filegrc 0.15.3 → 0.16.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "filegrc",
-  "version": "0.15.3",
+  "version": "0.16.0",
   "description": "Zero-dependency Git-native GRC engine",
   "license": "MIT",
   "repository": {

package/src/applicability-scope.js

@@ -1,4 +1,4 @@
-import { createHash } from "node:crypto";
+import { CALCULATED_REVISION_FIELDS, CALCULATED_REVISION_MAP_FIELDS, calculateRevision, canonicalCalculatedRevision, revisionsMatch } from "./revisions.js";
 
 const excludedResourceFields = new Set([
   "applicabilityReview",
@@ -151,7 +151,7 @@ export function applicabilityScopeRevision(record, program, resources, model) {
         "customerFacing"
       ], model))
   };
-  return `scope:${createHash("sha256").update(stableJson(facts)).digest("hex")}`;
+  return calculateRevision("applicability-scope", stableJson(facts));
 }
 
 function compareRecordIds(left, right) {
@@ -162,11 +162,16 @@ export function applicabilityReviewIsCurrent(review, record, program, resources,
   if (
     review?.scopeRevision
     && !review.scopeRevision.startsWith("scope:")
+    && !review.scopeRevision.startsWith("filegrc:applicability-scope:")
     && Number(model?.modelVersion || 0) < 7
   ) return true;
   return Boolean(
     review?.scopeRevision
-    && review.scopeRevision === applicabilityScopeRevision(record, program, resources, model)
+    && revisionsMatch(
+      "applicability-scope",
+      review.scopeRevision,
+      applicabilityScopeRevision(record, program, resources, model)
+    )
   );
 }
 
@@ -176,17 +181,17 @@ function pick(record, fields, model, objectType = null) {
     .map((field) => [field, record[field]])));
 }
 
-function canonicalObject(model, type, value) {
+function canonicalObject(model, type, value, revisionMap = false) {
   const fields = model.resources?.[type]
     ? { ...model.commonFields, ...model.resources[type].fields }
     : model.objectTypes?.[type]?.properties || {};
   return Object.fromEntries(Object.keys(value).sort().map((name) => [
     name,
-    canonicalFieldValue(model, value[name], fields[name], name)
+    canonicalFieldValue(model, value[name], fields[name], name, revisionMap)
   ]));
 }
 
-function canonicalFieldValue(model, value, field, name) {
+function canonicalFieldValue(model, value, field, name, revisionMap = false) {
   if (Array.isArray(value)) {
     const items = value.map((item) => field?.itemObjectType && item && typeof item === "object"
       ? canonicalObject(model, field.itemObjectType, item)
@@ -197,9 +202,13 @@ function canonicalFieldValue(model, value, field, name) {
     return items;
   }
   if (value && typeof value === "object") {
-    return field?.objectType ? canonicalObject(model, field.objectType, value) : value;
+    return field?.objectType
+      ? canonicalObject(model, field.objectType, value, CALCULATED_REVISION_MAP_FIELDS.has(name))
+      : value;
   }
-  return value;
+  return typeof value === "string" && (revisionMap || CALCULATED_REVISION_FIELDS.has(name))
+    ? canonicalCalculatedRevision(value)
+    : value;
 }
 
 function stableJson(value) {

package/src/audit-preparation.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { modelSupports } from "../model/index.js";
 import { applicabilityReviewIsCurrent } from "./applicability-scope.js";
@@ -33,6 +32,7 @@ import {
 } from "./soc2.js";
 import { currentCalendarDate } from "./time.js";
 import { loadWorkspace } from "./workspace.js";
+import { calculateRevision } from "./revisions.js";
 
 const NON_EVIDENCE_RECORD_TYPES = new Set([
   "audit",
@@ -160,7 +160,7 @@ export async function prepareAuditWorkspace(input, options = {}) {
 
   const model = loaded.model.auditReadiness || {};
   const auditEntry = loaded.entries.find((entry) => entry.record.id === audit.id);
-  const auditRevision = createHash("sha256").update(auditEntry.source).digest("hex");
+  const auditRevision = calculateRevision("content", auditEntry.source);
   const documents = loaded.resources.filter((record) => record.type === "document");
   const nextAudit = { ...audit };
   const linkedDocuments = [];

package/src/cli.js

@@ -75,6 +75,7 @@ import { searchResources } from "./search.js";
 import { serveWorkspace } from "./server.js";
 import { planWorkspaceSetup, setupWorkspace, summarizeSetupResult } from "./setup.js";
 import { printGithubStarMessage } from "./startup.js";
+import { assertWorkspaceEngineVersion } from "./runtime-version.js";
 import { createAppState } from "./state.js";
 import { currentCalendarDate } from "./time.js";
 import { validateWorkspace } from "./validate.js";
@@ -116,6 +117,10 @@ export async function runCli(argv = process.argv.slice(2)) {
   if (["help", "--help", "-h"].includes(command)) return printHelp();
   if (["version", "--version", "-v"].includes(command)) return printVersion();
   if (flags.help || args.includes("-h")) return printCommandHelp(command);
+  const targetRoot = ["serve", "build", "validate"].includes(command)
+    ? positionals[0] ?? root
+    : root;
+  assertWorkspaceEngineVersion(targetRoot);
 
   if (command === "serve") {
     const result = await serveWorkspace(positionals[0] ?? root, {

package/src/collection-review-integrity.js

@@ -1,9 +1,9 @@
-import { createHash } from "node:crypto";
 import { loadModel } from "../model/index.js";
 import { collectionRevision } from "./collection-revision.js";
 import { scopedCollectionRecords } from "./collection-scope.js";
 import { getDataFilesAtRevision, getFileAtRevision, getRecordIdentityHistory, hasGitRevision } from "./git.js";
 import { currentCalendarDate, isRfc3339Timestamp } from "./time.js";
+import { calculateRevision, canonicalCalculatedRevision, revisionsMatch } from "./revisions.js";
 
 export function collectionReviewRevision(record) {
   const reviewedFacts = {
@@ -24,7 +24,17 @@ export function collectionReviewRevision(record) {
     authoritativeComponentId: record.authoritativeComponentId,
     supersedesId: record.supersedesId
   };
-  return createHash("sha256").update(JSON.stringify(reviewedFacts)).digest("hex");
+  return calculateRevision("collection-review", JSON.stringify(canonicalRevisionValue(reviewedFacts)));
+}
+
+function canonicalRevisionValue(value, name = null) {
+  if (Array.isArray(value)) return value.map((item) => canonicalRevisionValue(item));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, canonicalRevisionValue(item, key)]));
+  }
+  return name === "collectionRevision" && typeof value === "string"
+    ? canonicalCalculatedRevision(value)
+    : value;
 }
 
