dunstan 0.1.12 → 0.1.14

package/dist/dunstan.mjs

@@ -101,7 +101,7 @@ var require_code = __commonJS({
     }
     exports._ = _;
     var plus = new _Code("+");
-    function str2(strs, ...args) {
+    function str3(strs, ...args) {
       const expr = [safeStringify(strs[0])];
       let i = 0;
       while (i < args.length) {
@@ -112,7 +112,7 @@ var require_code = __commonJS({
       optimize(expr);
       return new _Code(expr);
     }
-    exports.str = str2;
+    exports.str = str3;
     function addCodeArg(code, arg) {
       if (arg instanceof _Code)
         code.push(...arg._items);
@@ -155,7 +155,7 @@ var require_code = __commonJS({
       return;
     }
     function strConcat(c1, c2) {
-      return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str2`${c1}${c2}`;
+      return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str3`${c1}${c2}`;
     }
     exports.strConcat = strConcat;
     function interpolate(x) {
@@ -246,13 +246,13 @@ var require_scope = __commonJS({
       }
     };
     exports.ValueScopeName = ValueScopeName;
-    var line = (0, code_1._)`\n`;
+    var line2 = (0, code_1._)`\n`;
     var ValueScope = class extends Scope {
       constructor(opts) {
         super(opts);
         this._values = {};
         this._scope = opts.scope;
-        this.opts = { ...opts, _n: opts.lines ? line : code_1.nil };
+        this.opts = { ...opts, _n: opts.lines ? line2 : code_1.nil };
       }
       get() {
         return this._scope;
@@ -1117,22 +1117,22 @@ var require_util = __commonJS({
       return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
     }
     exports.schemaRefOrVal = schemaRefOrVal;
-    function unescapeFragment(str2) {
-      return unescapeJsonPointer(decodeURIComponent(str2));
+    function unescapeFragment(str3) {
+      return unescapeJsonPointer(decodeURIComponent(str3));
     }
     exports.unescapeFragment = unescapeFragment;
-    function escapeFragment(str2) {
-      return encodeURIComponent(escapeJsonPointer(str2));
+    function escapeFragment(str3) {
+      return encodeURIComponent(escapeJsonPointer(str3));
     }
     exports.escapeFragment = escapeFragment;
-    function escapeJsonPointer(str2) {
-      if (typeof str2 == "number")
-        return `${str2}`;
-      return str2.replace(/~/g, "~0").replace(/\//g, "~1");
+    function escapeJsonPointer(str3) {
+      if (typeof str3 == "number")
+        return `${str3}`;
+      return str3.replace(/~/g, "~0").replace(/\//g, "~1");
     }
     exports.escapeJsonPointer = escapeJsonPointer;
-    function unescapeJsonPointer(str2) {
-      return str2.replace(/~1/g, "/").replace(/~0/g, "~");
+    function unescapeJsonPointer(str3) {
+      return str3.replace(/~1/g, "/").replace(/~0/g, "~");
     }
     exports.unescapeJsonPointer = unescapeJsonPointer;
     function eachItem(xs, f) {
@@ -2157,8 +2157,8 @@ var require_json_schema_traverse = __commonJS({
         post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
       }
     }
-    function escapeJsonPtr(str2) {
-      return str2.replace(/~/g, "~0").replace(/\//g, "~1");
+    function escapeJsonPtr(str3) {
+      return str3.replace(/~/g, "~0").replace(/\//g, "~1");
     }
   }
 });
@@ -2984,7 +2984,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve4.call(this, root, ref);
+      let _sch = resolve5.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
         const { schemaId: schemaId2 } = this.opts;
@@ -3011,7 +3011,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve4(root, ref) {
+    function resolve5(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -3255,10 +3255,10 @@ var require_utils = __commonJS({
         isIPV6: true
       };
     }
-    function findToken(str2, token) {
+    function findToken(str3, token) {
       let ind = 0;
-      for (let i = 0; i < str2.length; i++) {
-        if (str2[i] === token) ind++;
+      for (let i = 0; i < str3.length; i++) {
+        if (str3[i] === token) ind++;
       }
       return ind;
     }
@@ -3841,7 +3841,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve4(baseURI, relativeURI, options) {
+    function resolve5(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const {
         parsed: baseParsed,
@@ -4210,7 +4210,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize,
-      resolve: resolve4,
+      resolve: resolve5,
       resolveComponent,
       equal,
       serialize: serialize2,
@@ -4272,7 +4272,7 @@ var require_core = __commonJS({
     var util_1 = require_util();
     var $dataRefSchema = require_data();
     var uri_1 = require_uri();
-    var defaultRegExp = (str2, flags) => new RegExp(str2, flags);
+    var defaultRegExp = (str3, flags) => new RegExp(str3, flags);
     defaultRegExp.code = "new RegExp";
     var META_IGNORE_OPTIONS = ["removeAdditional", "useDefaults", "coerceTypes"];
     var EXT_SCOPE_NAMES = /* @__PURE__ */ new Set([
@@ -4625,7 +4625,7 @@ var require_core = __commonJS({
       errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
         if (!errors || errors.length === 0)
           return "No errors";
-        return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text, msg) => text + separator + msg);
+        return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text2, msg) => text2 + separator + msg);
       }
       $dataMetaSchema(metaSchema, keywordsJsonPointers) {
         const rules = this.RULES.all;
@@ -5067,16 +5067,16 @@ var require_ucs2length = __commonJS({
   "node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/runtime/ucs2length.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    function ucs2length(str2) {
-      const len = str2.length;
+    function ucs2length(str3) {
+      const len = str3.length;
       let length = 0;
       let pos = 0;
       let value;
       while (pos < len) {
         length++;
-        value = str2.charCodeAt(pos++);
+        value = str3.charCodeAt(pos++);
         if (value >= 55296 && value <= 56319 && pos < len) {
-          value = str2.charCodeAt(pos);
+          value = str3.charCodeAt(pos);
           if ((value & 64512) === 56320)
             pos++;
         }
@@ -7534,8 +7534,8 @@ var require_formats = __commonJS({
     }
     var DATE = /^(\d\d\d\d)-(\d\d)-(\d\d)$/;
     var DAYS = [0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
-    function date5(str2) {
-      const matches = DATE.exec(str2);
+    function date5(str3) {
+      const matches = DATE.exec(str3);
       if (!matches)
         return false;
       const year = +matches[1];
@@ -7554,8 +7554,8 @@ var require_formats = __commonJS({
     }
     var TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
     function getTime(strictTimeZone) {
-      return function time3(str2) {
-        const matches = TIME.exec(str2);
+      return function time3(str3) {
+        const matches = TIME.exec(str3);
         if (!matches)
           return false;
         const hr = +matches[1];
@@ -7601,8 +7601,8 @@ var require_formats = __commonJS({
     var DATE_TIME_SEPARATOR = /t|\s/i;
     function getDateTime(strictTimeZone) {
       const time3 = getTime(strictTimeZone);
-      return function date_time(str2) {
-        const dateTime = str2.split(DATE_TIME_SEPARATOR);
+      return function date_time(str3) {
+        const dateTime = str3.split(DATE_TIME_SEPARATOR);
         return dateTime.length === 2 && date5(dateTime[0]) && time3(dateTime[1]);
       };
     }
@@ -7627,13 +7627,13 @@ var require_formats = __commonJS({
     }
     var NOT_URI_FRAGMENT = /\/|:/;
     var URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-    function uri(str2) {
-      return NOT_URI_FRAGMENT.test(str2) && URI.test(str2);
+    function uri(str3) {
+      return NOT_URI_FRAGMENT.test(str3) && URI.test(str3);
     }
     var BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-    function byte(str2) {
+    function byte(str3) {
       BYTE.lastIndex = 0;
-      return BYTE.test(str2);
+      return BYTE.test(str3);
     }
     var MIN_INT32 = -(2 ** 31);
     var MAX_INT32 = 2 ** 31 - 1;
@@ -7647,11 +7647,11 @@ var require_formats = __commonJS({
       return true;
     }
     var Z_ANCHOR = /[^\\]\\Z/;
-    function regex(str2) {
-      if (Z_ANCHOR.test(str2))
+    function regex(str3) {
+      if (Z_ANCHOR.test(str3))
         return false;
       try {
-        new RegExp(str2);
+        new RegExp(str3);
         return true;
       } catch (e) {
         return false;
@@ -8024,13 +8024,13 @@ var require_dist = __commonJS({
 });
 
 // src/cli/bin.ts
-import { readFileSync as readFileSync7 } from "node:fs";
+import { readFileSync as readFileSync8 } from "node:fs";
 
 // src/spec/jcs.ts
 import { createHash } from "node:crypto";
 
 // src/spec/constants.ts
-var SPEC_VERSION = "0.1.8";
+var SPEC_VERSION = "0.1.9";
 var BLOCK_VERSION = "0.1";
 var SUPPORTED_BLOCK_VERSIONS = [BLOCK_VERSION];
 var BLOCK_INFO_STRING = "dunstan-handback";
@@ -8057,11 +8057,11 @@ var NUMBER = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/y;
 function escapePointerToken(token) {
   return token.replaceAll("~", "~0").replaceAll("/", "~1");
 }
-function isWellFormedUtf16(text) {
-  for (let i = 0; i < text.length; i++) {
-    const unit = text.charCodeAt(i);
+function isWellFormedUtf16(text2) {
+  for (let i = 0; i < text2.length; i++) {
+    const unit = text2.charCodeAt(i);
     if (unit >= 55296 && unit <= 56319) {
-      const next = text.charCodeAt(i + 1);
+      const next = text2.charCodeAt(i + 1);
       if (!(next >= 56320 && next <= 57343)) return false;
       i++;
     } else if (unit >= 56320 && unit <= 57343) {
@@ -8070,14 +8070,14 @@ function isWellFormedUtf16(text) {
   }
   return true;
 }
-function parseStrictJson(text) {
+function parseStrictJson(text2) {
   let pos = 0;
   const fail2 = (message) => {
     throw new JsonReadError("invalid_json", `${message} at offset ${pos}`);
   };
   const skipWhitespace = () => {
-    while (pos < text.length) {
-      const c = text[pos];
+    while (pos < text2.length) {
+      const c = text2[pos];
       if (c === " " || c === "	" || c === "\n" || c === "\r") pos++;
       else break;
     }
@@ -8086,8 +8086,8 @@ function parseStrictJson(text) {
     pos++;
     let out = "";
     while (true) {
-      if (pos >= text.length) fail2("unterminated string");
-      const c = text[pos];
+      if (pos >= text2.length) fail2("unterminated string");
+      const c = text2[pos];
       const unit = c.charCodeAt(0);
       if (c === '"') {
         pos++;
@@ -8099,7 +8099,7 @@ function parseStrictJson(text) {
         pos++;
         continue;
       }
-      const e = text[pos + 1];
+      const e = text2[pos + 1];
       pos += 2;
       switch (e) {
         case '"':
@@ -8127,7 +8127,7 @@ function parseStrictJson(text) {
           out += "	";
           break;
         case "u": {
-          const hex3 = text.slice(pos, pos + 4);
+          const hex3 = text2.slice(pos, pos + 4);
           if (!/^[0-9a-fA-F]{4}$/.test(hex3)) fail2("bad \\u escape");
           out += String.fromCharCode(Number.parseInt(hex3, 16));
           pos += 4;
@@ -8143,26 +8143,26 @@ function parseStrictJson(text) {
   };
   const readValue = (pointer, depth) => {
     skipWhitespace();
-    const c = text[pos];
+    const c = text2[pos];
     if (c === "{" || c === "[") {
       if (depth + 1 > MAX_BLOCK_DEPTH) fail2(`nesting deeper than ${MAX_BLOCK_DEPTH}`);
       return c === "{" ? readObject(pointer, depth + 1) : readArray(pointer, depth + 1);
     }
     if (c === '"') return readString();
-    if (text.startsWith("true", pos)) {
+    if (text2.startsWith("true", pos)) {
       pos += 4;
       return true;
     }
-    if (text.startsWith("false", pos)) {
+    if (text2.startsWith("false", pos)) {
       pos += 5;
       return false;
     }
-    if (text.startsWith("null", pos)) {
+    if (text2.startsWith("null", pos)) {
       pos += 4;
       return null;
     }
     NUMBER.lastIndex = pos;
-    const match = NUMBER.exec(text);
+    const match = NUMBER.exec(text2);
     if (match === null) return fail2("unexpected character");
     pos += match[0].length;
     const n = Number(match[0]);
@@ -8173,14 +8173,14 @@ function parseStrictJson(text) {
     pos++;
     const out = [];
     skipWhitespace();
-    if (text[pos] === "]") {
+    if (text2[pos] === "]") {
       pos++;
       return out;
     }
     while (true) {
       out.push(readValue(`${pointer}/${out.length}`, depth));
       skipWhitespace();
-      const c = text[pos];
+      const c = text2[pos];
       pos++;
       if (c === "]") return out;
       if (c !== ",") {
@@ -8194,13 +8194,13 @@ function parseStrictJson(text) {
     const entries = [];
     const seen = /* @__PURE__ */ new Set();
     skipWhitespace();
-    if (text[pos] === "}") {
+    if (text2[pos] === "}") {
       pos++;
       return {};
     }
     while (true) {
       skipWhitespace();
-      if (text[pos] !== '"') fail2("expected a member name");
+      if (text2[pos] !== '"') fail2("expected a member name");
       const key = readString();
       const memberPointer = `${pointer}/${escapePointerToken(key)}`;
       if (seen.has(key)) {
@@ -8212,11 +8212,11 @@ function parseStrictJson(text) {
       }
       seen.add(key);
       skipWhitespace();
-      if (text[pos] !== ":") fail2("expected ':'");
+      if (text2[pos] !== ":") fail2("expected ':'");
       pos++;
       entries.push([key, readValue(memberPointer, depth)]);
       skipWhitespace();
-      const c = text[pos];
+      const c = text2[pos];
       pos++;
       if (c === "}") return Object.fromEntries(entries);
       if (c !== ",") {
@@ -8227,7 +8227,7 @@ function parseStrictJson(text) {
   };
   const value = readValue("", 0);
   skipWhitespace();
-  if (pos !== text.length) fail2("unexpected content after the JSON value");
+  if (pos !== text2.length) fail2("unexpected content after the JSON value");
   return value;
 }
 
@@ -8421,10 +8421,10 @@ function findReference(evidence, kind, ref) {
     (r) => r.kind === kind && (kind === "issue" ? sameIssue(r.ref, ref) : r.ref === ref)
   );
 }
-function closedBy(reference, field, evidence, repository, at, observed) {
+function closedBy(reference, field, evidence, repository, at2, observed) {
   const pr = evidence.pullRequest;
   const section = evidence.closeEvents;
-  const target = section?.targets.find((t) => sameIssue(t.ref, at));
+  const target = section?.targets.find((t) => sameIssue(t.ref, at2));
   const side = section?.pullRequest;
   let unread2;
   if (section === void 0 || target === void 0) unread2 = absentSection("closeEvents");
@@ -8468,10 +8468,10 @@ function closedBy(reference, field, evidence, repository, at, observed) {
     "not_closing"
   );
 }
-function closesBlock(issue2, headCommit) {
+function closesBlock(issue2, headCommit2) {
   return {
     dunstan: BLOCK_VERSION,
-    headCommit,
+    headCommit: headCommit2,
     filesChanged: [],
     references: [{ issue: issue2, relation: "closes" }]
   };
@@ -8559,11 +8559,10 @@ function checkTests(block, evidence) {
     const countField = `/tests/${i}/count`;
     const failuresField = `/tests/${i}/failures`;
     if (test.record.kind !== "junit") {
-      rows.push(unverifiable("count", countField, test.count, "no_comparable_record_field"));
+      const reason = test.record.kind === "local" ? "local_run_not_in_record" : "no_comparable_record_field";
+      rows.push(unverifiable("count", countField, test.count, reason));
       if (test.failures !== void 0) {
-        rows.push(
-          unverifiable("count", failuresField, test.failures, "no_comparable_record_field")
-        );
+        rows.push(unverifiable("count", failuresField, test.failures, reason));
       }
       return;
     }
@@ -8617,7 +8616,7 @@ function countedCheckRuns(runs, excludedIds) {
   return [...latest.values()].filter((run) => !excluded.has(run.id) && !superseded(run)).sort((a, b) => a.id - b.id);
 }
 var NOT_FAILED_CONCLUSIONS = ["success", "skipped", "neutral"];
-function booleanRow(field, declared, reason, runs, failed, mismatch, unsettled) {
+function booleanRow(field, declared, reason, runs, failed, mismatch, unsettled2) {
   if (reason !== void 0) return unverifiable("count", field, declared, reason);
   if (runs.length === 0) return unverifiable("count", field, declared, "no_check_runs");
   let observed;
@@ -8625,7 +8624,7 @@ function booleanRow(field, declared, reason, runs, failed, mismatch, unsettled)
   else if (runs.some((r) => r.status !== "completed")) {
     return unverifiable("count", field, declared, "checks_incomplete");
   } else {
-    const why = unsettled?.(runs);
+    const why = unsettled2?.(runs);
     if (why !== void 0) return unverifiable("count", field, declared, why);
     observed = true;
   }
@@ -8688,8 +8687,8 @@ function checkMergedAt(block, evidence) {
   }
   return toSecond(declared) < toSecond(pr.mergedAt) ? [fail("time", "/mergedAt", declared, pr.mergedAt, "premature")] : [pass("time", "/mergedAt", declared, pr.mergedAt)];
 }
-function earliestSuccess(section, relations, at) {
-  const times = section.deployments.filter((d) => relations.includes(d.relation) && d.successAt !== null).map((d) => d.successAt).filter((t) => toSecond(t) <= toSecond(at)).sort((a, b) => compareCodeUnits(toSecond(a), toSecond(b)) || compareCodeUnits(a, b));
+function earliestSuccess(section, relations, at2) {
+  const times = section.deployments.filter((d) => relations.includes(d.relation) && d.successAt !== null).map((d) => d.successAt).filter((t) => toSecond(t) <= toSecond(at2)).sort((a, b) => compareCodeUnits(toSecond(a), toSecond(b)) || compareCodeUnits(a, b));
   return times[0];
 }
 function checkDeployedAt(block, evidence) {
@@ -8731,21 +8730,27 @@ var JunitError = class extends Error {
     this.name = "JunitError";
   }
 };
+function countJunit(xml) {
+  const { executed, failed } = scanJunit(xml);
+  return { executed, failed };
+}
 var NAME = /[A-Za-z_:][-A-Za-z0-9_:.]*/y;
 var ENTITY = /&(?:lt|gt|amp|quot|apos|#[0-9]+|#x[0-9A-Fa-f]+);/y;
-function countJunit(xml) {
+function scanJunit(xml) {
   let pos = xml.startsWith("\uFEFF") ? 1 : 0;
   const stack = [];
   let roots = 0;
   let executed = 0;
   let failed = 0;
+  let tagStart = 0;
+  let root;
   const fail2 = (message) => {
     throw new JunitError(`${message} at offset ${pos}`);
   };
-  const checkText = (text, start) => {
-    for (let i = text.indexOf("&"); i !== -1; i = text.indexOf("&", i + 1)) {
+  const checkText = (text2, start) => {
+    for (let i = text2.indexOf("&"); i !== -1; i = text2.indexOf("&", i + 1)) {
       ENTITY.lastIndex = i;
-      if (!ENTITY.test(text)) {
+      if (!ENTITY.test(text2)) {
         pos = start + i;
         fail2("bad entity reference");
       }
@@ -8766,6 +8771,13 @@ function countJunit(xml) {
       roots++;
       if (roots > 1) fail2("more than one root element");
       if (name !== "testsuites" && name !== "testsuite") fail2(`root element is <${name}>`);
+      root = {
+        name,
+        start: tagStart,
+        end: pos,
+        contentStart: pos,
+        contentEnd: pos
+      };
     }
     const parent = stack.at(-1);
     if (parent?.testcase !== void 0) {
@@ -8784,16 +8796,21 @@ function countJunit(xml) {
       executed++;
       if (testcase.failed) failed++;
     }
+    if (stack.length === 0 && root !== void 0 && root.end < pos) {
+      root.contentEnd = tagStart;
+      root.end = pos;
+    }
   };
   while (pos < xml.length) {
     const lt = xml.indexOf("<", pos);
     const textEnd = lt === -1 ? xml.length : lt;
-    const text = xml.slice(pos, textEnd);
-    if (stack.length === 0 && text.trim() !== "") fail2("text outside the root element");
-    checkText(text, pos);
-    if (text.includes("]]>")) fail2("']]>' in text");
+    const text2 = xml.slice(pos, textEnd);
+    if (stack.length === 0 && text2.trim() !== "") fail2("text outside the root element");
+    checkText(text2, pos);
+    if (text2.includes("]]>")) fail2("']]>' in text");
     pos = textEnd;
     if (lt === -1) break;
+    tagStart = pos;
     if (xml.startsWith("<!--", pos)) {
       const end = xml.indexOf("-->", pos + 4);
       if (end === -1) fail2("unterminated comment");
@@ -8854,8 +8871,8 @@ function countJunit(xml) {
     }
   }
   if (stack.length > 0) fail2(`unclosed <${stack.at(-1)?.name}>`);
-  if (roots === 0) fail2("no root element");
-  return { executed, failed };
+  if (roots === 0 || root === void 0) return fail2("no root element");
+  return { executed, failed, root };
 }
 
