border-customs 0.8.0 → 0.8.1

package/dist/index.js

@@ -37459,6 +37459,19 @@ function matchHostProfile(text, _o) {
   flush();
   return hits;
 }
+var BINDING_TOKEN = String.raw`\b(?:q` + "wen" + String.raw`|deep` + "seek" + String.raw`|kimi|g` + "lm" + String.raw`|ernie|dou` + "bao" + String.raw`|hunyuan|sp` + "ark" + String.raw`)[-\.\d][\w.-]*\b`;
+var BINDING_VENDOR_RE = new RegExp(BINDING_TOKEN, "gi");
+var BINDING_CONTEXT_RE = /(?:model|模型|default|默认|provider)/i;
+function matchMachineBinding(text, _o) {
+  const hits = [];
+  text.split("\n").forEach((body, idx) => {
+    if (!BINDING_CONTEXT_RE.test(body)) return;
+    for (const m of body.matchAll(BINDING_VENDOR_RE)) {
+      hits.push({ rule: "exfil-machine-binding", matched: m[0] ?? "", line: idx + 1, message: "Machine binding: a vendor inference-model id pinned next to model/default/provider context \u2014 device authorization belongs in operator-local config, not portable surfaces (L-MACHINE-LOCAL)." });
+    }
+  });
+  return hits;
+}
 
 // src/exfil/rules.ts
 var OCTET = "(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])";
@@ -39649,8 +39662,9 @@ async function computeCheckRulesHash(input2) {
     promptTemplatePaths: existsSync7(template) ? [template] : []
   });
 }
+var CHECK_LENS_ID = "range+tip-tree/1";
 function computeCheckKey(input2) {
-  return sha256(stableStringify({ ...input2 }));
+  return sha256(stableStringify({ ...input2, lens: CHECK_LENS_ID }));
 }
 
 // src/engines/trufflehog.ts
@@ -42866,7 +42880,8 @@ function exposureSet(cfg, options = {}) {
 }
 
 // src/check.ts
-import { join as join23 } from "node:path";
+import { createHash as createHash15 } from "node:crypto";
+import { join as join25 } from "node:path";
 
 // src/rules/aiArtifacts.ts
 import { spawnSync as spawnSync12 } from "node:child_process";
@@ -43050,6 +43065,7 @@ function scanAiArtifacts(o) {
 
 // src/check/exclusions.ts
 import { resolve as resolve11 } from "node:path";
+var PATH_PATTERN_RULE_PREFIX = "path-pattern:";
 function toRepoRelative(path4, repoDir) {
   if (path4 === void 0 || path4 === "") return null;
   const abs = resolve11(repoDir, path4);
@@ -43062,6 +43078,21 @@ function isBorderStatePath(repoRelPath) {
 function filterBorderStateFindings(findings, repoDir) {
   return findings.filter((f) => !isBorderStatePath(toRepoRelative(f.path, repoDir)));
 }
+function suppressGateConfigPathPatterns(findings, repoDir, configSource) {
+  const kept = [];
+  let suppressed = 0;
+  const cfgAbs = configSource === void 0 ? "" : resolve11(configSource);
+  if (cfgAbs === "") return { kept: [...findings], suppressed: 0 };
+  for (const f of findings) {
+    const outer = (f.path ?? "").split("!")[0] ?? "";
+    if (f.rule.startsWith(PATH_PATTERN_RULE_PREFIX) && outer !== "" && resolve11(repoDir, outer) === cfgAbs) {
+      suppressed += 1;
+      continue;
+    }
+    kept.push(f);
+  }
+  return { kept, suppressed };
+}
 
 // src/check/allow.ts
 function scopePath(finding, repoDir) {
@@ -43122,7 +43153,8 @@ var EXFIL_RULE_IDS = [
   "exfil-ssh-target",
   "exfil-home-path",
   "exfil-cred-location",
-  "exfil-host-profile"
+  "exfil-host-profile",
+  "exfil-machine-binding"
 ];
 var EXFIL_MESSAGE_ID_SUFFIX = ":message";
 var EXFIL_TABLE_SEVERITY = {
@@ -43130,7 +43162,8 @@ var EXFIL_TABLE_SEVERITY = {
   "exfil-ssh-target": "HIGH",
   "exfil-home-path": "MEDIUM",
   "exfil-cred-location": "MEDIUM",
-  "exfil-host-profile": "MEDIUM"
+  "exfil-host-profile": "MEDIUM",
+  "exfil-machine-binding": "MEDIUM"
 };
 var EXFIL_HIGH_FAMILY = ["exfil-rfc1918", "exfil-ssh-target"];
 var EXFIL_SECRET_VALUE_RULES = EXFIL_HIGH_FAMILY;
@@ -43139,19 +43172,21 @@ var TWIN_HIGH = {
   "exfil-ssh-target": "CRITICAL",
   "exfil-home-path": null,
   "exfil-cred-location": null,
-  "exfil-host-profile": null
+  "exfil-host-profile": null,
+  "exfil-machine-binding": null
 };
 var NULL_ROW = {
   "exfil-rfc1918": null,
   "exfil-ssh-target": null,
   "exfil-home-path": null,
   "exfil-cred-location": null,
-  "exfil-host-profile": null
+  "exfil-host-profile": null,
+  "exfil-machine-binding": null
 };
 var EXFIL_MATRIX = {
   tree: {
     // native tree leg = MEDIUM family补发 only (v2 double-emission revoked).
-    native: { ...NULL_ROW, "exfil-home-path": "MEDIUM", "exfil-cred-location": "MEDIUM", "exfil-host-profile": "MEDIUM" },
+    native: { ...NULL_ROW, "exfil-home-path": "MEDIUM", "exfil-cred-location": "MEDIUM", "exfil-host-profile": "MEDIUM", "exfil-machine-binding": "MEDIUM" },
     // gitleaks.ts:81 hardcodes CRITICAL for every ingested finding.
     "gitleaks-twin": TWIN_HIGH,
     // secretlint.ts:299-309 has no HIGH rung — error maps to CRITICAL as-is.
@@ -43202,7 +43237,8 @@ var PREDICATES = {
   "exfil-ssh-target": matchSshTarget,
   "exfil-home-path": matchHomePath,
   "exfil-cred-location": matchCredLocation,
-  "exfil-host-profile": matchHostProfile
+  "exfil-host-profile": matchHostProfile,
+  "exfil-machine-binding": matchMachineBinding
 };
 function scanFacet(input2, facet) {
   const channel = "native";
@@ -43287,6 +43323,17 @@ function scanExfilTree(o) {
   return findings;
 }
 
+// src/check/tipTreeLens.ts
+import { mkdtempSync as mkdtempSync5, rmSync as rmSync12 } from "node:fs";
+import { tmpdir as tmpdir4 } from "node:os";
+import { join as join24 } from "node:path";
+
+// src/commands/exfil.ts
+import { createHash as createHash14 } from "node:crypto";
+import { existsSync as existsSync15, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, readFileSync as readFileSync15, rmSync as rmSync11, writeFileSync as writeFileSync5 } from "node:fs";
+import { tmpdir as tmpdir3 } from "node:os";
+import { dirname as dirname12, join as join23 } from "node:path";
+
 // src/check/messageScan.ts
 import { spawnSync as spawnSync13 } from "node:child_process";
 import { dirname as dirname10, resolve as resolve13 } from "node:path";
@@ -43404,44 +43451,6 @@ function scanCommitMessages(o) {
   return findings;
 }
 
-// src/check/proofValve.ts
-var ROUNDTRIP_PROOF_MISSING_RULE = "roundtrip-proof-missing";
-var ROUNDTRIP_PROOF_STALE_RULE = "roundtrip-proof-stale";
-var RESIDUE_RULE_IDS = new Set(Object.keys(RESIDUE_SEVERITIES));
-function hasBlockingResidueCapability(findings) {
-  return findings.some((f) => RESIDUE_RULE_IDS.has(f.rule) && isBlocking(f.severity));
-}
-function proofFinding(rule, art, cause) {
-  return {
-    rule,
-    severity: "CRITICAL",
-    target: "artifact",
-    path: art.file,
-    engine: "native",
-    message: `${art.file} (sha256 ${art.sha256.slice(0, 12)}\u2026) tripped the residue scan while residue.requireProof is on, but ${cause}. Run 'border roundtrip <spec>' for exactly these bytes to mint the ledger proof.`,
-    ...redact(`${art.sha256}:${cause}`),
-    snippet: `${art.file} ${art.sha256.slice(0, 12)}`
-  };
-}
-function proofFindings(o) {
-  const out = [];
-  for (const art of o.artifacts) {
-    const rec = latestRoundtripForSha(o.records, art.sha256);
-    if (rec === null) {
-      out.push(proofFinding(ROUNDTRIP_PROOF_MISSING_RULE, art, "no roundtrip proof record exists for its digest"));
-    } else if (rec.rulesHash !== o.rulesHash) {
-      out.push(
-        proofFinding(
-          ROUNDTRIP_PROOF_STALE_RULE,
-          art,
-          `its proof record predates the current rules policy (recorded ${rec.rulesHash.slice(0, 12)}\u2026, required ${o.rulesHash.slice(0, 12)}\u2026)`
-        )
-      );
-    }
-  }
-  return out;
-}
-
 // src/check/tagScan.ts
 import { spawnSync as spawnSync14 } from "node:child_process";
 import { mkdtempSync as mkdtempSync3, rmSync as rmSync10, writeFileSync as writeFileSync4 } from "node:fs";
@@ -43556,78 +43565,386 @@ function scanTagMessages(o) {
   }
 }
 
