true;
-    else if (token === '--help' || token === '-h') args.help = true;
-    else throw new Error(`Unknown argument: ${token}`);
-  }
-
-  return args;
-}
-
-function usage() {
-  return `Usage: node scripts/verify-paper-claims.mjs [options]
-
-Options:
-  --register <path>  Claim register JSON. Default: ${DEFAULT_REGISTER}.
-  --schema <path>    Claim register schema. Default: ${DEFAULT_SCHEMA}.
-  --json             Print the machine-readable claim verification report.
-`;
-}
-
-function assertTextNeedles(needles, shouldExist, failures) {
-  for (const needle of needles) {
-    let text;
-    try {
-      text = readText(needle.path);
-    } catch (error) {
-      failures.push(error.message);
-      continue;
-    }
-    const normalizedText = text.replace(/\s+/g, ' ');
-    const normalizedNeedle = needle.text.replace(/\s+/g, ' ');
-    const found = text.includes(needle.text) || normalizedText.includes(normalizedNeedle);
-    if (shouldExist && !found)
-      failures.push(`${needle.path} is missing claim text: ${needle.text}`);
-    if (!shouldExist && found)
-      failures.push(`${needle.path} contains forbidden claim text: ${needle.text}`);
-  }
-}
-
-function guardbenchLocalPassed() {
-  const summary = readJson('benchmarks/output/guardbench-summary.json');
-  const failures = [];
-  if (summary.passed !== 10) failures.push(`GuardBench passed expected 10, got ${summary.passed}`);
-  if (summary.scenarios !== 10)
-    failures.push(`GuardBench scenarios expected 10, got ${summary.scenarios}`);
-  if (summary.redactionLeaks !== 0)
-    failures.push(`GuardBench decision redaction leaks expected 0, got ${summary.redactionLeaks}`);
-  if (summary.artifactRedactionSweep?.passed !== true)
-    failures.push('GuardBench artifact redaction sweep did not pass');
-  if (summary.artifactRedactionSweep?.leakCount !== 0) {
-    failures.push(
-      `GuardBench artifact leak count expected 0, got ${summary.artifactRedactionSweep?.leakCount}`,
-    );
-  }
-  return failures;
-}
-
-function noPublishedSecretLeaks() {
-  const paths = [
-    'benchmarks/output/guardbench-manifest.json',
-    'benchmarks/output/guardbench-summary.json',
-    'benchmarks/output/guardbench-raw.json',
-  ];
-  return paths.flatMap(path =>
-    readText(path).includes(SEEDED_SECRET) ? [`${path} contains the seeded raw secret`] : [],
-  );
-}
-
-function adapterRegistryHasMem0Zep() {
-  const registry = readJson('benchmarks/adapters/registry.json');
-  const ids = new Set((registry.adapters ?? []).map(adapter => adapter.id));
-  const failures = [];
-  if (!ids.has('mem0-platform')) failures.push('Adapter registry missing mem0-platform');
-  if (!ids.has('zep-cloud')) failures.push('Adapter registry missing zep-cloud');
-  return failures;
-}
-
-function externalEvidencePending() {
-  const evidence = readJson('benchmarks/output/external/guardbench-external-evidence.json');
-  const rows = (evidence.adapters ?? []).filter(adapter =>
-    ['mem0-platform', 'zep-cloud'].includes(adapter.id),
-  );
-  const failures = [];
-  if (rows.length !== 2)
-    failures.push(`External evidence expected Mem0 and Zep rows, got ${rows.length}`);
-  if (rows.every(row => row.status === 'verified')) {
-    failures.push(
-      'External evidence is fully verified but claim register still marks external scores pending',
-    );
-  }
-  for (const row of rows) {
-    if (row.status !== 'pending')
-      failures.push(
-        `External evidence row ${row.id} should remain pending until strict live evidence passes`,
-      );
-    if (row.evidenceKind !== 'dry-run')
-      failures.push(
-        `External evidence row ${row.id} should be dry-run evidence before live credentials`,
-      );
-  }
-  return failures;
-}
-
-function externalEvidenceNoSecrets() {