 // src/evidence/zip.ts
@@ -8975,11 +8992,11 @@ function splitRepo(repository) {
   return { owner, name };
 }
 function timestamp(value) {
-  const text = str(value);
-  if (!/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]+)?Z$/.test(text)) {
+  const text2 = str(value);
+  if (!/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]+)?Z$/.test(text2)) {
     throw new ShapeError();
   }
-  return text;
+  return text2;
 }
 function timestampOrNull(value) {
   return value === null || value === void 0 ? null : timestamp(value);
@@ -9220,10 +9237,10 @@ async function readGraphqlPages(client, kind, locator, query, variables, budget,
   let head;
   let after = null;
   for (let n = 1; n <= budget; n++) {
-    const at = `${locator}${after === null ? "" : `(after:${after})`}`;
+    const at2 = `${locator}${after === null ? "" : `(after:${after})`}`;
     const read = await client.read(kind, "/graphql", {
       method: "POST",
-      locator: at,
+      locator: at2,
       requestBody: JSON.stringify({ query, variables: { ...variables, after } })
     });
     if (!read.ok) return unreadable(kind);
@@ -9239,7 +9256,7 @@ async function readGraphqlPages(client, kind, locator, query, variables, budget,
       after = str(info.endCursor);
     } catch (e) {
       if (!(e instanceof ShapeError)) throw e;
-      client.markParseError(at);
+      client.markParseError(at2);
       return unreadable(kind);
     }
   }
@@ -9291,17 +9308,17 @@ var TARGET_STATES = {
 };
 function closeEvent(node2) {
   const n = obj(node2);
-  const at = timestamp(n.createdAt);
-  if (n.closer === null) return { at, closer: null };
+  const at2 = timestamp(n.createdAt);
+  if (n.closer === null) return { at: at2, closer: null };
   const closer = obj(n.closer);
   const type = str(closer.__typename);
   if (type === "PullRequest") {
     const ref = `${str(obj(closer.repository).nameWithOwner)}#${int(closer.number)}`;
     if (!ISSUE_REF.test(ref)) throw new ShapeError();
-    return { at, closer: { kind: "pull_request", ref } };
+    return { at: at2, closer: { kind: "pull_request", ref } };
   }
-  if (type === "Commit") return { at, closer: { kind: "commit", oid: commitOid(closer.oid) } };
-  return { at, closer: { kind: "other" } };
+  if (type === "Commit") return { at: at2, closer: { kind: "commit", oid: commitOid(closer.oid) } };
+  return { at: at2, closer: { kind: "other" } };
 }
 async function readCloseTarget(client, ref) {
   const [repo, num] = ref.split("#");
@@ -9342,9 +9359,9 @@ function closeTargets(block, repository, closing, references) {
     if (listed2(target)) continue;
     const entry = references?.find((r) => r.kind === "issue" && sameIssue(r.ref, target));
     if (entry?.kind !== "issue" || entry.status !== "ok" || !entry.exists) continue;
-    const at = entry.resolvedAs ?? target;
-    if (listed2(at) || out.some((o) => sameIssue(o, at))) continue;
-    out.push(at);
+    const at2 = entry.resolvedAs ?? target;
+    if (listed2(at2) || out.some((o) => sameIssue(o, at2))) continue;
+    out.push(at2);
   }
   return out;
 }
@@ -9584,9 +9601,9 @@ function withinLatestAttempt(jobs, run, createdAt) {
     (job) => (job.attempt === null || job.attempt <= run.attempt) && job.startedAt !== null && job.completedAt !== null && second(job.startedAt) <= created && created <= second(job.completedAt)
   );
 }
-async function readTestRecord(client, repository, record2, headCommit) {
+async function readTestRecord(client, repository, record2, headCommit2, observed) {
   const workflowFile = record2.workflow.split("/").at(-1);
-  const runsPath = (page) => `/repos/${repository}/actions/workflows/${encodeURIComponent(workflowFile)}/runs?head_sha=${headCommit}&per_page=${PER_PAGE}&page=${page}`;
+  const runsPath = (page) => `/repos/${repository}/actions/workflows/${encodeURIComponent(workflowFile)}/runs?head_sha=${headCommit2}&per_page=${PER_PAGE}&page=${page}`;
   const listed2 = await readAllPages(
     client,
     "workflow_runs",
@@ -9594,12 +9611,24 @@ async function readTestRecord(client, repository, record2, headCommit) {
     (json2) => arr(obj(json2).workflow_runs),
     (item) => {
       const r = obj(item);
-      return { id: int(r.id), attempt: int(r.run_attempt), path: str(r.path) };
+      return {
+        id: int(r.id),
+        attempt: int(r.run_attempt),
+        path: str(r.path),
+        // Read only for `observed`, and never a shape error: a status that is not a string is not
+        // `completed`.
+        completed: r.status === "completed"
+      };
     },
     // No workflow with that file name: there is no run, so no candidate run.
     { notFoundIsEmpty: true }
   );
   if (listed2 === null) return { record: record2, ...unreadable("workflow_runs") };
+  if (observed !== void 0) {
+    observed.runsNotCompleted = listed2.filter(
+      (r) => r.path.replace(/@.*$/, "") === record2.workflow && !r.completed
+    ).length;
+  }
   const runs = [];
   for (const run of listed2.filter((r) => r.path.replace(/@.*$/, "") === record2.workflow)) {
     const jobs = await readAllPages(
@@ -9691,7 +9720,7 @@ async function readDeployments(client, repository, pr, deployedAt) {
   for (const d of ofHead) candidates.set(d.id, d);
   if (pr.merged && pr.mergedAt !== null && pr.mergeSha !== null) {
     const mergedAt = second(pr.mergedAt);
-    const at = second(deployedAt.at);
+    const at2 = second(deployedAt.at);
     const window = await readAllPages(
       client,
       "deployments",
@@ -9703,7 +9732,7 @@ async function readDeployments(client, repository, pr, deployedAt) {
     if (window === null) return fail2("deployments");
     for (const d of window) {
       const created = second(d.createdAt);
-      if (created >= mergedAt && created <= at) candidates.set(d.id, d);
+      if (created >= mergedAt && created <= at2) candidates.set(d.id, d);
     }
   }
   const deployments = [];
@@ -9852,7 +9881,7 @@ async function reportFromComment(client, repository, number4, login) {
 // src/record/checker.ts
 import { readFileSync } from "node:fs";
 var CHECKER_NAME = "dunstan";
-var CHECKER_VERSION = "0.1.12";
+var CHECKER_VERSION = "0.1.14";
 function checkerIdentity(artifact) {
   return {
     name: CHECKER_NAME,
@@ -9962,16 +9991,35 @@ var FILES = { "handback-block-0.1.schema.json": `{
       }
     },
     "testRecord": {
-      "description": "Names the machine-readable test record a count is compared with. v0.1 defines the junit kind. Any other kind is legal and yields an unverifiable claim.",
+      "description": "Names the machine-readable test record a count is compared with. v0.1 defines the junit kind and, since spec 0.1.9, the local kind. Any other kind is legal and yields an unverifiable claim.",
       "type": "object",
       "required": ["kind"],
       "properties": {
         "kind": { "type": "string", "minLength": 1, "maxLength": 100 }
       },
-      "if": {
-        "properties": { "kind": { "const": "junit" } }
-      },
-      "then": { "$ref": "#/$defs/junitRecord" }
+      "allOf": [
+        {
+          "if": {
+            "properties": { "kind": { "const": "junit" } }
+          },
+          "then": { "$ref": "#/$defs/junitRecord" }
+        },
+        {
+          "if": {
+            "properties": { "kind": { "const": "local" } }
+          },
+          "then": { "$ref": "#/$defs/localRecord" }
+        }
+      ]
+    },
+    "localRecord": {
+      "description": "Counts from a run that left no record in CI, declared as such (spec 0.1.9). Exactly the kind; its claims are unverifiable with local_run_not_in_record.",
+      "type": "object",
+      "required": ["kind"],
+      "additionalProperties": false,
+      "properties": {
+        "kind": { "const": "local" }
+      }
     },
     "junitRecord": {
       "type": "object",
@@ -10029,7 +10077,7 @@ var FILES = { "handback-block-0.1.schema.json": `{
     }
   }
 }
-`, "record-0.1.schema.json": '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://barglabs.ai/dunstan/spec/schema/record-0.1.schema.json",\n  "title": "Dunstan record, v0.1",\n  "description": "An in-toto Statement v1 whose predicate records one check of a handback block against the record. See spec/claim-format.md.",\n  "type": "object",\n  "required": ["_type", "subject", "predicateType", "predicate"],\n  "additionalProperties": false,\n  "properties": {\n    "_type": { "const": "https://in-toto.io/Statement/v1" },\n    "subject": {\n      "type": "array",\n      "minItems": 1,\n      "maxItems": 2,\n      "prefixItems": [{ "$ref": "#/$defs/commitSubject" }, { "$ref": "#/$defs/blockSubject" }],\n      "items": false\n    },\n    "predicateType": { "const": "https://barglabs.ai/dunstan/record/v0.1" },\n    "predicate": { "$ref": "#/$defs/predicate" }\n  },\n  "allOf": [\n    {\n      "if": {\n        "properties": {\n          "predicate": {\n            "properties": { "block": { "properties": { "status": { "const": "found" } } } }\n          }\n        }\n      },\n      "then": { "properties": { "subject": { "minItems": 2 } } },\n      "else": { "properties": { "subject": { "maxItems": 1 } } }\n    }\n  ],\n  "$defs": {\n    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },\n    "commitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },\n    "repository": {\n      "description": "owner/repo",\n      "type": "string",\n      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/[A-Za-z0-9._-]{1,100}$"\n    },\n    "issueRef": {\n      "description": "owner/repo#N, always fully qualified in evidence.",\n      "type": "string",\n      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,9}$"\n    },\n    "timestamp": {\n      "type": "string",\n      "format": "date-time",\n      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\\\.[0-9]+)?Z$"\n    },\n    "sourceKind": {\n      "enum": [\n        "pull_request",\n        "pull_request_files",\n        "pull_request_commits",\n        "closing_references",\n        "repository",\n        "issue",\n        "commit",\n        "compare",\n        "check_runs",\n        "workflow_runs",\n        "artifact",\n        "deployments"\n      ]\n    },\n    "commitSubject": {\n      "type": "object",\n      "required": ["name", "digest"],\n      "additionalProperties": false,\n      "properties": {\n        "name": {\n          "type": "string",\n          "pattern": "^git\\\\+https://github\\\\.com/[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/[A-Za-z0-9._-]{1,100}@[0-9a-f]{40}$"\n        },\n        "digest": {\n          "type": "object",\n          "required": ["gitCommit"],\n          "additionalProperties": false,\n          "properties": { "gitCommit": { "$ref": "#/$defs/commitSha" } }\n        }\n      }\n    },\n    "blockSubject": {\n      "type": "object",\n      "required": ["name", "digest"],\n      "additionalProperties": false,\n      "properties": {\n        "name": { "const": "handback-block" },\n        "digest": {\n          "type": "object",\n          "required": ["sha256"],\n          "additionalProperties": false,\n          "properties": { "sha256": { "$ref": "#/$defs/sha256" } }\n        }\n      }\n    },\n    "predicate": {\n      "type": "object",\n      "required": [\n        "spec",\n        "checker",\n        "report",\n        "block",\n        "subject",\n        "evidence",\n        "claims",\n        "verdict",\n        "digests",\n        "rerun",\n        "assurance"\n      ],\n      "additionalProperties": false,\n      "properties": {\n        "spec": {\n          "description": "The spec version the checker implements, semver.",\n          "type": "string",\n          "pattern": "^0\\\\.1\\\\.(?:0|[1-9][0-9]*)$"\n        },\n        "checker": {\n          "type": "object",\n          "required": ["name", "version", "digest"],\n          "additionalProperties": false,\n          "properties": {\n            "name": { "type": "string", "minLength": 1, "maxLength": 214 },\n            "version": { "type": "string", "minLength": 1, "maxLength": 100 },\n            "digest": {\n              "type": "object",\n              "required": ["sha256"],\n              "additionalProperties": false,\n              "properties": { "sha256": { "$ref": "#/$defs/sha256" } }\n            }\n          }\n        },\n        "report": {\n          "description": "The report\'s digest and where it was read. Never its text.",\n          "type": "object",\n          "required": ["sha256", "source"],\n          "additionalProperties": false,\n          "properties": {\n            "sha256": { "$ref": "#/$defs/sha256" },\n            "source": {\n              "type": "object",\n              "required": ["kind", "locator"],\n              "additionalProperties": false,\n              "properties": {\n                "kind": { "enum": ["pr-body", "pr-comment", "file", "stdin", "api"] },\n                "locator": { "type": "string", "minLength": 1, "maxLength": 2000 }\n              }\n            }\n          }\n        },\n        "block": { "$ref": "#/$defs/block" },\n        "subject": {\n          "type": "object",\n          "required": ["repository", "pullRequest", "headSha", "mergeSha"],\n          "additionalProperties": false,\n          "properties": {\n            "repository": { "$ref": "#/$defs/repository" },\n            "pullRequest": { "type": "integer", "minimum": 1 },\n            "headSha": { "$ref": "#/$defs/commitSha" },\n            "mergeSha": {\n              "oneOf": [{ "$ref": "#/$defs/commitSha" }, { "type": "null" }]\n            }\n          }\n        },\n        "evidence": { "$ref": "#/$defs/evidence" },\n        "claims": {\n          "type": "array",\n          "items": { "$ref": "#/$defs/claim" }\n        },\n        "verdict": { "$ref": "#/$defs/verdict" },\n        "digests": {\n          "type": "object",\n          "required": ["claims", "evidence"],\n          "additionalProperties": false,\n          "properties": {\n            "claims": { "$ref": "#/$defs/sha256" },\n            "evidence": { "$ref": "#/$defs/sha256" }\n          }\n        },\n        "rerun": {\n          "type": "object",\n          "required": ["offline", "online"],\n          "additionalProperties": false,\n          "properties": {\n            "offline": { "type": "string", "minLength": 1, "maxLength": 2000 },\n            "online": { "type": "string", "minLength": 1, "maxLength": 2000 }\n          }\n        },\n        "assurance": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "issuer"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "unsigned" },\n                "issuer": { "const": "self-generated" }\n              }\n            },\n            {\n              "type": "object",\n              "required": ["status", "issuer", "keyFingerprint"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "signed" },\n                "issuer": { "type": "string", "minLength": 1, "maxLength": 320 },\n                "keyFingerprint": { "type": "string", "pattern": "^SHA256:[A-Za-z0-9+/]{43}$" }\n              }\n            }\n          ]\n        }\n      }\n    },\n    "verdict": { "enum": ["pass", "fail", "unverifiable"] },\n    "blockError": {\n      "type": "object",\n      "required": ["code"],\n      "additionalProperties": false,\n      "properties": {\n        "code": {\n          "enum": [\n            "unterminated_fence",\n            "invalid_json",\n            "duplicate_member",\n            "unsupported_version",\n            "schema_violation"\n          ]\n        },\n        "pointer": { "type": "string", "pattern": "^(?:/.*)?$" },\n        "keyword": { "type": "string", "minLength": 1 }\n      }\n    },\n    "block": {\n      "oneOf": [\n        {\n          "type": "object",\n          "required": ["status", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "found" },\n            "sha256": { "$ref": "#/$defs/sha256" },\n            "value": { "$ref": "handback-block-0.1.schema.json" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "reason", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "missing" },\n            "reason": { "const": "block_missing" },\n            "sha256": { "type": "null" },\n            "value": { "type": "null" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "reason", "count", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "ambiguous" },\n            "reason": { "const": "block_ambiguous" },\n            "count": { "type": "integer", "minimum": 2 },\n            "sha256": { "type": "null" },\n            "value": { "type": "null" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "reason", "errors", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "invalid" },\n            "reason": { "const": "block_invalid" },\n            "errors": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/blockError" } },\n            "sha256": { "type": "null" },\n            "value": { "type": "null" }\n          }\n        }\n      ]\n    },\n    "claim": {\n      "type": "object",\n      "required": ["id", "check", "field", "declared", "observed", "verdict"],\n      "additionalProperties": false,\n      "properties": {\n        "id": { "type": "string", "minLength": 1 },\n        "check": { "enum": ["head", "scope", "reference", "count", "time"] },\n        "field": {\n          "description": "A JSON Pointer (RFC 6901) into the block.",\n          "type": "string",\n          "pattern": "^/.+$"\n        },\n        "declared": true,\n        "observed": true,\n        "verdict": { "$ref": "#/$defs/verdict" },\n        "reason": { "$ref": "#/$defs/claimReason" }\n      },\n      "if": { "properties": { "verdict": { "const": "pass" } } },\n      "then": { "not": { "required": ["reason"] } },\n      "else": { "required": ["reason"] }\n    },\n    "claimReason": {\n      "type": "string",\n      "pattern": "^(?:head_mismatch|declared_not_changed|undeclared_file|file_list_truncated|not_closing|closing_link_unsettled|closing_base_not_default|closing_event_unsettled|not_found|not_reachable|count_mismatch|all_succeeded_mismatch|none_failed_mismatch|checks_incomplete|no_check_runs|no_succeeded_check_runs|check_runs_not_at_head|no_comparable_record_field|record_not_found|record_ambiguous|not_merged|premature|no_deployment|evidence_field_unpopulated:[A-Za-z0-9_.]+|source_unreadable:(?:pull_request|pull_request_files|pull_request_commits|closing_references|repository|issue|commit|compare|check_runs|workflow_runs|artifact|deployments))$"\n    },\n    "unread": {\n      "description": "A section the checker could not use: its source errored, or the source answered without the field.",\n      "oneOf": [\n        {\n          "type": "object",\n          "required": ["status", "source"],\n          "properties": {\n            "status": { "const": "unreadable" },\n            "source": { "$ref": "#/$defs/sourceKind" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "field"],\n          "properties": {\n            "status": { "const": "unpopulated" },\n            "field": { "type": "string", "pattern": "^[A-Za-z0-9_.]+$" }\n          }\n        }\n      ]\n    },\n    "evidence": {\n      "type": "object",\n      "required": ["pullRequest", "sources"],\n      "additionalProperties": false,\n      "properties": {\n        "pullRequest": {\n          "description": "Always read: a checker that cannot read the pull request writes no record.",\n          "type": "object",\n          "required": [\n            "status",\n            "number",\n            "state",\n            "merged",\n            "mergedAt",\n            "headSha",\n            "mergeSha",\n            "changedFiles"\n          ],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "ok" },\n            "number": { "type": "integer", "minimum": 1 },\n            "state": { "enum": ["open", "closed"] },\n            "merged": { "type": "boolean" },\n            "mergedAt": { "oneOf": [{ "$ref": "#/$defs/timestamp" }, { "type": "null" }] },\n            "headSha": { "$ref": "#/$defs/commitSha" },\n            "mergeSha": { "oneOf": [{ "$ref": "#/$defs/commitSha" }, { "type": "null" }] },\n            "changedFiles": { "type": "integer", "minimum": 0 }\n          }\n        },\n        "files": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "complete", "entries"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "ok" },\n                "complete": { "type": "boolean" },\n                "entries": {\n                  "type": "array",\n                  "items": {\n                    "type": "object",\n                    "required": ["path", "status"],\n                    "additionalProperties": false,\n                    "properties": {\n                      "path": { "type": "string", "minLength": 1 },\n                      "status": {\n                        "enum": [\n                          "added",\n                          "removed",\n                          "modified",\n                          "renamed",\n                          "copied",\n                          "changed",\n                          "unchanged"\n                        ]\n                      },\n                      "previousPath": { "type": "string", "minLength": 1 }\n                    }\n                  }\n                }\n              }\n            },\n            { "$ref": "#/$defs/unreadOnly" }\n          ]\n        },\n        "closingReferences": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "issues"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "ok" },\n                "issues": { "type": "array", "items": { "$ref": "#/$defs/issueRef" } }\n              }\n            },\n            { "$ref": "#/$defs/unreadOnly" }\n          ]\n        },\n        "references": {\n          "type": "array",\n          "items": {\n            "oneOf": [\n              {\n                "type": "object",\n                "required": ["kind", "ref", "status", "exists"],\n                "additionalProperties": false,\n                "properties": {\n                  "kind": { "const": "issue" },\n                  "ref": { "$ref": "#/$defs/issueRef" },\n                  "status": { "const": "ok" },\n                  "exists": { "type": "boolean" },\n                  "resolvedAs": {\n                    "description": "Spec 0.1.3: the owner/repo#N GitHub answered the read of ref with, when it is another issue (an issue transferred to another repository).",\n                    "$ref": "#/$defs/issueRef"\n                  }\n                },\n                "if": { "required": ["resolvedAs"] },\n                "then": { "properties": { "exists": { "const": true } } }\n              },\n              {\n                "type": "object",\n                "required": ["kind", "ref", "status", "exists", "reachableFromHead"],\n                "additionalProperties": false,\n                "properties": {\n                  "kind": { "const": "commit" },\n                  "ref": { "$ref": "#/$defs/commitSha" },\n                  "status": { "const": "ok" },\n                  "exists": { "type": "boolean" },\n                  "reachableFromHead": { "type": "boolean" }\n                }\n              },\n              {\n                "type": "object",\n                "required": ["kind", "ref"],\n                "properties": {\n                  "kind": { "enum": ["issue", "commit"] },\n                  "ref": { "type": "string", "minLength": 1 }\n                },\n                "allOf": [{ "$ref": "#/$defs/unread" }]\n              }\n            ]\n          }\n        },\n        "closeEvents": {\n          "description": "Spec 0.1.4: who closed each closes target that exists and is not among the closing references, read under the identity it resolves to; and the pull request\'s base, its repository\'s default branch and its commit ids.",\n          "type": "object",\n          "required": ["pullRequest", "targets"],\n          "additionalProperties": false,\n          "properties": {\n            "pullRequest": {\n              "oneOf": [\n                {\n                  "type": "object",\n                  "required": ["status", "baseRef", "defaultBranch", "commits"],\n                  "additionalProperties": false,\n                  "properties": {\n                    "status": { "const": "ok" },\n                    "baseRef": { "type": "string", "minLength": 1 },\n                    "defaultBranch": {\n                      "oneOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]\n                    },\n                    "commits": {\n                      "type": "array",\n                      "uniqueItems": true,\n                      "items": { "$ref": "#/$defs/commitSha" }\n                    }\n                  }\n                },\n                { "$ref": "#/$defs/unreadOnly" }\n              ]\n            },\n            "targets": {\n              "type": "array",\n              "items": {\n                "oneOf": [\n                  {\n                    "type": "object",\n                    "required": ["ref", "status", "type", "state", "events"],\n                    "additionalProperties": false,\n                    "properties": {\n                      "ref": { "$ref": "#/$defs/issueRef" },\n                      "status": { "const": "ok" },\n                      "type": { "enum": ["issue", "pull_request"] },\n                      "state": { "enum": ["open", "closed", "merged"] },\n                      "events": {\n                        "type": "array",\n                        "items": {\n                          "type": "object",\n                          "required": ["at", "closer"],\n                          "additionalProperties": false,\n                          "properties": {\n                            "at": { "$ref": "#/$defs/timestamp" },\n                            "closer": {\n                              "oneOf": [\n                                { "type": "null" },\n                                {\n                                  "type": "object",\n                                  "required": ["kind", "ref"],\n                                  "additionalProperties": false,\n                                  "properties": {\n                                    "kind": { "const": "pull_request" },\n                                    "ref": { "$ref": "#/$defs/issueRef" }\n                                  }\n                                },\n                                {\n                                  "type": "object",\n                                  "required": ["kind", "oid"],\n                                  "additionalProperties": false,\n                                  "properties": {\n                                    "kind": { "const": "commit" },\n                                    "oid": { "$ref": "#/$defs/commitSha" }\n                                  }\n                                },\n                                {\n                                  "type": "object",\n                                  "required": ["kind"],\n                                  "additionalProperties": false,\n                                  "properties": { "kind": { "const": "other" } }\n                                }\n                              ]\n                            }\n                          }\n                        }\n                      }\n                    },\n                    "if": { "properties": { "type": { "const": "issue" } } },\n                    "then": { "properties": { "state": { "enum": ["open", "closed"] } } }\n                  },\n                  {\n                    "type": "object",\n                    "required": ["ref"],\n                    "properties": { "ref": { "$ref": "#/$defs/issueRef" } },\n                    "allOf": [{ "$ref": "#/$defs/unread" }]\n                  }\n                ]\n              }\n            }\n          }\n        },\n        "checkRuns": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "commit", "excludedIds", "runs"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "ok" },\n                "commit": { "$ref": "#/$defs/commitSha" },\n                "excludedIds": {\n                  "description": "Check runs left out of the count: the run the checker itself executes in.",\n                  "type": "array",\n                  "items": { "type": "integer", "minimum": 1 }\n                },\n                "runs": {\n                  "type": "array",\n                  "items": {\n                    "type": "object",\n                    "required": ["id", "name", "status", "conclusion"],\n                    "additionalProperties": false,\n                    "dependentRequired": {\n                      "workflowPath": ["checkSuiteId", "workflowRunId", "runAttempt"],\n                      "workflowName": ["workflowPath"],\n                      "workflowRunId": ["workflowPath"],\n                      "runAttempt": ["workflowPath"]\n                    },\n                    "properties": {\n                      "id": { "type": "integer", "minimum": 1 },\n                      "name": { "type": "string" },\n                      "status": { "type": "string", "minLength": 1 },\n                      "conclusion": { "type": ["string", "null"] },\n                      "checkSuiteId": {\n                        "description": "The run\'s check suite (`check_suite.id`). A run without `workflowPath` is counted as the latest per check suite and name; a run without either is keyed by its name alone. Added in spec 0.1.4, amended 2026-10-12.",\n                        "type": "integer",\n                        "minimum": 1\n                      },\n                      "appSlug": {\n                        "description": "The slug of the app that created the run (`app.slug`). Recorded, not read by any check. Added in spec 0.1.4, amended 2026-10-12.",\n                        "type": "string",\n                        "minLength": 1\n                      },\n                      "workflowPath": {\n                        "description": "The `path` of the workflow run whose `check_suite_id` is the run\'s check suite, less any `@<ref>`, from the workflow runs at the head. Runs that have it are counted as the latest per workflow path and name. Added in spec 0.1.4, amended 2026-10-13.",\n                        "type": "string",\n                        "minLength": 1\n                      },\n                      "workflowName": {\n                        "description": "The `name` of that workflow run, as the listing gives it; absent where the listing gives none, null or the empty string. No 0.1 check reads it. Added in spec 0.1.5.",\n                        "type": "string",\n                        "minLength": 1\n                      },\n                      "workflowRunId": {\n                        "description": "The `id` of that workflow run. Added in spec 0.1.4, amended 2026-10-13.",\n                        "type": "integer",\n                        "minimum": 1\n                      },\n                      "runAttempt": {\n                        "description": "That workflow run\'s `run_attempt` as the listing gives it, its latest attempt at the read. Added in spec 0.1.4, amended 2026-10-13.",\n                        "type": "integer",\n                        "minimum": 1\n                      }\n                    }\n                  }\n                }\n              }\n            },\n            { "$ref": "#/$defs/unreadOnly" }\n          ]\n        },\n        "testRecords": {\n          "type": "array",\n          "items": {\n            "oneOf": [\n              {\n                "type": "object",\n                "required": ["record", "status", "runs"],\n                "additionalProperties": false,\n                "properties": {\n                  "record": { "$ref": "handback-block-0.1.schema.json#/$defs/junitRecord" },\n                  "status": { "const": "ok" },\n                  "runs": {\n                    "type": "array",\n                    "items": {\n                      "type": "object",\n                      "required": ["runId", "runAttempt", "executed", "failed"],\n                      "additionalProperties": false,\n                      "properties": {\n                        "runId": { "type": "integer", "minimum": 1 },\n                        "runAttempt": { "type": "integer", "minimum": 1 },\n                        "executed": { "type": "integer", "minimum": 0 },\n                        "failed": { "type": "integer", "minimum": 0 }\n                      }\n                    }\n                  }\n                }\n              },\n              {\n                "type": "object",\n                "required": ["record"],\n                "properties": {\n                  "record": { "$ref": "handback-block-0.1.schema.json#/$defs/junitRecord" }\n                },\n                "allOf": [{ "$ref": "#/$defs/unread" }]\n              }\n            ]\n          }\n        },\n        "deployments": {\n          "type": "array",\n          "items": {\n            "oneOf": [\n              {\n                "type": "object",\n                "required": ["environment", "status", "deployments"],\n                "additionalProperties": false,\n                "properties": {\n                  "environment": { "type": "string", "minLength": 1 },\n                  "status": { "const": "ok" },\n                  "deployments": {\n                    "type": "array",\n                    "items": {\n                      "type": "object",\n                      "required": ["id", "sha", "relation", "successAt"],\n                      "additionalProperties": false,\n                      "properties": {\n                        "id": { "type": "integer", "minimum": 1 },\n                        "sha": { "$ref": "#/$defs/commitSha" },\n                        "relation": {\n                          "enum": ["head", "merge", "descendant", "unrelated", "unknown"]\n                        },\n                        "successAt": {\n                          "oneOf": [{ "$ref": "#/$defs/timestamp" }, { "type": "null" }]\n                        }\n                      }\n                    }\n                  }\n                }\n              },\n              {\n                "type": "object",\n                "required": ["environment"],\n                "properties": { "environment": { "type": "string", "minLength": 1 } },\n                "allOf": [{ "$ref": "#/$defs/unread" }]\n              }\n            ]\n          }\n        },\n        "sources": {\n          "type": "array",\n          "items": {\n            "type": "object",\n            "required": ["kind", "locator", "sha256", "readAt"],\n            "additionalProperties": false,\n            "properties": {\n              "kind": { "$ref": "#/$defs/sourceKind" },\n              "locator": { "type": "string", "minLength": 1, "maxLength": 2000 },\n              "sha256": { "$ref": "#/$defs/sha256" },\n              "etag": { "type": "string", "minLength": 1 },\n              "readAt": { "$ref": "#/$defs/timestamp" },\n              "error": {\n                "description": "Present when the read failed: http_<status>, network, or parse.",\n                "type": "string",\n                "pattern": "^(?:http_[1-5][0-9]{2}|network|parse)$"\n              }\n            }\n          }\n        }\n      }\n    },\n    "unreadOnly": {\n      "allOf": [{ "$ref": "#/$defs/unread" }],\n      "unevaluatedProperties": false\n    }\n  }\n}\n', "record-0.2-draft.schema.json": `{