-// src/check.ts
-var TRACKED_BORDER_RULE = "repo-tracks-border-state";
-var GUARD_PATH_CAP = 50;
-function trackedBorderStateFinding(repoDir, headSha, env2) {
-  const listing = runGitChecked(repoDir, ["ls-files", "--", `${BORDER_STATE_DIR}/`], { ...env2 !== void 0 ? { env: env2 } : {} }).split("\n").filter((p) => p !== "");
-  if (listing.length === 0) return null;
-  const shown = listing.slice(0, GUARD_PATH_CAP);
-  const rest = listing.length - shown.length;
-  const [first = `${BORDER_STATE_DIR}/`] = shown;
-  const message = `repository tracks ${String(listing.length)} file(s) under ${BORDER_STATE_DIR}/ \u2014 border's state directory must stay untracked: ${shown.join(", ")}${rest > 0 ? ` (+${String(rest)} more)` : ""}. Remove with 'git rm -r --cached ${BORDER_STATE_DIR}/'.`;
-  return {
-    rule: TRACKED_BORDER_RULE,
-    severity: "CRITICAL",
-    target: "git",
-    path: first,
-    commit: headSha,
-    engine: "native",
-    message,
-    ...redact(`${headSha}:${BORDER_STATE_DIR}`),
-    snippet: `${BORDER_STATE_DIR}/ tracked`
+// src/commands/exfilGit.ts
+import { spawnSync as spawnSync15 } from "node:child_process";
+import { dirname as dirname11, resolve as resolve15 } from "node:path";
+var GIT_TIMEOUT_MS = 55e3;
+var MAX_BUFFER_BYTES = 32 * 1024 * 1024;
+var MAX_BLOB_BYTES = 2 * 1024 * 1024;
+var BATCH_SHAS = 500;
+function makeGit(repoDir, env2) {
+  const clean = {};
+  for (const [name, value] of Object.entries(env2)) {
+    if (!name.startsWith("GIT_")) clean[name] = value;
+  }
+  clean.GIT_CEILING_DIRECTORIES = dirname11(resolve15(repoDir));
+  clean.GIT_OPTIONAL_LOCKS = "0";
+  clean.GIT_TERMINAL_PROMPT = "0";
+  const spawnWith = (args, input2) => {
+    const r = spawnSync15("git", ["-C", resolve15(repoDir), ...args], {
+      timeout: GIT_TIMEOUT_MS,
+      maxBuffer: MAX_BUFFER_BYTES,
+      env: clean,
+      ...input2 !== void 0 ? { input: input2 } : {}
+    });
+    if (r.error !== void 0) return { stdout: Buffer.alloc(0), fail: `git ${args.slice(0, 2).join(" ")}: ${r.error.message}` };
+    if (r.status !== 0) {
+      const why = r.status === null ? `killed by ${String(r.signal)} (timeout ${String(GIT_TIMEOUT_MS)}ms)` : `exited ${String(r.status)}`;
+      return { stdout: Buffer.alloc(0), fail: `git ${args.slice(0, 3).join(" ")} ${why}: ${(r.stderr?.toString("utf8") ?? "").trim().slice(0, 200)}` };
+    }
+    return { stdout: r.stdout ?? Buffer.alloc(0), fail: null };
   };
-}
-function legOptions(o, sanitizer) {
-  return {
-    ...o.env !== void 0 ? { env: o.env } : {},
-    sanitizer
+  const runBuffer = (args, input2) => {
+    const r = spawnWith(args, input2);
+    if (r.fail !== null) throw new ConfigError("git-failed", r.fail);
+    return r.stdout;
   };
+  return { run: (args) => runBuffer(args).toString("utf8"), runBuffer };
 }
-function historyRefRange(ctx) {
-  return ctx.refSet.length > 0 ? ctx.refSet.join(" ") : ctx.headSha;
+function parseLsTree(line) {
+  const m = /^\d{6} (\w+) ([0-9a-f]{40})\s+(\d+)\t(.+)$/.exec(line);
+  if (m === null || m[1] !== "blob") return null;
+  return { sha: m[2] ?? "", path: m[4] ?? "", size: Number(m[3]) };
 }
-async function executeCheck(o) {
-  const envOpt = o.env !== void 0 ? { env: o.env } : {};
-  const ctx = gatherContext(o.repoDir, envOpt);
-  const { handle, warning } = acquireLock(o.repoDir);
-  try {
-    return await runPipeline(o, ctx, warning);
-  } finally {
-    releaseLock(handle);
+function tipTree(git, rev) {
+  return git.run(["-c", "core.quotePath=false", "ls-tree", "-r", "--long", rev]).split("\n").map(parseLsTree).filter((b) => b !== null);
+}
+function historyBlobs(git, rev) {
+  const paths = /* @__PURE__ */ new Map();
+  for (const line of git.run(["rev-list", "--objects", rev]).split("\n")) {
+    if (line === "") continue;
+    const sp = line.indexOf(" ");
+    if (sp <= 0) continue;
+    if (!paths.has(line.slice(0, sp))) paths.set(line.slice(0, sp), line.slice(sp + 1));
+  }
+  const shas = [...paths.keys()];
+  const out = [];
+  for (let i = 0; i < shas.length; i += BATCH_SHAS) {
+    const checked = git.runBuffer(["cat-file", "--batch-check"], `${shas.slice(i, i + BATCH_SHAS).join("\n")}
+`).toString("utf8");
+    for (const line of checked.split("\n")) {
+      const m = /^([0-9a-f]{40}) (\w+) (\d+)$/.exec(line);
+      if (m === null || m[2] !== "blob") continue;
+      const path4 = paths.get(m[1] ?? "");
+      if (path4 !== void 0) out.push({ sha: m[1] ?? "", path: path4, size: Number(m[3]) });
+    }
   }
+  return out;
 }
-async function runPipeline(o, ctx, lockWarning) {
-  const repoDir = ctx.repoDir;
-  const envOpt = o.env !== void 0 ? { env: o.env } : {};
+function blobTexts(git, blobs) {
+  const sizes = new Map(blobs.map((b) => [b.sha, b.size]));
+  const wanted = [...new Set(blobs.map((b) => b.sha))].filter((s) => (sizes.get(s) ?? 0) <= MAX_BLOB_BYTES);
+  const out = /* @__PURE__ */ new Map();
+  for (let i = 0; i < wanted.length; i += BATCH_SHAS) {
+    const buf = git.runBuffer(["cat-file", "--batch", "--buffer"], `${wanted.slice(i, i + BATCH_SHAS).join("\n")}
+`);
+    let pos = 0;
+    while (pos < buf.length) {
+      const nl = buf.indexOf(10, pos);
+      if (nl === -1) break;
+      const parts = buf.subarray(pos, nl).toString("utf8").split(" ");
+      pos = nl + 1;
+      const sha = parts[0] ?? "";
+      if (parts[1] === "missing" || parts.length < 3) continue;
+      const size = Number(parts[2]);
+      const body = buf.subarray(pos, pos + size);
+      pos += size + 1;
+      if (!body.includes(0)) out.set(sha, body.toString("utf8"));
+    }
+  }
+  return out;
+}
+
+// src/commands/exfil.ts
+var EXFIL_USAGE = "usage: border exfil <ref|url> [ref...] [--deep] [--json]";
+var URL_SHAPE_RE = /^(?:[A-Za-z][A-Za-z0-9+.-]*:\/\/\S+|\S+@\S+:\S+)$/;
+var isExfilId = (rule) => rule.startsWith("exfil-");
+function toTreeFinding(f) {
+  return {
+    rule: f.id,
+    severity: f.severity,
+    target: "tree",
+    path: f.source,
+    line: f.line,
+    engine: f.engine,
+    message: f.message,
+    valueDigest: f.valueDigest,
+    snippet: f.snippet
+  };
+}
+function scanBlobsNative(git, blobs) {
+  const texts = blobTexts(git, blobs);
   const findings = [];
-  const guard = trackedBorderStateFinding(repoDir, ctx.headSha, o.env);
-  const probe = await probeEngines(o.cfg, {
-    ...envOpt,
-    ...o.requireOverride !== void 0 ? { requireOverride: o.requireOverride } : {}
-  });
-  findings.push(...probe.findings);
-  if (guard !== null) findings.push(guard);
-  const broken = new Set(probe.findings.map((f) => f.engine));
-  const sanitizer = new TextSanitizer();
-  findings.push(...filterBorderStateFindings(detectHostileConfig({ repoDir, target: "git", ...envOpt }), repoDir));
-  if (!broken.has("gitleaks")) {
-    const eng = legOptions(o, sanitizer);
-    findings.push(...filterBorderStateFindings(scanGitHistory({ repoDir, refRange: historyRefRange(ctx), target: "git", ...eng }), repoDir));
-    findings.push(...filterBorderStateFindings(scanTree({ dir: repoDir, stateDir: join23(repoDir, BORDER_STATE_DIR), target: "tree", ...eng }), repoDir));
-    findings.push(...filterBorderStateFindings(scanTagMessages({ repoDir, target: "git", ...eng }), repoDir));
+  for (const b of blobs) {
+    const text = texts.get(b.sha);
+    if (text === void 0) continue;
+    for (const f of scanTreeText({ text, source: b.path })) findings.push(toTreeFinding(f));
   }
-  if (!broken.has("secretlint")) {
-    findings.push(...await scanGitTrackedFiles({ repoDir, target: "git", rules: o.cfg.rules, ...legOptions(o, sanitizer) }));
+  return findings;
+}
+async function scanTipTree(git, treeRoot, rev, env2, opts) {
+  const blobs = tipTree(git, rev);
+  const texts = blobTexts(git, blobs);
+  const native = [];
+  const written = [];
+  for (const b of blobs) {
+    const text = texts.get(b.sha);
+    if (text === void 0) continue;
+    for (const f of scanTreeText({
+      text,
+      source: b.path,
+      ...opts?.sanitizer !== void 0 ? { onMatch: (rawValue, valueDigest) => opts.sanitizer?.register(valueDigest, rawValue) } : {}
+    })) {
+      native.push(toTreeFinding(f));
+    }
+    if (b.path.split("/").includes("..") || b.path === "") continue;
+    const abs = join23(treeRoot, b.path);
+    if (existsSync15(abs)) continue;
+    mkdirSync10(dirname12(abs), { recursive: true });
+    writeFileSync5(abs, text, "utf8");
+    written.push(b.path);
   }
-  if (o.cfg.engines.trufflehog && !broken.has("trufflehog")) {
-    findings.push(...scanTrufflehog({ repoDir, target: "git", ...legOptions(o, sanitizer) }));
+  const eng = { ...opts?.sanitizer !== void 0 ? { sanitizer: opts.sanitizer } : {} };
+  const lint = opts?.skipSecretlint === true ? [] : (await scanPaths({ dir: treeRoot, files: written, target: "tree", env: env2, ...eng })).filter((f) => isExfilId(f.rule));
+  const gl = opts?.skipGitleaks === true ? [] : scanTree({ dir: treeRoot, stateDir: join23(treeRoot, ".border-state"), target: "tree", env: env2, ...eng }).filter((f) => isExfilId(f.rule)).map((f) => f.path !== void 0 && f.path.startsWith(`${treeRoot}/`) ? { ...f, path: f.path.slice(treeRoot.length + 1) } : f);
+  return [...native, ...lint, ...gl];
+}
+function exfilRulesDigest() {
+  const h = createHash14("sha256");
+  for (const p of [...resolveExfilFingerprintFiles({}), GITLEAKS_VENDORED_CONFIG]) {
+    let bytes;
+    try {
+      bytes = readFileSync15(p);
+    } catch {
+      throw new ConfigError("unreadable", `border exfil: rule input unreadable (fail closed): ${p}`);
+    }
+    h.update(p).update("\0").update(bytes).update("\0");
   }
-  findings.push(...scanAiArtifacts({ repoDir, refSet: [...ctx.refSet], cfg: o.cfg.rules, ...envOpt }));
-  findings.push(...scanIdentity({ repoDir, refSet: [...ctx.refSet], cfg: o.cfg, ...envOpt }));
-  findings.push(...filterBorderStateFindings(scanExfilTree({ repoDir, hosts: o.cfg.rules.hosts, ...legOptions(o, sanitizer) }), repoDir));
-  findings.push(...filterBorderStateFindings(
-    scanCommitMessages({
+  return h.digest("hex");
+}
+function sha256Hex2(text) {
+  return createHash14("sha256").update(text, "utf8").digest("hex");
+}
+async function runExfilCore(ctx) {
+  const positionals = ctx.positionals;
+  if (positionals.length === 0) throw new UnknownArgError(`border exfil expects <ref|url> [ref...] \u2014 ${EXFIL_USAGE}`);
+  const deep = ctx.flags.deep === true;
+  const first = positionals[0] ?? "";
+  const sandbox = { dir: "", tree: "" };
+  try {
+    const isUrl = URL_SHAPE_RE.test(first);
+    let repoDir;
+    let units;
+    let exposure = [];
+    if (isUrl) {
+      const url2 = first;
+      exposure = [sanitizeUrl(url2)];
+      sandbox.dir = mkdtempSync4(join23(tmpdir3(), "border-exfil-"));
+      const git2 = makeGit(sandbox.dir, ctx.env);
+      git2.run(["init", "-q"]);
+      git2.run(["remote", "add", "origin", url2]);
+      const specs = positionals.slice(1).length === 0 ? ["HEAD"] : positionals.slice(1);
+      units = [];
+      for (const spec of specs) {
+        git2.run(["fetch", "-q", "--no-tags", "origin", spec]);
+        units.push({ label: spec, rev: git2.run(["rev-parse", "FETCH_HEAD"]).trim() });
+      }
+      repoDir = sandbox.dir;
+    } else {
+      repoDir = resolveRepoDir(ctx.cwd, { env: ctx.env });
+      const git2 = makeGit(repoDir, ctx.env);
+      units = positionals.map((ref) => ({ label: ref, rev: git2.run(["rev-parse", "--verify", ref]).trim() }));
+    }
+    const git = makeGit(repoDir, ctx.env);
+    sandbox.tree = mkdtempSync4(join23(tmpdir3(), "border-exfil-tree-"));
+    const findings = [];
+    const seenBlob = /* @__PURE__ */ new Set();
+    for (const unit of units) {
+      findings.push(...await scanTipTree(git, sandbox.tree, unit.rev, ctx.env));
+      if (deep) {
+        const fresh = historyBlobs(git, unit.rev).filter((b) => {
+          const key = `${b.sha}\0${b.path}`;
+          if (seenBlob.has(key)) return false;
+          seenBlob.add(key);
+          return true;
+        });
+        findings.push(...scanBlobsNative(git, fresh));
+      }
+    }
+    if (isUrl) ctx.stderr("border exfil: URL mode scanned fetched tips only \u2014 tag notes are not fetched (remote-side leg, check/push own it)");
+    else findings.push(...scanTagMessages({ repoDir, target: "git", env: ctx.env }));
+    if (deep) {
+      findings.push(...scanGitHistory({ repoDir, refRange: units.map((u) => u.rev).join(" "), target: "git", env: ctx.env }).filter((f) => isExfilId(f.rule)));
+      findings.push(
+        ...scanCommitMessages({
+          repoDir,
+          refSet: units.map((u) => u.rev),
+          remotes: [],
+          hosts: [],
+          runGit: git.run,
+          env: ctx.env
+        })
+      );
+    }
+    const verdict = computeVerdict(findings);
+    const report = {
+      schemaVersion: 1,
+      key: sha256Hex2(`exfil:${isUrl ? "url" : "ref"}:${positionals.join(" ")}:${deep ? "deep" : "fast"}:${units.map((u) => u.rev).join(" ")}`),
+      head: units[0]?.rev ?? "",
+      dirty: false,
+      exposureSet: exposure,
+      refSet: positionals,
+      rulesHash: exfilRulesDigest(),
+      verdict,
+      counts: countFindings(findings),
+      findings,
+      ts: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    if (ctx.flags.json) ctx.stdout(renderReportJson(report));
+    else {
+      const scope = `${isUrl ? "URL" : "refs"} ${positionals.join(",")}${deep ? " (deep)" : ""}`;
+      ctx.stdout(`border exfil ${scope} ${report.verdict}: ${String(report.counts.total)} finding(s), ${String(report.counts.blocking)} blocking`);
+      for (const f of report.findings) {
+        ctx.stdout(`  ${f.severity} ${f.rule} [${f.engine}] ${f.path ?? f.commit ?? f.target}${f.line !== void 0 ? `:${String(f.line)}` : ""} ${f.message}`);
+      }
+    }
+    return exitCodeFromVerdict(verdict);
+  } finally {
+    if (sandbox.dir !== "") rmSync11(sandbox.dir, { recursive: true, force: true });
+    if (sandbox.tree !== "") rmSync11(sandbox.tree, { recursive: true, force: true });
+  }
+}
+var runExfil = (ctx) => runExfilCore(ctx);
+
+// src/check/tipTreeLens.ts
+async function scanTipTreeLens(o) {
+  const env2 = o.env ?? process.env;
+  const git = makeGit(o.repoDir, env2);
+  const treeRoot = mkdtempSync5(join24(tmpdir4(), "border-check-tip-tree-"));
+  try {
+    return await scanTipTree(git, treeRoot, o.rev, env2, {
+      ...o.sanitizer !== void 0 ? { sanitizer: o.sanitizer } : {},
+      ...o.skipGitleaks === true ? { skipGitleaks: true } : {},
+      ...o.skipSecretlint === true ? { skipSecretlint: true } : {}
+    });
+  } finally {
+    rmSync12(treeRoot, { recursive: true, force: true });
+  }
+}
+
+// src/check/proofValve.ts
+var ROUNDTRIP_PROOF_MISSING_RULE = "roundtrip-proof-missing";
+var ROUNDTRIP_PROOF_STALE_RULE = "roundtrip-proof-stale";
+var RESIDUE_RULE_IDS = new Set(Object.keys(RESIDUE_SEVERITIES));
+function hasBlockingResidueCapability(findings) {
+  return findings.some((f) => RESIDUE_RULE_IDS.has(f.rule) && isBlocking(f.severity));
+}
+function proofFinding(rule, art, cause) {
+  return {
+    rule,
+    severity: "CRITICAL",
+    target: "artifact",
+    path: art.file,
+    engine: "native",
+    message: `${art.file} (sha256 ${art.sha256.slice(0, 12)}\u2026) tripped the residue scan while residue.requireProof is on, but ${cause}. Run 'border roundtrip <spec>' for exactly these bytes to mint the ledger proof.`,
+    ...redact(`${art.sha256}:${cause}`),
+    snippet: `${art.file} ${art.sha256.slice(0, 12)}`
+  };
+}
+function proofFindings(o) {
+  const out = [];
+  for (const art of o.artifacts) {
+    const rec = latestRoundtripForSha(o.records, art.sha256);
+    if (rec === null) {
+      out.push(proofFinding(ROUNDTRIP_PROOF_MISSING_RULE, art, "no roundtrip proof record exists for its digest"));
+    } else if (rec.rulesHash !== o.rulesHash) {
+      out.push(
+        proofFinding(
+          ROUNDTRIP_PROOF_STALE_RULE,
+          art,
+          `its proof record predates the current rules policy (recorded ${rec.rulesHash.slice(0, 12)}\u2026, required ${o.rulesHash.slice(0, 12)}\u2026)`
+        )
+      );
+    }
+  }
+  return out;
+}
+
+// src/check.ts
+var TRACKED_BORDER_RULE = "repo-tracks-border-state";
+var GUARD_PATH_CAP = 50;
+function trackedBorderStateFinding(repoDir, headSha, env2) {
+  const listing = runGitChecked(repoDir, ["ls-files", "--", `${BORDER_STATE_DIR}/`], { ...env2 !== void 0 ? { env: env2 } : {} }).split("\n").filter((p) => p !== "");
+  if (listing.length === 0) return null;
+  const shown = listing.slice(0, GUARD_PATH_CAP);
+  const rest = listing.length - shown.length;
+  const [first = `${BORDER_STATE_DIR}/`] = shown;
+  const message = `repository tracks ${String(listing.length)} file(s) under ${BORDER_STATE_DIR}/ \u2014 border's state directory must stay untracked: ${shown.join(", ")}${rest > 0 ? ` (+${String(rest)} more)` : ""}. Remove with 'git rm -r --cached ${BORDER_STATE_DIR}/'.`;
+  return {
+    rule: TRACKED_BORDER_RULE,
+    severity: "CRITICAL",
+    target: "git",
+    path: first,
+    commit: headSha,
+    engine: "native",
+    message,
+    ...redact(`${headSha}:${BORDER_STATE_DIR}`),
+    snippet: `${BORDER_STATE_DIR}/ tracked`
+  };
+}
+function legOptions(o, sanitizer) {
+  return {
+    ...o.env !== void 0 ? { env: o.env } : {},
+    sanitizer
+  };
+}
+function lensIdentity(f) {
+  return `${f.rule}\0${f.engine}\0${f.path ?? ""}\0${String(f.line ?? -1)}\0${f.valueDigest}`;
+}
+function historyRefRange(ctx) {
+  return ctx.refSet.length > 0 ? ctx.refSet.join(" ") : ctx.headSha;
+}
+async function executeCheck(o) {
+  const envOpt = o.env !== void 0 ? { env: o.env } : {};
+  const ctx = gatherContext(o.repoDir, envOpt);
+  const { handle, warning } = acquireLock(o.repoDir);
+  try {
+    return await runPipeline(o, ctx, warning);
+  } finally {
+    releaseLock(handle);
+  }
+}
+async function runPipeline(o, ctx, lockWarning) {
+  const repoDir = ctx.repoDir;
+  const envOpt = o.env !== void 0 ? { env: o.env } : {};
+  const findings = [];
+  const guard = trackedBorderStateFinding(repoDir, ctx.headSha, o.env);
+  const probe = await probeEngines(o.cfg, {
+    ...envOpt,
+    ...o.requireOverride !== void 0 ? { requireOverride: o.requireOverride } : {}
+  });
+  findings.push(...probe.findings);
+  if (guard !== null) findings.push(guard);
+  const broken = new Set(probe.findings.map((f) => f.engine));
+  const sanitizer = new TextSanitizer();
+  findings.push(...filterBorderStateFindings(detectHostileConfig({ repoDir, target: "git", ...envOpt }), repoDir));
+  if (!broken.has("gitleaks")) {
+    const eng = legOptions(o, sanitizer);
+    findings.push(...filterBorderStateFindings(scanGitHistory({ repoDir, refRange: historyRefRange(ctx), target: "git", ...eng }), repoDir));
+    findings.push(...filterBorderStateFindings(scanTree({ dir: repoDir, stateDir: join25(repoDir, BORDER_STATE_DIR), target: "tree", ...eng }), repoDir));
+    findings.push(...filterBorderStateFindings(scanTagMessages({ repoDir, target: "git", ...eng }), repoDir));
+  }
+  if (!broken.has("secretlint")) {
+    findings.push(...await scanGitTrackedFiles({ repoDir, target: "git", rules: o.cfg.rules, ...legOptions(o, sanitizer) }));
+  }
+  if (o.cfg.engines.trufflehog && !broken.has("trufflehog")) {
+    findings.push(...scanTrufflehog({ repoDir, target: "git", ...legOptions(o, sanitizer) }));
+  }
+  findings.push(...scanAiArtifacts({ repoDir, refSet: [...ctx.refSet], cfg: o.cfg.rules, ...envOpt }));
+  findings.push(...scanIdentity({ repoDir, refSet: [...ctx.refSet], cfg: o.cfg, ...envOpt }));
+  findings.push(...filterBorderStateFindings(scanExfilTree({ repoDir, hosts: o.cfg.rules.hosts, ...legOptions(o, sanitizer) }), repoDir));
+  findings.push(...filterBorderStateFindings(
+    scanCommitMessages({
       repoDir,
       refSet: ctx.refSet.length > 0 ? [...ctx.refSet] : [ctx.headSha],
       remotes: o.cfg.targets.git.remotes,
@@ -43636,6 +43953,23 @@ async function runPipeline(o, ctx, lockWarning) {
     }),
     repoDir
   ));
+  if (o.effectiveTargets.includes("git")) {
+    const tip = await scanTipTreeLens({
+      repoDir,
+      rev: ctx.headSha,
+      ...envOpt,
+      sanitizer,
+      skipGitleaks: broken.has("gitleaks"),
+      skipSecretlint: broken.has("secretlint")
+    });
+    const seen = new Set(findings.map(lensIdentity));
+    for (const f of filterBorderStateFindings(tip, repoDir)) {
+      const id = lensIdentity(f);
+      if (seen.has(id)) continue;
+      seen.add(id);
+      findings.push(f);
+    }
+  }
   const ledgerArtifacts = [];
   for (const channel of publishChannels()) {
     if (!o.effectiveTargets.includes(channel.id) || !channel.configured(o.cfg)) continue;
@@ -43677,6 +44011,21 @@ async function runPipeline(o, ctx, lockWarning) {
     findings.push(...proofFindings({ artifacts: ledgerArtifacts, records: readLedger(repoDir).records, rulesHash }));
   }
   const exposure = [...exposureSet(o.cfg, { cwd: repoDir })];
+  const cfgExempt = suppressGateConfigPathPatterns(findings, repoDir, o.configSource);
+  if (cfgExempt.suppressed > 0) {
+    findings.length = 0;
+    findings.push(...cfgExempt.kept);
+    findings.push({
+      rule: "gate-config-path-exempt",
+      severity: "INFO",
+      target: "config",
+      ...o.configSource !== void 0 ? { path: o.configSource } : {},
+      engine: "native",
+      message: `${String(cfgExempt.suppressed)} path-pattern finding(s) suppressed for the gate's own config file (self-referential rule-ID bytes; credential engines still cover it)`,
+      valueDigest: createHash15("sha256").update(`gate-config-exempt:${String(o.configSource)}`).digest("hex"),
+      snippet: "gate-config-path-exempt"
+    });
+  }
   const allow = applyAllowList(findings, o.cfg.allow, repoDir);
   const report = {
     schemaVersion: 1,
@@ -43771,7 +44120,10 @@ async function runCheck(ctx) {
       configDigest,
       effectiveTargets,
       ...env2 !== void 0 ? { env: env2 } : {},
-      ...ctx.flags.requireEngine !== void 0 && ctx.flags.requireEngine.length > 0 ? { requireOverride: ctx.flags.requireEngine } : {}
+      ...ctx.flags.requireEngine !== void 0 && ctx.flags.requireEngine.length > 0 ? { requireOverride: ctx.flags.requireEngine } : {},
+      // config self-exemption binds to a REAL file path only — the "git-remote"/
+      // "<...>" source sentinels must never resolve onto a scanned content path.
+      .../^\/.*$/.test(effective.source) && !effective.source.startsWith("<") ? { configSource: effective.source } : {}
     });
   } catch (err) {
     if (err instanceof BorderLockHeldError) {
@@ -43810,265 +44162,15 @@ var NO_TARGETS_PROBE_CFG = {
   engines: { require: [], trufflehog: false }
 };
 