-  const text = readText('benchmarks/output/external/guardbench-external-evidence.json');
-  const evidence = JSON.parse(text);
-  const failures = [];
-  if (text.includes('runtime-key'))
-    failures.push('External evidence report contains test runtime-key');
-  for (const row of evidence.adapters ?? []) {
-    if (row.secretLeakCount !== 0)
-      failures.push(
-        `External evidence row ${row.id} reports ${row.secretLeakCount} credential leak(s)`,
-      );
-  }
-  return failures;
-}
-
-function paperStageBoundaryExcludesExternalScores() {
-  const paper = readText('docs/paper/audrey-paper-v1.md');
-  const failures = [];
-  if (!paper.includes('this paper does not report external-system GuardBench scores')) {
-    failures.push('Paper missing explicit external-score exclusion');
-  }
-  if (
-    !paper.includes(
-      'External scores added only when live adapter runs and raw outputs are published',
-    )
-  ) {
-    failures.push('Paper missing Stage-B external-score condition');
-  }
-  return failures;
-}
-
-async function publicationVerifierOk() {
-  const report = await verifyGuardBenchPublicationArtifacts();
-  return report.ok ? [] : report.failures.map(failure => `publication verifier: ${failure}`);
-}
-
-async function runArtifactCheck(name) {
-  if (name === 'adapter-registry-has-mem0-zep') return adapterRegistryHasMem0Zep();
-  if (name === 'external-evidence-no-secrets') return externalEvidenceNoSecrets();
-  if (name === 'external-evidence-pending') return externalEvidencePending();
-  if (name === 'guardbench-local-passed') return guardbenchLocalPassed();
-  if (name === 'no-published-secret-leaks') return noPublishedSecretLeaks();
-  if (name === 'paper-stage-boundary-excludes-external-scores')
-    return paperStageBoundaryExcludesExternalScores();
-  if (name === 'publication-verifier-ok') return publicationVerifierOk();
-  return [`Unknown claim artifact check: ${name}`];
-}
-
-export async function verifyPaperClaims(options = {}) {
-  const register = readJson(options.register ?? DEFAULT_REGISTER);
-  const schema = readJson(options.schema ?? DEFAULT_SCHEMA);
-  const schemaFailures = validateSchema(register, schema, 'audrey-paper-claim-register');
-  const claimReports = [];
-
-  for (const claim of register.claims ?? []) {
-    const failures = [];
-    assertTextNeedles(claim.requiredText ?? [], true, failures);
-    assertTextNeedles(claim.forbiddenText ?? [], false, failures);
-    for (const evidence of claim.evidence ?? []) {
-      const [path] = evidence.split('#');
-      if (!existsSync(fromRoot(path)))
-        failures.push(`Missing evidence file for ${claim.id}: ${path}`);
-    }
-    for (const check of claim.artifactChecks ?? []) {
-      failures.push(...(await runArtifactCheck(check)));
-    }
-    claimReports.push({
-      id: claim.id,
-      status: claim.status,
-      ok: failures.length === 0,
-      artifactChecks: claim.artifactChecks ?? [],
-      failures,
-    });
-  }
-
-  const failures = [
-    ...schemaFailures.map(failure => `claim register schema: ${failure}`),
-    ...claimReports.flatMap(report => report.failures.map(failure => `${report.id}: ${failure}`)),
-  ];
-
-  return {
-    schemaVersion: '1.0.0',
-    suite: 'Audrey paper claim verification',
-    generatedAt: new Date().toISOString(),
-    ok: failures.length === 0,
-    register: fromRoot(options.register ?? DEFAULT_REGISTER),
-    claims: claimReports,
-    failures,
-  };
-}
-
-async function main() {
-  const args = parseArgs();
-  if (args.help) {
-    console.log(usage());
-    return;
-  }
-
-  const report = await verifyPaperClaims(args);
-  if (args.json) {
-    console.log(JSON.stringify(report, null, 2));
-  } else if (report.ok) {
