docguard-cli 0.39.0 → 0.40.1

package/extensions/spec-kit-docguard/commands/guard.md

@@ -28,13 +28,13 @@ You **MUST** consider the user input before proceeding (if not empty).
 
 1. Run DocGuard guard validation:
 ```bash
-npx --yes docguard-cli@latest guard $ARGUMENTS
+npx --yes docguard-cli@latest guard --format json $ARGUMENTS
 ```
 
 2. Parse each validator's result and build a severity-ranked findings table. Status glyphs: ✅ pass, ⚠️ warning, ❌ fail, ➖ N/A (nothing to validate — NOT a pass; the dimension was not assessed).
 
 3. **Triage by severity**:
-   - **CRITICAL**: Structure, Security, Test-Spec failures → fix immediately
+   - **CRITICAL**: Structure, Security, Test-Spec, Evidence contradiction/manifest failures → fix immediately
    - **HIGH**: Doc Sections, Drift-Comments, Changelog, Traceability, API-Surface → fix before commit
    - **MEDIUM**: Freshness, Docs-Coverage, Doc-Quality, Metrics → fix this sprint
    - **LOW**: TODO-Tracking, Schema-Sync, Spec-Kit, Metadata → fix when convenient
@@ -66,6 +66,7 @@ npx --yes docguard-cli@latest guard $ARGUMENTS
 | TODO-Tracking | TODOs are tracked |
 | Schema-Sync | Schema documentation matches code |
 | Spec-Kit | Spec quality (FR-IDs, sections) |
+| Evidence | Exact declared statements match current local sources or saved compatibility reports |
 | Metrics-Consistency | Internal counts are accurate |
 
 ## Flags

package/extensions/spec-kit-docguard/commands/sync.md

@@ -46,7 +46,7 @@ npx --yes docguard-cli@latest guard
 
 - `--since <ref>` — also report which code files changed since this git ref (context for prose updates).
 - `--write` — apply the mechanical refreshes. Default is a dry-run preview.
-- `--force` — sync docs even without the `<!-- docguard:generated true -->` marker.
+- `--force` — sync unmarked default-path docs. It never bypasses mapped-document section ownership.
 - `--format json` — machine-readable output (`updates`, `reviews`, `skipped`).
 
 ## When to use

package/extensions/spec-kit-docguard/extension.yml

@@ -3,7 +3,7 @@ schema_version: "1.0"
 extension:
   id: "docguard"
   name: "DocGuard — CDD Enforcement"
-  version: "0.39.0"
+  version: "0.40.1"
   description: "Canonical-Driven Development enforcement as a true spec-kit extension. LLM-first design with automated validators, 5 AI behavior skills, spec-kit skill chaining, and workflow hooks. One pinned runtime dependency (@babel/parser); pure Node.js otherwise."
   author: "Ricardo Accioly"
   repository: "https://github.com/raccioly/docguard"

package/extensions/spec-kit-docguard/skills/docguard-fix/SKILL.md

@@ -6,10 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.39.0
+  version: 0.40.1
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.39.0 -->
+<!-- docguard:version: 0.40.1 -->
 
 # DocGuard Fix Skill
 
@@ -44,7 +44,9 @@ npx docguard-cli fix --write 2>&1
 
 Removes endpoints documented in `docs-canonical/API-REFERENCE.md` that the OpenAPI
 spec confirms no longer exist (table row + detail block). Only edits
-`docguard:generated` docs, idempotent, prints what changed. Don't hand-edit these.
+`docguard:generated` whole documents. Mapped human docs expose only unique
+`source=code` sections, and `--force` cannot bypass ownership. The operation is
+idempotent and prints what changed. Don't hand-edit generated sections.
 