-// src/commands/exfil.ts
-import { createHash as createHash14 } from "node:crypto";
-import { existsSync as existsSync15, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, readFileSync as readFileSync15, rmSync as rmSync11, writeFileSync as writeFileSync5 } from "node:fs";
-import { tmpdir as tmpdir3 } from "node:os";
-import { dirname as dirname12, join as join24 } from "node:path";
-
-// src/commands/exfilGit.ts
-import { spawnSync as spawnSync15 } from "node:child_process";
-import { dirname as dirname11, resolve as resolve15 } from "node:path";
-var GIT_TIMEOUT_MS = 55e3;
-var MAX_BUFFER_BYTES = 32 * 1024 * 1024;
-var MAX_BLOB_BYTES = 2 * 1024 * 1024;
-var BATCH_SHAS = 500;
-function makeGit(repoDir, env2) {
-  const clean = {};
-  for (const [name, value] of Object.entries(env2)) {
-    if (!name.startsWith("GIT_")) clean[name] = value;
-  }
-  clean.GIT_CEILING_DIRECTORIES = dirname11(resolve15(repoDir));
-  clean.GIT_OPTIONAL_LOCKS = "0";
-  clean.GIT_TERMINAL_PROMPT = "0";
-  const spawnWith = (args, input2) => {
-    const r = spawnSync15("git", ["-C", resolve15(repoDir), ...args], {
-      timeout: GIT_TIMEOUT_MS,
-      maxBuffer: MAX_BUFFER_BYTES,
-      env: clean,
-      ...input2 !== void 0 ? { input: input2 } : {}
-    });
-    if (r.error !== void 0) return { stdout: Buffer.alloc(0), fail: `git ${args.slice(0, 2).join(" ")}: ${r.error.message}` };
-    if (r.status !== 0) {
-      const why = r.status === null ? `killed by ${String(r.signal)} (timeout ${String(GIT_TIMEOUT_MS)}ms)` : `exited ${String(r.status)}`;
-      return { stdout: Buffer.alloc(0), fail: `git ${args.slice(0, 3).join(" ")} ${why}: ${(r.stderr?.toString("utf8") ?? "").trim().slice(0, 200)}` };
-    }
-    return { stdout: r.stdout ?? Buffer.alloc(0), fail: null };
-  };
-  const runBuffer = (args, input2) => {
-    const r = spawnWith(args, input2);
-    if (r.fail !== null) throw new ConfigError("git-failed", r.fail);
-    return r.stdout;
-  };
-  return { run: (args) => runBuffer(args).toString("utf8"), runBuffer };
-}
-function parseLsTree(line) {
-  const m = /^\d{6} (\w+) ([0-9a-f]{40})\s+(\d+)\t(.+)$/.exec(line);
-  if (m === null || m[1] !== "blob") return null;
-  return { sha: m[2] ?? "", path: m[4] ?? "", size: Number(m[3]) };
-}
-function tipTree(git, rev) {
-  return git.run(["-c", "core.quotePath=false", "ls-tree", "-r", "--long", rev]).split("\n").map(parseLsTree).filter((b) => b !== null);
-}
-function historyBlobs(git, rev) {
-  const paths = /* @__PURE__ */ new Map();
-  for (const line of git.run(["rev-list", "--objects", rev]).split("\n")) {
-    if (line === "") continue;
-    const sp = line.indexOf(" ");
-    if (sp <= 0) continue;
-    if (!paths.has(line.slice(0, sp))) paths.set(line.slice(0, sp), line.slice(sp + 1));
-  }
-  const shas = [...paths.keys()];
-  const out = [];
-  for (let i = 0; i < shas.length; i += BATCH_SHAS) {
-    const checked = git.runBuffer(["cat-file", "--batch-check"], `${shas.slice(i, i + BATCH_SHAS).join("\n")}
-`).toString("utf8");
-    for (const line of checked.split("\n")) {
-      const m = /^([0-9a-f]{40}) (\w+) (\d+)$/.exec(line);
-      if (m === null || m[2] !== "blob") continue;
-      const path4 = paths.get(m[1] ?? "");
-      if (path4 !== void 0) out.push({ sha: m[1] ?? "", path: path4, size: Number(m[3]) });
-    }
-  }
-  return out;
-}
-function blobTexts(git, blobs) {
-  const sizes = new Map(blobs.map((b) => [b.sha, b.size]));
-  const wanted = [...new Set(blobs.map((b) => b.sha))].filter((s) => (sizes.get(s) ?? 0) <= MAX_BLOB_BYTES);
-  const out = /* @__PURE__ */ new Map();
-  for (let i = 0; i < wanted.length; i += BATCH_SHAS) {
-    const buf = git.runBuffer(["cat-file", "--batch", "--buffer"], `${wanted.slice(i, i + BATCH_SHAS).join("\n")}
-`);
-    let pos = 0;
-    while (pos < buf.length) {
-      const nl = buf.indexOf(10, pos);
-      if (nl === -1) break;
-      const parts = buf.subarray(pos, nl).toString("utf8").split(" ");
-      pos = nl + 1;
-      const sha = parts[0] ?? "";
-      if (parts[1] === "missing" || parts.length < 3) continue;
-      const size = Number(parts[2]);
-      const body = buf.subarray(pos, pos + size);
-      pos += size + 1;
-      if (!body.includes(0)) out.set(sha, body.toString("utf8"));
-    }
-  }
-  return out;
-}
-
-// src/commands/exfil.ts
-var EXFIL_USAGE = "usage: border exfil <ref|url> [ref...] [--deep] [--json]";
-var URL_SHAPE_RE = /^(?:[A-Za-z][A-Za-z0-9+.-]*:\/\/\S+|\S+@\S+:\S+)$/;
-var isExfilId = (rule) => rule.startsWith("exfil-");
-function toTreeFinding(f) {
-  return {
-    rule: f.id,
-    severity: f.severity,
-    target: "tree",
-    path: f.source,
-    line: f.line,
-    engine: f.engine,
-    message: f.message,
-    valueDigest: f.valueDigest,
-    snippet: f.snippet
-  };
-}
-function scanBlobsNative(git, blobs) {
-  const texts = blobTexts(git, blobs);
-  const findings = [];
-  for (const b of blobs) {
-    const text = texts.get(b.sha);
-    if (text === void 0) continue;
-    for (const f of scanTreeText({ text, source: b.path })) findings.push(toTreeFinding(f));
-  }
-  return findings;
-}
-async function scanTipTree(git, treeRoot, rev, env2) {
-  const blobs = tipTree(git, rev);
-  const texts = blobTexts(git, blobs);
-  const native = [];
-  const written = [];
-  for (const b of blobs) {
-    const text = texts.get(b.sha);
-    if (text === void 0) continue;
-    for (const f of scanTreeText({ text, source: b.path })) native.push(toTreeFinding(f));
-    if (b.path.split("/").includes("..") || b.path === "") continue;
-    const abs = join24(treeRoot, b.path);
-    if (existsSync15(abs)) continue;
-    mkdirSync10(dirname12(abs), { recursive: true });
-    writeFileSync5(abs, text, "utf8");
-    written.push(b.path);
-  }
-  const lint = (await scanPaths({ dir: treeRoot, files: written, target: "tree", env: env2 })).filter((f) => isExfilId(f.rule));
-  const gl = scanTree({ dir: treeRoot, stateDir: join24(treeRoot, ".border-state"), target: "tree", env: env2 }).filter((f) => isExfilId(f.rule)).map((f) => f.path !== void 0 && f.path.startsWith(`${treeRoot}/`) ? { ...f, path: f.path.slice(treeRoot.length + 1) } : f);
-  return [...native, ...lint, ...gl];
-}
-function exfilRulesDigest() {
-  const h = createHash14("sha256");
-  for (const p of [...resolveExfilFingerprintFiles({}), GITLEAKS_VENDORED_CONFIG]) {
-    let bytes;
-    try {
-      bytes = readFileSync15(p);
-    } catch {
-      throw new ConfigError("unreadable", `border exfil: rule input unreadable (fail closed): ${p}`);
-    }
-    h.update(p).update("\0").update(bytes).update("\0");
-  }
-  return h.digest("hex");
-}
-function sha256Hex2(text) {
-  return createHash14("sha256").update(text, "utf8").digest("hex");
-}
-async function runExfilCore(ctx) {
-  const positionals = ctx.positionals;
-  if (positionals.length === 0) throw new UnknownArgError(`border exfil expects <ref|url> [ref...] \u2014 ${EXFIL_USAGE}`);
-  const deep = ctx.flags.deep === true;
-  const first = positionals[0] ?? "";
-  const sandbox = { dir: "", tree: "" };
-  try {
-    const isUrl = URL_SHAPE_RE.test(first);
-    let repoDir;
-    let units;
-    let exposure = [];
-    if (isUrl) {
-      const url2 = first;
-      exposure = [sanitizeUrl(url2)];
-      sandbox.dir = mkdtempSync4(join24(tmpdir3(), "border-exfil-"));
-      const git2 = makeGit(sandbox.dir, ctx.env);
-      git2.run(["init", "-q"]);
-      git2.run(["remote", "add", "origin", url2]);
-      const specs = positionals.slice(1).length === 0 ? ["HEAD"] : positionals.slice(1);
-      units = [];
-      for (const spec of specs) {
-        git2.run(["fetch", "-q", "--no-tags", "origin", spec]);
-        units.push({ label: spec, rev: git2.run(["rev-parse", "FETCH_HEAD"]).trim() });
-      }
-      repoDir = sandbox.dir;
-    } else {
-      repoDir = resolveRepoDir(ctx.cwd, { env: ctx.env });
-      const git2 = makeGit(repoDir, ctx.env);
-      units = positionals.map((ref) => ({ label: ref, rev: git2.run(["rev-parse", "--verify", ref]).trim() }));
-    }
-    const git = makeGit(repoDir, ctx.env);
-    sandbox.tree = mkdtempSync4(join24(tmpdir3(), "border-exfil-tree-"));
-    const findings = [];
-    const seenBlob = /* @__PURE__ */ new Set();
-    for (const unit of units) {
-      findings.push(...await scanTipTree(git, sandbox.tree, unit.rev, ctx.env));
-      if (deep) {
-        const fresh = historyBlobs(git, unit.rev).filter((b) => {
-          const key = `${b.sha}\0${b.path}`;
-          if (seenBlob.has(key)) return false;
-          seenBlob.add(key);
-          return true;
-        });
-        findings.push(...scanBlobsNative(git, fresh));
-      }
-    }
-    if (isUrl) ctx.stderr("border exfil: URL mode scanned fetched tips only \u2014 tag notes are not fetched (remote-side leg, check/push own it)");
-    else findings.push(...scanTagMessages({ repoDir, target: "git", env: ctx.env }));
-    if (deep) {
-      findings.push(...scanGitHistory({ repoDir, refRange: units.map((u) => u.rev).join(" "), target: "git", env: ctx.env }).filter((f) => isExfilId(f.rule)));
-      findings.push(
-        ...scanCommitMessages({
-          repoDir,
-          refSet: units.map((u) => u.rev),
-          remotes: [],
-          hosts: [],
-          runGit: git.run,
-          env: ctx.env
-        })
-      );
-    }
-    const verdict = computeVerdict(findings);
-    const report = {
-      schemaVersion: 1,
-      key: sha256Hex2(`exfil:${isUrl ? "url" : "ref"}:${positionals.join(" ")}:${deep ? "deep" : "fast"}:${units.map((u) => u.rev).join(" ")}`),
-      head: units[0]?.rev ?? "",
-      dirty: false,
-      exposureSet: exposure,
-      refSet: positionals,
-      rulesHash: exfilRulesDigest(),
-      verdict,
-      counts: countFindings(findings),
-      findings,
-      ts: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    if (ctx.flags.json) ctx.stdout(renderReportJson(report));
-    else {
-      const scope = `${isUrl ? "URL" : "refs"} ${positionals.join(",")}${deep ? " (deep)" : ""}`;
-      ctx.stdout(`border exfil ${scope} ${report.verdict}: ${String(report.counts.total)} finding(s), ${String(report.counts.blocking)} blocking`);
-      for (const f of report.findings) {
-        ctx.stdout(`  ${f.severity} ${f.rule} [${f.engine}] ${f.path ?? f.commit ?? f.target}${f.line !== void 0 ? `:${String(f.line)}` : ""} ${f.message}`);
-      }
-    }
-    return exitCodeFromVerdict(verdict);
-  } finally {
-    if (sandbox.dir !== "") rmSync11(sandbox.dir, { recursive: true, force: true });
-    if (sandbox.tree !== "") rmSync11(sandbox.tree, { recursive: true, force: true });
-  }
-}
-var runExfil = (ctx) => runExfilCore(ctx);
-
 // src/llm/bundle.ts
-import { createHash as createHash15 } from "node:crypto";
+import { createHash as createHash16 } from "node:crypto";
 import { existsSync as existsSync16, mkdirSync as mkdirSync11, readFileSync as readFileSync16, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname14, join as join26 } from "node:path";
+import { dirname as dirname14, join as join27 } from "node:path";
 