-    console.log(`Paper claim verification passed: ${report.claims.length} claim(s)`);
-  } else {
-    console.error('Paper claim verification failed:');
-    for (const failure of report.failures) console.error(`- ${failure}`);
-  }
-
-  if (!report.ok) process.exit(1);
-}
-
-if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  main().catch(error => {
-    console.error(error.stack ?? error.message);
-    process.exit(1);
-  });
-}

package/scripts/verify-paper-submission-bundle.mjs

@@ -1,218 +0,0 @@
-import { createHash } from 'node:crypto';
-import { existsSync, readFileSync, readdirSync } from 'node:fs';
-import { join, relative, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { validateSchema } from '../benchmarks/validate-guardbench-artifacts.mjs';
-import { publicPath, scanFilesForLocalPaths } from '../benchmarks/public-paths.mjs';
-
-const ROOT = resolve(fileURLToPath(new URL('..', import.meta.url)));
-const DEFAULT_DIR = 'docs/paper/output/submission-bundle';
-const DEFAULT_SCHEMA = 'docs/paper/paper-submission-bundle.schema.json';
-const REQUIRED_FILES = [
-  'README.md',
-  'LICENSE',
-  'package.json',
-  'docs/paper/arxiv-compile-report.schema.json',
-  'docs/paper/output/arxiv/main.tex',
-  'docs/paper/output/arxiv/references.bib',
-  'docs/paper/output/arxiv/arxiv-manifest.json',
-  'docs/paper/output/arxiv-compile-report.json',
-  'docs/paper/audrey-paper-v1.md',
-  'docs/paper/browser-launch-plan.json',
-  'docs/paper/browser-launch-plan.schema.json',
-  'docs/paper/browser-launch-results.json',
-  'docs/paper/browser-launch-results.schema.json',
-  'docs/paper/claim-register.json',
-  'docs/paper/publication-pack.json',
-  'docs/paper/evidence-ledger.md',
-  'docs/paper/references.bib',
-  'docs/paper/SUBMISSION_README.md',
-  'benchmarks/output/guardbench-summary.json',
-  'benchmarks/output/guardbench-raw.json',
-  'benchmarks/output/external/guardbench-external-evidence.json',
-  'benchmarks/output/submission-bundle/submission-manifest.json',
-];
-const PASSED_COMPILE_FILES = [
-  'docs/paper/output/arxiv-compile/main.pdf',
-  'docs/paper/output/arxiv-compile/arxiv-compile.log',
-];
-
-function fromRoot(path) {
-  return resolve(ROOT, path);
-}
-
-function readJson(path) {
-  return JSON.parse(readFileSync(path, 'utf-8'));
-}
-
-function sha256File(path) {
-  return createHash('sha256').update(readFileSync(path)).digest('hex');
-}
-
-function walkFiles(dir, root = dir) {
-  return readdirSync(dir, { withFileTypes: true }).flatMap(entry => {
-    const path = join(dir, entry.name);
-    if (entry.isDirectory()) return walkFiles(path, root);
-    return relative(root, path).replaceAll('\\', '/');
-  });
-}
-
-function parseArgs(argv = process.argv.slice(2)) {
-  const args = {
-    dir: DEFAULT_DIR,
-    schema: DEFAULT_SCHEMA,
-    checkSourceFreshness: true,
-    json: false,
-  };
-  for (let i = 0; i < argv.length; i++) {
-    const token = argv[i];
-    if ((token === '--dir' || token === '--bundle-dir') && argv[i + 1]) args.dir = argv[++i];
-    else if (token === '--schema' && argv[i + 1]) args.schema = argv[++i];
-    else if (token === '--no-source-check') args.checkSourceFreshness = false;
-    else if (token === '--json') args.json = true;
-    else if (token === '--help' || token === '-h') args.help = true;
-    else throw new Error(`Unknown argument: ${token}`);
-  }
-  return args;
-}
-
-function usage() {
-  return `Usage: node scripts/verify-paper-submission-bundle.mjs [options]
-
-Options:
-  --dir <path>     Paper submission bundle directory. Default: ${DEFAULT_DIR}.
-  --schema <path>  Bundle manifest schema. Default: ${DEFAULT_SCHEMA}.
-  --no-source-check
-                  Skip checking bundled hashes against current source files.
-  --json           Print the machine-readable verification report.