 export function historicalCollectionReviewSnapshot(root, record, model, timezone, resourceType, cutoff, selector = null, relativePath = null, expectedCommit = null) {
@@ -60,7 +70,7 @@ export function historicalCollectionReviewSnapshot(root, record, model, timezone
     authoritativeSourceId: record.authoritativeComponentId
   });
   if (
-    record.collectionRevision !== currentRevision
+    !revisionsMatch("collection", record.collectionRevision, currentRevision)
     || JSON.stringify([...(record.populationResourceIds || [])].sort()) !== JSON.stringify(collectionIds)
   ) return null;
   const selectedIds = selector
@@ -89,7 +99,7 @@ function committedCollectionReviewMatch(root, record, relativePath, expectedComm
       return historical.type === "collection-review"
         && historical.id === record.id
         && ["active", "retired"].includes(historical.status)
-        && collectionReviewRevision(historical) === expected;
+        && revisionsMatch("collection-review", collectionReviewRevision(historical), expected);
     } catch {
       return false;
     }

package/src/collection-review.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { modelSupports } from "../model/index.js";
 import {
@@ -16,6 +15,8 @@ import { currentPartyPeople } from "./parties.js";
 import { retentionScheduleApprovalIssues } from "./retention-schedule-approval.js";
 import { markdownEntries } from "./resource-markdown.js";
 import { resolveDataPath } from "./paths.js";
+import { calculateRevision, calculatedRevisionDiagnostic, revisionsMatch } from "./revisions.js";
+import { personWasActiveOn } from "./soc2.js";
 
 export { collectionRevision };
 
@@ -93,7 +94,10 @@ export function assessCollectionReview(loaded, resourceType, options = {}) {
   const incompleteRecordProposals = recordProposals.filter(({ complete: ready }) => !ready);
   const reviewersEligible = !reviewerEligibility || Boolean(
     review?.reviewedByIds?.length
-    && review.reviewedByIds.every((id) => reviewerEligibility.eligibleReviewerIds.includes(id))
+    && review.reviewedByIds.every((id) => (
+      personWasActiveOn(loaded.resources.find((record) => record.id === id), review.reviewedOn)
+      && !reviewerEligibility.reviewerConflictIds.includes(id)
+    ))
   );
   const reviewScopeMatches = !workspaceWideRetentionReview
     || sameIds(review?.scopeResourceIds, retentionScope.programIds);
@@ -119,10 +123,11 @@ export function assessCollectionReview(loaded, resourceType, options = {}) {
     recordCount: records.length,
     review,
     reviewRevision: reviewEntry
-      ? createHash("sha256").update(reviewEntry.source).digest("hex")
+      ? calculateRevision("content", reviewEntry.source)
       : null,
     reviewEntries,
     collectionRevision: currentRevision,
+    revisionDiagnostic: calculatedRevisionDiagnostic("collection", review?.collectionRevision, currentRevision),
     status: complete ? "current" : stale ? "stale" : "review-required",
     complete,
     ...(reviewerEligibility || {}),
@@ -139,7 +144,7 @@ export function assessCollectionReview(loaded, resourceType, options = {}) {
           ? "Review the Data Retention Schedule again with a reviewer who does not own its governing document or an included schedule row."
           : "Review the Control collection again with a reviewer who does not own an included Control or its enabled Obligation."
       : stale
-        ? `${configuration.title} changed after the last confirmation. Review the current records again.`
+        ? `${configuration.title} changed after the last confirmation. Stored revision: ${review.collectionRevision}. Current revision: ${currentRevision}. Review the current records again.`
         : !records.length && !allowsEmptyCollection
           ? `Add at least one ${loaded.model.resources[resourceType].title.toLowerCase()} before confirming this collection.`
         : `Review ${configuration.title.toLowerCase()} before this page can be ready.`
@@ -203,7 +208,7 @@ export async function planCollectionReview(input = process.cwd(), options = {})
     && modelSupports(loaded.model, "retention-schedule-approval");
   const retentionScope = workspaceWideRetentionReview ? retentionScheduleReviewScope(loaded) : null;
   const assessment = assessCollectionReview(loaded, resourceType, { programId: program.id });
-  if (options.expectedCollectionRevision && options.expectedCollectionRevision !== assessment.collectionRevision) {
+  if (options.expectedCollectionRevision && !revisionsMatch("collection", options.expectedCollectionRevision, assessment.collectionRevision)) {
     throw new Error(`${assessment.configuration.title} changed after it was displayed. Reload and review the current revision before approving it.`);
   }
   if (resourceType === "retention-schedule-item" && modelSupports(loaded.model, "retention-schedule-approval") && !options.expectedCollectionRevision) {
@@ -337,7 +342,7 @@ export async function planCollectionReview(input = process.cwd(), options = {})
     entry.record.id,
     entry.record.id === existing?.id && options.expectedRevision
       ? options.expectedRevision
-      : createHash("sha256").update(entry.source).digest("hex")
+      : calculateRevision("content", entry.source)
   ]));
   if (existingEntries.length && preservesReviewHistory) {
     for (const entry of existingEntries) {
@@ -456,7 +461,7 @@ function assessControlReviewers(loaded, controls) {
   const people = loaded.resources.filter(({ type, status }) => type === "person" && status === "active");
   return {
     eligibleReviewerIds: people.map(({ id }) => id).filter((id) => !conflictIds.has(id)),
-    reviewerConflictIds: people.map(({ id }) => id).filter((id) => conflictIds.has(id))
+    reviewerConflictIds: [...conflictIds].sort()
   };
 }
 
@@ -475,7 +480,7 @@ function assessRetentionScheduleReviewers(loaded, rows) {
   const people = loaded.resources.filter(({ type, status }) => type === "person" && status === "active");
   return {
     eligibleReviewerIds: people.map(({ id }) => id).filter((id) => !conflictIds.has(id)),
-    reviewerConflictIds: people.map(({ id }) => id).filter((id) => conflictIds.has(id))
+    reviewerConflictIds: [...conflictIds].sort()
   };
 }
 

package/src/collection-revision.js

@@ -9,6 +9,7 @@ import {
 import { resolveDataPath } from "./paths.js";
 import { resolveProgram } from "./program.js";
 import { markdownEntries } from "./resource-markdown.js";
+import { CALCULATED_REVISION_FIELDS, CALCULATED_REVISION_MAP_FIELDS, calculateRevision, canonicalCalculatedRevision, revisionsMatch } from "./revisions.js";
 
 export function collectionRevision(loaded, resourceType, options = {}) {
   return calculateCollectionRevision(loaded, resourceType, options, false);
@@ -24,9 +25,9 @@ export function collectionRevisionMatches(loaded, resourceType, storedRevision,
     || collectionRevision(loaded, resourceType, options);
   // Version 0.9.2 narrowed this hash basis. Keep unchanged 0.9.1 reviews valid
   // until management records a new review on the current basis.
-  return storedRevision === currentRevision
+  return revisionsMatch("collection", storedRevision, currentRevision)
     || (resourceType !== "retention-schedule-item" || !modelSupports(loaded.model, "retention-schedule-approval"))
-      && storedRevision === legacyCollectionRevision(loaded, resourceType, options);
+      && revisionsMatch("collection", storedRevision, legacyCollectionRevision(loaded, resourceType, options));
 }
 
 function calculateCollectionRevision(loaded, resourceType, options, legacy) {
@@ -68,9 +69,10 @@ function calculateCollectionRevision(loaded, resourceType, options, legacy) {
     }))
     .sort((left, right) => left.id.localeCompare(right.id));
   const workspaceScope = collectionScopeRevisionFacts(loaded, resourceType, program);
-  return createHash("sha256")
-    .update(JSON.stringify({ resourceType, records, workspaceScope }))
-    .digest("hex");
+  const source = JSON.stringify({ resourceType, records, workspaceScope });
+  return legacy
+    ? createHash("sha256").update(source).digest("hex")
+    : calculateRevision("collection", source);
 }
 
 function canonicalRecordValue(model, resourceType, value) {
@@ -81,14 +83,14 @@ function canonicalRecordValue(model, resourceType, value) {
   return canonicalObject(model, value, fields);
 }
 