 // src/llm/diff.ts
 import { spawnSync as spawnSync16 } from "node:child_process";
-import { mkdtempSync as mkdtempSync5, rmSync as rmSync12, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname13, join as join25, resolve as resolve16 } from "node:path";
+import { mkdtempSync as mkdtempSync6, rmSync as rmSync13, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname13, join as join26, resolve as resolve16 } from "node:path";
 var GIT_DIFF_MAX_BUFFER = 64 * 1024 * 1024;
 function gitOut(repoDir, args, o, allowFail = false) {
   const abs = resolve16(repoDir);
@@ -44165,24 +44267,24 @@ function collectRawDeltas(repoDir, baseSha, headSha, o = {}) {
 var MASK_CHUNK_CHARS = 2e6;
 function maskViaEngineDetection(repoDir, texts, o = {}) {
   const sanitizer = new TextSanitizer();
-  const sandbox = mkdtempSync5(join25(repoDir, BORDER_STATE_DIR, "llm-mask-"));
+  const sandbox = mkdtempSync6(join26(repoDir, BORDER_STATE_DIR, "llm-mask-"));
   try {
     let idx = 0;
     for (const text of texts) {
       if (text === "") continue;
       for (let off = 0; off < text.length; off += MASK_CHUNK_CHARS, idx += 1) {
-        writeFileSync6(join25(sandbox, `detect-${String(idx)}.txt`), text.slice(off, off + MASK_CHUNK_CHARS), "utf8");
+        writeFileSync6(join26(sandbox, `detect-${String(idx)}.txt`), text.slice(off, off + MASK_CHUNK_CHARS), "utf8");
       }
     }
     scanTree({
       dir: sandbox,
-      stateDir: join25(repoDir, BORDER_STATE_DIR),
+      stateDir: join26(repoDir, BORDER_STATE_DIR),
       target: "llm-mask",
       sanitizer,
       ...engineEnv(o)
     });
   } finally {
-    rmSync12(sandbox, { recursive: true, force: true });
+    rmSync13(sandbox, { recursive: true, force: true });
   }
   return (text) => sanitizer.sanitize(text);
 }
@@ -44234,7 +44336,7 @@ async function runLlmRequestCore(ctx) {
     ctx.stderr("border: llm-request: no check record for the current state \u2014 run 'border check' first (the bundle derives from the recorded ctx)");
     return EXIT_ERROR;
   }
-  const absReport = join26(repoDir, record2.reportPath);
+  const absReport = join27(repoDir, record2.reportPath);
   if (!existsSync16(absReport)) {
     ctx.stderr(`border: llm-request: report archive missing (${record2.reportPath} pruned?) \u2014 run 'border check' again`);
     return EXIT_ERROR;
@@ -44291,9 +44393,9 @@ async function runLlmRequestCore(ctx) {
     fileDeltas,
     artifacts: record2.artifacts,
     deterministic: { verdict: report.verdict, counts: report.counts, findings: report.findings },
-    promptTemplate: { path: templatePath, sha256: createHash15("sha256").update(readFileSync16(templatePath)).digest("hex") }
+    promptTemplate: { path: templatePath, sha256: createHash16("sha256").update(readFileSync16(templatePath)).digest("hex") }
   };
-  const outPath = join26(dirname14(absReport), "llm-request.json");
+  const outPath = join27(dirname14(absReport), "llm-request.json");
   mkdirSync11(dirname14(outPath), { recursive: true });
   writeFileSync7(outPath, `${JSON.stringify(bundle, null, 2)}
 `, "utf8");
@@ -44303,14 +44405,14 @@ async function runLlmRequestCore(ctx) {
 }
 