+`, "record-0.1.schema.json": '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://barglabs.ai/dunstan/spec/schema/record-0.1.schema.json",\n  "title": "Dunstan record, v0.1",\n  "description": "An in-toto Statement v1 whose predicate records one check of a handback block against the record. See spec/claim-format.md.",\n  "type": "object",\n  "required": ["_type", "subject", "predicateType", "predicate"],\n  "additionalProperties": false,\n  "properties": {\n    "_type": { "const": "https://in-toto.io/Statement/v1" },\n    "subject": {\n      "type": "array",\n      "minItems": 1,\n      "maxItems": 2,\n      "prefixItems": [{ "$ref": "#/$defs/commitSubject" }, { "$ref": "#/$defs/blockSubject" }],\n      "items": false\n    },\n    "predicateType": { "const": "https://barglabs.ai/dunstan/record/v0.1" },\n    "predicate": { "$ref": "#/$defs/predicate" }\n  },\n  "allOf": [\n    {\n      "if": {\n        "properties": {\n          "predicate": {\n            "properties": { "block": { "properties": { "status": { "const": "found" } } } }\n          }\n        }\n      },\n      "then": { "properties": { "subject": { "minItems": 2 } } },\n      "else": { "properties": { "subject": { "maxItems": 1 } } }\n    }\n  ],\n  "$defs": {\n    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },\n    "commitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },\n    "repository": {\n      "description": "owner/repo",\n      "type": "string",\n      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/[A-Za-z0-9._-]{1,100}$"\n    },\n    "issueRef": {\n      "description": "owner/repo#N, always fully qualified in evidence.",\n      "type": "string",\n      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,9}$"\n    },\n    "timestamp": {\n      "type": "string",\n      "format": "date-time",\n      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\\\.[0-9]+)?Z$"\n    },\n    "sourceKind": {\n      "enum": [\n        "pull_request",\n        "pull_request_files",\n        "pull_request_commits",\n        "closing_references",\n        "repository",\n        "issue",\n        "commit",\n        "compare",\n        "check_runs",\n        "workflow_runs",\n        "artifact",\n        "deployments"\n      ]\n    },\n    "commitSubject": {\n      "type": "object",\n      "required": ["name", "digest"],\n      "additionalProperties": false,\n      "properties": {\n        "name": {\n          "type": "string",\n          "pattern": "^git\\\\+https://github\\\\.com/[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/[A-Za-z0-9._-]{1,100}@[0-9a-f]{40}$"\n        },\n        "digest": {\n          "type": "object",\n          "required": ["gitCommit"],\n          "additionalProperties": false,\n          "properties": { "gitCommit": { "$ref": "#/$defs/commitSha" } }\n        }\n      }\n    },\n    "blockSubject": {\n      "type": "object",\n      "required": ["name", "digest"],\n      "additionalProperties": false,\n      "properties": {\n        "name": { "const": "handback-block" },\n        "digest": {\n          "type": "object",\n          "required": ["sha256"],\n          "additionalProperties": false,\n          "properties": { "sha256": { "$ref": "#/$defs/sha256" } }\n        }\n      }\n    },\n    "predicate": {\n      "type": "object",\n      "required": [\n        "spec",\n        "checker",\n        "report",\n        "block",\n        "subject",\n        "evidence",\n        "claims",\n        "verdict",\n        "digests",\n        "rerun",\n        "assurance"\n      ],\n      "additionalProperties": false,\n      "properties": {\n        "spec": {\n          "description": "The spec version the checker implements, semver.",\n          "type": "string",\n          "pattern": "^0\\\\.1\\\\.(?:0|[1-9][0-9]*)$"\n        },\n        "checker": {\n          "type": "object",\n          "required": ["name", "version", "digest"],\n          "additionalProperties": false,\n          "properties": {\n            "name": { "type": "string", "minLength": 1, "maxLength": 214 },\n            "version": { "type": "string", "minLength": 1, "maxLength": 100 },\n            "digest": {\n              "type": "object",\n              "required": ["sha256"],\n              "additionalProperties": false,\n              "properties": { "sha256": { "$ref": "#/$defs/sha256" } }\n            }\n          }\n        },\n        "report": {\n          "description": "The report\'s digest and where it was read. Never its text.",\n          "type": "object",\n          "required": ["sha256", "source"],\n          "additionalProperties": false,\n          "properties": {\n            "sha256": { "$ref": "#/$defs/sha256" },\n            "source": {\n              "type": "object",\n              "required": ["kind", "locator"],\n              "additionalProperties": false,\n              "properties": {\n                "kind": { "enum": ["pr-body", "pr-comment", "file", "stdin", "api"] },\n                "locator": { "type": "string", "minLength": 1, "maxLength": 2000 }\n              }\n            }\n          }\n        },\n        "block": { "$ref": "#/$defs/block" },\n        "subject": {\n          "type": "object",\n          "required": ["repository", "pullRequest", "headSha", "mergeSha"],\n          "additionalProperties": false,\n          "properties": {\n            "repository": { "$ref": "#/$defs/repository" },\n            "pullRequest": { "type": "integer", "minimum": 1 },\n            "headSha": { "$ref": "#/$defs/commitSha" },\n            "mergeSha": {\n              "oneOf": [{ "$ref": "#/$defs/commitSha" }, { "type": "null" }]\n            }\n          }\n        },\n        "evidence": { "$ref": "#/$defs/evidence" },\n        "claims": {\n          "type": "array",\n          "items": { "$ref": "#/$defs/claim" }\n        },\n        "verdict": { "$ref": "#/$defs/verdict" },\n        "digests": {\n          "type": "object",\n          "required": ["claims", "evidence"],\n          "additionalProperties": false,\n          "properties": {\n            "claims": { "$ref": "#/$defs/sha256" },\n            "evidence": { "$ref": "#/$defs/sha256" }\n          }\n        },\n        "rerun": {\n          "type": "object",\n          "required": ["offline", "online"],\n          "additionalProperties": false,\n          "properties": {\n            "offline": { "type": "string", "minLength": 1, "maxLength": 2000 },\n            "online": { "type": "string", "minLength": 1, "maxLength": 2000 }\n          }\n        },\n        "assurance": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "issuer"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "unsigned" },\n                "issuer": { "const": "self-generated" }\n              }\n            },\n            {\n              "type": "object",\n              "required": ["status", "issuer", "keyFingerprint"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "signed" },\n                "issuer": { "type": "string", "minLength": 1, "maxLength": 320 },\n                "keyFingerprint": { "type": "string", "pattern": "^SHA256:[A-Za-z0-9+/]{43}$" }\n              }\n            }\n          ]\n        }\n      }\n    },\n    "verdict": { "enum": ["pass", "fail", "unverifiable"] },\n    "blockError": {\n      "type": "object",\n      "required": ["code"],\n      "additionalProperties": false,\n      "properties": {\n        "code": {\n          "enum": [\n            "unterminated_fence",\n            "invalid_json",\n            "duplicate_member",\n            "unsupported_version",\n            "schema_violation"\n          ]\n        },\n        "pointer": { "type": "string", "pattern": "^(?:/.*)?$" },\n        "keyword": { "type": "string", "minLength": 1 }\n      }\n    },\n    "block": {\n      "oneOf": [\n        {\n          "type": "object",\n          "required": ["status", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "found" },\n            "sha256": { "$ref": "#/$defs/sha256" },\n            "value": { "$ref": "handback-block-0.1.schema.json" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "reason", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "missing" },\n            "reason": { "const": "block_missing" },\n            "sha256": { "type": "null" },\n            "value": { "type": "null" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "reason", "count", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "ambiguous" },\n            "reason": { "const": "block_ambiguous" },\n            "count": { "type": "integer", "minimum": 2 },\n            "sha256": { "type": "null" },\n            "value": { "type": "null" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "reason", "errors", "sha256", "value"],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "invalid" },\n            "reason": { "const": "block_invalid" },\n            "errors": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/blockError" } },\n            "sha256": { "type": "null" },\n            "value": { "type": "null" }\n          }\n        }\n      ]\n    },\n    "claim": {\n      "type": "object",\n      "required": ["id", "check", "field", "declared", "observed", "verdict"],\n      "additionalProperties": false,\n      "properties": {\n        "id": { "type": "string", "minLength": 1 },\n        "check": { "enum": ["head", "scope", "reference", "count", "time"] },\n        "field": {\n          "description": "A JSON Pointer (RFC 6901) into the block.",\n          "type": "string",\n          "pattern": "^/.+$"\n        },\n        "declared": true,\n        "observed": true,\n        "verdict": { "$ref": "#/$defs/verdict" },\n        "reason": { "$ref": "#/$defs/claimReason" }\n      },\n      "if": { "properties": { "verdict": { "const": "pass" } } },\n      "then": { "not": { "required": ["reason"] } },\n      "else": { "required": ["reason"] }\n    },\n    "claimReason": {\n      "type": "string",\n      "pattern": "^(?:head_mismatch|declared_not_changed|undeclared_file|file_list_truncated|not_closing|closing_link_unsettled|closing_base_not_default|closing_event_unsettled|not_found|not_reachable|count_mismatch|all_succeeded_mismatch|none_failed_mismatch|checks_incomplete|no_check_runs|no_succeeded_check_runs|check_runs_not_at_head|no_comparable_record_field|local_run_not_in_record|record_not_found|record_ambiguous|not_merged|premature|no_deployment|evidence_field_unpopulated:[A-Za-z0-9_.]+|source_unreadable:(?:pull_request|pull_request_files|pull_request_commits|closing_references|repository|issue|commit|compare|check_runs|workflow_runs|artifact|deployments))$"\n    },\n    "unread": {\n      "description": "A section the checker could not use: its source errored, or the source answered without the field.",\n      "oneOf": [\n        {\n          "type": "object",\n          "required": ["status", "source"],\n          "properties": {\n            "status": { "const": "unreadable" },\n            "source": { "$ref": "#/$defs/sourceKind" }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["status", "field"],\n          "properties": {\n            "status": { "const": "unpopulated" },\n            "field": { "type": "string", "pattern": "^[A-Za-z0-9_.]+$" }\n          }\n        }\n      ]\n    },\n    "evidence": {\n      "type": "object",\n      "required": ["pullRequest", "sources"],\n      "additionalProperties": false,\n      "properties": {\n        "pullRequest": {\n          "description": "Always read: a checker that cannot read the pull request writes no record.",\n          "type": "object",\n          "required": [\n            "status",\n            "number",\n            "state",\n            "merged",\n            "mergedAt",\n            "headSha",\n            "mergeSha",\n            "changedFiles"\n          ],\n          "additionalProperties": false,\n          "properties": {\n            "status": { "const": "ok" },\n            "number": { "type": "integer", "minimum": 1 },\n            "state": { "enum": ["open", "closed"] },\n            "merged": { "type": "boolean" },\n            "mergedAt": { "oneOf": [{ "$ref": "#/$defs/timestamp" }, { "type": "null" }] },\n            "headSha": { "$ref": "#/$defs/commitSha" },\n            "mergeSha": { "oneOf": [{ "$ref": "#/$defs/commitSha" }, { "type": "null" }] },\n            "changedFiles": { "type": "integer", "minimum": 0 }\n          }\n        },\n        "files": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "complete", "entries"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "ok" },\n                "complete": { "type": "boolean" },\n                "entries": {\n                  "type": "array",\n                  "items": {\n                    "type": "object",\n                    "required": ["path", "status"],\n                    "additionalProperties": false,\n                    "properties": {\n                      "path": { "type": "string", "minLength": 1 },\n                      "status": {\n                        "enum": [\n                          "added",\n                          "removed",\n                          "modified",\n                          "renamed",\n                          "copied",\n                          "changed",\n                          "unchanged"\n                        ]\n                      },\n                      "previousPath": { "type": "string", "minLength": 1 }\n                    }\n                  }\n                }\n              }\n            },\n            { "$ref": "#/$defs/unreadOnly" }\n          ]\n        },\n        "closingReferences": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "issues"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "ok" },\n                "issues": { "type": "array", "items": { "$ref": "#/$defs/issueRef" } }\n              }\n            },\n            { "$ref": "#/$defs/unreadOnly" }\n          ]\n        },\n        "references": {\n          "type": "array",\n          "items": {\n            "oneOf": [\n              {\n                "type": "object",\n                "required": ["kind", "ref", "status", "exists"],\n                "additionalProperties": false,\n                "properties": {\n                  "kind": { "const": "issue" },\n                  "ref": { "$ref": "#/$defs/issueRef" },\n                  "status": { "const": "ok" },\n                  "exists": { "type": "boolean" },\n                  "resolvedAs": {\n                    "description": "Spec 0.1.3: the owner/repo#N GitHub answered the read of ref with, when it is another issue (an issue transferred to another repository).",\n                    "$ref": "#/$defs/issueRef"\n                  }\n                },\n                "if": { "required": ["resolvedAs"] },\n                "then": { "properties": { "exists": { "const": true } } }\n              },\n              {\n                "type": "object",\n                "required": ["kind", "ref", "status", "exists", "reachableFromHead"],\n                "additionalProperties": false,\n                "properties": {\n                  "kind": { "const": "commit" },\n                  "ref": { "$ref": "#/$defs/commitSha" },\n                  "status": { "const": "ok" },\n                  "exists": { "type": "boolean" },\n                  "reachableFromHead": { "type": "boolean" }\n                }\n              },\n              {\n                "type": "object",\n                "required": ["kind", "ref"],\n                "properties": {\n                  "kind": { "enum": ["issue", "commit"] },\n                  "ref": { "type": "string", "minLength": 1 }\n                },\n                "allOf": [{ "$ref": "#/$defs/unread" }]\n              }\n            ]\n          }\n        },\n        "closeEvents": {\n          "description": "Spec 0.1.4: who closed each closes target that exists and is not among the closing references, read under the identity it resolves to; and the pull request\'s base, its repository\'s default branch and its commit ids.",\n          "type": "object",\n          "required": ["pullRequest", "targets"],\n          "additionalProperties": false,\n          "properties": {\n            "pullRequest": {\n              "oneOf": [\n                {\n                  "type": "object",\n                  "required": ["status", "baseRef", "defaultBranch", "commits"],\n                  "additionalProperties": false,\n                  "properties": {\n                    "status": { "const": "ok" },\n                    "baseRef": { "type": "string", "minLength": 1 },\n                    "defaultBranch": {\n                      "oneOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]\n                    },\n                    "commits": {\n                      "type": "array",\n                      "uniqueItems": true,\n                      "items": { "$ref": "#/$defs/commitSha" }\n                    }\n                  }\n                },\n                { "$ref": "#/$defs/unreadOnly" }\n              ]\n            },\n            "targets": {\n              "type": "array",\n              "items": {\n                "oneOf": [\n                  {\n                    "type": "object",\n                    "required": ["ref", "status", "type", "state", "events"],\n                    "additionalProperties": false,\n                    "properties": {\n                      "ref": { "$ref": "#/$defs/issueRef" },\n                      "status": { "const": "ok" },\n                      "type": { "enum": ["issue", "pull_request"] },\n                      "state": { "enum": ["open", "closed", "merged"] },\n                      "events": {\n                        "type": "array",\n                        "items": {\n                          "type": "object",\n                          "required": ["at", "closer"],\n                          "additionalProperties": false,\n                          "properties": {\n                            "at": { "$ref": "#/$defs/timestamp" },\n                            "closer": {\n                              "oneOf": [\n                                { "type": "null" },\n                                {\n                                  "type": "object",\n                                  "required": ["kind", "ref"],\n                                  "additionalProperties": false,\n                                  "properties": {\n                                    "kind": { "const": "pull_request" },\n                                    "ref": { "$ref": "#/$defs/issueRef" }\n                                  }\n                                },\n                                {\n                                  "type": "object",\n                                  "required": ["kind", "oid"],\n                                  "additionalProperties": false,\n                                  "properties": {\n                                    "kind": { "const": "commit" },\n                                    "oid": { "$ref": "#/$defs/commitSha" }\n                                  }\n                                },\n                                {\n                                  "type": "object",\n                                  "required": ["kind"],\n                                  "additionalProperties": false,\n                                  "properties": { "kind": { "const": "other" } }\n                                }\n                              ]\n                            }\n                          }\n                        }\n                      }\n                    },\n                    "if": { "properties": { "type": { "const": "issue" } } },\n                    "then": { "properties": { "state": { "enum": ["open", "closed"] } } }\n                  },\n                  {\n                    "type": "object",\n                    "required": ["ref"],\n                    "properties": { "ref": { "$ref": "#/$defs/issueRef" } },\n                    "allOf": [{ "$ref": "#/$defs/unread" }]\n                  }\n                ]\n              }\n            }\n          }\n        },\n        "checkRuns": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["status", "commit", "excludedIds", "runs"],\n              "additionalProperties": false,\n              "properties": {\n                "status": { "const": "ok" },\n                "commit": { "$ref": "#/$defs/commitSha" },\n                "excludedIds": {\n                  "description": "Check runs left out of the count: the run the checker itself executes in.",\n                  "type": "array",\n                  "items": { "type": "integer", "minimum": 1 }\n                },\n                "runs": {\n                  "type": "array",\n                  "items": {\n                    "type": "object",\n                    "required": ["id", "name", "status", "conclusion"],\n                    "additionalProperties": false,\n                    "dependentRequired": {\n                      "workflowPath": ["checkSuiteId", "workflowRunId", "runAttempt"],\n                      "workflowName": ["workflowPath"],\n                      "workflowRunId": ["workflowPath"],\n                      "runAttempt": ["workflowPath"]\n                    },\n                    "properties": {\n                      "id": { "type": "integer", "minimum": 1 },\n                      "name": { "type": "string" },\n                      "status": { "type": "string", "minLength": 1 },\n                      "conclusion": { "type": ["string", "null"] },\n                      "checkSuiteId": {\n                        "description": "The run\'s check suite (`check_suite.id`). A run without `workflowPath` is counted as the latest per check suite and name; a run without either is keyed by its name alone. Added in spec 0.1.4, amended 2026-10-12.",\n                        "type": "integer",\n                        "minimum": 1\n                      },\n                      "appSlug": {\n                        "description": "The slug of the app that created the run (`app.slug`). Recorded, not read by any check. Added in spec 0.1.4, amended 2026-10-12.",\n                        "type": "string",\n                        "minLength": 1\n                      },\n                      "workflowPath": {\n                        "description": "The `path` of the workflow run whose `check_suite_id` is the run\'s check suite, less any `@<ref>`, from the workflow runs at the head. Runs that have it are counted as the latest per workflow path and name. Added in spec 0.1.4, amended 2026-10-13.",\n                        "type": "string",\n                        "minLength": 1\n                      },\n                      "workflowName": {\n                        "description": "The `name` of that workflow run, as the listing gives it; absent where the listing gives none, null or the empty string. No 0.1 check reads it. Added in spec 0.1.5.",\n                        "type": "string",\n                        "minLength": 1\n                      },\n                      "workflowRunId": {\n                        "description": "The `id` of that workflow run. Added in spec 0.1.4, amended 2026-10-13.",\n                        "type": "integer",\n                        "minimum": 1\n                      },\n                      "runAttempt": {\n                        "description": "That workflow run\'s `run_attempt` as the listing gives it, its latest attempt at the read. Added in spec 0.1.4, amended 2026-10-13.",\n                        "type": "integer",\n                        "minimum": 1\n                      }\n                    }\n                  }\n                }\n              }\n            },\n            { "$ref": "#/$defs/unreadOnly" }\n          ]\n        },\n        "testRecords": {\n          "type": "array",\n          "items": {\n            "oneOf": [\n              {\n                "type": "object",\n                "required": ["record", "status", "runs"],\n                "additionalProperties": false,\n                "properties": {\n                  "record": { "$ref": "handback-block-0.1.schema.json#/$defs/junitRecord" },\n                  "status": { "const": "ok" },\n                  "runs": {\n                    "type": "array",\n                    "items": {\n                      "type": "object",\n                      "required": ["runId", "runAttempt", "executed", "failed"],\n                      "additionalProperties": false,\n                      "properties": {\n                        "runId": { "type": "integer", "minimum": 1 },\n                        "runAttempt": { "type": "integer", "minimum": 1 },\n                        "executed": { "type": "integer", "minimum": 0 },\n                        "failed": { "type": "integer", "minimum": 0 }\n                      }\n                    }\n                  }\n                }\n              },\n              {\n                "type": "object",\n                "required": ["record"],\n                "properties": {\n                  "record": { "$ref": "handback-block-0.1.schema.json#/$defs/junitRecord" }\n                },\n                "allOf": [{ "$ref": "#/$defs/unread" }]\n              }\n            ]\n          }\n        },\n        "deployments": {\n          "type": "array",\n          "items": {\n            "oneOf": [\n              {\n                "type": "object",\n                "required": ["environment", "status", "deployments"],\n                "additionalProperties": false,\n                "properties": {\n                  "environment": { "type": "string", "minLength": 1 },\n                  "status": { "const": "ok" },\n                  "deployments": {\n                    "type": "array",\n                    "items": {\n                      "type": "object",\n                      "required": ["id", "sha", "relation", "successAt"],\n                      "additionalProperties": false,\n                      "properties": {\n                        "id": { "type": "integer", "minimum": 1 },\n                        "sha": { "$ref": "#/$defs/commitSha" },\n                        "relation": {\n                          "enum": ["head", "merge", "descendant", "unrelated", "unknown"]\n                        },\n                        "successAt": {\n                          "oneOf": [{ "$ref": "#/$defs/timestamp" }, { "type": "null" }]\n                        }\n                      }\n                    }\n                  }\n                }\n              },\n              {\n                "type": "object",\n                "required": ["environment"],\n                "properties": { "environment": { "type": "string", "minLength": 1 } },\n                "allOf": [{ "$ref": "#/$defs/unread" }]\n              }\n            ]\n          }\n        },\n        "sources": {\n          "type": "array",\n          "items": {\n            "type": "object",\n            "required": ["kind", "locator", "sha256", "readAt"],\n            "additionalProperties": false,\n            "properties": {\n              "kind": { "$ref": "#/$defs/sourceKind" },\n              "locator": { "type": "string", "minLength": 1, "maxLength": 2000 },\n              "sha256": { "$ref": "#/$defs/sha256" },\n              "etag": { "type": "string", "minLength": 1 },\n              "readAt": { "$ref": "#/$defs/timestamp" },\n              "error": {\n                "description": "Present when the read failed: http_<status>, network, or parse.",\n                "type": "string",\n                "pattern": "^(?:http_[1-5][0-9]{2}|network|parse)$"\n              }\n            }\n          }\n        }\n      }\n    },\n    "unreadOnly": {\n      "allOf": [{ "$ref": "#/$defs/unread" }],\n      "unevaluatedProperties": false\n    }\n  }\n}\n', "record-0.2-draft.schema.json": `{
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://barglabs.ai/dunstan/spec/schema/record-0.2-draft.schema.json",
   "title": "Dunstan record, DRAFT 0.2.0",
@@ -10515,15 +10563,15 @@ var FILES = { "handback-block-0.1.schema.json": `{
     },
     "readerReason": {
       "type": "string",
-      "pattern": "^(?:no_matching_record_item|declared_item_not_among_candidates|candidate_not_in_evidence|ambiguous_candidates|workflow_not_in_record|workflow_name_ambiguous|no_comparable_record_field|file_list_truncated|checks_incomplete|all_succeeded_mismatch|test_not_executed|test_outcome_mismatch|not_closing|not_found|closing_link_unsettled|closing_base_not_default|closing_event_unsettled|evidence_field_unpopulated:[A-Za-z0-9_.]+|source_unreadable:(?:pull_request_files|check_runs|workflow_runs|pull_request_commits|closing_references|repository|issue|timeline|artifact))$"
+      "pattern": "^(?:no_matching_record_item|declared_item_not_among_candidates|candidate_not_in_evidence|duplicate_record_item|ambiguous_candidates|workflow_not_in_record|workflow_name_ambiguous|no_comparable_record_field|file_list_truncated|checks_incomplete|all_succeeded_mismatch|test_not_executed|test_outcome_mismatch|not_closing|not_found|closing_link_unsettled|closing_base_not_default|closing_event_unsettled|evidence_field_unpopulated:[A-Za-z0-9_.]+|source_unreadable:(?:pull_request_files|check_runs|workflow_runs|pull_request_commits|closing_references|repository|issue|timeline|artifact))$"
     }
   }
 }
-` };
+`, "survey-0.1-draft.schema.json": '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://barglabs.ai/dunstan/spec/schema/survey-0.1-draft.schema.json",\n  "title": "Dunstan survey record, DRAFT 0.1",\n  "description": "DRAFT, informative, for the operator to check (spec/claim-format.md, \\"DRAFT survey 0.1\\"). A read-only survey of a repository\'s recent pull requests: the selection, one entry per selected pull request with the record a check wrote for it or the reason there is none, and an aggregate that is a pure function of the entries. Each embedded record is a 0.1 or DRAFT 0.2.0 record and is validated against its own schema when the survey is verified. It changes neither record schema.",\n  "type": "object",\n  "required": ["format", "checker", "selection", "entries", "aggregate", "rerun", "digest"],\n  "additionalProperties": false,\n  "properties": {\n    "format": { "const": "dunstan-survey-0.1-draft" },\n    "checker": { "$ref": "record-0.1.schema.json#/$defs/predicate/properties/checker" },\n    "selection": {\n      "type": "object",\n      "required": ["parameters", "reader", "listing", "selected"],\n      "additionalProperties": false,\n      "properties": {\n        "parameters": { "$ref": "#/$defs/parameters" },\n        "reader": {\n          "description": "Whether the survey read GitHub with a token (GITHUB_TOKEN was set). The aggregate\'s remedy lines are worded for it. The token is never recorded.",\n          "type": "object",\n          "required": ["authenticated"],\n          "additionalProperties": false,\n          "properties": { "authenticated": { "type": "boolean" } }\n        },\n        "listing": { "$ref": "#/$defs/listing" },\n        "selected": {\n          "type": "array",\n          "uniqueItems": true,\n          "items": { "$ref": "#/$defs/number" }\n        }\n      }\n    },\n    "entries": {\n      "description": "One per selected pull request, in selection order. Verify checks that their pull request numbers are exactly `selection.selected`, which holds no number twice.",\n      "type": "array",\n      "uniqueItems": true,\n      "items": { "$ref": "#/$defs/entry" }\n    },\n    "aggregate": { "$ref": "#/$defs/aggregate" },\n    "rerun": {\n      "type": "object",\n      "required": ["offline", "online"],\n      "additionalProperties": false,\n      "properties": {\n        "offline": { "type": "string", "minLength": 1 },\n        "online": { "type": "string", "minLength": 1 }\n      }\n    },\n    "digest": {\n      "description": "SHA-256 of the JCS bytes of the survey record without this member.",\n      "type": "object",\n      "required": ["sha256"],\n      "additionalProperties": false,\n      "properties": { "sha256": { "$ref": "record-0.1.schema.json#/$defs/sha256" } }\n    }\n  },\n  "$defs": {\n    "number": { "type": "integer", "minimum": 1 },\n    "count": { "type": "integer", "minimum": 0 },\n    "login": { "type": "string", "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})(?:\\\\[bot\\\\])?$" },\n    "parameters": {\n      "type": "object",\n      "required": ["repository", "last", "since", "authors", "report", "advisory"],\n      "additionalProperties": false,\n      "properties": {\n        "repository": { "$ref": "record-0.1.schema.json#/$defs/repository" },\n        "last": { "type": "integer", "minimum": 1, "maximum": 200 },\n        "since": {\n          "oneOf": [\n            { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$" },\n            { "type": "null" }\n          ]\n        },\n        "authors": { "type": "array", "items": { "$ref": "#/$defs/login" } },\n        "report": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["kind"],\n              "additionalProperties": false,\n              "properties": { "kind": { "const": "pr-body" } }\n            },\n            {\n              "type": "object",\n              "required": ["kind", "author"],\n              "additionalProperties": false,\n              "properties": {\n                "kind": { "const": "pr-comment" },\n                "author": { "$ref": "#/$defs/login" }\n              }\n            }\n          ]\n        },\n        "advisory": { "type": "boolean" }\n      }\n    },\n    "listing": {\n      "type": "object",\n      "required": ["pageBound", "pages", "pullRequests", "duplicates", "end"],\n      "additionalProperties": false,\n      "properties": {\n        "pageBound": { "type": "integer", "minimum": 1 },\n        "pages": {\n          "type": "array",\n          "minItems": 1,\n          "items": {\n            "type": "object",\n            "required": ["page", "locator", "sha256", "readAt", "items", "duplicates"],\n            "additionalProperties": false,\n            "properties": {\n              "page": { "$ref": "#/$defs/number" },\n              "locator": { "type": "string", "minLength": 1 },\n              "sha256": { "$ref": "record-0.1.schema.json#/$defs/sha256" },\n              "readAt": { "$ref": "record-0.1.schema.json#/$defs/timestamp" },\n              "items": { "$ref": "#/$defs/count" },\n              "duplicates": {\n                "description": "How many of this page\'s items repeat a pull request number an earlier item of the listing already held. They are not in `pullRequests`.",\n                "$ref": "#/$defs/count"\n              },\n              "error": { "type": "string", "pattern": "^(?:http_[1-5][0-9]{2}|network|parse)$" }\n            }\n          }\n        },\n        "duplicates": {\n          "description": "How many listed items repeated an earlier one: the sum of the pages\' duplicates. The pages\' items are the length of `pullRequests` plus this.",\n          "$ref": "#/$defs/count"\n        },\n        "pullRequests": {\n          "description": "Each listed pull request once, at its first occurrence, in listing order. Verify refuses a number listed twice.",\n          "type": "array",\n          "uniqueItems": true,\n          "items": {\n            "type": "object",\n            "required": ["number", "createdAt", "author", "merged"],\n            "additionalProperties": false,\n            "properties": {\n              "number": { "$ref": "#/$defs/number" },\n              "createdAt": { "$ref": "record-0.1.schema.json#/$defs/timestamp" },\n              "author": { "oneOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },\n              "merged": { "type": "boolean" }\n            }\n          }\n        },\n        "end": {\n          "enum": [\n            "selection_full",\n            "since_reached",\n            "listing_ended",\n            "listing_unreadable",\n            "page_bound"\n          ]\n        }\n      }\n    },\n    "noRecordReason": {\n      "enum": [\n        "pull_request_unreadable",\n        "pull_request_moved",\n        "rate_limited",\n        "report_unavailable"\n      ]\n    },\n    "entry": {\n      "oneOf": [\n        {\n          "type": "object",\n          "required": ["pullRequest", "record"],\n          "additionalProperties": false,\n          "properties": {\n            "pullRequest": { "$ref": "#/$defs/number" },\n            "record": {\n              "description": "The record `dunstan check` writes for this pull request, as written: a 0.1 record, or a DRAFT 0.2.0 record when the survey ran the advisory reader. Verify validates it against its own schema.",\n              "type": "object"\n            }\n          }\n        },\n        {\n          "type": "object",\n          "required": ["pullRequest", "record", "reason"],\n          "additionalProperties": false,\n          "properties": {\n            "pullRequest": { "$ref": "#/$defs/number" },\n            "record": { "type": "null" },\n            "reason": { "$ref": "#/$defs/noRecordReason" }\n          }\n        }\n      ]\n    },\n    "columns": {\n      "type": "object",\n      "required": ["supported", "unverifiable", "notRecordCheckable", "contradicted"],\n      "properties": {\n        "supported": { "$ref": "#/$defs/count" },\n        "unverifiable": { "$ref": "#/$defs/count" },\n        "notRecordCheckable": { "$ref": "#/$defs/count" },\n        "contradicted": { "$ref": "#/$defs/count" }\n      }\n    },\n    "fixed": { "type": "string", "pattern": "^[01]\\\\.[0-9]{4}$" },\n    "rate": {\n      "type": "object",\n      "required": ["numerator", "denominator", "value", "wilson95"],\n      "additionalProperties": false,\n      "properties": {\n        "numerator": { "$ref": "#/$defs/count" },\n        "denominator": { "$ref": "#/$defs/count" },\n        "value": { "oneOf": [{ "$ref": "#/$defs/fixed" }, { "type": "null" }] },\n        "wilson95": {\n          "oneOf": [\n            {\n              "type": "object",\n              "required": ["low", "high"],\n              "additionalProperties": false,\n              "properties": {\n                "low": { "$ref": "#/$defs/fixed" },\n                "high": { "$ref": "#/$defs/fixed" }\n              }\n            },\n            { "type": "null" }\n          ]\n        }\n      }\n    },\n    "aggregate": {\n      "type": "object",\n      "required": [\n        "mapping",\n        "pullRequests",\n        "claims",\n        "byType",\n        "cannotSettle",\n        "contradictedOfSettled",\n        "unsettled"\n      ],\n      "additionalProperties": false,\n      "properties": {\n        "mapping": {\n          "type": "object",\n          "required": ["version"],\n          "additionalProperties": false,\n          "properties": { "version": { "type": "string", "minLength": 1 } }\n        },\n        "pullRequests": {\n          "type": "object",\n          "required": [\n            "listed",\n            "selected",\n            "withRecord",\n            "blockFound",\n            "blockMissing",\n            "blockInvalid",\n            "blockAmbiguous",\n            "noRecord"\n          ],\n          "additionalProperties": false,\n          "properties": {\n            "listed": { "$ref": "#/$defs/count" },\n            "selected": { "$ref": "#/$defs/count" },\n            "withRecord": { "$ref": "#/$defs/count" },\n            "blockFound": { "$ref": "#/$defs/count" },\n            "blockMissing": { "$ref": "#/$defs/count" },\n            "blockInvalid": { "$ref": "#/$defs/count" },\n            "blockAmbiguous": { "$ref": "#/$defs/count" },\n            "noRecord": {\n              "type": "array",\n              "items": {\n                "type": "object",\n                "required": ["reason", "count"],\n                "additionalProperties": false,\n                "properties": {\n                  "reason": { "$ref": "#/$defs/noRecordReason" },\n                  "count": { "$ref": "#/$defs/count" }\n                }\n              }\n            }\n          }\n        },\n        "claims": {\n          "allOf": [{ "$ref": "#/$defs/columns" }],\n          "required": ["total"],\n          "properties": { "total": { "$ref": "#/$defs/count" } },\n          "unevaluatedProperties": false\n        },\n        "byType": {\n          "type": "array",\n          "items": {\n            "allOf": [{ "$ref": "#/$defs/columns" }],\n            "required": ["type"],\n            "properties": {\n              "type": { "enum": ["T1", "T2", "T3", "T4", "T5", "T6", "T7", "T8", "R"] }\n            },\n            "unevaluatedProperties": false\n          }\n        },\n        "cannotSettle": { "$ref": "#/$defs/rate" },\n        "contradictedOfSettled": { "$ref": "#/$defs/rate" },\n        "unsettled": {\n          "type": "array",\n          "items": {\n            "type": "object",\n            "required": ["reason", "column", "count", "remedy"],\n            "additionalProperties": false,\n            "properties": {\n              "reason": { "$ref": "record-0.1.schema.json#/$defs/claimReason" },\n              "column": { "enum": ["unverifiable", "notRecordCheckable"] },\n              "count": { "type": "integer", "minimum": 1 },\n              "remedy": { "oneOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }\n            }\n          }\n        },\n        "advisory": {\n          "type": "object",\n          "required": ["pullRequests", "notes"],\n          "additionalProperties": false,\n          "properties": {\n            "pullRequests": { "$ref": "#/$defs/count" },\n            "notes": {\n              "type": "array",\n              "items": {\n                "type": "object",\n                "required": ["note", "count"],\n                "additionalProperties": false,\n                "properties": {\n                  "note": { "type": "string", "minLength": 1 },\n                  "count": { "type": "integer", "minimum": 1 }\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n' };
 function schemaText(file2) {
-  const text = FILES[file2];
-  if (text === void 0) throw new Error(`no schema ${file2} in this build`);
-  return text;
+  const text2 = FILES[file2];
+  if (text2 === void 0) throw new Error(`no schema ${file2} in this build`);
+  return text2;
 }
 