-function canonicalObject(model, value, fields = {}) {
+function canonicalObject(model, value, fields = {}, revisionMap = false) {
   return Object.fromEntries(Object.keys(value).sort().map((name) => [
     name,
-    canonicalFieldValue(model, value[name], fields[name])
+    canonicalFieldValue(model, value[name], fields[name], name, revisionMap)
   ]));
 }
 
-function canonicalFieldValue(model, value, field) {
+function canonicalFieldValue(model, value, field, name, revisionMap = false) {
   if (Array.isArray(value)) {
     const objectType = field?.itemObjectType;
     const itemFields = objectType ? model.objectTypes?.[objectType]?.properties : undefined;
@@ -103,9 +105,11 @@ function canonicalFieldValue(model, value, field) {
   }
   if (value && typeof value === "object") {
     const objectType = field?.objectType;
-    return canonicalObject(model, value, objectType ? model.objectTypes?.[objectType]?.properties : undefined);
+    return canonicalObject(model, value, objectType ? model.objectTypes?.[objectType]?.properties : undefined, CALCULATED_REVISION_MAP_FIELDS.has(name));
   }
-  return value;
+  return typeof value === "string" && (revisionMap || CALCULATED_REVISION_FIELDS.has(name))
+    ? canonicalCalculatedRevision(value)
+    : value;
 }
 
 function compareCanonicalValues(left, right) {

package/src/document-activation.js

@@ -6,6 +6,7 @@ import { assessProgramReadiness } from "./program-readiness.js";
 import { personWasActiveOn } from "./soc2.js";
 import { currentCalendarDate } from "./time.js";
 import { loadWorkspace } from "./workspace.js";
+import { revisionDigest } from "./revisions.js";
 
 export async function scaffoldDocumentActivation(input = process.cwd(), options = {}) {
   const loaded = await loadWorkspace(input);
@@ -97,7 +98,7 @@ export async function planDocumentActivation(input = process.cwd(), options = {}
           : `${resourceTitle} "${resourceId}" is not ready for ${workflowScope === "engagement" ? "Step 5" : "Step 3"} activation.`
       );
     }
-    if (!/^[a-f0-9]{64}$/.test(expectedRevisions[resourceId] || "")) {
+    if (!revisionDigest("content", expectedRevisions[resourceId])) {
       throw new Error(`Governed-content activation needs the current record revision for "${resourceId}". Regenerate the activation review and try again.`);
     }
     const record = {

package/src/files.js

@@ -1,4 +1,4 @@
-import { createHash, randomUUID } from "node:crypto";
+import { randomUUID } from "node:crypto";
 import { constants, link, lstat, mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { getResourceDefinition, loadModel, modelSupports } from "../model/index.js";
@@ -12,6 +12,7 @@ import { measureTiming } from "./timing.js";
 import { currentCalendarDate, timestampFromLocalDateTime } from "./time.js";
 import { loadWorkspace } from "./workspace.js";
 import { validateWorkspace } from "./validate.js";
+import { calculateRevision, revisionsMatch } from "./revisions.js";
 
 export const INTERNAL_WORKFLOW_CAPABILITIES = Object.freeze({
   auditManagementReconciliation: Symbol("audit-management-reconciliation"),
@@ -692,11 +693,11 @@ function assertImmutableWorkflowRecord(existing, next, options = {}, loaded = nu
     const legacyReplacement = options.workflowCapability === INTERNAL_WORKFLOW_CAPABILITIES.collectionReviewReassessment
       && existing.status === "active"
       && next.status === "active";
-    if (!retirement && !legacyReplacement && options.lifecycleOperation !== "model-migration") {
+    if (!retirement && !legacyReplacement && !isMigrationOperation(options.lifecycleOperation)) {
       throw new Error(`Finalized Collection Review "${existing.id}" is immutable. Record a superseding review instead.`);
     }
   }
-  if (options.lifecycleOperation === "model-migration") return;
+  if (isMigrationOperation(options.lifecycleOperation)) return;
   if (
     modelSupports(loaded?.model || 0, "reporting-route-sets")
     && ["policy", "document", "commitment", "risk"].includes(existing.type)
@@ -921,21 +922,21 @@ function assertSpecializedWorkflowCreate(record, options = {}, loaded = null) {
   if (
     record?.type === "reconciliation-dismissal"
     && options.workflowCapability !== INTERNAL_WORKFLOW_CAPABILITIES.reconciliationDismissal
-    && options.lifecycleOperation !== "model-migration"
+    && !isMigrationOperation(options.lifecycleOperation)
   ) {
     throw new Error(`Reconciliation dismissal "${record.id || ""}" is workflow-managed. Dismiss the current transition candidate instead of creating it directly.`);
   }
   if (
     record?.type === "collection-review"
     && options.workflowCapability !== INTERNAL_WORKFLOW_CAPABILITIES.collectionReviewReassessment
-    && options.lifecycleOperation !== "model-migration"
+    && !isMigrationOperation(options.lifecycleOperation)
   ) {
     throw new Error(`Collection Review "${record.id || ""}" is workflow-managed. Preview and confirm the collection review instead of creating it directly.`);
   }
   if (
     record?.type === "reporting-route-set"
     && record.status !== "draft"
-    && options.lifecycleOperation !== "model-migration"
+    && !isMigrationOperation(options.lifecycleOperation)
   ) {
     throw new Error(`Reporting Route Set "${record.id || ""}" must be created as a draft and advanced through managed actions.`);
   }
@@ -1162,13 +1163,14 @@ async function prepareContentWrites(loaded, record, content, options = {}) {
 }
 
 function assertRevision(source, expected, label) {
-  if (expected && contentRevision(source) !== expected) {
-    throw new Error(`${label} changed after you opened it. Reload the workspace and apply your change again.`);
+  const current = contentRevision(source);
+  if (expected && !revisionsMatch("content", expected, current)) {
+    throw new Error(`${label} changed after you opened it. Stored revision: ${expected}. Current revision: ${current}. Reload the workspace and apply your change again.`);
   }
 }
 
 export function contentRevision(source) {
-  return createHash("sha256").update(source).digest("hex");
+  return calculateRevision("content", source);
 }
 
 async function prepareApprovalBinding(loaded, record, contentWrites, previousRecord = null) {
@@ -1223,7 +1225,7 @@ async function prepareApprovalBinding(loaded, record, contentWrites, previousRec
 }
 
 function assertGovernedContentLifecycleMutation(previousRecord, nextRecord, model, lifecycleOperation) {
-  if (lifecycleOperation === "model-migration") return;
+  if (isMigrationOperation(lifecycleOperation)) return;
   const governedTraining = previousRecord?.type === "training"
     && nextRecord?.type === "training"
     && modelSupports(model, "governed-training-activation");
@@ -1269,6 +1271,10 @@ function assertGovernedContentLifecycleMutation(previousRecord, nextRecord, mode
   }
 }
 