-`;
-}
-
-export function verifyPaperSubmissionBundle(options = {}) {
-  const dir = fromRoot(options.dir ?? DEFAULT_DIR);
-  const schemaPath = fromRoot(options.schema ?? DEFAULT_SCHEMA);
-  const checkSourceFreshness = options.checkSourceFreshness !== false;
-  const manifestPath = join(dir, 'paper-submission-manifest.json');
-  const failures = [];
-  let manifest;
-
-  try {
-    manifest = readJson(manifestPath);
-  } catch (error) {
-    return {
-      ok: false,
-      dir,
-      files: [],
-      failures: [`paper-submission-manifest.json: ${error.message}`],
-    };
-  }
-
-  try {
-    const schema = readJson(schemaPath);
-    failures.push(...validateSchema(manifest, schema, 'audrey-paper-submission-bundle'));
-  } catch (error) {
-    failures.push(`schema: ${error.message}`);
-  }
-
-  const listed = new Map((manifest.files ?? []).map(file => [file.path, file]));
-  for (const file of REQUIRED_FILES) {
-    if (!listed.has(file))
-      failures.push(`paper-submission-manifest.json: missing required file record ${file}`);
-  }
-  const compileReport = listed.has('docs/paper/output/arxiv-compile-report.json')
-    ? readJson(join(dir, 'docs/paper/output/arxiv-compile-report.json'))
-    : null;
-  if (compileReport?.status === 'passed') {
-    for (const file of PASSED_COMPILE_FILES) {
-      if (!listed.has(file))
-        failures.push(`paper-submission-manifest.json: missing compile-proof file record ${file}`);
-    }
-  }
-  if (listed.has('paper-submission-manifest.json')) {
-    failures.push('paper-submission-manifest.json: must not include a self-hash file record');
-  }
-
-  for (const [file, record] of listed) {
-    const path = join(dir, file);
-    if (!existsSync(path)) {
-      failures.push(`${file}: listed in manifest but missing from bundle`);
-      continue;
-    }
-    const bytes = readFileSync(path).byteLength;
-    if (record.bytes !== bytes) failures.push(`${file}: byte length mismatch`);
-    const sha256 = sha256File(path);
-    if (record.sha256 !== sha256) failures.push(`${file}: sha256 mismatch`);
-    if (checkSourceFreshness && record.source) {
-      const sourcePath = fromRoot(record.source);
-      if (existsSync(sourcePath)) {
-        const sourceBytes = readFileSync(sourcePath).byteLength;
-        const sourceSha256 = sha256File(sourcePath);
-        if (record.bytes !== sourceBytes || record.sha256 !== sourceSha256) {
-          failures.push(`${file}: source file has changed since bundle creation`);
-        }
-      }
-    }
-  }
-
-  const actualFiles = walkFiles(dir)
-    .filter(file => file !== 'paper-submission-manifest.json')
-    .sort();
-  const listedFiles = [...listed.keys()].sort();
-  const actualSet = new Set(actualFiles);
-  const listedSet = new Set(listedFiles);
-  for (const file of actualFiles) {
-    if (!listedSet.has(file)) failures.push(`${file}: present in bundle but missing from manifest`);
-  }
-  for (const file of listedFiles) {
-    if (!actualSet.has(file))
-      failures.push(`${file}: listed in manifest but not present in bundle`);
-  }
-  for (const file of scanFilesForLocalPaths(dir, actualFiles)) {
-    failures.push(`${file}: contains a local absolute path`);
-  }
-  if (manifest.claimVerification?.ok !== true)
-    failures.push('paper-submission-manifest.json: claimVerification is not ok');
-  if (manifest.publicationPackVerification?.ok !== true)
-    failures.push('paper-submission-manifest.json: publicationPackVerification is not ok');
-  if (manifest.guardBenchSnapshot?.passed !== 10)
-    failures.push('paper-submission-manifest.json: GuardBench passed count is not 10');
-  if (manifest.guardBenchSnapshot?.scenarios !== 10)
-    failures.push('paper-submission-manifest.json: GuardBench scenario count is not 10');
-  if (manifest.guardBenchSnapshot?.redactionLeaks !== 0)
-    failures.push('paper-submission-manifest.json: GuardBench decision redaction leaks are not 0');
-  if (manifest.guardBenchSnapshot?.artifactLeaks !== 0)
-    failures.push('paper-submission-manifest.json: GuardBench artifact leaks are not 0');
-
-  return {
-    ok: failures.length === 0,
-    dir: publicPath(dir),
-    manifestPath: publicPath(manifestPath),
-    files: listedFiles,