 ### Step 1: Diagnose Current State
 
@@ -217,6 +219,15 @@ After all fixes are applied, output:
 - **Log deviations** — if you deviate from canonical expectations, add `// DRIFT: reason` in DRIFT-LOG.md
 - **Never include secrets** — document variable/secret NAMES only, never actual values
 
+## Evidence Findings
+
+Run `docguard verify --evidence --format json` when guard returns an `EVD` code.
+Repair invalid, missing, ambiguous, stale, or unsupported evidence at the named
+source. For `EVD002`, inspect the approved requirement and implementation before
+editing either side; current code does not automatically override canonical
+intent. Rerun evidence verification after the targeted change. Never broaden a
+statement template or remove an evidence declaration merely to make guard pass.
+
 ## Integration with Spec Kit
 
 If `.specify/` directory exists:

package/extensions/spec-kit-docguard/skills/docguard-guard/SKILL.md

@@ -7,10 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.39.0
+  version: 0.40.1
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.39.0 -->
+<!-- docguard:version: 0.40.1 -->
 
 # DocGuard Guard Skill
 
@@ -44,12 +44,12 @@ Execute DocGuard's full guard validator suite against the current project, parse
 Execute the guard command and capture full output:
 
 ```bash
-npx docguard-cli guard 2>&1
+npx docguard-cli guard --format json
 ```
 
 If in a DocGuard development environment (cli/docguard.mjs exists), use:
 ```bash
-node cli/docguard.mjs guard 2>&1
+node cli/docguard.mjs guard --format json
 ```
 
 ### Step 2: Parse Validator Results
@@ -75,6 +75,7 @@ Classify every non-passing check using this priority matrix:
 - Structure failures (missing canonical docs)
 - Security failures (hardcoded secrets, missing SECURITY.md)
 - Test-Spec failures (tests don't match spec)
+- Evidence contradictions or an invalid evidence manifest
 
 **HIGH (fix before commit)**:
 - Doc Sections failures (missing required sections)
@@ -139,7 +140,7 @@ For each finding, provide a **specific, actionable fix** — not "fix the issue"
 
 Based on the triage results:
 
-- **If all PASS**: "All validators passed. Project is CDD-compliant. Ready to commit."
+- **If all PASS**: "All configured validators passed. Report declared evidence coverage and any remaining heuristic claims; uncaptured prose is still unverified."
 - **If only MEDIUM/LOW warnings**: "Non-blocking warnings found. Safe to commit, but consider running `/docguard.fix` for automated remediation."
 - **If HIGH or CRITICAL failures**: "Blocking issues found. Fix these before committing. Suggest running `/docguard.fix --doc [most impactful doc]` next."
 
@@ -157,6 +158,16 @@ Present the user with options:
 - **Track progress** — if user runs guard multiple times, compare before/after
 - If user provides `$ARGUMENTS` like "just structure" or "only security", filter report to those validators
 
+## Evidence State Rules
+
+When the JSON payload contains `evidence`, preserve its state names exactly.
+Treat `verified-within-scope` as a pass only for that declaration. Treat
+`contradicted` as a high-confidence failure. For `stale`, regenerate the saved
+upstream report and hashes before reviewing prose. For `inconclusive`, restore
+or narrow the missing/ambiguous input. For `unsupported`, keep the finding
+visible and request a paired synthetic fixture before expanding support. Never
+rewrite approved intent from current code automatically.
+
 ## Integration with Spec Kit (Extension-First)
 
 DocGuard is a spec-kit extension. When this project has a `.specify/` directory:

package/extensions/spec-kit-docguard/skills/docguard-review/SKILL.md

@@ -6,10 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.39.0
+  version: 0.40.1
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.39.0 -->
+<!-- docguard:version: 0.40.1 -->
 
 # DocGuard Review Skill
 
@@ -51,7 +51,9 @@ Execute DocGuard's diagnostic and scoring tools:
 ```bash
 npx docguard-cli diagnose 2>&1
 npx docguard-cli score 2>&1
-npx docguard-cli guard 2>&1
+npx docguard-cli guard --format json
+npx docguard-cli verify --evidence --format json
+npx docguard-cli verify --semantic --format json
 ```
 
 Record:
@@ -59,6 +61,7 @@ Record:
 - CDD maturity score (0-100)
 - ALCOA+ compliance attributes
 - Category breakdown
+- Exact declared evidence states and the remaining heuristic claim tasks
 
 ### Step 3: Semantic Cross-Document Analysis
 
@@ -180,6 +183,8 @@ Ask: "Would you like me to fix the top N issues? (I'll show you what I plan to c
 - **Compare actual code vs docs** — don't just validate formatting
 - **Limit findings to 50** — aggregate overflow in a summary count
 - **Prioritize high-signal findings** — one CRITICAL finding is worth ten LOW findings
+- **Preserve evidence scope** — a verified declaration covers one selected statement, while undeclared prose and whole-document accuracy remain review work
+- **Preserve approved intent** — a contradiction can mean implementation regressed; determine which side owns truth before recommending an edit
 