 // src/spec/schema-validators.ts
@@ -10592,30 +10640,40 @@ function validateDraftRecord(value) {
   }
   return draftRecord(value) ? [] : toSchemaErrors(draftRecord.errors);
 }
+var SURVEY_SCHEMA_FILE = "survey-0.1-draft.schema.json";
+var surveyRecord;
+function validateSurveyRecord(value) {
+  if (surveyRecord === void 0) {
+    const ajv = createAjv();
+    ajv.addSchema(readSchema(SURVEY_SCHEMA_FILE));
+    surveyRecord = ajv.getSchema(schemaId(SURVEY_SCHEMA_FILE));
+  }
+  return surveyRecord(value) ? [] : toSchemaErrors(surveyRecord.errors);
+}
 
 // src/spec/extract.ts
 var OPENING_FENCE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
-function isClosingFence(line, fence) {
-  const match = /^ {0,3}(`{3,}|~{3,})[ \t]*$/.exec(line);
+function isClosingFence(line2, fence) {
+  const match = /^ {0,3}(`{3,}|~{3,})[ \t]*$/.exec(line2);
   const run = match?.[1];
   return run !== void 0 && run[0] === fence.char && run.length >= fence.length;
 }
 function scanHandbackBlocks(reportText) {
-  const text = reportText.startsWith("\uFEFF") ? reportText.slice(1) : reportText;
-  const lines = text.replace(/\r\n?/g, "\n").split("\n");
+  const text2 = reportText.startsWith("\uFEFF") ? reportText.slice(1) : reportText;
+  const lines = text2.replace(/\r\n?/g, "\n").split("\n");
   const blocks = [];
   let open2;
-  for (const line of lines) {
+  for (const line2 of lines) {
     if (open2 !== void 0) {
-      if (isClosingFence(line, open2)) {
+      if (isClosingFence(line2, open2)) {
         if (open2.handback) blocks.push({ content: open2.lines.join("\n"), terminated: true });
         open2 = void 0;
       } else if (open2.handback) {
-        open2.lines.push(line);
+        open2.lines.push(line2);
       }
       continue;
     }
-    const match = OPENING_FENCE.exec(line);
+    const match = OPENING_FENCE.exec(line2);
     const run = match?.[1];
     if (run === void 0) continue;
     const info = (match?.[2] ?? "").replace(/^[ \t]+|[ \t]+$/g, "");
@@ -10724,29 +10782,83 @@ function defaultBase(cwd) {
   }
   return ref.slice("refs/remotes/".length);
 }
-function testsFrom(cwd, tests) {
-  const path = resolve(cwd, tests.junit);
-  let counts;
+function localCounts(cwd, flag, file2) {
   try {
-    counts = countJunit(readFileSync2(path, "utf8"));
+    return countJunit(readFileSync2(resolve(cwd, file2), "utf8"));
   } catch (e) {
-    throw new TemplateError(`--tests-junit ${tests.junit}: ${e.message}`);
+    throw new TemplateError(`${flag} ${file2}: ${e.message}`);
+  }
+}
+function testsFrom(cwd, tests) {
+  if (tests.kind === "ci") {
+    return tests.read.status === "settled" ? { run: tests.read.run, notes: tests.read.notes } : { notes: tests.read.notes };
+  }
+  if (tests.kind === "local") {
+    const counts2 = localCounts(cwd, "--tests-local", tests.junit);
+    return {
+      run: {
+        command: tests.command,
+        count: counts2.executed,
+        failures: counts2.failed,
+        record: { kind: "local" }
+      },
+      notes: [
+        `tests: ${counts2.executed} executed and ${counts2.failed} failed in ${tests.junit}, declared as a local run (record {"kind": "local"}). The gate reports them unverifiable (local_run_not_in_record) until CI publishes a record: publish one (docs/ci-test-records.md), then run dunstan template --tests-ci once CI has finished. Until then, say in the report that CI publishes no test record, and state no count in prose that the block does not declare.`
+      ]
+    };
   }
+  const counts = localCounts(cwd, "--tests-junit", tests.junit);
+  const r = tests.record;
   return {
-    command: tests.command,
-    count: counts.executed,
-    failures: counts.failed,
-    record: { kind: "junit", ...tests.record }
+    run: {
+      command: tests.command,
+      count: counts.executed,
+      failures: counts.failed,
+      record: { kind: "junit", ...r }
+    },
+    notes: [
+      `tests: ${counts.executed} executed and ${counts.failed} failed in ${tests.junit}. The gate checks these counts against ${r.path} in the artifact ${r.artifact} of job ${r.job} in ${r.workflow} at the head commit, not against the local file: these local counts will be compared with CI's, and fail with count_mismatch where CI's run counted otherwise. dunstan template --tests-ci declares CI's counts instead.`
+    ]
   };
 }
-function templateBlock(options) {
-  const { cwd } = options;
+function originRepository(cwd) {
+  const r = git(cwd, ["remote", "get-url", "origin"]);
+  const url2 = r.stdout.trim();
+  if (!r.ok || url2 === "") {
+    throw new TemplateError("there is no origin remote: pass --repo <owner/name>");
+  }
+  const m = /^(?:https:\/\/(?:[^@/]+@)?|ssh:\/\/git@|git@)github\.com[:/]([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+?)(?:\.git)?\/?$/.exec(
+    url2
+  );
+  if (m === null) {
+    throw new TemplateError(
+      `origin ${url2} is not a github.com repository: pass --repo <owner/name>`
+    );
+  }
+  return `${m[1]}/${m[2]}`;
+}
+function isPushed(cwd, commit) {
+  const r = git(cwd, [
+    "for-each-ref",
+    "--contains",
+    commit,
+    "--format=%(refname)",
+    "refs/remotes/"
+  ]);
+  return r.ok && r.stdout.trim() !== "";
+}
+function headCommit(cwd) {
   const top = git(cwd, ["rev-parse", "--show-toplevel"]);
   if (!top.ok) throw new TemplateError(`not a git repository: ${cwd}`);
   const head = commitOf(cwd, "HEAD");
   if (head === void 0) {
     throw new TemplateError("HEAD cannot be read: the branch has no commit yet");
   }
+  return head;
+}
+function templateBlock(options) {
+  const { cwd } = options;
+  const head = headCommit(cwd);
   const symbolic = git(cwd, ["symbolic-ref", "--quiet", "HEAD"]);
   if (!symbolic.ok) {
     throw new TemplateError(
@@ -10778,7 +10890,8 @@ function templateBlock(options) {
     compareCodeUnits
   );
   const block = { dunstan: BLOCK_VERSION, headCommit: head, filesChanged };
-  if (options.tests !== void 0) block.tests = [testsFrom(cwd, options.tests)];
+  const tests = options.tests === void 0 ? void 0 : testsFrom(cwd, options.tests);
+  if (tests?.run !== void 0) block.tests = [tests.run];
   const read = readBlockContent(JSON.stringify(block));
   if (read.status !== "found") {
     const errors = read.status === "invalid" ? read.errors : [];
@@ -10794,16 +10907,12 @@ function templateBlock(options) {
   if (dirty.ok && dirty.stdout !== "") {
     notes.push("the working tree has changes that are not committed; they are not in this block.");
   }
-  const t = block.tests?.[0];
-  if (t === void 0) {
+  if (tests === void 0) {
     notes.push(
-      "tests are not declared. To declare a run, add --tests-junit <JUnit XML file> with --tests-command, --tests-workflow, --tests-job, --tests-artifact and --tests-artifact-path naming the CI record its counts are checked against."
+      "tests are not declared. To declare CI's counts, run dunstan template again with --tests-ci --tests-command <cmd> --tests-workflow <path> --tests-job <name> once CI has finished on your last push; it reads the JUnit record CI published (docs/ci-test-records.md). For a run made only locally, --tests-local <JUnit XML file> --tests-command <cmd> declares it as one. --tests-junit <file> with --tests-command, --tests-workflow, --tests-job, --tests-artifact and --tests-artifact-path declares a local file's counts against a CI record."
     );
   } else {
-    const r = t.record;
-    notes.push(
-      `tests: ${t.count} executed and ${t.failures} failed in ${options.tests?.junit}. The gate checks these counts against ${r.path} in the artifact ${r.artifact} of job ${r.job} in ${r.workflow} at the head commit, not against the local file.`
-    );
+    notes.push(...tests.notes);
   }
   notes.push(
     "references and mergedAt are not filled: add each issue this pull request closes or cites yourself, and leave mergedAt out until it is merged.",
@@ -10846,7 +10955,7 @@ var GitHubClient = class {
     this.#baseUrl = options.baseUrl ?? DEFAULT_API;
     this.#fetch = options.fetch ?? fetch;
     this.#now = options.now ?? (() => /* @__PURE__ */ new Date());
-    this.#sleep = options.sleep ?? ((ms) => new Promise((resolve4) => setTimeout(resolve4, ms)));
+    this.#sleep = options.sleep ?? ((ms) => new Promise((resolve5) => setTimeout(resolve5, ms)));
     this.#warn = options.warn ?? ((message) => process.stderr.write(`dunstan: ${message}
 `));
     this.#maxAttempts = options.maxAttempts ?? 4;
@@ -11007,8 +11116,8 @@ function retryWaitMs(response, status, now, attempt) {
   const retryAfter = response.headers.get("retry-after");
   const remaining = response.headers.get("x-ratelimit-remaining");
   const reset = response.headers.get("x-ratelimit-reset");
-  const rateLimited = status === 429 || status === 403 && (remaining === "0" || retryAfter !== null);
-  if (rateLimited) {
+  const rateLimited2 = status === 429 || status === 403 && (remaining === "0" || retryAfter !== null);
+  if (rateLimited2) {
     if (retryAfter !== null && /^[0-9]+$/.test(retryAfter)) return Number(retryAfter) * 1e3;
     if (reset !== null && /^[0-9]+$/.test(reset)) {
       return Math.max(0, Number(reset) * 1e3 - now.getTime()) + 1e3;
@@ -11659,22 +11768,22 @@ function answersFor(paths, answered) {
   });
 }
 function compareByList(claim2, evidence, repository) {
-  const row = rowFor(claim2.kind, claim2.value, evidence, repository);
-  if (row === void 0) return { observed: null, note: "unanswered:no_comparable_record_field" };
-  const observed = row.observed ?? null;
-  if (claim2.kind === "file_changed" && typeof claim2.value === "string" && row.verdict !== "unverifiable") {
+  const row2 = rowFor(claim2.kind, claim2.value, evidence, repository);
+  if (row2 === void 0) return { observed: null, note: "unanswered:no_comparable_record_field" };
+  const observed = row2.observed ?? null;
+  if (claim2.kind === "file_changed" && typeof claim2.value === "string" && row2.verdict !== "unverifiable") {
     const bare = !claim2.value.includes("/");
-    if (bare || row.verdict === "fail") {
+    if (bare || row2.verdict === "fail") {
       const candidates = byName(claim2.value, evidence);
       if (candidates.length === 1)
         return { observed: candidates[0], note: "agrees_by_name" };
       if (candidates.length > 1) return { observed: candidates, note: "unanswered:ambiguous_path" };
     }
   }
-  if (row.verdict === "pass") return { observed, note: "agrees" };
+  if (row2.verdict === "pass") return { observed, note: "agrees" };
   return {
     observed,
-    note: `${row.verdict === "fail" ? "differs" : "unanswered"}:${row.reason}`
+    note: `${row2.verdict === "fail" ? "differs" : "unanswered"}:${row2.reason}`
   };
 }
 function readingBlock(block, proposed, headSha) {
@@ -11801,8 +11910,8 @@ var FINAL_STATES = phrases(GRAMMAR.finalStates);
 var CLOSERS = new Map(GRAMMAR.brackets.map((pair) => [pair[1], pair[0]]));
 var OPENERS = new Set(CLOSERS.values());
 var WINDOW = GRAMMAR.window;
-function isLogLine(line) {
-  const body = line.replace(/^\s*(?:[-*+]|\d{1,3}[.)])\s+/, "").trimStart();
+function isLogLine(line2) {
+  const body = line2.replace(/^\s*(?:[-*+]|\d{1,3}[.)])\s+/, "").trimStart();
   if (/^(?:\$\s|\[[^\]]*\]|\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}|[✓✗×✔✘❯›])/.test(body)) return true;
   if (/^(?:error|warning|Error|Warning)(?:\s+TS\d+)?:/.test(body)) return true;
   const first = /^[^\s:]+/.exec(body)?.[0] ?? "";
@@ -11815,32 +11924,32 @@ function prepare(report) {
   };
   let offset = 0;
   let fence;
-  for (const line of report.split("\n")) {
+  for (const line2 of report.split("\n")) {
     const start = offset;
-    const end = offset + line.length;
+    const end = offset + line2.length;
     offset = end + 1;
     if (fence !== void 0) {
       blank(start, end);
-      const close = /^ {0,3}(`{3,}|~{3,})\s*$/.exec(line)?.[1];
+      const close = /^ {0,3}(`{3,}|~{3,})\s*$/.exec(line2)?.[1];
       if (close !== void 0 && close[0] === fence.char && close.length >= fence.length) {
         fence = void 0;
       }
       continue;
     }
-    const open2 = /^ {0,3}(`{3,}|~{3,})/.exec(line)?.[1];
+    const open2 = /^ {0,3}(`{3,}|~{3,})/.exec(line2)?.[1];
     if (open2 !== void 0) {
       fence = { char: open2[0], length: open2.length };
       blank(start, end);
-    } else if (/^ {0,3}>/.test(line) || isLogLine(line)) {
+    } else if (/^ {0,3}>/.test(line2) || isLogLine(line2)) {
       blank(start, end);
     }
   }
-  let text = chars.join("");
-  for (const m of text.matchAll(/<!--[\s\S]*?(?:-->|$)/g)) blank(m.index, m.index + m[0].length);
-  text = chars.join("");
+  let text2 = chars.join("");
+  for (const m of text2.matchAll(/<!--[\s\S]*?(?:-->|$)/g)) blank(m.index, m.index + m[0].length);
+  text2 = chars.join("");
   const atoms = /* @__PURE__ */ new Map();
-  const inAtom = new Uint8Array(text.length);
-  for (const m of text.matchAll(/`([^`\n]+)`/g)) {
+  const inAtom = new Uint8Array(text2.length);
+  for (const m of text2.matchAll(/`([^`\n]+)`/g)) {
     const content = m[1];
     const lead = content.length - content.trimStart().length;
     const trimmed = content.trim();
@@ -11851,13 +11960,13 @@ function prepare(report) {
     atoms.set(start, { end: start + trimmed.length, kind: "code" });
     inAtom.fill(1, start, start + trimmed.length);
   }
-  text = chars.join("");
-  for (const m of text.matchAll(/\bhttps?:\/\/[^\s<>()[\]`"']+/g)) {
+  text2 = chars.join("");
+  for (const m of text2.matchAll(/\bhttps?:\/\/[^\s<>()[\]`"']+/g)) {
     if (inAtom[m.index] === 1) continue;
     const url2 = m[0].replace(/[.,;:!?]+$/, "");
     atoms.set(m.index, { end: m.index + url2.length, kind: "url" });
   }
-  return { text, atoms };
+  return { text: text2, atoms };
 }
 var LEADING = /^[(["'*<{~]+/;
 var TRAILING = /[)\]}"'*>~,.;:!?]+$/;
@@ -11868,23 +11977,23 @@ function makeWord(raw, start, atom, bracketAt) {
     return { text: raw, lower: "", start, end: rawEnd, rawEnd, bracket, comma: false, atom };
   }
   const lead = LEADING.exec(raw)?.[0].length ?? 0;
-  const text = raw.slice(lead).replace(TRAILING, "");
-  if (text === "") return void 0;
+  const text2 = raw.slice(lead).replace(TRAILING, "");
+  if (text2 === "") return void 0;
   const begin = start + lead;
   return {
-    text,
-    lower: text.toLowerCase(),
+    text: text2,
+    lower: text2.toLowerCase(),
     start: begin,
-    end: begin + text.length,
+    end: begin + text2.length,
     rawEnd,
     bracket: bracketAt(begin),
-    comma: raw.slice(lead + text.length).includes(",")
+    comma: raw.slice(lead + text2.length).includes(",")
   };
 }
 function bracketCursor(prep) {
-  const { text, atoms } = prep;
+  const { text: text2, atoms } = prep;
   const links = /* @__PURE__ */ new Set();
-  for (const m of text.matchAll(/\[[^[\]\n]*\]\(/g)) {
+  for (const m of text2.matchAll(/\[[^[\]\n]*\]\(/g)) {
     links.add(m.index);
     links.add(m.index + m[0].length - 2);
   }
@@ -11897,10 +12006,10 @@ function bracketCursor(prep) {
         p = atom.end;
         continue;
       }
-      const ch = text[p];
+      const ch = text2[p];
       if (!links.has(p)) {
         if (OPENERS.has(ch)) open2.push(p);
-        else if (CLOSERS.has(ch) && text[open2.at(-1) ?? -1] === CLOSERS.get(ch)) open2.pop();
+        else if (CLOSERS.has(ch) && text2[open2.at(-1) ?? -1] === CLOSERS.get(ch)) open2.pop();
       }
       p++;
     }
@@ -11908,7 +12017,7 @@ function bracketCursor(prep) {
   };
 }
 function clausesOf(prep) {
-  const { text, atoms } = prep;
+  const { text: text2, atoms } = prep;
   const bracketAt = bracketCursor(prep);
   const clauses = [];
   let current = [];
@@ -11925,20 +12034,20 @@ function clausesOf(prep) {
   let blockLine2 = false;
   let i = 0;
   let gapStart = 0;
-  while (i < text.length) {
+  while (i < text2.length) {
     const atom = atoms.get(i);
-    if (atom === void 0 && /\s/.test(text[i])) {
+    if (atom === void 0 && /\s/.test(text2[i])) {
       i++;
       continue;
     }
     let end = atom?.end ?? i;
     if (atom === void 0) {
-      while (end < text.length && !/\s/.test(text[end]) && !atoms.has(end)) end++;
+      while (end < text2.length && !/\s/.test(text2[end]) && !atoms.has(end)) end++;
     }
-    const gap = text.slice(gapStart, i);
+    const gap = text2.slice(gapStart, i);
     let back = i;
-    while (back > 0 && /[ \t\r]/.test(text[back - 1])) back--;
-    const lineStart = back === 0 || text[back - 1] === "\n";
+    while (back > 0 && /[ \t\r]/.test(text2[back - 1])) back--;
+    const lineStart = back === 0 || text2[back - 1] === "\n";
     if (/\n[ \t\r]*\n/.test(gap)) {
       flush();
       item = void 0;
@@ -11947,14 +12056,14 @@ function clausesOf(prep) {
       if (blockLine2) flush();
       blockLine2 = false;
     }
-    const raw = text.slice(i, end);
+    const raw = text2.slice(i, end);
     if (atom === void 0) {
       const marker = lineStart && /^(?:[-*+]|\d{1,3}[.)]|#{1,6})$/.test(raw);
       if (marker || /^\|+$/.test(raw)) {
         flush();
         if (lineStart && /^[#|]/.test(raw)) blockLine2 = true;
         if (marker && !raw.startsWith("#")) {
-          item = { column: i - (text.lastIndexOf("\n", i - 1) + 1) };
+          item = { column: i - (text2.lastIndexOf("\n", i - 1) + 1) };
           fresh = true;
         } else {
           item = void 0;
@@ -12116,8 +12225,8 @@ var Clause = class {
 function clauseText(report, words2) {
   const first = words2[0];
   const last = words2[words2.length - 1];
-  const text = report.slice(first.start, last.rawEnd).replace(/\s+/g, " ").trim();
-  return text.length > 300 ? `${text.slice(0, 299)}\u2026` : text;
+  const text2 = report.slice(first.start, last.rawEnd).replace(/\s+/g, " ").trim();
+  return text2.length > 300 ? `${text2.slice(0, 299)}\u2026` : text2;
 }
 function bindPath(c, j, value, emit) {
   for (let k2 = j - 1; k2 >= Math.max(0, j - 3) && !c.isVerb(k2); k2--) {
@@ -12249,9 +12358,9 @@ function subjectOf(c, r, k) {
 }
 function baselineBefore(c, j) {
   for (let k = 0; k < j; k++) {
-    const text = c.words[k].text.toLowerCase();
+    const text2 = c.words[k].text.toLowerCase();
     if (BASELINES.has(c.lower(k))) return true;
-    if (GRAMMAR.remotePrefixes.some((p) => text.startsWith(p))) return true;
+    if (GRAMMAR.remotePrefixes.some((p) => text2.startsWith(p))) return true;
   }
   return false;
 }
@@ -12519,85 +12628,85 @@ function claimTexts(claim2) {
 function boundedAt(haystack, needle, inside) {
   const out = [];
   if (needle.length === 0) return out;
-  for (let at = haystack.indexOf(needle); at !== -1; at = haystack.indexOf(needle, at + 1)) {
-    const before = haystack[at - 1];
-    const after = haystack[at + needle.length];
-    const next = haystack[at + needle.length + 1];
+  for (let at2 = haystack.indexOf(needle); at2 !== -1; at2 = haystack.indexOf(needle, at2 + 1)) {
+    const before = haystack[at2 - 1];
+    const after = haystack[at2 + needle.length];
+    const next = haystack[at2 + needle.length + 1];
     const openBefore = before === void 0 || !inside.test(before);
     const openAfter = after === void 0 || !inside.test(after) || after === "." && (next === void 0 || !/[A-Za-z0-9]/.test(next));
-    if (openBefore && openAfter) out.push(at);
+    if (openBefore && openAfter) out.push(at2);
   }
   return out;
 }
 function occursBounded(haystack, needle, inside) {
   return boundedAt(haystack, needle, inside).length > 0;
 }
-function classnameSpans(text, classname) {
+function classnameSpans(text2, classname) {
   const forms = /* @__PURE__ */ new Set([classname, classname.replaceAll(".", " ")]);
   return [...forms].flatMap(
-    (form) => boundedAt(text, form, WORD).map((at) => [at, at + form.length])
+    (form) => boundedAt(text2, form, WORD).map((at2) => [at2, at2 + form.length])
   );
 }
-function classnameNamed(text, classname, classnames) {
-  const longer = classnames.filter((c) => c.length > classname.length).flatMap((c) => classnameSpans(text, c));
-  return classnameSpans(text, classname).some(
+function classnameNamed(text2, classname, classnames) {
+  const longer = classnames.filter((c) => c.length > classname.length).flatMap((c) => classnameSpans(text2, c));
+  return classnameSpans(text2, classname).some(
     ([from, to]) => !longer.some(([l, r]) => l <= from && to <= r)
   );
 }
 var CHECK_RUN_EVENTS = ["push", "pull_request", "pull_request_target", "merge_group"];
 var EVENT_SUFFIX = new RegExp(`^ \\((?:${CHECK_RUN_EVENTS.join("|")})\\)`);
 var WORKFLOW_JOB = /(\S+) \/ /g;
-function afterWorkflows(text) {
-  return [...text.matchAll(WORKFLOW_JOB)].map((m) => m.index + m[0].length);
-}
-function jobNamed(text, name, longer) {
-  if (text === name) return true;
-  const workflowed = afterWorkflows(text);
-  return boundedAt(text, name, JOB_NAME_CHAR).some(
-    (at) => jobNamedAt(text, name, at, longer, workflowed.includes(at))
+function afterWorkflows(text2) {
+  return [...text2.matchAll(WORKFLOW_JOB)].map((m) => m.index + m[0].length);
+}
+function jobNamed(text2, name, longer) {
+  if (text2 === name) return true;
+  const workflowed = afterWorkflows(text2);
+  return boundedAt(text2, name, JOB_NAME_CHAR).some(
+    (at2) => jobNamedAt(text2, name, at2, longer, workflowed.includes(at2))
   );
 }
-function jobNamedAt(text, name, at, longer, withWorkflow) {
-  const end = at + name.length;
-  return (!text.startsWith(" (", end) || withWorkflow && EVENT_SUFFIX.test(text.slice(end))) && !longer.some(
-    (l) => boundedAt(text, l, JOB_NAME_CHAR).some((from) => from <= at && end <= from + l.length)
+function jobNamedAt(text2, name, at2, longer, withWorkflow) {
+  const end = at2 + name.length;
+  return (!text2.startsWith(" (", end) || withWorkflow && EVENT_SUFFIX.test(text2.slice(end))) && !longer.some(
+    (l) => boundedAt(text2, l, JOB_NAME_CHAR).some((from) => from <= at2 && end <= from + l.length)
   );
 }
 var longest = (names) => [...names].sort((a, b) => b.length - a.length)[0];
-function jobAt(text, at, jobNames) {
+function jobAt(text2, at2, jobNames) {
   return longest(
     jobNames.filter((name) => {
       const longer = jobNames.filter((n) => n.length > name.length && n.includes(name));
-      return boundedAt(text, name, JOB_NAME_CHAR).includes(at) && jobNamedAt(text, name, at, longer, true);
+      return boundedAt(text2, name, JOB_NAME_CHAR).includes(at2) && jobNamedAt(text2, name, at2, longer, true);
     })
   );
 }
-function workflowBefore(text, slash, token, workflows) {
+function workflowBefore(text2, slash, token, workflows) {
   const whole = workflows.filter((w) => {
     const from = slash - w.length;
-    return w.length > 0 && from >= 0 && text.startsWith(w, from) && !PATH_CHAR.test(text[from - 1] ?? " ");
+    return w.length > 0 && from >= 0 && text2.startsWith(w, from) && !PATH_CHAR.test(text2[from - 1] ?? " ");
   });
   return longest(whole) ?? token;
 }
-function workflowJobs(text, jobNames, workflows = []) {
+function workflowJobs(text2, jobNames, workflows = []) {
   const out = [];
-  for (const m of text.matchAll(WORKFLOW_JOB)) {
-    const at = m.index + m[0].length;
-    const job = jobAt(text, at, jobNames);
+  for (const m of text2.matchAll(WORKFLOW_JOB)) {
+    const at2 = m.index + m[0].length;
+    const job = jobAt(text2, at2, jobNames);
     if (job === void 0) continue;
-    out.push({ workflow: workflowBefore(text, at - 3, m[1], workflows), job });
+    out.push({ workflow: workflowBefore(text2, at2 - 3, m[1], workflows), job });
   }
   return out;
 }
 var PARENTHESIS = /^ \([^()]*\)/;
-function unheldSuffixJobs(text, jobNames) {
+function unheldSuffixJobs(text2, jobNames) {
   const out = [];
-  for (const at of afterWorkflows(text)) {
-    if (jobAt(text, at, jobNames) !== void 0) continue;
+  for (const at2 of afterWorkflows(text2)) {
+    if (jobAt(text2, at2, jobNames) !== void 0) continue;
     const job = longest(
       jobNames.filter((name) => {
-        const rest = text.slice(at + name.length);
-        return boundedAt(text, name, JOB_NAME_CHAR).includes(at) && PARENTHESIS.test(rest) && !EVENT_SUFFIX.test(rest);
+        const rest = text2.slice(at2 + name.length);
+        return boundedAt(text2, name, JOB_NAME_CHAR).includes(at2) && PARENTHESIS.test(rest) && !EVENT_SUFFIX.test(rest);
       })
     );
     if (job !== void 0) out.push(job);
@@ -12606,8 +12715,8 @@ function unheldSuffixJobs(text, jobNames) {
 }
 function shaTokens(texts) {
   const out = [];
-  for (const text of texts) {
-    for (const m of text.matchAll(SHA2)) {
+  for (const text2 of texts) {
+    for (const m of text2.matchAll(SHA2)) {
       const token = m[0].toLowerCase();
       if (token.length === 40 || /[0-9]/.test(token)) out.push(token);
     }
@@ -12616,8 +12725,8 @@ function shaTokens(texts) {
 }
 function issueRefs(texts, repository) {
   const out = [];
-  for (const text of texts) {
-    for (const m of text.matchAll(ISSUE2)) out.push(qualifyIssue(m[1], repository));
+  for (const text2 of texts) {
+    for (const m of text2.matchAll(ISSUE2)) out.push(qualifyIssue(m[1], repository));
   }
   return out;
 }
@@ -12626,11 +12735,14 @@ function identifierMatches(claim2, items, repository) {
   const shas = shaTokens(texts);
   const issues = issueRefs(texts, repository);
   const named = (value, inside) => texts.some((t) => t === value || occursBounded(t, value, inside));
-  const qualified = (item) => item.type === "test" && item.id !== item.fields[0]?.[1] && named(item.id, WORD);
+  const classnameOf = (item) => item.fields.find(([f]) => f === "classname")?.[1];
+  const qualified = (item) => {
+    const classname = classnameOf(item);
+    return item.type === "test" && classname !== void 0 && named(`${classname}.${item.fields[0]?.[1]}`, WORD);
+  };
   const qualifiedNames = new Set(
     items.filter(qualified).map((item) => item.fields[0]?.[1])
   );
-  const classnameOf = (item) => item.fields.find(([f]) => f === "classname")?.[1];
   const classnames = [
     ...new Set(items.filter((item) => item.type === "test").map(classnameOf))
   ].filter((c) => c !== void 0);
@@ -12691,7 +12803,7 @@ function identifierMatches(claim2, items, repository) {
 