+function isMigrationOperation(operation) {
+  return operation === "model-migration";
+}
+
 function assertLifecycleFieldsUnchanged(previousRecord, nextRecord, fields, eventLabel, resourceTitle) {
   const changed = fields.filter((field) => (
     JSON.stringify(previousRecord[field] ?? null) !== JSON.stringify(nextRecord[field] ?? null)

package/src/index.js

@@ -123,6 +123,8 @@ export { createFilegrcServer, serveWorkspace } from "./server.js";
 export { normalizeSetupPayload, planWorkspaceSetup, setupWorkspace, summarizeSetupResult } from "./setup.js";
 export { createAppState, createResourceDetail } from "./state.js";
 export { currentCalendarDate, formatCalendarDate, formatLocalDateTime } from "./time.js";
+export { assertWorkspaceEngineVersion, workspaceEngineVersion } from "./runtime-version.js";
+export { calculatedRevisionDiagnostic, REVISION_SCHEME_VERSION } from "./revisions.js";
 export { validateWorkspace } from "./validate.js";
 export {
   assessWorkflow,

package/src/mutation.js

@@ -1,5 +1,6 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 import { resolveWorkspaceRoot } from "./paths.js";
+import { assertWorkspaceEngineVersion } from "./runtime-version.js";
 
 const mutationQueues = new Map();
 const activeMutation = new AsyncLocalStorage();
@@ -7,6 +8,7 @@ const deferredValidation = new AsyncLocalStorage();
 
 export function serializeWorkspaceMutation(input, task) {
   const root = resolveWorkspaceRoot(input);
+  assertWorkspaceEngineVersion(root);
   if (activeMutation.getStore() === root) return task(root);
   const previous = mutationQueues.get(root) ?? Promise.resolve();
   const run = previous.catch(() => {}).then(() => activeMutation.run(root, () => task(root)));

package/src/obligations.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { scaffoldResourceMutation } from "./agent.js";
 import { createResourceId } from "./id.js";
 import {
@@ -30,6 +29,7 @@ import { collectionReviewRevision, historicalCollectionReviewSnapshot } from "./
 import { bindAttestationReportingRouteSet, reportingRouteRevision } from "./reporting-route-integrity.js";
 import { selectScopedCollectionRecords } from "./collection-scope.js";
 import { occurrenceMemberIsResolved } from "./obligation-members.js";
+import { calculateRevision, revisionsMatch } from "./revisions.js";
 
 const COMPLETION_DATE_FIELDS = [
   "completedOn",
@@ -993,7 +993,7 @@ export async function scaffoldObligationRuleActivation(input, options = {}) {
 export async function activateObligationRule(input, options = {}) {
   const scaffold = await scaffoldObligationRuleActivation(input, options);
   if (!(options.approvedByIds || []).length) throw new Error("Select at least one person who approved this rule.");
-  if (options.confirmedRevision !== scaffold.review.revision) {
+  if (!revisionsMatch("content", options.confirmedRevision, scaffold.review.revision)) {
     throw new Error("Confirm the current Obligation rule revision before activation.");
   }
   const loaded = await loadWorkspace(input);
@@ -1508,7 +1508,7 @@ function bindEffectiveReportingRoute(loaded, record) {
 }
 
 function contentRevision(source) {
-  return createHash("sha256").update(source).digest("hex");
+  return calculateRevision("content", source);
 }
 
 function calendarWindow(recurrence, configuredWindow, index) {

package/src/policy-activation.js

@@ -4,6 +4,7 @@ import { assessProgramReadiness } from "./program-readiness.js";
 import { currentCalendarDate } from "./time.js";
 import { loadWorkspace } from "./workspace.js";
 import { modelSupports } from "../model/index.js";
+import { revisionDigest } from "./revisions.js";
 
 export async function scaffoldPolicyActivation(input = process.cwd(), options = {}) {
   const loaded = await loadWorkspace(input);
@@ -53,7 +54,7 @@ export async function planPolicyActivation(input = process.cwd(), options = {})
     if (entry.record.status !== "approved") {
       throw new Error(`Policy "${policyId}" must be approved and inactive before the Step 3 cutover.`);
     }
-    if (!/^[a-f0-9]{64}$/.test(expectedRevisions[policyId] || "")) {
+    if (!revisionDigest("content", expectedRevisions[policyId])) {
       throw new Error(`Policy activation needs the current revision for "${policyId}". Regenerate the cutover review and try again.`);
     }
     const record = { ...entry.record, status: "active", effectiveOn };

package/src/program-lifecycle.js

@@ -1,5 +1,6 @@
 import { currentPartyPeople } from "./parties.js";
 import { modelSupports } from "../model/index.js";
+import { revisionsMatch } from "./revisions.js";
 
 const requiredDocumentsByControlCache = new WeakMap();
 
@@ -65,8 +66,13 @@ export function governedContentIsOperating(record, asOf, model) {
 
 export function contentRevisionBindingsMatch(left, right) {
   if (!left || !right || Array.isArray(left) || Array.isArray(right)) return false;
-  const normalize = (value) => Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)));
-  return JSON.stringify(normalize(left)) === JSON.stringify(normalize(right));
+  const leftEntries = Object.entries(left).sort(([a], [b]) => a.localeCompare(b));
+  const rightEntries = Object.entries(right).sort(([a], [b]) => a.localeCompare(b));
+  return leftEntries.length === rightEntries.length
+    && leftEntries.every(([path, revision], index) => (
+      rightEntries[index][0] === path
+      && (revision === rightEntries[index][1] || revisionsMatch("content", revision, rightEntries[index][1]))
+    ));
 }
 
 export function obligationGovernedDocuments(obligation, byId, model) {

package/src/reporting-route-integrity.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import {
   getDataRecordHistoryIndex,
   getFileAtRevision,
@@ -12,6 +11,7 @@ import { addCalendarDays } from "./recurrence.js";
 import { coverageContains } from "./coverage.js";
 import { appointmentWasAuthorizedOn } from "./soc2.js";
 import { isRfc3339Timestamp, localDateTimeValue, timestampFromLocalDateTime } from "./time.js";
+import { calculateRevision } from "./revisions.js";
 
 const CONTEMPORANEOUS_COMMIT_WINDOW_MS = 86_400_000;
 const REPORTING_ROUTE_REQUIREMENT_SOURCE_TYPES = new Set(["policy", "document", "commitment", "risk"]);
@@ -32,7 +32,7 @@ export function reportingRouteRevision(record) {
     sourceResourceIds: record.sourceResourceIds,
     ownerIds: record.ownerIds
   };
-  return createHash("sha256").update(JSON.stringify(effectiveFacts)).digest("hex");
+  return calculateRevision("reporting-route", JSON.stringify(effectiveFacts));
 }
 
 export function reportingRouteEventAuthorityIssue(records, routeSet, options = {}) {