-    failures,
-  };
-}
-
-async function main() {
-  const args = parseArgs();
-  if (args.help) {
-    console.log(usage());
-    return;
-  }
-
-  const report = verifyPaperSubmissionBundle(args);
-  if (args.json) console.log(JSON.stringify(report, null, 2));
-  else if (report.ok) console.log(`Paper submission bundle verification passed: ${report.dir}`);
-  else {
-    console.error('Paper submission bundle verification failed:');
-    for (const failure of report.failures) console.error(`- ${failure}`);
-  }
-
-  if (!report.ok) process.exit(1);
-}
-
-if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  main().catch(error => {
-    console.error(error.stack ?? error.message);
-    process.exit(1);
-  });
-}

package/scripts/verify-publication-pack.mjs

@@ -1,210 +0,0 @@
-import { existsSync, readFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { publicPath } from '../benchmarks/public-paths.mjs';
-import { validateSchema } from '../benchmarks/validate-guardbench-artifacts.mjs';
-import { verifyPaperClaims } from './verify-paper-claims.mjs';
-
-const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
-const DEFAULT_PACK = 'docs/paper/publication-pack.json';
-const DEFAULT_SCHEMA = 'docs/paper/publication-pack.schema.json';
-const SEEDED_SECRET = 'sk-guardbench-secret-0000000000000000000000000000';
-const REQUIRED_ENTRIES = [
-  'arxiv-title',
-  'arxiv-abstract',
-  'hacker-news-title',
-  'hacker-news-comment',
-  'reddit-title',
-  'reddit-body',
-  'x-post-1',
-  'x-post-2',
-  'linkedin-post',
-];
-const X_URL_RESERVED_CHARS = 24;
-
-function fromRoot(path) {
-  return resolve(ROOT, path);
-}
-
-function readText(path) {
-  const absolute = fromRoot(path);
-  if (!existsSync(absolute)) throw new Error(`Missing required file: ${path}`);
-  return readFileSync(absolute, 'utf-8');
-}
-
-function readJson(path) {
-  return JSON.parse(readText(path));
-}
-
-function parseArgs(argv = process.argv.slice(2)) {
-  const args = {
-    pack: DEFAULT_PACK,
-    schema: DEFAULT_SCHEMA,
-    json: false,
-  };
-
-  for (let i = 0; i < argv.length; i++) {
-    const token = argv[i];
-    if (token === '--pack' && argv[i + 1]) args.pack = argv[++i];
-    else if (token === '--schema' && argv[i + 1]) args.schema = argv[++i];
-    else if (token === '--json') args.json = true;
-    else if (token === '--help' || token === '-h') args.help = true;
-    else throw new Error(`Unknown argument: ${token}`);
-  }
-
-  return args;
-}
-
-function usage() {
-  return `Usage: node scripts/verify-publication-pack.mjs [options]
-
-Options:
-  --pack <path>    Publication pack JSON. Default: ${DEFAULT_PACK}.
-  --schema <path>  Publication pack schema. Default: ${DEFAULT_SCHEMA}.
-  --json           Print the machine-readable verification report.
-`;
-}
-
-function referencesPendingClaim(entry, claimMap) {
-  return entry.claimIds.some(id => claimMap.get(id)?.status === 'pending');
-}
-
-function hasPendingBoundaryLanguage(text) {
-  return /\b(pending|deferred|does not report|not reporting|not claimed|Stage-B|live credentialed)\b/i.test(
-    text,
-  );
-}
-
-function validateEntry(entry, claimMap, forbiddenNeedles) {
-  const failures = [];
-  const reservedUrlChars = Number.isInteger(entry.reservedUrlChars) ? entry.reservedUrlChars : 0;
-  if (entry.text.length > entry.maxChars) {
-    failures.push(
-      `${entry.id}: text length ${entry.text.length} exceeds maxChars ${entry.maxChars}`,
-    );
-  }
-  if (entry.text.includes(SEEDED_SECRET)) failures.push(`${entry.id}: contains seeded raw secret`);
-  if (entry.text.includes('runtime-key'))
-    failures.push(`${entry.id}: contains runtime-key test credential`);
-  for (const claimId of entry.claimIds) {
-    if (!claimMap.has(claimId)) failures.push(`${entry.id}: unknown claim id ${claimId}`);
-  }
-  for (const needle of forbiddenNeedles) {
-    if (entry.text.includes(needle))
-      failures.push(`${entry.id}: contains forbidden claim text: ${needle}`);
-  }
-  if (referencesPendingClaim(entry, claimMap) && !hasPendingBoundaryLanguage(entry.text)) {
-    failures.push(
-      `${entry.id}: references a pending claim without explicit pending/deferred boundary language`,
-    );
-  }