 // src/retrieval/items.ts
 function testId(test) {
-  return test.classname === void 0 ? test.name : `${test.classname}.${test.name}`;
+  return JSON.stringify([test.classname ?? null, test.name]);
 }
 function recordItems(evidence) {
   const items = [];
@@ -12786,8 +12898,8 @@ var STOPWORDS = /* @__PURE__ */ new Set([
 function stem(token) {
   return token.length > 3 && token.endsWith("s") && !token.endsWith("ss") ? token.slice(0, -1) : token;
 }
-function tokenize(text) {
-  return text.replace(new RegExp("([\\p{Ll}\\p{N}])(\\p{Lu})", "gu"), "$1 $2").toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((t) => t.length > 1 && !STOPWORDS.has(t)).map(stem);
+function tokenize(text2) {
+  return text2.replace(new RegExp("([\\p{Ll}\\p{N}])(\\p{Lu})", "gu"), "$1 $2").toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((t) => t.length > 1 && !STOPWORDS.has(t)).map(stem);
 }
 var Bm25Index = class {
   termFrequencies;
@@ -12842,9 +12954,9 @@ function roundScore(score) {
 function bestField(item, terms, index) {
   let best = item.fields[0]?.[0] ?? "id";
   let bestWeight = -1;
-  for (const [name, text] of item.fields) {
+  for (const [name, text2] of item.fields) {
     let weight = 0;
-    for (const t of new Set(tokenize(text))) if (terms.has(t)) weight += index.idf(t);
+    for (const t of new Set(tokenize(text2))) if (terms.has(t)) weight += index.idf(t);
     if (weight > bestWeight) {
       best = name;
       bestWeight = weight;
@@ -12853,7 +12965,7 @@ function bestField(item, terms, index) {
   return best;
 }
 function itemTokens(item) {
-  return item.fields.flatMap(([, text]) => tokenize(text));
+  return item.fields.flatMap(([, text2]) => tokenize(text2));
 }
 function compareRanked(a, b) {
   const sa = a.candidate.score;
@@ -12939,7 +13051,11 @@ function sectionReason(type, evidence) {
 }
 function lookup(type, evidence) {
   const entries = /* @__PURE__ */ new Map();
-  const put = (id, value) => entries.set(id, value);
+  const duplicates = /* @__PURE__ */ new Set();
+  const put = (id, value) => {
+    if (entries.has(id)) duplicates.add(id);
+    else entries.set(id, value);
+  };
   const items = evidence.items;
   if (type === "file" && evidence.files?.status === "ok") {
     for (const f of evidence.files.entries) put(f.path, f);
@@ -12953,7 +13069,7 @@ function lookup(type, evidence) {
   } else if (type === "test" && items?.tests.status === "ok") {
     for (const t of items.tests.entries) put(testId(t), t);
   }
-  return entries;
+  return { entries, duplicates };
 }
 var ISSUE_REF2 = /^(?:[A-Za-z0-9][A-Za-z0-9-]{0,38}\/[A-Za-z0-9._-]{1,100})?#[1-9][0-9]{0,9}$/;
 function combinedCandidates(typed, floor) {
@@ -12973,17 +13089,17 @@ function ambiguousCandidates(combined, outcome) {
   const tied = combined.filter((_, i) => scores[i] === top);
   return tied.length >= 2 && new Set(tied.map(outcome)).size > 1;
 }
-function namedWorkflowRuns(text, combined, evidence) {
+function namedWorkflowRuns(text2, combined, evidence) {
   const section = evidence.checkRuns;
   if (section?.status !== "ok") return [...combined];
   const jobNames = [...new Set(section.runs.map((r) => r.name))];
-  if (unheldSuffixJobs(text, jobNames).length > 0) return { reason: "no_matching_record_item" };
+  if (unheldSuffixJobs(text2, jobNames).length > 0) return { reason: "no_matching_record_item" };
   const recordedWorkflows = [
     ...new Set(
       section.runs.flatMap((r) => [r.workflowPath, r.workflowName]).filter((w) => w !== void 0)
     )
   ];
-  const named = workflowJobs(text, jobNames, recordedWorkflows);
+  const named = workflowJobs(text2, jobNames, recordedWorkflows);
   if (named.length === 0) return [...combined];
   const counted = new Map(
     countedCheckRuns(section.runs, section.excludedIds).map((r) => [String(r.id), r])
@@ -13031,13 +13147,13 @@ function checkReaderClaim(claim2, evidence, repository) {
   if (claim2.kind === "reference_closes") {
     if (!ISSUE_REF2.test(declared)) return unverifiable2("no_comparable_record_field");
     const head = evidence.pullRequest.headSha;
-    const row = checkReferences(closesBlock(declared, head), evidence, repository)[0];
-    if (row === void 0) return unverifiable2("no_comparable_record_field");
-    return verdictOf(row.verdict, row.observed ?? null, row.reason);
+    const row2 = checkReferences(closesBlock(declared, head), evidence, repository)[0];
+    if (row2 === void 0) return unverifiable2("no_comparable_record_field");
+    return verdictOf(row2.verdict, row2.observed ?? null, row2.reason);
   }
   const missing = sectionReason(type, evidence);
   if (missing !== void 0) return unverifiable2(missing);
-  const entries = lookup(type, evidence);
+  const { entries, duplicates } = lookup(type, evidence);
   const typed = claim2.candidates.filter((c) => c.type === type);
   if (typed.some((c) => entries.get(c.id) === void 0)) {
     return unverifiable2("candidate_not_in_evidence");
@@ -13047,6 +13163,7 @@ function checkReaderClaim(claim2, evidence, repository) {
   if (relevant.length === 0) {
     return unverifiable2(truncated ? "file_list_truncated" : "no_matching_record_item");
   }
+  if (relevant.some((c) => duplicates.has(c.id))) return unverifiable2("duplicate_record_item");
   if (type === "check_run") {
     const scoped = namedWorkflowRuns(claim2.text, relevant, evidence);
     if (!Array.isArray(scoped)) return unverifiable2(scoped.reason);
@@ -13261,10 +13378,10 @@ async function checkAt(input2, pr) {
   const repository = pr.repository;
   const ownRuns = await input2.afterPullRequest?.(pr) ?? [];
   const report = await input2.report(pr);
-  const text = new TextDecoder("utf-8").decode(report.bytes);
-  const block = input2.block ?? recordBlock(extractHandbackBlock(text));
+  const text2 = new TextDecoder("utf-8").decode(report.bytes);
+  const block = input2.block ?? recordBlock(extractHandbackBlock(text2));
   const found = block.status === "found" ? block.value : null;
-  const proposed = input2.advisory === true ? extractClaims(text) : void 0;
+  const proposed = input2.advisory === true ? extractClaims(text2) : void 0;
   const evidence = await input2.readers.evidence({
     repository,
     pullRequest: pr,
@@ -13360,6 +13477,102 @@ function noteText(note) {
   return `${POSSIBLE_DISAGREEMENT}: ${shows}`;
 }
 