package/src/requirement-mapping.js

@@ -1,4 +1,5 @@
 import { resourceReviewRevisions } from "./retention.js";
+import { revisionsMatch } from "./revisions.js";
 
 export async function assessRequirementMappingReadiness(loaded) {
   if (!loaded.model.resources["requirement-mapping"]) return [];
@@ -17,7 +18,7 @@ export async function assessRequirementMappingReadiness(loaded) {
       ...(mapping.targetResourceIds || [])
     ])];
     const staleIds = mappedIds.filter((id) => (
-      !revisions.get(id) || mapping.reviewedSourceRevisions?.[id] !== revisions.get(id)
+      !revisions.get(id) || !revisionsMatch("content", mapping.reviewedSourceRevisions?.[id], revisions.get(id))
     )).concat(Object.keys(mapping.reviewedSourceRevisions || {}).filter((id) => !mappedIds.includes(id)));
     const structurallyComplete = mappingStructureIsComplete(mapping);
     const complete = mapping.status === "active" && structurallyComplete && staleIds.length === 0;

package/src/retention-schedule-approval.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { openPlaceholderCount, substantiveMarkdown } from "./content-readiness.js";
 import { markdownEntries } from "./resource-markdown.js";
@@ -11,6 +10,7 @@ import {
   retentionRuleIsCurrent,
   retentionUses
 } from "./retention.js";
+import { calculateRevision, revisionsMatch } from "./revisions.js";
 
 export function retentionScheduleApprovalIssues(loaded, program, rows, options = {}) {
   const byId = new Map(loaded.resources.map((record) => [record.id, record]));
@@ -125,9 +125,10 @@ function approvalBindingsMatch(loaded, record) {
   const actual = {};
   for (const entry of markdownEntries(loaded.model, record)) {
     try {
-      actual[entry.path] = createHash("sha256")
-        .update(readFileSync(resolveDataPath(loaded.root, entry.path), "utf8"))
-        .digest("hex");
+      actual[entry.path] = calculateRevision(
+        "content",
+        readFileSync(resolveDataPath(loaded.root, entry.path), "utf8")
+      );
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
@@ -136,5 +137,7 @@ function approvalBindingsMatch(loaded, record) {
   const actualKeys = Object.keys(actual).sort();
   const expectedKeys = Object.keys(expected).sort();
   return actualKeys.length === expectedKeys.length
-    && actualKeys.every((key, index) => key === expectedKeys[index] && actual[key] === expected[key]);
+    && actualKeys.every((key, index) => (
+      key === expectedKeys[index] && revisionsMatch("content", actual[key], expected[key])
+    ));
 }

package/src/retention.js

@@ -5,6 +5,7 @@ import { resolveDataPath } from "./paths.js";
 import { programComponents } from "./program.js";
 import { markdownEntries } from "./resource-markdown.js";
 import { modelSupports } from "../model/index.js";
+import { canonicalCalculatedRevisionJson, revisionDigest, revisionsMatch } from "./revisions.js";
 
 export async function assessRetentionReadiness(loaded, program, options = {}) {
   if (!loaded.model.resources["retention-schedule-item"]) return [];
@@ -173,7 +174,7 @@ export async function resourceReviewRevisions(loaded, ids) {
     }
     for (const sourceId of [...new Set(entry.record.sourceResourceIds || [])].sort()) {
       const revision = await review(sourceId);
-      if (revision) parts.push(`${sourceId}:${revision}`);
+      if (revision) parts.push(`${sourceId}:${revisionDigest("content", revision) || revision}`);
     }
     reviewing.delete(id);
     const revision = contentRevision(parts.join("\n"));
@@ -206,7 +207,7 @@ export function resourceReviewRevisionsSync(loaded, ids) {
     }
     for (const sourceId of [...new Set(entry.record.sourceResourceIds || [])].sort()) {
       const revision = review(sourceId);
-      if (revision) parts.push(`${sourceId}:${revision}`);
+      if (revision) parts.push(`${sourceId}:${revisionDigest("content", revision) || revision}`);
     }
     reviewing.delete(id);
     const revision = contentRevision(parts.join("\n"));
@@ -260,7 +261,7 @@ function reviewSource(loaded, entry) {
     ]) delete approved[field];
     return JSON.stringify(approved);
   }
-  return entry.source;
+  return canonicalCalculatedRevisionJson(entry.source);
 }
 
 export function nearDuplicateInformationTypes(records) {
@@ -326,7 +327,7 @@ export function retentionRuleIsCurrent(rule, revisions, byId = new Map(), loaded
   const dependencyIds = retentionReviewResourceIds(rule, loaded);
   if (Object.keys(rule.reviewedSourceRevisions).length !== dependencyIds.length) return false;
   return dependencyIds.every((id) => (
-    revisions.get(id) && rule.reviewedSourceRevisions?.[id] === revisions.get(id)
+    revisions.get(id) && revisionsMatch("content", rule.reviewedSourceRevisions?.[id], revisions.get(id))
   ));
 }
 