 ## Context
 

package/extensions/spec-kit-docguard/skills/docguard-score/SKILL.md

@@ -6,10 +6,10 @@ description: CDD maturity assessment with category-aware improvement roadmap. Ru
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.39.0
+  version: 0.40.1
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.39.0 -->
+<!-- docguard:version: 0.40.1 -->
 
 # DocGuard Score Skill
 
@@ -173,6 +173,7 @@ If user has run score before (check git log for score badge changes):
 - **Be actionable** — every recommendation must have a specific action
 - **Compare before/after** — if user has previously run score in this session, show improvement
 - **Focus on ROI** — surface the cheapest fixes with the biggest score impact first
+- **Keep assurance separate** — report `assurance.declaredEvidence` and remaining `unverifiedClaims` beside the structural score; never convert a scoped evidence pass into an accuracy score for a document or project
 
 ## Context
 

package/extensions/spec-kit-docguard/skills/docguard-sync/SKILL.md

@@ -4,10 +4,10 @@ description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-trut
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.39.0
+  version: 0.40.1
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.39.0 -->
+<!-- docguard:version: 0.40.1 -->
 
 # DocGuard Sync Skill
 
@@ -76,6 +76,7 @@ For each `🤖 Prose to review` entry:
 
 ```bash
 npx --yes docguard-cli@latest guard
+npx --yes docguard-cli@latest verify --evidence
 ```
 
 Confirm there are no errors. If the API surface drifted (`API-Surface` failures),
@@ -102,7 +103,8 @@ that ref. Use that diff to:
 |---|---|
 | `↻ docs-canonical/API-REFERENCE.md → endpoints` | Code-truth refreshed by `--write`. No action needed. |
 | `🤖 docs-canonical/API-REFERENCE.md → overview` | Open the doc; update the `overview` prose to reflect the new endpoint set. |
-| `Skipped … not marked docguard:generated` | The doc isn't owned by DocGuard. Either add the marker (and commit ownership) or skip with `--force`. |
+| `Skipped … not marked docguard:generated` | A default-path doc lacks whole-document ownership. Review before using `--force`; a mapped human doc still requires a unique `source=code` section. |
+| `malformed or duplicate docguard:section markers` | Stop. Repair ownership markers explicitly; `--force` cannot authorize the write. |
 | `Documentation memory is up to date` | Done — no drift. |
 
 ## Anti-patterns (do NOT do these)
@@ -110,3 +112,4 @@ that ref. Use that diff to:
 - ❌ Editing inside `<!-- docguard:section source=code -->` — DocGuard will rewrite it on the next sync.
 - ❌ Removing the markers to "make the doc look cleaner" — that breaks future sync/regeneration.
 - ❌ Skipping `sync --write` and editing the code section by hand — let DocGuard do it.
+- ❌ Rewriting an evidence-bound human statement from generated code alone — rerun the declared predicate and review approved intent first.

package/extensions/spec-kit-docguard/templates/github-workflows/docguard-autofix.yml

@@ -35,7 +35,7 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository
     steps:
       - name: Checkout PR branch (with write token)
-        uses: actions/checkout@v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           # Default GITHUB_TOKEN has the contents:write scope granted above.
@@ -44,7 +44,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run DocGuard fix --write + auto-commit + PR comment
-        uses: raccioly/docguard@v0.25.0
+        uses: raccioly/docguard@v0.40.1
         with:
           command: fix
           auto-commit: 'true'

package/extensions/spec-kit-docguard/templates/github-workflows/docguard-guard.yml

@@ -25,17 +25,17 @@ jobs:
           echo "DOCGUARD_LOG=$RUNNER_TEMP/docguard-stderr.log" >> "$GITHUB_ENV"
           echo "DOCGUARD_SCORE=$RUNNER_TEMP/docguard-score.json" >> "$GITHUB_ENV"
 
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0 # Freshness needs the complete commit history.
           persist-credentials: false
 
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '20'
 
       - name: Install DocGuard
-        run: npm install --global --ignore-scripts docguard-cli@0.39.0
+        run: npm install --global --ignore-scripts docguard-cli@0.40.1
 
       - name: Run DocGuard
         shell: bash
@@ -83,7 +83,7 @@ jobs:
 