 // src/llm/ingest.ts
-import { createHash as createHash16 } from "node:crypto";
+import { createHash as createHash17 } from "node:crypto";
 import { existsSync as existsSync17, readFileSync as readFileSync17, readdirSync as readdirSync9 } from "node:fs";
-import { isAbsolute, join as join27, resolve as resolve17 } from "node:path";
+import { isAbsolute, join as join28, resolve as resolve17 } from "node:path";
 var RULE_RE = /^[a-z0-9-]+$/;
 var MAX_TEXT = 4e3;
 var ALLOWED_KEYS = /* @__PURE__ */ new Set(["rule", "severity", "target", "path", "line", "commit", "message", "snippet", "engine", "valueDigest"]);
 function sha2562(text) {
-  return createHash16("sha256").update(text, "utf8").digest("hex");
+  return createHash17("sha256").update(text, "utf8").digest("hex");
 }
 function usageError(ctx, why) {
   ctx.stderr(`border: llm-ingest: ${why}`);
@@ -44324,7 +44426,7 @@ function findLatestBundle(repoDir) {
     return "no llm-request bundle found \u2014 run 'border llm-request' first";
   }
   for (const d of dirs.sort().reverse()) {
-    const p = join27(runsDir(repoDir), d, "llm-request.json");
+    const p = join28(runsDir(repoDir), d, "llm-request.json");
     if (!existsSync17(p)) continue;
     let parsed;
     try {
@@ -44337,7 +44439,7 @@ function findLatestBundle(repoDir) {
     if (b.schemaVersion !== 1 || typeof b.key !== "string" || !/^[0-9a-f]{64}$/.test(b.key) || typeof b.head !== "string" || !/^[0-9a-f]{40}$/.test(b.head) || !Array.isArray(b.fileDeltas) || b.deterministic === void 0) {
       return `bundle ${p} fails its own schema \u2014 re-run 'border llm-request'`;
     }
-    return { dir: join27(runsDir(repoDir), d), bundle: b };
+    return { dir: join28(runsDir(repoDir), d), bundle: b };
   }
   return "no llm-request bundle found \u2014 run 'border llm-request' first";
 }
@@ -44482,23 +44584,23 @@ async function runLlmRequest(ctx) {
 }
 