package/src/revisions.js

@@ -0,0 +1,101 @@
+import { createHash } from "node:crypto";
+
+export const REVISION_SCHEME_VERSION = 1;
+
+export const CALCULATED_REVISION_FIELDS = new Set([
+  "collectionRevision",
+  "collectionReviewRevision",
+  "reportingRouteRevision",
+  "scopeRevision"
+]);
+
+export const CALCULATED_REVISION_MAP_FIELDS = new Set([
+  "approvedContentRevisions",
+  "activatedContentRevisions",
+  "effectiveContentRevisions",
+  "contentRevisions",
+  "reviewedSourceRevisions"
+]);
+
+const PREFIXES = Object.freeze({
+  content: `filegrc:content:v${REVISION_SCHEME_VERSION}:sha256:`,
+  collection: `filegrc:collection:v${REVISION_SCHEME_VERSION}:sha256:`,
+  "applicability-scope": `filegrc:applicability-scope:v${REVISION_SCHEME_VERSION}:sha256:`,
+  "collection-review": `filegrc:collection-review:v${REVISION_SCHEME_VERSION}:sha256:`,
+  "reporting-route": `filegrc:reporting-route:v${REVISION_SCHEME_VERSION}:sha256:`
+});
+
+export function calculateRevision(kind, source) {
+  const prefix = PREFIXES[kind];
+  if (!prefix) throw new Error(`Unknown calculated revision kind "${kind}".`);
+  return `${prefix}${createHash("sha256").update(source).digest("hex")}`;
+}
+
+export function revisionDigest(kind, value) {
+  const text = String(value || "");
+  const prefix = PREFIXES[kind];
+  if (prefix && text.startsWith(prefix) && /^[a-f0-9]{64}$/.test(text.slice(prefix.length))) {
+    return text.slice(prefix.length);
+  }
+  if (kind === "applicability-scope" && /^scope:[a-f0-9]{64}$/.test(text)) return text.slice(6);
+  if (/^[a-f0-9]{64}$/.test(text)) return text;
+  return null;
+}
+
+export function revisionsMatch(kind, stored, current) {
+  const storedDigest = revisionDigest(kind, stored);
+  const currentDigest = revisionDigest(kind, current);
+  return Boolean(storedDigest && currentDigest && storedDigest === currentDigest);
+}
+
+export function calculatedRevisionDiagnostic(kind, stored, current) {
+  return {
+    kind,
+    storedRevision: stored || null,
+    currentRevision: current || null,
+    storedScheme: revisionScheme(kind, stored),
+    currentScheme: revisionScheme(kind, current),
+    matches: revisionsMatch(kind, stored, current)
+  };
+}
+
+export function canonicalCalculatedRevision(value) {
+  const text = String(value || "");
+  // Keep the original digest as the calculation input. Merely installing a
+  // scheme-aware engine must not stale a decision made over unchanged facts.
+  if (/^[a-f0-9]{64}$/.test(text)) return text;
+  if (/^scope:[a-f0-9]{64}$/.test(text)) return text.slice(6);
+  const match = /^filegrc:[a-z-]+:v\d+:sha256:([a-f0-9]{64})$/.exec(text);
+  return match ? match[1] : value;
+}
+
+// Preserve JSON layout because older resource-review bindings hashed the exact
+// source bytes. Only scheme labels in model-defined revision slots may change.
+export function canonicalCalculatedRevisionJson(source) {
+  const fieldNames = [...CALCULATED_REVISION_FIELDS].join("|");
+  const mapNames = [...CALCULATED_REVISION_MAP_FIELDS].join("|");
+  const stringValue = /("(?:\\.|[^"\\])*")(\s*:\s*)("(?:\\.|[^"\\])*")/g;
+  const canonicalValue = (quoted) => {
+    const value = JSON.parse(quoted);
+    const canonical = canonicalCalculatedRevision(value);
+    return canonical === value ? quoted : JSON.stringify(canonical);
+  };
+  return source
+    .replace(new RegExp(`("(?:${fieldNames})")(\\s*:\\s*)("(?:\\\\.|[^"\\\\])*")`, "g"),
+      (_match, key, separator, value) => `${key}${separator}${canonicalValue(value)}`)
+    .replace(new RegExp(`("(?:${mapNames})")(\\s*:\\s*\\{)([^{}]*)(\\})`, "g"),
+      (_match, key, opening, body, closing) => (
+        `${key}${opening}${body.replace(stringValue, (_pair, name, separator, value) => (
+          `${name}${separator}${canonicalValue(value)}`
+        ))}${closing}`
+      ));
+}
+
+function revisionScheme(kind, value) {
+  const text = String(value || "");
+  if (!text) return null;
+  if (text.startsWith(PREFIXES[kind] || "\0")) return `filegrc:${kind}:v${REVISION_SCHEME_VERSION}:sha256`;
+  if (kind === "applicability-scope" && /^scope:[a-f0-9]{64}$/.test(text)) return "legacy:applicability-scope:sha256";
+  if (/^[a-f0-9]{64}$/.test(text)) return `legacy:${kind}:sha256`;
+  return "unknown";
+}

package/src/runtime-version.js

@@ -0,0 +1,66 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { resolveWorkspaceRoot } from "./paths.js";
+
+const installedVersion = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+
+export function workspaceEngineVersion(input = process.cwd()) {
+  let root;
+  try {
+    root = resolveWorkspaceRoot(input);
+  } catch (error) {
+    if (/No filegrc workspace was found/.test(error.message)) {
+      return { installedVersion, lockedVersion: null, lockfilePath: null };
+    }
+    throw error;
+  }
+  const manifestPath = join(root, "package.json");
+  let packageManaged = false;
+  try {
+    const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+    packageManaged = Boolean(manifest.dependencies?.filegrc || manifest.devDependencies?.filegrc);
+  } catch (error) {
+    if (error.code !== "ENOENT") throw new Error(`Cannot read the workspace package.json: ${error.message}`);
+  }
+  let lock;
+  try {
+    lock = JSON.parse(readFileSync(join(root, "package-lock.json"), "utf8"));
+  } catch (error) {
+    if (error.code === "ENOENT" && !packageManaged) return { installedVersion, lockedVersion: null, lockfilePath: null };
+    if (error.code === "ENOENT") throw versionDriftError("The workspace package-lock.json is missing. Run npm install to create it, then npm ci.");
+    throw new Error(`Cannot read the workspace package-lock.json: ${error.message}`);
+  }
+  const installedEntry = lock.packages?.["node_modules/filegrc"];
+  const linkedEntry = installedEntry?.link && installedEntry.resolved
+    ? lock.packages?.[installedEntry.resolved]
+    : null;
+  const lockedVersion = linkedEntry?.version
+    || installedEntry?.version
+    || lock.dependencies?.filegrc?.version
+    || null;
+  if (packageManaged && !lockedVersion) {
+    throw versionDriftError("The workspace package-lock.json has no filegrc version. Run npm install to repair it, then npm ci.");
+  }
+  return { installedVersion, lockedVersion, lockfilePath: join(root, "package-lock.json") };
+}
+
+function versionDriftError(message) {
+  const error = new Error(message);
+  error.code = "FILEGRC_VERSION_DRIFT";
+  return error;
+}
+
+export function assertWorkspaceEngineVersion(input = process.cwd()) {
+  const result = workspaceEngineVersion(input);
+  if (result.lockedVersion && result.lockedVersion !== result.installedVersion) {
+    const error = new Error(
+      `Installed filegrc ${result.installedVersion} does not match package-lock.json (${result.lockedVersion}). `
+      + "Run npm ci in the workspace, then retry."
+    );
+    error.code = "FILEGRC_VERSION_DRIFT";
+    error.installedVersion = result.installedVersion;
+    error.lockedVersion = result.lockedVersion;
+    throw error;
+  }
+  return result;
+}

package/src/server.js

@@ -78,6 +78,7 @@ import {
 } from "./workflow.js";
 import { loadWorkspace } from "./workspace.js";
 import { APP_SCRIPT, APP_STYLES, renderIndex } from "./web.js";
+import { assertWorkspaceEngineVersion } from "./runtime-version.js";
 
 const STATE_SESSION_MAX_AGE_MS = 5 * 60_000;
 const MAX_STATE_SESSIONS = 8;
@@ -86,6 +87,7 @@ const RESOURCE_DETAIL_GIT_DEADLINE_MS = 10_000;
 const STATE_SECTION_GIT_DEADLINE_MS = 10_000;
 
 export function createFilegrcServer(input = process.cwd(), options = {}) {
+  assertWorkspaceEngineVersion(input);
   const stateSessions = new Map();
   const fileDigestCache = new Map();
   let bootstrapSnapshotPromise = null;

package/src/state.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { assessAuditPreparation } from "./audit-preparation.js";
 import { assessCollectionReviews } from "./collection-review.js";
@@ -17,6 +16,7 @@ import { assessWorkflow } from "./workflow.js";
 import { measureTiming } from "./timing.js";
 import { soc2RequirementApplicabilityConstraint } from "./soc2.js";
 import { modelSupports } from "../model/index.js";
+import { calculateRevision } from "./revisions.js";
 
 const renderedMarkdownCache = new Map();
 const MAX_RENDERED_MARKDOWN_CACHE_ENTRIES = 1_000;
@@ -447,5 +447,5 @@ function renderMarkdownCached(source) {
 }
 
 function contentRevision(source) {
-  return createHash("sha256").update(source).digest("hex");
+  return calculateRevision("content", source);
 }

package/src/validate.js

@@ -45,6 +45,7 @@ import {
 } from "./reporting-route-integrity.js";
 import { validateWorkflowHistoryIntegrity } from "./workflow-history-integrity.js";
 import { occurrenceMemberExceptionIsValid } from "./obligation-members.js";
+import { calculateRevision, revisionDigest, revisionsMatch } from "./revisions.js";
 
 let fingerprintFileReadObserver = null;
 