       - name: Upload Report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: docguard-report
           path: |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "docguard-cli",
-  "version": "0.39.0",
+  "version": "0.40.1",
   "description": "The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your project documentation.",
   "type": "module",
   "bin": {
@@ -13,6 +13,7 @@
     "init": "node cli/docguard.mjs init",
     "score": "node cli/docguard.mjs score",
     "benchmark": "node benchmarks/run.mjs",
+    "benchmark:agent-context": "node benchmarks/agent-context/run.mjs",
     "diff": "node cli/docguard.mjs diff",
     "generate": "node cli/docguard.mjs generate",
     "hooks": "node cli/docguard.mjs hooks",

package/schemas/docguard-agent-context-benchmark.schema.json

@@ -0,0 +1,92 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raccioly.github.io/docguard/schemas/docguard-agent-context-benchmark.schema.json",
+  "title": "DocGuard task-specific agent context benchmark",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schema", "schemaVersion", "protocol", "conditions", "promotion", "tasks"],
+  "properties": {
+    "$schema": { "const": "https://raccioly.github.io/docguard/schemas/docguard-agent-context-benchmark.schema.json" },
+    "schemaVersion": { "const": 1 },
+    "protocol": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "frozenAt", "seed", "repetitions", "timeoutMs", "harness", "model"],
+      "properties": {
+        "id": { "const": "docguard-agent-context-v1" },
+        "frozenAt": { "type": "string", "format": "date" },
+        "seed": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "repetitions": { "type": "integer", "minimum": 3, "maximum": 20 },
+        "timeoutMs": { "type": "integer", "minimum": 1000, "maximum": 900000 },
+        "harness": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "model": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["cliVersion", "id", "reasoningEffort", "sandbox"],
+          "properties": {
+            "cliVersion": { "type": "string", "minLength": 1, "maxLength": 128 },
+            "id": { "type": "string", "minLength": 1, "maxLength": 128 },
+            "reasoningEffort": { "enum": ["low", "medium", "high"] },
+            "sandbox": { "const": "workspace-write" }
+          }
+        }
+      }
+    },
+    "conditions": {
+      "type": "array",
+      "minItems": 3,
+      "maxItems": 3,
+      "uniqueItems": true,
+      "prefixItems": [
+        { "const": "task-only" },
+        { "const": "context-pack" },
+        { "const": "targeted-packet" }
+      ],
+      "items": false
+    },
+    "promotion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["nonInferiorityFailures", "maxAdditionalRequirementViolations", "maxAdditionalUnnecessaryEdits", "minimumMedianReductionPercent", "successGainQualifies"],
+      "properties": {
+        "nonInferiorityFailures": { "const": 1 },
+        "maxAdditionalRequirementViolations": { "const": 0 },
+        "maxAdditionalUnnecessaryEdits": { "const": 0 },
+        "minimumMedianReductionPercent": { "const": 15 },
+        "successGainQualifies": { "const": true }
+      }
+    },
+    "tasks": {
+      "type": "array",
+      "minItems": 3,
+      "maxItems": 3,
+      "items": { "$ref": "#/$defs/task" }
+    }
+  },
+  "$defs": {
+    "path": { "type": "string", "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+" },
+    "task": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "fixture", "hiddenEvaluator", "reference", "prompt", "allowedChanges", "visibleTest", "expectedInitial"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{2,63}$" },
+        "fixture": { "$ref": "#/$defs/path" },
+        "hiddenEvaluator": { "$ref": "#/$defs/path" },
+        "reference": { "$ref": "#/$defs/path" },
+        "prompt": { "type": "string", "minLength": 20, "maxLength": 2000 },
+        "allowedChanges": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/path" } },
+        "visibleTest": { "type": "array", "minItems": 2, "items": { "type": "string", "minLength": 1, "maxLength": 512 } },
+        "expectedInitial": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["passed", "failed"],
+          "properties": {
+            "passed": { "type": "integer", "minimum": 1 },
+            "failed": { "type": "integer", "minimum": 1 }
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/docguard-agent-context-result.schema.json