+// src/remedy/remedies.ts
+var NO_REMEDY = "no remedy: the record decides";
+var RECIPE = "docs/ci-test-records.md";
+function line(text2) {
+  return () => text2;
+}
+var decided = line(NO_REMEDY);
+var REMEDIES = {
+  // The block (spec section 5). No claim row carries these; the survey counts them per pull request.
+  block_missing: line(
+    "The report has no dunstan-handback block: declare the claims in one (dunstan template writes it)."
+  ),
+  block_ambiguous: line("The report has more than one dunstan-handback block: keep exactly one."),
+  block_invalid: line(
+    "The block failed validation: check it against spec/schema/handback-block-0.1.schema.json before handing back."
+  ),
+  // Unverifiable, a tests row: the record holds no count to compare, or could not read it. These are
+  // TESTS_REMEDY_REASONS, the lines the claims table prints under a tests row.
+  record_not_found: line(
+    `no run of the named workflow at the head uploaded that artifact from that job. Publish the JUnit record from CI (${RECIPE}), then check that the record's workflow, job, artifact and path are the ones the run used: dunstan template --tests-ci fills them.`
+  ),
+  no_comparable_record_field: line(
+    `this record's kind has nothing Dunstan can compare. Name a junit record a CI run uploaded (${RECIPE}); for a run that left no record in CI, declare {"kind": "local"}.`
+  ),
+  local_run_not_in_record: line(
+    `these counts are from a local run. Publish the JUnit record from CI (${RECIPE}), and run dunstan template --tests-ci after CI has finished on your last push.`
+  ),
+  "source_unreadable:artifact": ({ hasToken }) => hasToken ? "the run uploaded the record, but it could not be read: it expired, was uploaded outside the latest attempt of the named job, the job had not completed, or the file is not well-formed JUnit. Re-run the job to upload it again, or check again once the job completes." : "GitHub answers an artifact download only with a token (401 without one, even on a public repository). Check again with GITHUB_TOKEN set to a token that can read the repository, with actions: read.",
+  // Unverifiable, any other row: the record could not settle the claim.
+  record_ambiguous: line("Several runs at the head disagree on the count."),
+  checks_incomplete: line("CI had not finished when the record was read: check again once it has."),
+  no_check_runs: line("There were no check runs at the head: declare checks only where CI runs."),
+  no_succeeded_check_runs: line(
+    "No check run at the head succeeded and none failed: nothing ran to settle the claim."
+  ),
+  check_runs_not_at_head: line(
+    "The check runs were read at another commit: declare the pull request head as headCommit."
+  ),
+  file_list_truncated: line(
+    "GitHub lists at most 3,000 changed files: split the change, or declare no more than it lists."
+  ),
+  closing_link_unsettled: line(
+    "GitHub had not yet linked the issue to the open pull request: check again once it has."
+  ),
+  closing_base_not_default: line(
+    "The pull request merged into a branch other than the default: the issue may close on a later merge."
+  ),
+  closing_event_unsettled: line(
+    "The issue is closed but its timeline does not yet show who closed it: check again later."
+  ),
+  "source_unreadable:*": line("The source did not answer: rerun later or with a token."),
+  "evidence_field_unpopulated:*": line("GitHub answered without the field the claim needs."),
+  // Fail: the record decided the claim; nothing in the record is missing.
+  head_mismatch: decided,
+  declared_not_changed: decided,
+  undeclared_file: decided,
+  not_closing: decided,
+  not_found: decided,
+  not_reachable: decided,
+  count_mismatch: decided,
+  all_succeeded_mismatch: decided,
+  none_failed_mismatch: decided,
+  not_merged: decided,
+  premature: decided,
+  no_deployment: decided,
+  // The survey's own reasons for a pull request it has no record of (docs/survey.md).
+  pull_request_unreadable: line("The pull request could not be read: rerun later or with a token."),
+  pull_request_moved: line(
+    "The pull request moved twice while it was checked: rerun once it holds still."
+  ),
+  rate_limited: line(
+    "GitHub rate-limited the reads: rerun later, or with a token for a higher limit."
+  ),
+  report_unavailable: line(
+    "The named report could not be read: the author has no comment on the pull request, or the comments could not be listed."
+  )
+};
+var TESTS_REMEDY_REASONS = [
+  "record_not_found",
+  "no_comparable_record_field",
+  "local_run_not_in_record",
+  "source_unreadable:artifact"
+];
+function remedyForReason(reason, context) {
+  const exact = REMEDIES[reason];
+  if (exact !== void 0) return exact(context);
+  const colon = reason.indexOf(":");
+  return colon === -1 ? void 0 : REMEDIES[`${reason.slice(0, colon)}:*`]?.(context);
+}
+function remedyFor(claim2, context) {
+  if (claim2.verdict !== "unverifiable" || claim2.reason === void 0) return void 0;
+  if (!TESTS_REMEDY_REASONS.includes(claim2.reason)) return void 0;
+  if (!/^\/tests\/[0-9]+\/(?:count|failures)$/.test(claim2.field)) return void 0;
+  return remedyForReason(claim2.reason, context);
+}
+
 // src/cli/output.ts
 var EXIT = { pass: 0, fail: 1, unverifiable: 2, error: 3 };
 function exitFor(verdict) {
@@ -13374,8 +13587,8 @@ var UsageError = class extends Error {
 var WIDTH = 48;
 function cell(value) {
   if (value === void 0) return "";
-  const text = typeof value === "string" ? value : JSON.stringify(value);
-  return text.length > WIDTH ? `${text.slice(0, WIDTH - 1)}\u2026` : text;
+  const text2 = typeof value === "string" ? value : JSON.stringify(value);
+  return text2.length > WIDTH ? `${text2.slice(0, WIDTH - 1)}\u2026` : text2;
 }
 function table(rows) {
   const widths = rows[0]?.map((_, i) => Math.max(...rows.map((r) => (r[i] ?? "").length))) ?? [];
@@ -13383,7 +13596,7 @@ function table(rows) {
     (r) => r.map((c, i) => i === r.length - 1 ? c : c.padEnd(widths[i] ?? 0)).join("  ").trimEnd()
   ).join("\n");
 }
-function renderRecord(record2) {
+function renderRecord(record2, context) {
   const p = record2.predicate;
   const lines = [
     `${p.checker.name} ${p.checker.version}  ${p.subject.repository}#${p.subject.pullRequest}  head ${p.subject.headSha}`,
@@ -13398,19 +13611,16 @@ function renderRecord(record2) {
     lines.push(`block: invalid (${b.reason}: ${[...new Set(errors)].join("; ")})`);
   } else lines.push(`block: missing (${b.reason})`);
   if (p.claims.length > 0) {
-    lines.push(
-      "",
-      table([
-        ["VERDICT", "CLAIM", "DECLARED", "OBSERVED", "REASON"],
-        ...p.claims.map((c) => [
-          c.verdict,
-          c.id,
-          cell(c.declared),
-          cell(c.observed),
-          c.reason ?? ""
-        ])
-      ])
-    );
+    const rows = table([
+      ["VERDICT", "CLAIM", "DECLARED", "OBSERVED", "REASON"],
+      ...p.claims.map((c) => [c.verdict, c.id, cell(c.declared), cell(c.observed), c.reason ?? ""])
+    ]).split("\n");
+    lines.push("", rows[0]);
+    p.claims.forEach((c, i) => {
+      lines.push(rows[i + 1]);
+      const remedy = remedyFor(c, context);
+      if (remedy !== void 0) lines.push(`  remedy: ${remedy}`);
+    });
   }
   const unread2 = p.evidence.sources.filter((s) => s.error !== void 0);
   if (unread2.length > 0) {
@@ -13529,7 +13739,7 @@ async function check(args, io) {
     advisory: values.advisory === true
   });
   writeFileSync(out, serializeRecord(record2));
-  io.out(renderRecord(record2));
+  io.out(renderRecord(record2, { hasToken: client.hasToken }));
   io.out(`record: ${out}
 `);
   if (assurance !== void 0) {
@@ -13539,6 +13749,95 @@ async function check(args, io) {
   return exitFor(record2.predicate.verdict);
 }
 
+// src/cli/junit-merge.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
+import { resolve as resolve2 } from "node:path";
+import { parseArgs as parseArgs2 } from "node:util";
+
+// src/junit/merge.ts
+var JunitMergeError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "JunitMergeError";
+  }
+};
+var HEADER = '<?xml version="1.0" encoding="UTF-8"?>';
+function mergeJunit(inputs, count = (xml) => scanJunit(xml)) {
+  if (inputs.length === 0) throw new JunitMergeError("no input: name one or more JUnit files");
+  const sorted = [...inputs].sort((a, b) => compareCodeUnits(a.path, b.path));
+  sorted.forEach((input2, i) => {
+    if (i > 0 && sorted[i - 1]?.path === input2.path) {
+      throw new JunitMergeError(`${input2.path} is given twice`);
+    }
+  });
+  const sum = { executed: 0, failed: 0 };
+  const parts = sorted.map((input2) => {
+    let scan;
+    try {
+      scan = scanJunit(input2.xml);
+    } catch (e) {
+      if (e instanceof JunitError) throw new JunitMergeError(`${input2.path}: ${e.message}`);
+      throw e;
+    }
+    sum.executed += scan.executed;
+    sum.failed += scan.failed;
+    const { root } = scan;
+    return root.name === "testsuites" ? input2.xml.slice(root.contentStart, root.contentEnd) : input2.xml.slice(root.start, root.end);
+  });
+  const xml = [HEADER, "<testsuites>", ...parts, "</testsuites>", ""].join("\n");
+  let merged;
+  try {
+    merged = count(xml);
+  } catch (e) {
+    if (e instanceof JunitError) throw new JunitMergeError(`the merged file: ${e.message}`);
+    throw e;
+  }
+  if (merged.executed !== sum.executed || merged.failed !== sum.failed) {
+    throw new JunitMergeError(
+      `the merged file counts ${merged.executed} executed and ${merged.failed} failed; the inputs sum to ${sum.executed} and ${sum.failed}`
+    );
+  }
+  return { xml, counts: sum };
+}
+
+// src/cli/junit-merge.ts
+async function junitMerge(args, io) {
+  const { values, positionals } = parseArgs2({
+    args,
+    strict: true,
+    allowPositionals: true,
+    options: { out: { type: "string" } }
+  });
+  if (values.out === void 0) throw new UsageError("--out <file> is required");
+  const cwd = io.cwd ?? process.cwd();
+  const out = resolve2(cwd, values.out);
+  if (positionals.some((p) => resolve2(cwd, p) === out)) {
+    throw new UsageError(`--out ${values.out} is one of the inputs`);
+  }
+  try {
+    const merged = mergeJunit(
+      positionals.map((path) => {
+        try {
+          return { path, xml: readFileSync4(resolve2(cwd, path), "utf8") };
+        } catch (e) {
+          throw new JunitMergeError(`${path}: ${e.message}`);
+        }
+      })
+    );
+    writeFileSync2(out, merged.xml);
+    io.err(
+      `dunstan: ${values.out}: ${positionals.length} ${positionals.length === 1 ? "file" : "files"}, ${merged.counts.executed} test cases executed, ${merged.counts.failed} failed
+`
+    );
+    return 0;
+  } catch (e) {
+    if (!(e instanceof JunitMergeError)) throw e;
+    io.err(`dunstan: junit-merge refused, nothing written: ${e.message}
+`);
+    return EXIT.error;
+  }
+}
+
 // node_modules/.pnpm/@modelcontextprotocol+sdk@1.32.0_zod@4.6.5/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 import process2 from "node:process";
 
@@ -14376,14 +14675,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str2 = "";
+  let str3 = "";
   for (let i = 0; i < length; i++) {
-    str2 += chars[Math.floor(Math.random() * chars.length)];
+    str3 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str2;
+  return str3;
 }
-function esc(str2) {
-  return JSON.stringify(str2);
+function esc(str3) {
+  return JSON.stringify(str3);
 }
 function slugify(input2) {
   return input2.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -14497,8 +14796,8 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str2) {
-  return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str3) {
+  return str3.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl = new inst._zod.constr(def ?? inst._zod.def);
@@ -14752,13 +15051,13 @@ function getSizableOrigin(input2) {
   return "unknown";
 }
 var highSurrogate = /[\uD800-\uDBFF]/;
-function codePointLength(str2) {
-  const units = str2.length;
-  if (!highSurrogate.test(str2))
+function codePointLength(str3) {
+  const units = str3.length;
+  if (!highSurrogate.test(str3))
     return units;
   let count = units;
   for (let i = 0; i < units - 1; i++) {
-    if ((str2.charCodeAt(i) & 64512) === 55296 && (str2.charCodeAt(i + 1) & 64512) === 56320) {
+    if ((str3.charCodeAt(i) & 64512) === 55296 && (str3.charCodeAt(i + 1) & 64512) === 56320) {
       count--;
       i++;
     }
@@ -14851,9 +15150,9 @@ var Class = class {
   constructor(..._args) {
   }
 };
-function members(proto, table2) {
-  for (const key in table2) {
-    const desc = Object.getOwnPropertyDescriptor(table2, key);
+function members(proto, table3) {
+  for (const key in table3) {
+    const desc = Object.getOwnPropertyDescriptor(table3, key);
     if (desc.get)
       Object.defineProperty(proto, key, { ...desc, enumerable: false });
     else
@@ -14868,10 +15167,10 @@ function hide(inst, key, value) {
   return own(inst, key, value, false);
 }
 // @__NO_SIDE_EFFECTS__
-function derived(computes, table2) {
+function derived(computes, table3) {
   for (const key in computes) {
     const compute = computes[key];
-    Object.defineProperty(table2, key, {
+    Object.defineProperty(table3, key, {
       configurable: true,
       enumerable: true,
       get() {
@@ -14882,7 +15181,7 @@ function derived(computes, table2) {
       }
     });
   }
-  return table2;
+  return table3;
 }
 function defineBound(proto, key, fn) {
   Object.defineProperty(proto, key, {
@@ -16114,8 +16413,8 @@ var Doc = class {
     const lines = content.split("\n").filter((x) => x);
     const minIndent = Math.min(...lines.map((x) => x.length - x.trimStart().length));
     const dedented = lines.map((x) => x.slice(minIndent)).map((x) => " ".repeat(this.indent * 2) + x);
-    for (const line of dedented) {
-      this.content.push(line);
+    for (const line2 of dedented) {
+      this.content.push(line2);
     }
   }
   compile() {
@@ -18568,7 +18867,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve4) {
+function isRecursive(inst, stack, resolve5) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -18578,7 +18877,7 @@ function isRecursive(inst, stack, resolve4) {
   let result = NONE;
   const check3 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve4);
+      const answer = isRecursive(child, stack, resolve5);
       if (answer > result)
         result = answer;
     }
@@ -18589,7 +18888,7 @@ function isRecursive(inst, stack, resolve4) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve4) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve5) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -18653,7 +18952,7 @@ function isRecursive(inst, stack, resolve4) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve4 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve5 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -22851,8 +23150,8 @@ function ko_default() {
 }
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/lt.js
-var capitalizeFirstCharacter = (text) => {
-  return text.charAt(0).toUpperCase() + text.slice(1);
+var capitalizeFirstCharacter = (text2) => {
+  return text2.charAt(0).toUpperCase() + text2.slice(1);
 };
 function getUnitTypeFromNumber(number4) {
   const abs = Math.abs(number4);
@@ -24212,8 +24511,8 @@ var error43 = () => {
       case "not_multiple_of":
         return `N\xFAmero inv\xE1lido: deve ser m\xFAltiplo de ${issue2.divisor}`;
       case "unrecognized_keys": {
-        const plural2 = issue2.keys.length > 1 ? "s" : "";
-        return `Chave${plural2} inv\xE1lida${plural2}: ${joinValues(issue2.keys, ", ")}`;
+        const plural4 = issue2.keys.length > 1 ? "s" : "";
+        return `Chave${plural4} inv\xE1lida${plural4}: ${joinValues(issue2.keys, ", ")}`;
       }
       case "invalid_key":
         return `Entrada inv\xE1lida n${translateOriginWithArticle(issue2.origin, "definite")}`;
@@ -24357,8 +24656,8 @@ var error44 = () => {
       case "not_multiple_of":
         return `N\xFAmero inv\xE1lido: deve ser m\xFAltiplo de ${issue2.divisor}`;
       case "unrecognized_keys": {
-        const plural2 = issue2.keys.length > 1 ? "s" : "";
-        return `Chave${plural2} inv\xE1lida${plural2}: ${joinValues(issue2.keys, ", ")}`;
+        const plural4 = issue2.keys.length > 1 ? "s" : "";
+        return `Chave${plural4} inv\xE1lida${plural4}: ${joinValues(issue2.keys, ", ")}`;
       }
       case "invalid_key":
         return `Entrada inv\xE1lida n${translateOriginWithArticle(issue2.origin, "definite")}`;
@@ -34763,16 +35062,16 @@ var ReadBuffer = class {
     if (index === -1) {
       return null;
     }
-    const line = this._buffer.toString("utf8", 0, index).replace(/\r$/, "");
+    const line2 = this._buffer.toString("utf8", 0, index).replace(/\r$/, "");
     this._buffer = this._buffer.subarray(index + 1);
-    return deserializeMessage(line);
+    return deserializeMessage(line2);
   }
   clear() {
     this._buffer = void 0;
   }
 };
-function deserializeMessage(line) {
-  return JSONRPCMessageSchema.parse(JSON.parse(line));
+function deserializeMessage(line2) {
+  return JSONRPCMessageSchema.parse(JSON.parse(line2));
 }
 function serializeMessage(message) {
   return JSON.stringify(message) + "\n";
@@ -34834,20 +35133,20 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const json2 = serializeMessage(message);
       if (this._stdout.write(json2)) {
-        resolve4();
+        resolve5();
       } else {
-        this._stdout.once("drain", resolve4);
+        this._stdout.once("drain", resolve5);
       }
     });
   }
 };
 
 // src/mcp/server.ts
-import { existsSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { basename as basename2, resolve as resolve2 } from "node:path";
+import { existsSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { basename as basename2, resolve as resolve3 } from "node:path";
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v3/helpers/util.js
 var util;
@@ -40823,7 +41122,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve4) => setTimeout(resolve4, pollInterval));
+        await new Promise((resolve5) => setTimeout(resolve5, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error62) {
@@ -40840,7 +41139,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const earlyReject = (error62) => {
         reject(error62);
       };
@@ -40918,7 +41217,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve4(parseResult.data);
+            resolve5(parseResult.data);
           }
         } catch (error62) {
           reject(error62);
@@ -41172,20 +41471,20 @@ var Protocol = class {
    * @returns Promise that resolves when an update occurs or rejects if aborted
    */
   async _waitForTaskUpdate(taskId, signal, sessionId) {
-    let interval = this._options?.defaultTaskPollInterval ?? 1e3;
+    let interval2 = this._options?.defaultTaskPollInterval ?? 1e3;
     try {
       const task = await this._taskStore?.getTask(taskId, sessionId);
       if (task?.pollInterval) {
-        interval = task.pollInterval;
+        interval2 = task.pollInterval;
       }
     } catch {
     }
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve4, interval);
+      const timeoutId = setTimeout(resolve5, interval2);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -42316,7 +42615,7 @@ var McpServer = class {
     let task = createTaskResult.task;
     const pollInterval = task.pollInterval ?? 5e3;
     while (task.status !== "completed" && task.status !== "failed" && task.status !== "cancelled") {
-      await new Promise((resolve4) => setTimeout(resolve4, pollInterval));
+      await new Promise((resolve5) => setTimeout(resolve5, pollInterval));
       const updatedTask = await extra.taskStore.getTask(taskId);
       if (!updatedTask) {
         throw new McpError(ErrorCode.InternalError, `Task ${taskId} not found during polling`);
@@ -42936,13 +43235,13 @@ function sentenceAt(report, span) {
   const lines = report.split("\n");
   const starts = [];
   let offset = 0;
-  for (const line of lines) {
+  for (const line2 of lines) {
     starts.push(offset);
-    offset += line.length + 1;
+    offset += line2.length + 1;
   }
-  const lineOf = (at) => {
+  const lineOf = (at2) => {
     let i = 0;
-    while (i + 1 < starts.length && starts[i + 1] <= at) i++;
+    while (i + 1 < starts.length && starts[i + 1] <= at2) i++;
     return i;
   };
   const blank = (i) => (lines[i] ?? "").trim() === "";
@@ -42965,8 +43264,8 @@ function sentenceAt(report, span) {
       break;
     }
   }
-  const text = unit.slice(start, end).replace(/^\s*(?:[-*+]|\d{1,3}[.)]|#{1,6}|>)\s+/, "").replace(/\s+/g, " ").trim();
-  return text.length > 300 ? `${text.slice(0, 299)}\u2026` : text;
+  const text2 = unit.slice(start, end).replace(/^\s*(?:[-*+]|\d{1,3}[.)]|#{1,6}|>)\s+/, "").replace(/\s+/g, " ").trim();
+  return text2.length > 300 ? `${text2.slice(0, 299)}\u2026` : text2;
 }
 function suggestDeclarations(report) {
   const block = extractHandbackBlock(report);
@@ -43045,19 +43344,19 @@ var INSTRUCTIONS = `Before you say a task is done: generate your dunstan-handbac
 var SUGGEST_DESCRIPTION = `List the sentences in your report's prose that look like claims your dunstan-handback block does not declare, before you say done. Give report, the report text. For each, declare it in the block, or reword it if it is not a claim about this PR. Offline: needs no pull request, reads nothing and writes nothing. Never a verdict: nothing passes or fails, and nothing is written to a record. The same text as \`dunstan suggest\`.`;
 var DESCRIPTION = `Check a completion handback against the repository's own record, before you say done. Give the subject (repository owner/name and pull request number) and exactly one of: block, the dunstan-handback block as a JSON object; or report, the report text that carries exactly one \`\`\`dunstan-handback fence. Of the checks claims, checks.allSucceeded is true only if every counted check run concluded success, so a skipped or neutral run makes it false; checks.noneFailed is true if none concluded other than success, skipped or neutral and at least one succeeded. Returns the verdict (pass, fail or unverifiable), the claims table, and the full record as JSON. Same checker and same verdict as \`dunstan check\` on the same evidence; no model decides. Reads GitHub metadata with GITHUB_TOKEN and writes nothing to GitHub or the repository; the record is written to a file only when you pass outPath. If the verdict is not pass, report the rows as they are; change the work, not the block.`;
 function reportOfBlock(block) {
-  const text = canonicalize(block);
+  const text2 = canonicalize(block);
   return {
     report: {
-      bytes: new TextEncoder().encode(text),
+      bytes: new TextEncoder().encode(text2),
       source: { kind: "api", locator: `mcp ${TOOL_NAME}#block` }
     },
-    block: recordBlock(readBlockContent(text))
+    block: recordBlock(readBlockContent(text2))
   };
 }
-function reportOfText(text) {
+function reportOfText(text2) {
   return {
     report: {
-      bytes: new TextEncoder().encode(text),
+      bytes: new TextEncoder().encode(text2),
       source: { kind: "api", locator: `mcp ${TOOL_NAME}#report` }
     }
   };
@@ -43068,7 +43367,7 @@ async function checkHandback(input2, options) {
       "pass exactly one of block (the handback block as a JSON object) or report (text carrying one dunstan-handback fence)"
     );
   }
-  const outPath = input2.outPath === void 0 ? void 0 : resolve2(input2.outPath);
+  const outPath = input2.outPath === void 0 ? void 0 : resolve3(input2.outPath);
   if (outPath !== void 0 && existsSync(outPath)) {
     throw new InputError(`${outPath} exists; the tool never overwrites a file`);
   }
@@ -43100,10 +43399,10 @@ async function checkHandback(input2, options) {
     recordFile: basename2(recordFile)
   });
   const serialized = serializeRecord(record2);
-  if (outPath !== void 0) writeFileSync2(outPath, serialized, { flag: "wx" });
-  return handbackResult(record2, outPath, notes);
+  if (outPath !== void 0) writeFileSync3(outPath, serialized, { flag: "wx" });
+  return handbackResult(record2, outPath, notes, { hasToken: client.hasToken });
 }
-function handbackResult(record2, outPath, notes) {
+function handbackResult(record2, outPath, notes, context) {
   const verdict = record2.predicate.verdict;
   const head = [`verdict: ${verdict}`];
   if (verdict !== "pass") {
@@ -43117,7 +43416,7 @@ function handbackResult(record2, outPath, notes) {
     content: [
       { type: "text", text: `${head.join("\n")}
 ` },
-      { type: "text", text: renderRecord(record2) },
+      { type: "text", text: renderRecord(record2, context) },
       { type: "text", text: serializeRecord(record2) }
     ]
   };
@@ -43203,8 +43502,8 @@ async function mcp(args, io) {
     warn: io.err
   });
   const stdin = io.stdin ?? process.stdin;
-  const closed = new Promise((resolve4) => {
-    server.server.onclose = resolve4;
+  const closed = new Promise((resolve5) => {
+    server.server.onclose = resolve5;
   });
   stdin.once("end", () => void server.close());
   await server.connect(new StdioServerTransport(stdin, io.stdout ?? process.stdout));
@@ -43213,9 +43512,9 @@ async function mcp(args, io) {
 }
 