@@ -557,8 +558,8 @@ function validateObligationOccurrence(record, model, resources, entries, root, w
       || !(review.scopeResourceIds || []).includes(record.programId)
       || !historicalSnapshot
       || record.collectionReviewCommit !== historicalSnapshot.reviewCommit
-      || record.collectionReviewRevision !== collectionReviewRevision(review)
-      || record.collectionRevision !== review.collectionRevision
+      || !revisionsMatch("collection-review", record.collectionReviewRevision, collectionReviewRevision(review))
+      || !revisionsMatch("collection", record.collectionRevision, review.collectionRevision)
       || record.scopeRevision !== review.scopeRevision
       || !reviewCoversCutoff
       || JSON.stringify(memberIds) !== JSON.stringify(reviewedIds)
@@ -1231,6 +1232,16 @@ function validateTimestampTimezone(value, timezone, path, diagnostics, label) {
 
 function validateCollectionReview(record, loaded, byId, path, diagnostics) {
   if (record.status !== "active") return;
+  const inactiveReviewers = (record.reviewedByIds || []).filter((id) => (
+    !personWasActiveOn(byId.get(id), record.reviewedOn)
+  ));
+  if (inactiveReviewers.length) {
+    diagnostics.push(error(
+      "inactive-collection-reviewer-on-review-date",
+      path,
+      `Collection Review reviewers must have been active on ${record.reviewedOn}: ${inactiveReviewers.join(", ")}.`
+    ));
+  }
   const { model } = loaded;
   const configuration = model.collectionReviews?.[record.resourceType];
   if (!configuration) return;
@@ -1987,13 +1998,13 @@ function validateRetentionScheduleItem(record, loaded, byId, currentReviewRevisi
   const sources = retentionReviewResourceIds(record, loaded);
   const revisions = record.reviewedSourceRevisions || {};
   const missing = sources.filter((id) => (
-    !currentReviewRevisions.get(id) || revisions[id] !== currentReviewRevisions.get(id)
+    !currentReviewRevisions.get(id) || !revisionsMatch("content", revisions[id], currentReviewRevisions.get(id))
   )).concat(Object.keys(revisions).filter((id) => !sources.includes(id)));
   if (missing.length) {
     diagnostics.push(error(
       "stale-retention-review",
       path,
-      `reviewedSourceRevisions must bind the schedule Document, Information Types, operational scope, and authority or source records before activation: ${missing.join(", ")}.`
+      `reviewedSourceRevisions must bind the schedule Document, Information Types, operational scope, and authority or source records before activation: ${revisionMismatchDetails(missing, revisions, currentReviewRevisions)}.`
     ));
   }
 }
@@ -2011,17 +2022,23 @@ function validateRequirementMapping(record, currentReviewRevisions, path, diagno
   const mappedIds = [...new Set([...(record.sourceResourceIds || []), ...(record.targetResourceIds || [])])];
   const revisions = record.reviewedSourceRevisions || {};
   const missing = mappedIds.filter((id) => (
-    !currentReviewRevisions.get(id) || revisions[id] !== currentReviewRevisions.get(id)
+    !currentReviewRevisions.get(id) || !revisionsMatch("content", revisions[id], currentReviewRevisions.get(id))
   )).concat(Object.keys(revisions).filter((id) => !mappedIds.includes(id)));
   if (missing.length) {
     diagnostics.push(error(
       "stale-requirement-mapping",
       path,
-      `reviewedSourceRevisions must bind every mapped resource before activation: ${missing.join(", ")}.`
+      `reviewedSourceRevisions must bind every mapped resource before activation: ${revisionMismatchDetails(missing, revisions, currentReviewRevisions)}.`
     ));
   }
 }
 
+function revisionMismatchDetails(ids, stored, current) {
+  return ids.map((id) => (
+    `${id} (stored: ${stored[id] || "missing"}; current: ${current.get(id) || "missing"})`
+  )).join(", ");
+}
+
 function obligationCompletionTypes(model, obligation) {
   if (obligation.activityType === "custom") return obligation.customActivity?.completionResourceTypes || [];
   return model.obligationActivities?.[obligation.activityType]?.completionResourceTypes || [];
@@ -2170,7 +2187,7 @@ async function validateAttestationBinding(record, model, root, byId, path, diagn
   }
   const invalid = actualPaths.filter((item) => (
     !expectedPaths.has(item)
-    || !/^[a-f0-9]{64}$/.test(String(record.contentRevisions[item] || ""))
+    || !revisionDigest("content", record.contentRevisions[item])
   ));
   const unboundSubjects = [...subjectPaths].filter(([, paths]) => (
     paths.length && !paths.some((item) => actualPaths.includes(item))
@@ -2251,7 +2268,11 @@ function validateReportingRouteBinding(record, loaded, path, diagnostics) {
     .sort((left, right) => right.record.effectiveAt.localeCompare(left.record.effectiveAt))[0] || null;
   const expectedId = route?.record.id;
   const expectedRevision = route ? reportingRouteRevision(route.record) : undefined;
-  if (record.reportingRouteId !== expectedId || record.reportingRouteRevision !== expectedRevision) {
+  if (
+    record.reportingRouteId !== expectedId
+    || (expectedRevision && !revisionsMatch("reporting-route", record.reportingRouteRevision, expectedRevision))
+    || (!expectedRevision && record.reportingRouteRevision !== expectedRevision)
+  ) {
     diagnostics.push(error(
       "invalid-reporting-route-binding",
       path,
@@ -2276,7 +2297,7 @@ async function validateContentBinding(record, model, root, path, diagnostics, bi
   for (const item of markdownEntries(model, record)) {
     try {
       const source = await readFile(resolveDataPath(root, item.path), "utf8");
-      actual[item.path] = createHash("sha256").update(source).digest("hex");
+      actual[item.path] = calculateRevision("content", source);
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
@@ -2284,8 +2305,8 @@ async function validateContentBinding(record, model, root, path, diagnostics, bi
   const expected = record[bindingField];
   const paths = [...new Set([...Object.keys(actual), ...Object.keys(expected)])].sort();
   const invalid = paths.filter((item) => (
-    !/^[a-f0-9]{64}$/.test(String(expected[item] || ""))
-    || expected[item] !== actual[item]
+    !revisionDigest("content", expected[item])
+    || !revisionsMatch("content", expected[item], actual[item])
   ));
   if (invalid.length) {
     diagnostics.push(error(