 // src/commands/opencode.ts
-import { existsSync as existsSync22, lstatSync, mkdirSync as mkdirSync12, readFileSync as readFileSync20, rmSync as rmSync13, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname16, join as join31 } from "node:path";
+import { existsSync as existsSync22, lstatSync, mkdirSync as mkdirSync12, readFileSync as readFileSync20, rmSync as rmSync14, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname16, join as join32 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 
 // src/opencode/inspect.ts
 import { existsSync as existsSync21, readFileSync as readFileSync19 } from "node:fs";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 
 // src/opencode/jsonconfig.ts
 import { existsSync as existsSync19, readdirSync as readdirSync10, readFileSync as readFileSync18 } from "node:fs";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 
 // src/opencode/contract.ts
-import { createHash as createHash17 } from "node:crypto";
+import { createHash as createHash18 } from "node:crypto";
 import { existsSync as existsSync18 } from "node:fs";
 import os3 from "node:os";
-import { dirname as dirname15, join as join28 } from "node:path";
+import { dirname as dirname15, join as join29 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var PLUGIN_MARKER = "// border-opencode-plugin v";
 var COMMAND_MARKER = "<!-- border-opencode-command -->";
@@ -44506,7 +44608,7 @@ var BORDER_PACKAGE = "border-customs";
 var DEFAULT_REGISTRY_BASE = "https://registry.npmjs.org";
 var REGISTRY_TIMEOUT_MS2 = 15e3;
 function sha256Hex3(bytes) {
-  return createHash17("sha256").update(bytes).digest("hex");
+  return createHash18("sha256").update(bytes).digest("hex");
 }
 function firstLine(bytes) {
   const text = bytes.toString("utf8");
@@ -44517,22 +44619,22 @@ function opencodeConfigRoot(env2) {
   const xdg = env2["XDG_CONFIG_HOME"] ?? "";
   if (xdg.length > 0) return xdg;
   const home = env2["HOME"] ?? "";
-  return join28(home.length > 0 ? home : os3.homedir(), ".config");
+  return join29(home.length > 0 ? home : os3.homedir(), ".config");
 }
 function opencodeCacheRoot(env2) {
   const xdg = env2["XDG_CACHE_HOME"] ?? "";
-  const base = xdg.length > 0 ? xdg : join28(env2["HOME"] ?? os3.homedir(), ".cache");
-  return join28(base, "opencode", "packages");
+  const base = xdg.length > 0 ? xdg : join29(env2["HOME"] ?? os3.homedir(), ".cache");
+  return join29(base, "opencode", "packages");
 }
 function routeAPluginPath(env2) {
-  return join28(opencodeConfigRoot(env2), "opencode", "plugins", "border.ts");
+  return join29(opencodeConfigRoot(env2), "opencode", "plugins", "border.ts");
 }
 function packagedAssetPath(moduleUrl, fileName) {
   const here = dirname15(fileURLToPath5(moduleUrl));
   const candidates = [
-    join28(here, "..", "plugin", fileName),
+    join29(here, "..", "plugin", fileName),
     // dist (bundled) mode: <root>/plugin/<f>
-    join28(here, "..", "..", "plugin", fileName)
+    join29(here, "..", "..", "plugin", fileName)
     // src mode: <root>/plugin/<f>
   ];
   return candidates.find((p) => existsSync18(p)) ?? candidates[1];
@@ -44540,11 +44642,11 @@ function packagedAssetPath(moduleUrl, fileName) {
 function packagedDistEntry(moduleUrl) {
   const here = dirname15(fileURLToPath5(moduleUrl));
   const candidates = [
-    join28(here, "index.js"),
+    join29(here, "index.js"),
     // dist (bundled) mode: <root>/dist/index.js
-    join28(here, "..", "dist", "index.js"),
+    join29(here, "..", "dist", "index.js"),
     // src/opencode mode one level under root
-    join28(here, "..", "..", "dist", "index.js")
+    join29(here, "..", "..", "dist", "index.js")
     // src mode: <root>/dist/index.js
   ];
   return candidates.find((p) => existsSync18(p)) ?? candidates[2];
@@ -44640,22 +44742,22 @@ function listCacheDirs(cacheRoot, pkg) {
     return [];
   }
   return names.map((name) => {
-    const pkgRoot = join29(cacheRoot, name, "node_modules", pkg);
+    const pkgRoot = join30(cacheRoot, name, "node_modules", pkg);
     let packageVersion = null;
     try {
-      const meta3 = parseJsonc(readFileSync18(join29(pkgRoot, "package.json"), "utf8"));
+      const meta3 = parseJsonc(readFileSync18(join30(pkgRoot, "package.json"), "utf8"));
       if (isRecord2(meta3) && typeof meta3["version"] === "string") packageVersion = meta3["version"];
     } catch {
       packageVersion = null;
     }
     let markerLine = null;
     try {
-      markerLine = firstLine(readFileSync18(join29(pkgRoot, "plugin", "border.ts")));
+      markerLine = firstLine(readFileSync18(join30(pkgRoot, "plugin", "border.ts")));
     } catch {
       markerLine = null;
     }
     const markerVersion = markerLine !== null && markerLine.startsWith(PLUGIN_MARKER) ? markerLine.slice(PLUGIN_MARKER.length).trim() : null;
-    return { dir: join29(cacheRoot, name), tag: name.slice(pkg.length + 1), packageVersion, markerVersion, markerLine };
+    return { dir: join30(cacheRoot, name), tag: name.slice(pkg.length + 1), packageVersion, markerVersion, markerLine };
   });
 }
 