-  if (/10\/10/.test(entry.text) && !/\b(local|Stage-A)\b/i.test(entry.text)) {
-    failures.push(`${entry.id}: 10/10 claim must be scoped as local or Stage-A`);
-  }
-  if (/\b(Mem0|Zep)\b/.test(entry.text) && !hasPendingBoundaryLanguage(entry.text)) {
-    failures.push(`${entry.id}: Mem0/Zep mention must include pending/deferred boundary language`);
-  }
-  if (entry.platform === 'hacker-news' && entry.kind === 'title' && entry.text.length > 80) {
-    failures.push(`${entry.id}: Hacker News title should stay at or below 80 characters`);
-  }
-  if (entry.platform === 'x' && entry.text.length > 280) {
-    failures.push(`${entry.id}: X post should stay at or below 280 characters`);
-  }
-  if (entry.platform === 'x' && entry.requiresArtifactUrl === true) {
-    if (!Number.isInteger(entry.reservedUrlChars)) {
-      failures.push(`${entry.id}: X post requiring an artifact URL must set reservedUrlChars`);
-    } else if (entry.reservedUrlChars < X_URL_RESERVED_CHARS) {
-      failures.push(
-        `${entry.id}: X artifact URL reserve must be at least ${X_URL_RESERVED_CHARS} characters`,
-      );
-    }
-    if (entry.text.length + reservedUrlChars > entry.maxChars) {
-      failures.push(
-        `${entry.id}: text length ${entry.text.length} plus URL reserve ${reservedUrlChars} exceeds maxChars ${entry.maxChars}`,
-      );
-    }
-  }
-  return failures;
-}
-
-export async function verifyPublicationPack(options = {}) {
-  const pack = readJson(options.pack ?? DEFAULT_PACK);
-  const schema = readJson(options.schema ?? DEFAULT_SCHEMA);
-  const claimReport = await verifyPaperClaims();
-  const claimRegister = readJson(pack.claimRegister);
-  const claimMap = new Map((claimRegister.claims ?? []).map(claim => [claim.id, claim]));
-  const forbiddenNeedles = (claimRegister.claims ?? []).flatMap(claim =>
-    (claim.forbiddenText ?? []).map(needle => needle.text),
-  );
-
-  const schemaFailures = validateSchema(pack, schema, 'audrey-publication-pack');
-  const ids = new Set();
-  const entryReports = [];
-  const failures = [...schemaFailures.map(failure => `publication pack schema: ${failure}`)];
-
-  if (!claimReport.ok)
-    failures.push(...claimReport.failures.map(failure => `claim verifier: ${failure}`));
-
-  for (const entry of pack.entries ?? []) {
-    const entryFailures = [];
-    const reservedUrlChars = Number.isInteger(entry.reservedUrlChars) ? entry.reservedUrlChars : 0;
-    if (ids.has(entry.id)) entryFailures.push(`${entry.id}: duplicate entry id`);
-    ids.add(entry.id);
-    entryFailures.push(...validateEntry(entry, claimMap, forbiddenNeedles));
-    entryReports.push({
-      id: entry.id,
-      platform: entry.platform,
-      kind: entry.kind,
-      chars: entry.text.length,
-      maxChars: entry.maxChars,
-      requiresArtifactUrl: entry.requiresArtifactUrl === true,
-      reservedUrlChars,
-      effectiveChars: entry.text.length + reservedUrlChars,
-      claimIds: entry.claimIds,
-      ok: entryFailures.length === 0,
-      failures: entryFailures,
-    });
-    failures.push(...entryFailures);
-  }
-
-  for (const id of REQUIRED_ENTRIES) {
-    if (!ids.has(id)) failures.push(`Missing required publication-pack entry: ${id}`);
-  }
-
-  return {
-    schemaVersion: '1.0.0',
-    suite: 'Audrey publication pack verification',
-    generatedAt: new Date().toISOString(),
-    ok: failures.length === 0,
-    pack: publicPath(fromRoot(options.pack ?? DEFAULT_PACK)),
-    entries: entryReports,
-    failures,
-  };
-}
-
-async function main() {
-  const args = parseArgs();
-  if (args.help) {
-    console.log(usage());
-    return;
-  }
-
-  const report = await verifyPublicationPack(args);
-  if (args.json) {
-    console.log(JSON.stringify(report, null, 2));
-  } else if (report.ok) {
-    console.log(`Publication pack verification passed: ${report.entries.length} entry(s)`);
-  } else {
-    console.error('Publication pack verification failed:');
-    for (const failure of report.failures) console.error(`- ${failure}`);
-  }
-
-  if (!report.ok) process.exit(1);
-}
-
-if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  main().catch(error => {
-    console.error(error.stack ?? error.message);
-    process.exit(1);
-  });
-}