@@ -0,0 +1,95 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raccioly.github.io/docguard/schemas/docguard-agent-context-result.schema.json",
+  "title": "DocGuard task-specific agent context benchmark result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schema", "schemaVersion", "core", "observations"],
+  "properties": {
+    "$schema": { "const": "https://raccioly.github.io/docguard/schemas/docguard-agent-context-result.schema.json" },
+    "schemaVersion": { "const": 1 },
+    "core": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["protocolId", "manifestDigest", "harnessDigest", "analysisDigest", "selectorDigest", "fixtureDigests", "trialOrder", "aggregate", "decision"],
+      "properties": {
+        "protocolId": { "const": "docguard-agent-context-v1" },
+        "manifestDigest": { "$ref": "#/$defs/digest" },
+        "harnessDigest": { "$ref": "#/$defs/digest" },
+        "analysisDigest": { "$ref": "#/$defs/digest" },
+        "selectorDigest": { "$ref": "#/$defs/digest" },
+        "fixtureDigests": { "type": "object", "minProperties": 3, "additionalProperties": { "$ref": "#/$defs/digest" } },
+        "trialOrder": { "type": "array", "minItems": 27, "items": { "type": "string" } },
+        "aggregate": { "type": "object" },
+        "decision": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["status", "reasons"],
+          "properties": {
+            "status": { "enum": ["promote", "reject", "incomplete"] },
+            "reasons": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+            "reductions": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["uncachedInputTokens", "steps", "latency"],
+              "properties": {
+                "uncachedInputTokens": { "type": ["number", "null"] },
+                "steps": { "type": ["number", "null"] },
+                "latency": { "type": ["number", "null"] }
+              }
+            }
+          }
+        }
+      }
+    },
+    "observations": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["generatedAt", "environment", "trials"],
+      "properties": {
+        "generatedAt": { "type": "string", "format": "date-time" },
+        "environment": { "type": "object" },
+        "trials": { "type": "array", "minItems": 27, "items": { "$ref": "#/$defs/trial" } }
+      }
+    }
+  },
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "nullableMetric": { "type": ["integer", "null"], "minimum": 0 },
+    "trial": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "task", "condition", "repetition", "status", "success", "requirementsPassed", "requirementsTotal", "requirementViolations", "unnecessaryEdits", "changedFiles", "steps", "usage", "latencyMs", "humanIntervention", "patchDigest", "failure"],
+      "properties": {
+        "id": { "type": "string" },
+        "task": { "type": "string" },
+        "condition": { "enum": ["task-only", "context-pack", "targeted-packet"] },
+        "repetition": { "type": "integer", "minimum": 1 },
+        "status": { "enum": ["completed", "agent-failed", "timed-out", "infrastructure-failed"] },
+        "success": { "type": "boolean" },
+        "requirementsPassed": { "type": "integer", "minimum": 0 },
+        "requirementsTotal": { "type": "integer", "minimum": 1 },
+        "requirementViolations": { "type": "integer", "minimum": 0 },
+        "unnecessaryEdits": { "type": "integer", "minimum": 0 },
+        "changedFiles": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+        "steps": { "type": "integer", "minimum": 0 },
+        "usage": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["inputTokens", "cachedInputTokens", "uncachedInputTokens", "outputTokens", "reasoningTokens"],
+          "properties": {
+            "inputTokens": { "$ref": "#/$defs/nullableMetric" },
+            "cachedInputTokens": { "$ref": "#/$defs/nullableMetric" },
+            "uncachedInputTokens": { "$ref": "#/$defs/nullableMetric" },
+            "outputTokens": { "$ref": "#/$defs/nullableMetric" },
+            "reasoningTokens": { "$ref": "#/$defs/nullableMetric" }
+          }
+        },
+        "latencyMs": { "type": "integer", "minimum": 0 },
+        "humanIntervention": { "type": "integer", "minimum": 0, "maximum": 1 },
+        "patchDigest": { "anyOf": [{ "$ref": "#/$defs/digest" }, { "type": "null" }] },
+        "failure": { "type": ["string", "null"] }
+      }
+    }
+  }
+}

package/schemas/docguard-config.schema.json

@@ -107,6 +107,7 @@
         "specKit":            { "type": "boolean" },
         "documentLifecycle":  { "type": "boolean" },
         "specRegistry":       { "type": "boolean" },
+        "evidence":           { "type": "boolean" },
         "crossReference":    { "type": "boolean" },
         "generatedStaleness":{ "type": "boolean" },
         "canonicalSync":     { "type": "boolean" },