@@ -44966,14 +45068,14 @@ function gatherFacts(env2, cwd, deps) {
   const pkg = deps.package ?? BORDER_PACKAGE;
   const pluginDrop = routeAPluginPath(env2);
   const cacheRoot = deps.cacheRoot ?? opencodeCacheRoot(env2);
-  const globalPath = deps.globalConfigPath ?? join30(opencodeConfigRoot(env2), "opencode", "opencode.jsonc");
+  const globalPath = deps.globalConfigPath ?? join31(opencodeConfigRoot(env2), "opencode", "opencode.jsonc");
   const routeAInstalled = existsSync21(pluginDrop);
   return {
     pkg,
     env: env2,
     cacheRoot,
     cacheDirs: listCacheDirs(cacheRoot, pkg),
-    configs: [readPluginDeclarations(globalPath, pkg), readPluginDeclarations(join30(cwd, "opencode.jsonc"), pkg)],
+    configs: [readPluginDeclarations(globalPath, pkg), readPluginDeclarations(join31(cwd, "opencode.jsonc"), pkg)],
     packagedPlugin: readPackagedPlugin(packagedAssetPath(import.meta.url, "border.ts")),
     routeAPlugin: pluginDrop,
     routeAInstalled,
@@ -45014,18 +45116,18 @@ async function runInspectCore(ctx, deps = {}) {
 function resolvePluginAsset(moduleUrl, fileName) {
   const here = dirname16(fileURLToPath6(moduleUrl));
   const candidates = [
-    join31(here, "..", "plugin", fileName),
+    join32(here, "..", "plugin", fileName),
     // dist mode (bundled): <root>/plugin/<f>
-    join31(here, "..", "..", "plugin", fileName)
+    join32(here, "..", "..", "plugin", fileName)
     // src mode: <root>/plugin/<f>
   ];
   return candidates.find((p) => existsSync22(p)) ?? candidates[1];
 }
 function targetsFor(env2) {
-  const root = join31(opencodeConfigRoot(env2), "opencode");
+  const root = join32(opencodeConfigRoot(env2), "opencode");
   return [
-    { fileName: "border.ts", destination: join31(root, "plugins", "border.ts"), marker: PLUGIN_MARKER },
-    { fileName: "border-command.md", destination: join31(root, "commands", "border.md"), marker: COMMAND_MARKER }
+    { fileName: "border.ts", destination: join32(root, "plugins", "border.ts"), marker: PLUGIN_MARKER },
+    { fileName: "border-command.md", destination: join32(root, "commands", "border.md"), marker: COMMAND_MARKER }
   ];
 }
 function carriesMarker(bytes, marker) {
@@ -45149,7 +45251,7 @@ function opencodeUninstall(ctx) {
         `refusing to remove ${target.destination} \u2014 the file is not ours (its first line lacks the marker '${target.marker}'); nothing was removed anywhere`
       );
     }
-    rmSync13(target.destination);
+    rmSync14(target.destination);
     ctx.stdout(`${target.destination}: removed`);
   }
   ctx.stdout("note: restart opencode for the tool and command to disappear.");
@@ -45278,9 +45380,9 @@ function confirmRemoteBranch(i) {
 
 // src/push/landing.ts
 import { spawnSync as spawnSync18 } from "node:child_process";
-import { mkdtempSync as mkdtempSync6, rmSync as rmSync14 } from "node:fs";
-import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname17, join as join32, resolve as resolve18 } from "node:path";
+import { mkdtempSync as mkdtempSync7, rmSync as rmSync15 } from "node:fs";
+import { tmpdir as tmpdir5 } from "node:os";
+import { dirname as dirname17, join as join33, resolve as resolve18 } from "node:path";
 var LANDINGS_REF_PREFIX = "refs/border-landings/";
 async function runLandingVerification(o) {
   if (o.legs.length === 0) return null;
@@ -45303,6 +45405,12 @@ async function runLandingVerification(o) {
       );
       return EXIT_ERROR;
     }
+    const allow = applyAllowList(findings, o.allow ?? [], o.repoDir);
+    findings = allow.kept;
+    if (allow.allowHits.length > 0) {
+      const hits = allow.allowHits.map((h) => `${h.rule}#entry${String(h.entryIndex)}:${String(h.count)}`).join(", ");
+      o.err(`border: ${leg.target.target} landing: ${String(allow.allowHits.reduce((n, h) => n + h.count, 0))} tip finding(s) exempted by config allow pins (${hits}) \u2014 same entries the check verdict honored, echoed loud`);
+    }
     const blocking = findings.filter((f) => isBlocking(f.severity)).length;
     const verdict = blocking > 0 ? "blocked" : "clean";
     sink(buildLandingRecord({ key: o.key, target: leg.target.target, ref: `refs/heads/${leg.branch}`, remoteSha: sha, verdict, blocking, rulesHash }));
@@ -45355,11 +45463,11 @@ async function defaultScanRemoteTip(o, remote, branch, remoteSha) {
       ownedTempRef = landingRef;
       rev = git.run(["rev-parse", landingRef]).trim();
     }
-    const treeRoot = mkdtempSync6(join32(tmpdir4(), "border-landing-tree-"));
+    const treeRoot = mkdtempSync7(join33(tmpdir5(), "border-landing-tree-"));
     try {
       return await scanTipTree(git, treeRoot, rev, o.env);
     } finally {
-      rmSync14(treeRoot, { recursive: true, force: true });
+      rmSync15(treeRoot, { recursive: true, force: true });
     }
   } finally {
     if (ownedTempRef !== null) {
@@ -45539,6 +45647,9 @@ async function executeYesPush(ctx, loaded) {
       key: state.key,
       legs: legs.map((leg) => ({ target: leg, branch })),
       env: env2,
+      // the SAME allow entries the certifying check honored — one standard
+      // across faces (2026-10-04 incident fix; see push/landing.ts doctrine).
+      allow: loaded.config.allow,
       out: ctx.stdout,
       err: ctx.stderr
     });
@@ -45561,17 +45672,17 @@ async function executeYesPush(ctx, loaded) {
 }
 