 // src/cli/rerun.ts
-import { existsSync as existsSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "node:fs";
-import { basename as basename3, resolve as resolve3 } from "node:path";
-import { parseArgs as parseArgs2 } from "node:util";
+import { existsSync as existsSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename3, resolve as resolve4 } from "node:path";
+import { parseArgs as parseArgs3 } from "node:util";
 function diffPointers(a, b, pointer = "") {
   const isObject2 = (v) => v !== null && typeof v === "object";
   if (Array.isArray(a) && Array.isArray(b)) {
@@ -43237,7 +43536,7 @@ function defaultOut(path) {
   return path.endsWith(".json") ? `${path.slice(0, -5)}.rerun.json` : `${path}.rerun.json`;
 }
 async function rerun(args, io) {
-  const { values, positionals } = parseArgs2({
+  const { values, positionals } = parseArgs3({
     args,
     strict: true,
     allowPositionals: true,
@@ -43246,9 +43545,9 @@ async function rerun(args, io) {
   if (positionals.length !== 1) throw new UsageError("dunstan rerun <record.json> [--out <path>]");
   const path = positionals[0];
   const out = values.out ?? defaultOut(path);
-  if (resolve3(out) === resolve3(path))
+  if (resolve4(out) === resolve4(path))
     throw new UsageError("rerun never overwrites the record it re-runs");
-  const value = parseStrictJson(readFileSync4(path, "utf8"));
+  const value = parseStrictJson(readFileSync5(path, "utf8"));
   const errors = validateRecord(value);
   if (errors.length > 0) {
     throw new UsageError(
@@ -43286,7 +43585,7 @@ async function rerun(args, io) {
   });
   if (existsSync2(out)) io.err(`dunstan: replacing ${out}
 `);
-  writeFileSync3(out, serializeRecord(record2));
+  writeFileSync4(out, serializeRecord(record2));
   const p = record2.predicate;
   if (p.digests.evidence !== old.digests.evidence) {
     const fields = diffPointers(
@@ -43305,17 +43604,17 @@ async function rerun(args, io) {
 
 `);
   }
-  io.out(renderRecord(record2));
+  io.out(renderRecord(record2, { hasToken: client.hasToken }));
   io.out(`record: ${out} (the original ${path} is unchanged)
 `);
   return exitFor(p.verdict);
 }
 
 // src/cli/suggest.ts
-import { readFileSync as readFileSync5 } from "node:fs";
-import { parseArgs as parseArgs3 } from "node:util";
+import { readFileSync as readFileSync6 } from "node:fs";
+import { parseArgs as parseArgs4 } from "node:util";
 async function suggest(args, io) {
-  const { values } = parseArgs3({
+  const { values } = parseArgs4({
     args,
     strict: true,
     allowPositionals: false,
@@ -43324,7 +43623,7 @@ async function suggest(args, io) {
   const file2 = values["report-file"];
   let bytes;
   try {
-    bytes = file2 === void 0 || file2 === "-" ? io.readStdin() : readFileSync5(file2);
+    bytes = file2 === void 0 || file2 === "-" ? io.readStdin() : readFileSync6(file2);
   } catch (e) {
     io.err(`dunstan: cannot read the report ${file2 ?? "stdin"}: ${e.message}
 `);
@@ -43334,61 +43633,815 @@ async function suggest(args, io) {
   return 0;
 }
 
+// src/cli/survey.ts
+import { writeFileSync as writeFileSync5 } from "node:fs";
+import { basename as basename4 } from "node:path";
+import { parseArgs as parseArgs5 } from "node:util";
+
+// src/survey/mapping.ts
+var SURVEY_MAPPING_VERSION = "0.2";
+var CLAIM_TYPES = [
+  { type: "T1", label: "head commit" },
+  { type: "T2", label: "files changed" },
+  { type: "T3", label: "test count" },
+  { type: "T4", label: "test failures" },
+  { type: "T5", label: "check run total" },
+  { type: "T6", label: "checks succeeded / none failed" },
+  { type: "T7", label: "merged at" },
+  { type: "T8", label: "deployed at" },
+  { type: "R", label: "references (a row the original study did not have)" }
+];
+var NOT_RECORD_CHECKABLE = [
+  "record_not_found",
+  "no_comparable_record_field",
+  "local_run_not_in_record"
+];
+function claimType(claim2) {
+  const { check: check3, field } = claim2;
+  if (check3 === "head") return "T1";
+  if (check3 === "scope") return "T2";
+  if (check3 === "reference") return "R";
+  if (check3 === "count") {
+    if (/^\/tests\/[0-9]+\/count$/.test(field)) return "T3";
+    if (/^\/tests\/[0-9]+\/failures$/.test(field)) return "T4";
+    if (field === "/checks/total") return "T5";
+    if (field === "/checks/allSucceeded" || field === "/checks/noneFailed") return "T6";
+  }
+  if (check3 === "time") {
+    if (field === "/mergedAt") return "T7";
+    if (field === "/deployedAt") return "T8";
+  }
+  throw new Error(`no claim type for ${check3} ${field}`);
+}
+function column(claim2) {
+  if (claim2.verdict === "pass") return "supported";
+  if (claim2.verdict === "fail") return "contradicted";
+  return NOT_RECORD_CHECKABLE.includes(claim2.reason ?? "") ? "notRecordCheckable" : "unverifiable";
+}
+
+// src/survey/aggregate.ts
+var Z = 1.96;
+var DECIMALS = 4;
+function fixed(x) {
+  return Math.min(1, Math.max(0, x)).toFixed(DECIMALS);
+}
+function rate(numerator, denominator) {
+  if (denominator === 0) return { numerator, denominator, value: null, wilson95: null };
+  const n = denominator;
+  const p = numerator / n;
+  const z2 = Z * Z;
+  const centre = (p + z2 / (2 * n)) / (1 + z2 / n);
+  const half = Z * Math.sqrt(p * (1 - p) / n + z2 / (4 * n * n)) / (1 + z2 / n);
+  return {
+    numerator,
+    denominator,
+    value: fixed(p),
+    wilson95: {
+      low: numerator === 0 ? fixed(0) : fixed(centre - half),
+      high: numerator === n ? fixed(1) : fixed(centre + half)
+    }
+  };
+}
+var zero = () => ({
+  supported: 0,
+  unverifiable: 0,
+  notRecordCheckable: 0,
+  contradicted: 0
+});
+var byCodeUnit = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+function aggregate(entries, listed2, advisory, reader) {
+  const context = { hasToken: reader.authenticated };
+  const totals = zero();
+  const types = new Map(CLAIM_TYPES.map((t) => [t.type, zero()]));
+  const unsettled2 = /* @__PURE__ */ new Map();
+  const noRecord = /* @__PURE__ */ new Map();
+  const notes = /* @__PURE__ */ new Map();
+  const blocks = { found: 0, missing: 0, invalid: 0, ambiguous: 0 };
+  let withRecord = 0;
+  let advised = 0;
+  for (const entry of entries) {
+    if (entry.record === null) {
+      noRecord.set(entry.reason, (noRecord.get(entry.reason) ?? 0) + 1);
+      continue;
+    }
+    withRecord++;
+    const p = entry.record.predicate;
+    blocks[p.block.status]++;
+    for (const claim2 of p.claims) {
+      const col = column(claim2);
+      totals[col]++;
+      types.get(claimType(claim2))[col]++;
+      if (col === "unverifiable" || col === "notRecordCheckable") {
+        const reason = claim2.reason;
+        const seen = unsettled2.get(reason) ?? { column: col, count: 0 };
+        seen.count++;
+        unsettled2.set(reason, seen);
+      }
+    }
+    if (p.advisory !== void 0) {
+      advised++;
+      for (const a of p.advisory.advisories) notes.set(a.note, (notes.get(a.note) ?? 0) + 1);
+    }
+  }
+  const total = totals.supported + totals.unverifiable + totals.notRecordCheckable + totals.contradicted;
+  const result = {
+    mapping: { version: SURVEY_MAPPING_VERSION },
+    pullRequests: {
+      listed: listed2,
+      selected: entries.length,
+      withRecord,
+      blockFound: blocks.found,
+      blockMissing: blocks.missing,
+      blockInvalid: blocks.invalid,
+      blockAmbiguous: blocks.ambiguous,
+      noRecord: [...noRecord.entries()].sort(([a], [b]) => byCodeUnit(a, b)).map(([reason, count]) => ({ reason, count }))
+    },
+    claims: { total, ...totals },
+    byType: CLAIM_TYPES.map((t) => ({ type: t.type, ...types.get(t.type) })),
+    cannotSettle: rate(totals.unverifiable + totals.notRecordCheckable, total),
+    contradictedOfSettled: rate(totals.contradicted, totals.supported + totals.contradicted),
+    unsettled: [...unsettled2.entries()].sort(([a, x], [b, y]) => y.count - x.count || byCodeUnit(a, b)).map(([reason, { column: col, count }]) => ({
+      reason,
+      column: col,
+      count,
+      remedy: remedyForReason(reason, context) ?? null
+    }))
+  };
+  if (advisory) {
+    result.advisory = {
+      pullRequests: advised,
+      notes: [...notes.entries()].sort(([a], [b]) => byCodeUnit(a, b)).map(([note, count]) => ({ note, count }))
+    };
+  }
+  return result;
+}
+
+// src/survey/record.ts
+var SURVEY_FORMAT = "dunstan-survey-0.1-draft";
+var LISTING_PER_PAGE = 100;
+var DEFAULT_LAST = 30;
+var MAX_LAST = 200;
+function appendListed(listed2, seen, items) {
+  let duplicates = 0;
+  for (const item of items) {
+    if (seen.has(item.number)) duplicates++;
+    else {
+      seen.add(item.number);
+      listed2.push(item);
+    }
+  }
+  return duplicates;
+}
+var sinceStart = (since) => `${since}T00:00:00Z`;
+function selectPullRequests(parameters, listed2) {
+  const authors = new Set(parameters.authors.map((a) => a.toLowerCase()));
+  const seen = /* @__PURE__ */ new Set();
+  return listed2.filter((pr) => {
+    if (seen.has(pr.number)) return false;
+    seen.add(pr.number);
+    return true;
+  }).filter((pr) => parameters.since === null || pr.createdAt >= sinceStart(parameters.since)).filter(
+    (pr) => authors.size === 0 || pr.author !== null && authors.has(pr.author.toLowerCase())
+  ).slice(0, parameters.last).map((pr) => pr.number);
+}
+function listingStop(parameters, pages, listed2) {
+  const last = pages.at(-1);
+  if (last === void 0) return null;
+  if (last.error !== void 0) return "listing_unreadable";
+  if (selectPullRequests(parameters, listed2).length >= parameters.last) return "selection_full";
+  const since = parameters.since;
+  if (since !== null && listed2.some((pr) => pr.createdAt < sinceStart(since))) {
+    return "since_reached";
+  }
+  if (last.items < LISTING_PER_PAGE) return "listing_ended";
+  return null;
+}
+function surveyCommand(parameters, out) {
+  const words2 = [
+    "dunstan",
+    "survey",
+    "--repo",
+    parameters.repository,
+    "--last",
+    `${parameters.last}`
+  ];
+  if (parameters.since !== null) words2.push("--since", parameters.since);
+  for (const author of parameters.authors) words2.push("--author", author);
+  if (parameters.report.kind === "pr-comment") {
+    words2.push("--report-comment-author", parameters.report.author);
+  }
+  if (parameters.advisory) words2.push("--advisory");
+  words2.push("--out", out);
+  return words2.join(" ");
+}
+function surveyRerun(parameters, out) {
+  return { offline: `dunstan verify ${out}`, online: surveyCommand(parameters, out) };
+}
+function surveyDigest(record2) {
+  const { digest: _, ...rest } = record2;
+  return sha256Canonical(rest);
+}
+function buildSurveyRecord(input2) {
+  const unsigned = {
+    format: SURVEY_FORMAT,
+    checker: input2.checker,
+    selection: {
+      parameters: input2.parameters,
+      reader: { authenticated: input2.reader.authenticated },
+      listing: input2.listing,
+      selected: selectPullRequests(input2.parameters, input2.listing.pullRequests)
+    },
+    entries: input2.entries,
+    aggregate: aggregate(
+      input2.entries,
+      input2.listing.pullRequests.length,
+      input2.parameters.advisory,
+      input2.reader
+    ),
+    rerun: surveyRerun(input2.parameters, input2.out)
+  };
+  return { ...unsigned, digest: { sha256: surveyDigest(unsigned) } };
+}
+function serializeSurvey(record2) {
+  return `${JSON.stringify(record2, null, 2)}
+`;
+}
+function isSurveyRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) && value.format === SURVEY_FORMAT;
+}
+
+// src/pipeline/survey.ts
+var recordFileName = (repository, number4) => `dunstan-${repository.replace("/", "-")}-${number4}.json`;
+function rateLimited(response) {
+  const s = response.status;
+  return s === 429 || s === 403 && (response.headers.get("x-ratelimit-remaining") === "0" || response.headers.get("retry-after") !== null);
+}
+function str2(value) {
+  return typeof value === "string" ? value : null;
+}
+function listedOf(item) {
+  if (item === null || typeof item !== "object") return null;
+  const pr = item;
+  const createdAt = str2(pr.created_at);
+  if (typeof pr.number !== "number" || !Number.isSafeInteger(pr.number) || pr.number < 1 || createdAt === null || !/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]+)?Z$/.test(createdAt)) {
+    return null;
+  }
+  const user = pr.user;
+  const login = str2(user?.login);
+  return {
+    number: pr.number,
+    createdAt,
+    author: login === "" ? null : login,
+    merged: pr.merged_at !== null && pr.merged_at !== void 0
+  };
+}
+async function readListing(client, parameters, now, pageBound) {
+  const pages = [];
+  const pullRequests = [];
+  const seen = /* @__PURE__ */ new Set();
+  const done = (end) => ({
+    pageBound,
+    pages,
+    pullRequests,
+    duplicates: pages.reduce((sum, p) => sum + p.duplicates, 0),
+    end
+  });
+  for (let page = 1; page <= pageBound; page++) {
+    const path = `/repos/${parameters.repository}/pulls?state=closed&sort=created&direction=desc&per_page=${LISTING_PER_PAGE}&page=${page}`;
+    const read = await client.read("pull_request", path, { record: false });
+    const entry = {
+      page,
+      locator: `GET ${path}`,
+      sha256: sha256Hex(read.body),
+      readAt: now().toISOString(),
+      items: 0,
+      duplicates: 0
+    };
+    if (!read.ok) {
+      entry.error = read.error;
+    } else {
+      const items = Array.isArray(read.json) ? read.json.map(listedOf) : null;
+      if (items === null || items.some((i) => i === null)) entry.error = "parse";
+      else {
+        entry.items = items.length;
+        entry.duplicates = appendListed(pullRequests, seen, items);
+      }
+    }
+    pages.push(entry);
+    const end = listingStop(parameters, pages, pullRequests);
+    if (end !== null) return done(end);
+  }
+  return done("page_bound");
+}
+async function survey(input2) {
+  const { parameters } = input2;
+  const now = input2.now ?? (() => /* @__PURE__ */ new Date());
+  const limited = /* @__PURE__ */ new Set();
+  const baseFetch = input2.fetch ?? fetch;
+  const watched = (async (resource, init) => {
+    const response = await baseFetch(resource, init);
+    if (rateLimited(response)) {
+      const url2 = typeof resource === "string" ? resource : resource instanceof URL ? resource.href : resource.url;
+      limited.add(new URL(url2).pathname);
+    }
+    return response;
+  });
+  const newClient = () => new GitHubClient({
+    token: input2.token,
+    fetch: watched,
+    now,
+    ...input2.sleep === void 0 ? {} : { sleep: input2.sleep },
+    ...input2.warn === void 0 ? {} : { warn: input2.warn }
+  });
+  const listingClient = newClient();
+  const reader = { authenticated: listingClient.hasToken };
+  const listing = await readListing(listingClient, parameters, now, input2.pageBound ?? MAX_PAGES);
+  const entries = [];
+  for (const number4 of selectPullRequests(parameters, listing.pullRequests)) {
+    const client = newClient();
+    const repository = parameters.repository;
+    const pullPath = `/repos/${repository}/pulls/${number4}`;
+    const commentsPath = `/repos/${repository}/issues/${number4}/comments`;
+    const report = parameters.report;
+    try {
+      const record2 = await checkPullRequest({
+        readers: githubReaders(client),
+        repository,
+        number: number4,
+        report: async (pr) => report.kind === "pr-body" ? reportFromPullRequestBody(pr.repository, pr) : reportFromComment(client, pr.repository, number4, report.author),
+        checker: input2.checker,
+        recordFile: recordFileName(repository, number4),
+        advisory: parameters.advisory
+      });
+      entries.push({ pullRequest: number4, record: record2 });
+    } catch (e) {
+      let reason;
+      if (e instanceof PullRequestMoved) reason = "pull_request_moved";
+      else if (e instanceof PullRequestUnreadable) {
+        reason = limited.has(pullPath) ? "rate_limited" : "pull_request_unreadable";
+      } else if (e instanceof ReportUnavailable) {
+        reason = limited.has(commentsPath) ? "rate_limited" : "report_unavailable";
+      } else throw e;
+      entries.push({ pullRequest: number4, record: null, reason });
+    }
+  }
+  return buildSurveyRecord({
+    checker: input2.checker,
+    parameters,
+    reader,
+    listing,
+    entries,
+    out: input2.out
+  });
+}
+
+// src/survey/summary.ts
+var COLUMN_LABEL = {
+  supported: "Supported",
+  unverifiable: "Unverifiable",
+  notRecordCheckable: "Not record-checkable",
+  contradicted: "Contradicted"
+};
+var END_TEXT = {
+  selection_full: "it held enough pull requests for the selection",
+  since_reached: "it reached pull requests created before the --since date",
+  listing_ended: "it ended",
+  listing_unreadable: "a page could not be read; the selection is from the pages read before it",
+  page_bound: "it reached the page bound"
+};
+var ANONYMOUS = "Without a token, every tests claim naming a JUnit record and every `closes` claim cannot be settled, so the cannot-settle share is higher than an authenticated read of the same repository would give.";
+function row(cells) {
+  return `| ${cells.join(" | ")} |`;
+}
+function table2(head, rows) {
+  return [row(head), row(head.map(() => "---")), ...rows.map(row)];
+}
+function share(r) {
+  return r.value ?? "n/a";
+}
+function interval(r) {
+  return r.wilson95 === null ? "n/a" : `${r.wilson95.low}\u2013${r.wilson95.high}`;
+}
+function plural2(n, one, many) {
+  return `${n} ${n === 1 ? one : many}`;
+}
+function renderSurveySummary(record2) {
+  const { parameters, listing, selected } = record2.selection;
+  const a = record2.aggregate;
+  const lines = [];
+  const scope = [`the ${parameters.last} most recently created closed pull requests`];
+  if (parameters.since !== null) scope.push(`created on or after ${parameters.since}`);
+  if (parameters.authors.length > 0) scope.push(`opened by ${parameters.authors.join(", ")}`);
+  const report = parameters.report.kind === "pr-body" ? "the pull request body" : `the latest comment by ${parameters.report.author}`;
+  lines.push(
+    `# Settleability survey: ${parameters.repository}`,
+    "",
+    `DRAFT (${record2.format}). ${record2.checker.name} ${record2.checker.version}, survey mapping ${a.mapping.version}. Read-only.`,
+    "",
+    `Selection: ${scope.join(", ")}. Report: ${report}. Advisory reader: ${parameters.advisory ? "on" : "off"}.`,
+    "",
+    record2.selection.reader.authenticated ? "GitHub was read with a token (GITHUB_TOKEN set)." : `GitHub was read without a token (GITHUB_TOKEN not set). ${ANONYMOUS}`,
+    "",
+    "This survey reports which claims the record could settle. A claim the record could not settle is neither supported nor contradicted.",
+    "",
+    "## Claims the record could not settle",
+    "",
+    `The record could not settle ${a.cannotSettle.numerator} of ${plural2(a.cannotSettle.denominator, "claim", "claims")}.`,
+    ""
+  );
+  if (a.unsettled.length === 0) {
+    lines.push("None.");
+  } else {
+    lines.push(
+      ...table2(
+        ["Reason", "Column", "Claims", "Remedy"],
+        a.unsettled.map((u) => [
+          `\`${u.reason}\``,
+          COLUMN_LABEL[u.column],
+          u.count,
+          u.remedy ?? "none listed"
+        ])
+      )
+    );
+  }
+  lines.push(
+    "",
+    "## Results",
+    "",
+    ...table2(
+      ["Measure", "Claims", "Of", "Share", "Wilson 95%"],
+      [
+        [
+          "The record could not settle",
+          a.cannotSettle.numerator,
+          `${a.cannotSettle.denominator} claims`,
+          share(a.cannotSettle),
+          interval(a.cannotSettle)
+        ],
+        [
+          "Contradicted by the record, of the claims it settled",
+          a.contradictedOfSettled.numerator,
+          `${a.contradictedOfSettled.denominator} settled claims`,
+          share(a.contradictedOfSettled),
+          interval(a.contradictedOfSettled)
+        ]
+      ]
+    ),
+    "",
+    "## By claim type",
+    "",
+    ...table2(
+      ["Type", "Supported", "Unverifiable", "Not record-checkable", "Contradicted"],
+      [
+        ...a.byType.map((t) => {
+          const label = CLAIM_TYPES.find((c) => c.type === t.type)?.label ?? "";
+          return [
+            `${t.type} ${label}`,
+            t.supported,
+            t.unverifiable,
+            t.notRecordCheckable,
+            t.contradicted
+          ];
+        }),
+        [
+          `All (${a.claims.total})`,
+          a.claims.supported,
+          a.claims.unverifiable,
+          a.claims.notRecordCheckable,
+          a.claims.contradicted
+        ]
+      ]
+    )
+  );
+  if (a.advisory !== void 0) {
+    lines.push(
+      "",
+      "## Advisory notes",
+      "",
+      `The advisory reader read the prose of ${plural2(a.advisory.pullRequests, "pull request", "pull requests")}. Its notes never enter either rate, and a possible disagreement is unverified.`,
+      ""
+    );
+    if (a.advisory.notes.length === 0) lines.push("No notes.");
+    else {
+      lines.push(
+        ...table2(
+          ["Note", "As shown", "Count"],
+          a.advisory.notes.map((n) => [`\`${n.note}\``, noteText(n.note), n.count])
+        )
+      );
+    }
+  }
+  const p = a.pullRequests;
+  const context = { hasToken: record2.selection.reader.authenticated };
+  const remedy = (reason) => remedyForReason(reason, context) ?? "";
+  lines.push(
+    "",
+    "## Pull requests",
+    "",
+    ...table2(
+      ["Pull requests", "Count", "Remedy"],
+      [
+        ["Listed", p.listed, ""],
+        ["Selected", p.selected, ""],
+        ["With a valid block", p.blockFound, ""],
+        ["`block_missing`", p.blockMissing, remedy("block_missing")],
+        ["`block_invalid`", p.blockInvalid, remedy("block_invalid")],
+        ["`block_ambiguous`", p.blockAmbiguous, remedy("block_ambiguous")],
+        ...p.noRecord.map((n) => [`No record: \`${n.reason}\``, n.count, remedy(n.reason)])
+      ]
+    ),
+    "",
+    `The listing was read for ${plural2(listing.pages.length, "page", "pages")} and no further because ${listing.end === "page_bound" ? `it reached the bound of ${listing.pageBound} pages` : END_TEXT[listing.end]}.`
+  );
+  if (listing.duplicates > 0) {
+    const one = listing.duplicates === 1;
+    lines.push(
+      "",
+      `The listing named ${plural2(listing.duplicates, "pull request", "pull requests")} again on a later page, so it changed while it was read: most likely ${plural2(listing.duplicates, "pull request", "pull requests")} closed meanwhile and ${one ? "was" : "were"} not listed, and the selection may be missing ${one ? "it" : "them"}. Each repeated pull request is listed, selected and counted once: the pages held ${listing.pullRequests.length + listing.duplicates} items for ${listing.pullRequests.length} pull requests.`
+    );
+  }
+  if (selected.length < parameters.last) {
+    lines.push(
+      "",
+      `${plural2(selected.length, "pull request was", "pull requests were")} selected, fewer than the ${parameters.last} asked for.`
+    );
+  }
+  lines.push(
+    "",
+    `Verify offline: \`${record2.rerun.offline}\`. Run again: \`${record2.rerun.online}\`.`,
+    ""
+  );
+  return lines.join("\n");
+}
+
+// src/cli/survey.ts
+var LOGIN = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})(?:\[bot\])?$/;
+function parseLogin(value, flag) {
+  if (!LOGIN.test(value)) throw new UsageError(`${flag} must be a GitHub login`);
+  return value;
+}
+function parseSince(value) {
+  const day = /* @__PURE__ */ new Date(`${value}T00:00:00Z`);
+  const valid = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/.test(value) && !Number.isNaN(day.getTime()) && day.toISOString().slice(0, 10) === value;
+  if (!valid) throw new UsageError("--since must be a date, YYYY-MM-DD (UTC)");
+  return value;
+}
+async function survey2(args, io) {
+  const { values } = parseArgs5({
+    args,
+    strict: true,
+    allowPositionals: false,
+    options: {
+      repo: { type: "string" },
+      last: { type: "string" },
+      since: { type: "string" },
+      author: { type: "string", multiple: true },
+      "report-comment-author": { type: "string" },
+      advisory: { type: "boolean" },
+      out: { type: "string" },
+      summary: { type: "string" }
+    }
+  });
+  if (values.repo === void 0 || !REPOSITORY.test(values.repo)) {
+    throw new UsageError("--repo <owner/name> is required");
+  }
+  if (values.out === void 0) throw new UsageError("--out <survey.json> is required");
+  const last = values.last === void 0 ? DEFAULT_LAST : parsePositiveInt(values.last, "--last");
+  if (last > MAX_LAST) throw new UsageError(`--last is at most ${MAX_LAST}`);
+  const commentAuthor = values["report-comment-author"];
+  const parameters = {
+    repository: values.repo,
+    last,
+    since: values.since === void 0 ? null : parseSince(values.since),
+    authors: (values.author ?? []).map((a) => parseLogin(a, "--author")),
+    report: commentAuthor === void 0 ? { kind: "pr-body" } : { kind: "pr-comment", author: parseLogin(commentAuthor, "--report-comment-author") },
+    advisory: values.advisory === true
+  };
+  const token = io.env.GITHUB_TOKEN;
+  if (token === void 0 || token === "") {
+    io.err(
+      "dunstan: GITHUB_TOKEN is not set; reading anonymously (GitHub serves no artifact to an anonymous reader)\n"
+    );
+  }
+  const record2 = await survey({
+    parameters,
+    checker: checkerIdentity(io.artifact),
+    out: basename4(values.out),
+    token,
+    ...io.fetch === void 0 ? {} : { fetch: io.fetch },
+    ...io.now === void 0 ? {} : { now: io.now },
+    warn: (message) => io.err(`dunstan: ${message}
+`)
+  });
+  writeFileSync5(values.out, serializeSurvey(record2));
+  const summary = renderSurveySummary(record2);
+  if (values.summary === void 0) {
+    io.out(summary);
+    io.err(`dunstan: survey record: ${values.out}
+`);
+  } else {
+    writeFileSync5(values.summary, summary);
+    io.out(`survey record: ${values.out}
+summary: ${values.summary}
+`);
+  }
+  return 0;
+}
+
 // src/cli/template.ts
-import { parseArgs as parseArgs4 } from "node:util";
-var TEST_RECORD_FLAGS = [
-  "tests-command",
+import { parseArgs as parseArgs6 } from "node:util";
+
+// src/template/tests-ci.ts
+var plural3 = (n, one, many) => `${n} ${n === 1 ? one : many}`;
+function unsettled(reason, why, remedy) {
+  const notes = [`tests are not declared: ${why} (${reason}).`];
+  if (remedy !== void 0) notes.push(`remedy: ${remedy}`);
+  return { status: "unsettled", reason, notes };
+}
+async function testsFromCi(client, input2) {
+  const { repository, headCommit: head, record: record2 } = input2;
+  if (!client.hasToken) {
+    return unsettled(
+      "no_token",
+      "GITHUB_TOKEN is not set, and GitHub answers an artifact download only with a token, even on a public repository",
+      "set GITHUB_TOKEN to a token that can read the repository, with actions: read, and run dunstan template --tests-ci again."
+    );
+  }
+  if (!input2.pushed) {
+    return unsettled(
+      "not_pushed",
+      `HEAD ${head} is not on any remote-tracking branch, so no CI run can have tested it`,
+      "push it, wait for CI to finish, and run dunstan template --tests-ci again (run git fetch first if it was pushed from elsewhere)."
+    );
+  }
+  const observed = { runsNotCompleted: 0 };
+  const evidence = await readTestRecord(client, repository, record2, head, observed);
+  const named = `the artifact ${record2.artifact} holding ${record2.path} from job ${record2.job}`;
+  const pending = observed.runsNotCompleted > 0 ? `CI has not finished: ${plural3(observed.runsNotCompleted, "run", "runs")} of ${record2.workflow} at ${head} ${observed.runsNotCompleted === 1 ? "is" : "are"} not completed` : void 0;
+  const again = "run dunstan template --tests-ci again once CI has finished on this commit.";
+  if (evidence.status !== "ok") {
+    const reason = evidence.status === "unreadable" ? `source_unreadable:${evidence.source}` : `evidence_field_unpopulated:${evidence.field}`;
+    if (pending !== void 0) return unsettled(reason, pending, again);
+    const why = reason === "source_unreadable:artifact" ? `a run of ${record2.workflow} at ${head} uploaded ${record2.artifact}, and it could not be read` : `the workflow runs of ${record2.workflow} at ${head} could not be read`;
+    return unsettled(
+      reason,
+      why,
+      remedyForReason(reason, { hasToken: true }) ?? "run dunstan template --tests-ci again."
+    );
+  }
+  if (evidence.runs.length === 0) {
+    if (pending !== void 0) {
+      return unsettled(
+        "record_not_found",
+        `${pending}, and no completed run uploaded ${named}`,
+        again
+      );
+    }
+    return unsettled(
+      "record_not_found",
+      `no run of ${record2.workflow} at ${head} uploaded ${named}`,
+      remedyForReason("record_not_found", { hasToken: true })
+    );
+  }
+  const executed = new Set(evidence.runs.map((r) => r.executed));
+  const failed = new Set(evidence.runs.map((r) => r.failed));
+  if (executed.size > 1 || failed.size > 1) {
+    const counts = evidence.runs.map((r) => `run ${r.runId}: ${r.executed} executed, ${r.failed} failed`).join("; ");
+    return unsettled(
+      "record_ambiguous",
+      `the runs of ${record2.workflow} at ${head} that uploaded ${record2.artifact} disagree (${counts}), and the gate never picks one`,
+      "make the runs agree (re-run the one that differs), or name a job only one of them runs."
+    );
+  }
+  const run = evidence.runs[0];
+  const runs = evidence.runs.map((r) => r.runId).join(", ");
+  const notes = [
+    `tests: ${run.executed} executed and ${run.failed} failed in ${record2.path} in the artifact ${record2.artifact} of job ${record2.job} in ${record2.workflow} at ${head}, read from CI as the gate reads it (${evidence.runs.length === 1 ? "run" : "runs"} ${runs}).`
+  ];
+  if (pending !== void 0) {
+    notes.push(
+      `${pending}; a run that finishes later with other counts makes the gate's read ambiguous. Run dunstan template --tests-ci again once CI has finished.`
+    );
+  }
+  return {
+    status: "settled",
+    run: { command: input2.command, count: run.executed, failures: run.failed, record: record2 },
+    notes
+  };
+}
+
+// src/cli/template.ts
+var RECORD_FLAGS = [
   "tests-workflow",
   "tests-job",
   "tests-artifact",
   "tests-artifact-path"
 ];
+var DEFAULT_ARTIFACT = "dunstan-junit";
+var DEFAULT_ARTIFACT_PATH = "junit.xml";
 async function template(args, io) {
-  const { values } = parseArgs4({
+  const { values } = parseArgs6({
     args,
     strict: true,
     allowPositionals: false,
     options: {
       base: { type: "string" },
+      "tests-ci": { type: "boolean" },
+      "tests-local": { type: "string" },
       "tests-junit": { type: "string" },
-      ...Object.fromEntries(TEST_RECORD_FLAGS.map((f) => [f, { type: "string" }]))
+      "tests-command": { type: "string" },
+      repo: { type: "string" },
+      ...Object.fromEntries(RECORD_FLAGS.map((f) => [f, { type: "string" }]))
     }
   });
   const v = values;
+  const flag = (name) => v[name];
+  const ci = v["tests-ci"] === true;
+  const modes = [ci, flag("tests-local") !== void 0, flag("tests-junit") !== void 0];
+  if (modes.filter(Boolean).length > 1) {
+    throw new UsageError("give one of --tests-ci, --tests-local or --tests-junit");
+  }
+  if (flag("repo") !== void 0 && !ci) throw new UsageError("--repo goes with --tests-ci");
+  const given = ["tests-command", ...RECORD_FLAGS].filter((f) => flag(f) !== void 0);
+  const cwd = io.cwd ?? process.cwd();
   let tests;
-  const given = TEST_RECORD_FLAGS.filter((f) => v[f] !== void 0);
-  if (v["tests-junit"] === void 0) {
-    if (given.length > 0) {
-      throw new UsageError(`--${given[0]} goes with --tests-junit <JUnit XML file>`);
+  if (ci) {
+    const missing = ["tests-command", "tests-workflow", "tests-job"].filter(
+      (f) => flag(f) === void 0
+    );
+    if (missing.length > 0) {
+      throw new UsageError(`--tests-ci needs ${missing.map((f) => `--${f}`).join(", ")}`);
+    }
+    const repo = flag("repo");
+    if (repo !== void 0 && !REPOSITORY.test(repo)) {
+      throw new UsageError("--repo must be <owner/name>");
+    }
+    const head = headCommit(cwd);
+    const repository = repo ?? originRepository(cwd);
+    const client = new GitHubClient({
+      token: io.env.GITHUB_TOKEN,
+      ...io.fetch === void 0 ? {} : { fetch: io.fetch },
+      warn: (message) => io.err(`dunstan: ${message}
+`)
+    });
+    const read = await testsFromCi(client, {
+      repository,
+      headCommit: head,
+      command: flag("tests-command"),
+      pushed: isPushed(cwd, head),
+      record: {
+        kind: "junit",
+        workflow: flag("tests-workflow"),
+        job: flag("tests-job"),
+        artifact: flag("tests-artifact") ?? DEFAULT_ARTIFACT,
+        path: flag("tests-artifact-path") ?? DEFAULT_ARTIFACT_PATH
+      }
+    });
+    tests = { kind: "ci", read };
+  } else if (flag("tests-local") !== void 0) {
+    if (flag("tests-command") === void 0) {
+      throw new UsageError("--tests-local needs --tests-command <cmd>");
     }
-  } else {
-    const missing = TEST_RECORD_FLAGS.filter((f) => v[f] === void 0);
+    const extra = RECORD_FLAGS.find((f) => flag(f) !== void 0);
+    if (extra !== void 0) throw new UsageError(`--${extra} does not go with --tests-local`);
+    tests = {
+      kind: "local",
+      junit: flag("tests-local"),
+      command: flag("tests-command")
+    };
+  } else if (flag("tests-junit") !== void 0) {
+    const missing = ["tests-command", ...RECORD_FLAGS].filter(
+      (f) => flag(f) === void 0
+    );
     if (missing.length > 0) {
       throw new UsageError(
         `--tests-junit needs the CI record its counts are checked against: ${missing.map((f) => `--${f}`).join(", ")}`
       );
     }
     tests = {
-      junit: v["tests-junit"],
-      command: v["tests-command"],
+      kind: "junit",
+      junit: flag("tests-junit"),
+      command: flag("tests-command"),
       record: {
-        workflow: v["tests-workflow"],
-        job: v["tests-job"],
-        artifact: v["tests-artifact"],
-        path: v["tests-artifact-path"]
+        workflow: flag("tests-workflow"),
+        job: flag("tests-job"),
+        artifact: flag("tests-artifact"),
+        path: flag("tests-artifact-path")
       }
     };
+  } else if (given.length > 0) {
+    throw new UsageError(`--${given[0]} goes with --tests-ci, --tests-local or --tests-junit`);
   }
-  const t = templateBlock({ cwd: io.cwd ?? process.cwd(), base: v.base, tests });
+  const t = templateBlock({ cwd, base: flag("base"), tests });
   io.out(renderBlock(t.block));
   for (const note of t.notes) io.err(`dunstan: ${note}
 `);
-  return 0;
+  return tests?.kind === "ci" && tests.read.status === "unsettled" ? EXIT.unverifiable : 0;
 }
 