 // src/roundtrip/orchestrate.ts
-import { mkdtempSync as mkdtempSync7, rmSync as rmSync15, writeFileSync as writeFileSync9 } from "node:fs";
+import { mkdtempSync as mkdtempSync8, rmSync as rmSync16, writeFileSync as writeFileSync9 } from "node:fs";
 import { randomBytes } from "node:crypto";
-import { tmpdir as tmpdir5 } from "node:os";
-import { join as join33 } from "node:path";
+import { tmpdir as tmpdir6 } from "node:os";
+import { join as join34 } from "node:path";
 
 // src/scan/fetch.ts
-import { createHash as createHash18 } from "node:crypto";
+import { createHash as createHash19 } from "node:crypto";
 import { basename as basename5 } from "node:path";
 var SCAN_MAX_ARTIFACT_BYTES = 200 * 1024 * 1024;
 var SCAN_REQUEST_TIMEOUT_MS = 6e4;
-var SCAN_USER_AGENT = "border-customs/0.8.0 (+https://github.com/sumteclab/border; border scan)";
+var SCAN_USER_AGENT = "border-customs/0.8.1 (+https://github.com/gate-corp/border; border scan)";
 var CRATES_DOWNLOAD_HOST = "https://static.crates.io";
 var defaultScanFetcher = async (url2, init) => {
   if (!/^https?:\/\//.test(url2)) throw new EngineRunError(`border scan refuses non-http(s) URL: ${url2}`, null);
@@ -45697,7 +45808,7 @@ async function fetchArtifact(spec, o) {
   }
 }
 function sha256Hex4(data) {
-  return createHash18("sha256").update(data).digest("hex");
+  return createHash19("sha256").update(data).digest("hex");
 }
 
 // src/scan/spec.ts
@@ -45741,7 +45852,7 @@ function parseScanSpec(raw) {
 
 // src/roundtrip/localArtifact.ts
 import { createReadStream, existsSync as existsSync23, statSync as statSync3 } from "node:fs";
-import { createHash as createHash19 } from "node:crypto";
+import { createHash as createHash20 } from "node:crypto";
 import { basename as basename6, resolve as resolve19 } from "node:path";
 var EXT_TABLE = /* @__PURE__ */ new Map([
   [".whl", "pypi"],
@@ -45824,7 +45935,7 @@ function classifyLocalInput(raw, cwd, parsesAsRegistrySpec) {
   return null;
 }
 async function readLocalArtifact(absPath, cap = SCAN_MAX_ARTIFACT_BYTES) {
-  const hash2 = createHash19("sha256");
+  const hash2 = createHash20("sha256");
   const parts = [];
   let total = 0;
   for await (const chunk of createReadStream(absPath)) {
@@ -46050,7 +46161,7 @@ var CLAIM_SCANNER_PY = [
 ].join("\n");
 
 // src/roundtrip/manifest.ts
-import { createHash as createHash20 } from "node:crypto";
+import { createHash as createHash21 } from "node:crypto";
 var RT_ENGINE = "roundtrip";
 var RT_RESIDUE_RULE = "roundtrip-residue-file";
 var RT_MODIFY_RULE = "roundtrip-modified-file";
@@ -46101,7 +46212,7 @@ var PERSISTENCE_PATTERNS = [
 function isPersistenceSurface(path4) {
   return PERSISTENCE_PATTERNS.some((re) => re.test(path4));
 }
-var digestOf = (what) => createHash20("sha256").update(what).digest("hex");
+var digestOf = (what) => createHash21("sha256").update(what).digest("hex");
 function classifyResidue(label, diff, attribution = null) {
   const findings = [];
   for (const e of diff.added) {
@@ -46303,12 +46414,12 @@ async function runRoundtripCore(ctx, deps = {}) {
     ctx.stderr("roundtrip: docker unavailable \u2014 cannot verify");
     return EXIT_ERROR;
   }
-  const baseDir = mkdtempSync7(join33(tmpdir5(), "border-roundtrip-"));
+  const baseDir = mkdtempSync8(join34(tmpdir6(), "border-roundtrip-"));
   try {
     const localRead = local !== null ? await readLocalArtifact(local.absPath) : null;
     const bytes = localRead?.bytes ?? (await fetchArtifact(spec, { fetcher: deps.fetcher ?? defaultScanFetcher })).bytes;
     const artifactSha256 = localRead !== null ? localRead.sha256 : sha256Hex4(bytes);
-    const hostPath = join33(baseDir, "artifact");
+    const hostPath = join34(baseDir, "artifact");
     writeFileSync9(hostPath, bytes);
     const container = containerNameFor(label);
     const closure = spec.ecosystem === "pypi" ? resolvePipClosure(exec, profile, hostPath, label, spec) : null;
@@ -46353,7 +46464,7 @@ async function runRoundtripCore(ctx, deps = {}) {
     }
     return exitCodeFromVerdict(verdict);
   } finally {
-    rmSync15(baseDir, { recursive: true, force: true });
+    rmSync16(baseDir, { recursive: true, force: true });
   }
 }
 function parsesRegistrySpec(raw) {
@@ -46409,9 +46520,9 @@ function dockerAvailableGuard(exec) {
 var runRoundtrip = (ctx) => runRoundtripCore(ctx);
 
 // src/scan/scan.ts
-import { mkdtempSync as mkdtempSync8 } from "node:fs";
-import { tmpdir as tmpdir6 } from "node:os";
-import { join as join35 } from "node:path";
+import { mkdtempSync as mkdtempSync9 } from "node:fs";
+import { tmpdir as tmpdir7 } from "node:os";
+import { join as join36 } from "node:path";
 
 // src/scan/config.ts
 function buildScanConfigYaml(eco) {
@@ -46438,8 +46549,8 @@ function synthesizeScanConfig(eco) {
 }
 
 // src/scan/materialize.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync13, readdirSync as readdirSync11, readFileSync as readFileSync21, rmSync as rmSync16, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join34 } from "node:path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync13, readdirSync as readdirSync11, readFileSync as readFileSync21, rmSync as rmSync17, writeFileSync as writeFileSync10 } from "node:fs";
+import { join as join35 } from "node:path";
 var CRATES_ENVELOPE_FILES = ["Cargo.toml.orig", ".cargo-ok", ".cargo_vcs_info.json"];
 var fail3 = (why) => {
   throw new Error(`border scan cannot materialize the artifact (${why}) \u2014 refusing to stage an unusable tree (fail-closed)`);
@@ -46456,12 +46567,12 @@ function unwrapSingleDir(dir) {
   const entries = readdirSync11(dir, { withFileTypes: true });
   const dirs = entries.filter((e) => e.isDirectory());
   if (entries.length === 1 && dirs.length === 1 && dirs[0] !== void 0) {
-    return join34(dir, dirs[0].name);
+    return join35(dir, dirs[0].name);
   }
   return dir;
 }
 function requireManifest(repoDir, ecosystem, candidates) {
-  if (!candidates.some((rel) => existsSync24(join34(repoDir, rel)))) {
+  if (!candidates.some((rel) => existsSync24(join35(repoDir, rel)))) {
     fail3(`${ecosystem} package tree has none of [${candidates.join(", ")}] at its root`);
   }
 }
@@ -46471,18 +46582,18 @@ function materializePackage(o) {
 `);
   });
   const safe = safeArtifactName(o.filename, `${o.ecosystem}-artifact`);
-  const archive = join34(o.baseDir, safe);
+  const archive = join35(o.baseDir, safe);
   writeFileSync10(archive, o.bytes);
-  const extractDir = join34(o.baseDir, "extract");
+  const extractDir = join35(o.baseDir, "extract");
   mkdirSync13(extractDir, { recursive: true });
   extractFlat(archive, extractDir);
   let repoDir = unwrapSingleDir(extractDir);
   if (o.ecosystem === "rubygems") {
     const outer = repoDir;
     const dataCandidates = findNativeMissArchives(outer).filter((f) => f.endsWith("data.tar.gz"));
-    const inner = dataCandidates[0] ?? join34(outer, "data.tar.gz");
+    const inner = dataCandidates[0] ?? join35(outer, "data.tar.gz");
     if (!existsSync24(inner)) fail3(".gem archive contains no data.tar.gz");
-    const gemTree = join34(o.baseDir, "gem-tree");
+    const gemTree = join35(o.baseDir, "gem-tree");
     mkdirSync13(gemTree, { recursive: true });
     extractFlat(inner, gemTree);
     repoDir = unwrapSingleDir(gemTree);
@@ -46493,10 +46604,10 @@ function materializePackage(o) {
   } else {
     requireManifest(repoDir, o.ecosystem, ["Cargo.toml"]);
     for (const file2 of CRATES_ENVELOPE_FILES) {
-      const path4 = join34(repoDir, file2);
+      const path4 = join35(repoDir, file2);
       if (!existsSync24(path4)) continue;
       const original = readFileSync21(path4);
-      rmSync16(path4, { force: true });
+      rmSync17(path4, { force: true });
       note(`border scan: crates envelope normalized: ${file2} sha256=${sha256Hex4(original)}`);
     }
   }
@@ -46523,7 +46634,7 @@ async function runScanCore(ctx, deps = {}) {
   }
   const cfg = synthesizeScanConfig(spec.ecosystem);
   const fetcher = deps.fetcher ?? defaultScanFetcher;
-  const baseDir = mkdtempSync8(join35(tmpdir6(), "border-scan-"));
+  const baseDir = mkdtempSync9(join36(tmpdir7(), "border-scan-"));
   try {
     const { bytes, filename } = await fetchArtifact(spec, { fetcher });
     const env2 = { ...ctx.env };