 // src/cli/verify.ts
-import { readFileSync as readFileSync6 } from "node:fs";
-import { parseArgs as parseArgs5 } from "node:util";
+import { readFileSync as readFileSync7 } from "node:fs";
+import { parseArgs as parseArgs7 } from "node:util";
 
 // src/record/verify.ts
 function same(a, b) {
@@ -43443,10 +44496,10 @@ function verifyRecord(value) {
   const claims = claimsFor(p.block, evidence, p.subject.repository);
   if (!same(p.claims, claims)) {
     const index = claims.findIndex((c, i) => !same(c, p.claims[i]));
-    const at = index === -1 ? claims.length : index;
+    const at2 = index === -1 ? claims.length : index;
     problems.push({
-      member: `/predicate/claims/${at}`,
-      message: `recorded ${canonicalize(p.claims[at] ?? null)}, recomputed ${canonicalize(claims[at] ?? null)}`
+      member: `/predicate/claims/${at2}`,
+      message: `recorded ${canonicalize(p.claims[at2] ?? null)}, recomputed ${canonicalize(claims[at2] ?? null)}`
     });
   }
   differ("/predicate/verdict", p.verdict, overallVerdict(p.block.status, claims));
@@ -43503,9 +44556,162 @@ function verifyRecord(value) {
   return { ok: problems.length === 0, problems, record: record2 };
 }
 
+// src/survey/verify.ts
+var text = (value) => canonicalize(value ?? null);
+function differences(a, b, pointer) {
+  const isObject2 = (v) => v !== null && typeof v === "object";
+  if (Array.isArray(a) && Array.isArray(b)) {
+    const out = [];
+    for (let i = 0; i < Math.max(a.length, b.length); i++) {
+      out.push(...differences(a[i], b[i], `${pointer}/${i}`));
+    }
+    return out;
+  }
+  if (isObject2(a) && isObject2(b) && !Array.isArray(a) && !Array.isArray(b)) {
+    const ao = a;
+    const bo = b;
+    const keys = [.../* @__PURE__ */ new Set([...Object.keys(ao), ...Object.keys(bo)])].sort();
+    return keys.flatMap((k) => differences(ao[k], bo[k], `${pointer}/${escapePointerToken(k)}`));
+  }
+  return text(a) === text(b) ? [] : [pointer];
+}
+function at(value, pointer, base) {
+  let v = value;
+  for (const token of pointer.slice(base.length).split("/").slice(1)) {
+    const key = token.replace(/~1/g, "/").replace(/~0/g, "~");
+    v = v !== null && typeof v === "object" ? v[key] : void 0;
+  }
+  return v;
+}
+function verifySurveyRecord(value) {
+  const schemaErrors = validateSurveyRecord(value);
+  if (schemaErrors.length > 0) {
+    return {
+      ok: false,
+      problems: schemaErrors.map((e) => ({
+        member: e.pointer,
+        message: `schema_violation (${e.keyword}): ${e.message}`
+      }))
+    };
+  }
+  const record2 = value;
+  const problems = [];
+  const differ = (member, recorded, recomputed) => {
+    for (const pointer of differences(recorded, recomputed, member)) {
+      problems.push({
+        member: pointer,
+        message: `recorded ${text(at(recorded, pointer, member))}, recomputed ${text(at(recomputed, pointer, member))}`
+      });
+    }
+  };
+  const { checker, selection, entries } = record2;
+  if (checker.name !== CHECKER_NAME || checker.version !== CHECKER_VERSION) {
+    problems.push({
+      member: "/checker",
+      message: `survey was written by ${checker.name} ${checker.version}; this is ${CHECKER_NAME} ${CHECKER_VERSION}`
+    });
+    return { ok: false, problems, record: record2 };
+  }
+  const { parameters, listing } = selection;
+  const firstAt = /* @__PURE__ */ new Map();
+  listing.pullRequests.forEach((pr, i) => {
+    const first = firstAt.get(pr.number);
+    if (first === void 0) firstAt.set(pr.number, i);
+    else {
+      problems.push({
+        member: `/selection/listing/pullRequests/${i}`,
+        message: `pull request ${pr.number} is listed again (first at /selection/listing/pullRequests/${first}); the listing holds each number once`
+      });
+    }
+  });
+  const held = listing.pages.reduce((sum, page) => sum + page.items, 0);
+  const repeated = listing.pages.reduce((sum, page) => sum + page.duplicates, 0);
+  listing.pages.forEach((page, i) => {
+    if (page.duplicates > page.items) {
+      problems.push({
+        member: `/selection/listing/pages/${i}/duplicates`,
+        message: `recorded ${page.duplicates}, more than the page's ${page.items} items`
+      });
+    }
+  });
+  differ("/selection/listing/duplicates", listing.duplicates, repeated);
+  differ(
+    "/selection/listing/pullRequests/length",
+    listing.pullRequests.length,
+    held - listing.duplicates
+  );
+  let read = 0;
+  listing.pages.forEach((page, i) => {
+    read += page.items - page.duplicates;
+    if (i === listing.pages.length - 1) return;
+    const stop2 = listingStop(
+      parameters,
+      listing.pages.slice(0, i + 1),
+      listing.pullRequests.slice(0, read)
+    );
+    if (stop2 !== null) {
+      problems.push({
+        member: `/selection/listing/pages/${i + 1}`,
+        message: `the listing ended at page ${page.page} (${stop2}); no later page is read`
+      });
+    }
+  });
+  const stop = listingStop(parameters, listing.pages, listing.pullRequests);
+  const end = stop ?? (listing.pages.length === listing.pageBound ? "page_bound" : null);
+  if (end === null) {
+    problems.push({
+      member: "/selection/listing/end",
+      message: `recorded ${text(listing.end)}, recomputed none: the listing was not read to an end`
+    });
+  } else {
+    differ("/selection/listing/end", listing.end, end);
+  }
+  if (listing.pages.length > listing.pageBound) {
+    problems.push({
+      member: "/selection/listing/pages",
+      message: `${listing.pages.length} pages read, past the bound of ${listing.pageBound}`
+    });
+  }
+  const selected = selectPullRequests(parameters, listing.pullRequests);
+  differ("/selection/selected", selection.selected, selected);
+  differ(
+    "/entries/pullRequests",
+    entries.map((e) => e.pullRequest),
+    selected
+  );
+  entries.forEach((entry, i) => {
+    if (entry.record === null) return;
+    const base = `/entries/${i}/record`;
+    const result = verifyRecord(entry.record);
+    for (const p of result.problems)
+      problems.push({ member: `${base}${p.member}`, message: p.message });
+    const subject = entry.record.predicate.subject;
+    differ(`${base}/predicate/subject/pullRequest`, subject.pullRequest, entry.pullRequest);
+    differ(
+      `${base}/predicate/subject/repository`,
+      subject.repository.toLowerCase(),
+      parameters.repository.toLowerCase()
+    );
+    differ(`${base}/predicate/checker`, entry.record.predicate.checker, checker);
+  });
+  try {
+    differ(
+      "/aggregate",
+      record2.aggregate,
+      aggregate(entries, listing.pullRequests.length, parameters.advisory, selection.reader)
+    );
+  } catch (e) {
+    problems.push({ member: "/aggregate", message: `not recomputed: ${e.message}` });
+  }
+  const out = record2.rerun.offline.startsWith("dunstan verify ") ? record2.rerun.offline.slice("dunstan verify ".length) : "";
+  differ("/rerun", record2.rerun, surveyRerun(parameters, out));
+  differ("/digest/sha256", record2.digest.sha256, surveyDigest(record2));
+  return { ok: problems.length === 0, problems, record: record2 };
+}
+
 // src/cli/verify.ts
 async function verify(args, io) {
-  const { values, positionals } = parseArgs5({
+  const { values, positionals } = parseArgs7({
     args,
     strict: true,
     allowPositionals: true,
@@ -43518,7 +44724,7 @@ async function verify(args, io) {
     throw new UsageError("--sig and --allowed-signers go together");
   }
   const path = positionals[0];
-  const bytes = readFileSync6(path);
+  const bytes = readFileSync7(path);
   let value;
   try {
     value = parseStrictJson(new TextDecoder("utf-8").decode(bytes));
@@ -43528,6 +44734,25 @@ async function verify(args, io) {
 `);
     return 1;
   }
+  if (isSurveyRecord(value)) {
+    if (sig !== void 0) throw new UsageError("a survey record is not signed");
+    const survey3 = verifySurveyRecord(value);
+    if (!survey3.ok) {
+      io.out(`NOT verified: ${path}
+`);
+      for (const problem of survey3.problems) {
+        io.out(`  ${problem.member || "/"}: ${problem.message}
+`);
+      }
+      return 1;
+    }
+    const s = survey3.record;
+    io.out(
+      `verified: ${path}: survey of ${s?.entries.length} pull requests; every embedded record, the selection, the aggregate and the digest recompute
+`
+    );
+    return 0;
+  }
   const result = verifyRecord(value);
   const problems = [...result.problems];
   const assurance = result.record?.predicate.assurance;
@@ -43581,9 +44806,16 @@ usage:
   dunstan verify <record.json> [--sig <file> --allowed-signers <file>]
   dunstan rerun <record.json> [--out <record.json>] [--exclude-check-run <id>]...
   dunstan template [--base <ref>]
-                   [--tests-junit <file> --tests-command <cmd> --tests-workflow <path>
+                   [--tests-ci --tests-command <cmd> --tests-workflow <path> --tests-job <name>
+                    [--tests-artifact <name>] [--tests-artifact-path <path>] [--repo <owner/name>]
+                  | --tests-local <file> --tests-command <cmd>
+                  | --tests-junit <file> --tests-command <cmd> --tests-workflow <path>
                     --tests-job <name> --tests-artifact <name> --tests-artifact-path <path>]
   dunstan suggest [--report-file <path|->]
+  dunstan survey --repo <owner/name> --out <survey.json> [--summary <survey.md>]
+                 [--last <n>] [--since <YYYY-MM-DD>] [--author <login>]...
+                 [--report-comment-author <login>] [--advisory]
+  dunstan junit-merge <file>... --out <file>
   dunstan mcp
 
 check     reads the pull request, the named report and the evidence its block needs, writes the
@@ -43593,15 +44825,30 @@ check     reads the pull request, the named report and the evidence its block ne
 verify    offline: recomputes claims, verdict and digests from the record and compares them.
 rerun     online: re-reads the sources for the recorded subject and block; writes a new record.
 template  local git: prints a dunstan-handback block for HEAD, its files against the merge base
-          with --base (default: the remote's default branch). Tests only from a JUnit file and
-          the CI record named with it; references, checks and mergedAt never (docs/agents.md).
+          with --base (default: the remote's default branch). Tests: --tests-ci reads the counts
+          at HEAD from the CI record check reads (artifact dunstan-junit, file junit.xml unless
+          given; the repository origin names on github.com unless --repo), with GITHUB_TOKEN;
+          --tests-local declares a local JUnit file's counts as a local run; --tests-junit
+          declares them against a CI record. Only --tests-ci reads the network. References,
+          checks and mergedAt never (docs/agents.md, docs/ci-test-records.md).
 suggest   offline: lists sentences in the report's prose (a file, or stdin) that look like claims
           its block does not declare, to declare or reword. Never a verdict (docs/agents.md).
+survey    read-only, DRAFT (docs/survey.md): checks the --last (default 30, at most 200) most
+          recently created closed pull requests as check does, the report in each body or the
+          named author's latest comment; writes the survey record and a Markdown summary of the
+          claims the record could not settle, why, and the contradicted share of the claims it
+          settled. verify recomputes a survey record. GITHUB_TOKEN is optional; the record says
+          whether it was set.
+junit-merge
+          offline: one JUnit file from several (Maven Surefire, Gradle), inputs in code-unit
+          order of path, each copied whole; refused unless its counts are the inputs' sum.
 mcp       serves dunstan_check_handback and dunstan_suggest_declarations over stdio
           (docs/mcp.md): check's checker and suggest, called by an agent before it says done.
 
-exit codes: 0 pass (verify: verified; template: printed; suggest: always), 1 fail (verify: not
-            verified), 2 unverifiable, 3 usage or internal error, or git cannot answer (template)
+exit codes: 0 pass (verify: verified; template: printed; suggest: always; survey: written;
+            junit-merge: written), 1 fail (verify: not verified), 2 unverifiable (template:
+            printed without the tests --tests-ci asked for), 3 usage or internal error, git
+            cannot answer (template), or refused (junit-merge)
 `;
 async function main(argv, io) {
   const [command, ...args] = argv;
@@ -43617,6 +44864,10 @@ async function main(argv, io) {
         return await template(args, io);
       case "suggest":
         return await suggest(args, io);
+      case "survey":
+        return await survey2(args, io);
+      case "junit-merge":
+        return await junitMerge(args, io);
       case "mcp":
         return await mcp(args, io);
       case "--version":
@@ -43649,11 +44900,11 @@ ${USAGE}`);
 
 // src/cli/bin.ts
 process.exitCode = await main(process.argv.slice(2), {
-  out: (text) => process.stdout.write(text),
-  err: (text) => process.stderr.write(text),
+  out: (text2) => process.stdout.write(text2),
+  err: (text2) => process.stderr.write(text2),
   env: process.env,
   artifact: import.meta.url,
-  readStdin: () => readFileSync7(0),
+  readStdin: () => readFileSync8(0),
   stdin: process.stdin,
   stdout: process.stdout
 });