package/src/web.js

@@ -1772,7 +1772,7 @@ function stagePageCard(stage, destination, index) {
         return '<a href="' + href + '"><span class="workflow-finding-status ' + esc(item.state) + '">' + esc(properCase(item.state)) + '</span><span><strong>' + esc(item.title) + '</strong><small>' + esc(stagePageItemDetail(item)) + '</small></span></a>';
       }).join("") + (items.length > 3 ? '<small class="stage-page-tasks-more">+' + (items.length - 3) + ' more on this page</small>' : "") + '</div>'
     : "";
-  return '<article class="stage-page-card ' + (complete ? "complete" : "") + '"><a class="stage-page-card-link" href="' + destination.href + '" aria-label="Open ' + esc(destination.label) + '"></a><div class="stage-page-card-head"><div><small>' + esc(stepLabel) + '</small><h3>' + esc(destination.label) + '</h3></div>' + completionState + '</div><p>' + esc(summary) + '</p>' + taskPreview + '<div class="stage-page-card-foot"><span class="stage-page-open" aria-hidden="true">Open ›</span></div></article>';
+  return '<article class="stage-page-card ' + (complete ? "complete" : "") + '"><div class="stage-page-card-head"><div><small>' + esc(stepLabel) + '</small><h3>' + esc(destination.label) + '</h3></div><div class="stage-page-card-actions">' + completionState + '<a class="stage-page-open" href="' + destination.href + '" aria-label="Open ' + esc(destination.label) + '"><span>Open ›</span></a></div></div><p>' + esc(summary) + '</p>' + taskPreview + '</article>';
 }
 
 function stagePageItemDetail(item) {
@@ -1898,7 +1898,7 @@ function stagePageItems(stage, destination) {
 }
 
 function workflowUiStage(stageId) {
-  return stageId === "operation" ? "run" : stageId;
+  return ["operate", "operation"].includes(stageId) ? "run" : stageId;
 }
 
 function operationProgress() {
@@ -6490,11 +6490,13 @@ html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(
 .nav-stage>.nav-items>a.nav-direct{display:grid;grid-template-columns:minmax(0,1fr) var(--nav-control-width);gap:6px;align-items:center;width:100%;padding:6px 6px 6px 7px;font-size:13.2px}
 .nav-heading-row{display:grid;grid-template-columns:minmax(0,1fr) 24px;gap:2px;align-items:stretch}.nav-heading-row>.nav-heading{display:grid;grid-template-columns:24px minmax(0,1fr);gap:6px;align-items:center;width:100%;padding:7px 6px;border-radius:7px;color:#d5d9ed;text-align:left;text-transform:none;letter-spacing:0;text-decoration:none}.nav-heading-row>.nav-heading:hover,.nav-heading-row>.nav-heading.current{background:rgba(255,255,255,.1);color:#fff}.nav-toggle{display:grid;place-items:center;width:24px;height:auto;min-height:100%;padding:0;border:0;border-radius:6px;background:none;color:#aeb6d8;cursor:pointer}.nav-toggle:hover{background:rgba(255,255,255,.1);color:#fff}.nav-chevron{display:block;width:12px;height:12px;place-self:center;fill:none;stroke:currentColor;stroke-width:1.5;stroke-linecap:round;stroke-linejoin:round;transition:transform .15s}.nav-subheading-row{display:grid;grid-template-columns:minmax(0,1fr) 22px;gap:2px;align-items:center;width:100%;padding:0;border:0;border-radius:6px;background:none;color:#919bc4;cursor:pointer}.nav-subheading-row:hover{background:rgba(255,255,255,.1);color:#fff}.nav-subheading-row>.nav-subheading{display:flex;align-items:center;min-width:0;padding:7px;color:inherit;text-align:left;text-transform:uppercase;letter-spacing:.09em;font-size:9.6px;font-weight:780}.nav-group.open>.nav-heading-row .nav-chevron,.nav-group.open>.nav-subheading-row .nav-chevron{transform:rotate(90deg)}
 .stage-overview-hero{display:grid;grid-template-columns:minmax(0,1fr) 300px;gap:28px;align-items:center;padding:26px 28px;background:var(--panel);border:1px solid var(--line);border-radius:12px;box-shadow:var(--shadow)}.stage-overview-hero h2,.group-overview-head h2{font:500 37.2px Georgia,serif;margin:7px 0}.stage-overview-hero>div>p:not(.kicker),.group-overview-head>div>p:not(.kicker){max-width:760px;color:var(--muted);font-size:14.4px;line-height:1.55;margin:0}.stage-progress-card{padding:15px 17px;background:var(--paper);border:1px solid var(--line);border-radius:9px}.stage-progress-card>div:first-child{display:flex;align-items:center;justify-content:space-between;margin-bottom:11px}.stage-progress-card>div:first-child>strong{font:500 33.6px Georgia,serif}.stage-progress-card p{color:var(--muted);font-size:10.8px;line-height:1.45;margin:9px 0 0}.badge.neutral{background:#e5e8f2;color:#555e73}.stage-overview-layout{display:grid;grid-template-columns:320px minmax(0,1fr);gap:15px;margin-top:15px;align-items:start}.stage-plan ol,.group-plan ol{display:grid;gap:12px;padding-left:20px;margin:0}.stage-plan li,.group-plan li{padding-left:4px;color:var(--ink);font-size:13.2px;line-height:1.5}.stage-groups{min-width:0}.stage-groups>.section-head{margin:4px 0 13px}.stage-group-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.stage-group-card{position:relative;display:block;min-height:138px;padding:18px 38px 17px 18px;background:var(--panel);border:1px solid var(--line);border-radius:10px;text-decoration:none;box-shadow:0 2px 8px rgba(21,40,33,.025)}.stage-group-card:hover{border-color:var(--accent-light)}.stage-group-card h3{font-size:15.6px;margin:0 0 7px}.stage-group-card p{color:var(--muted);font-size:12px;line-height:1.5;margin:0}.stage-group-card small{display:block;color:var(--accent);font-size:9.6px;font-weight:700;margin-top:12px}.stage-group-arrow{position:absolute;right:16px;top:16px;color:var(--accent);font-size:24px}.group-overview-head{display:flex;justify-content:space-between;align-items:end;gap:25px;margin-bottom:15px}.stage-status-link{display:grid;grid-template-columns:auto auto;align-items:center;gap:4px 12px;min-width:155px;padding:12px 14px;background:var(--panel);border:1px solid var(--line);border-radius:9px;text-decoration:none}.stage-status-link>strong{font:500 28.8px Georgia,serif;text-align:right}.stage-status-link>small{grid-column:1/-1;color:var(--muted);font-size:9.6px;text-align:right}.relationship-note{display:grid;grid-template-columns:250px minmax(0,1fr);gap:20px;align-items:center;margin-bottom:15px;padding:17px 20px;background:var(--accent-soft);border:1px solid #cbd3ff;border-radius:10px}.relationship-note h3{font-size:15.6px;margin:5px 0 0}.relationship-note>p{color:var(--muted);font-size:12px;line-height:1.55;margin:0}.relationship-note code{font-size:10.8px}.group-plan{margin-bottom:24px}.group-related-links{display:flex;align-items:center;gap:8px;margin-top:18px;padding-top:14px;border-top:1px solid var(--line)}.group-related-links>span{color:var(--muted);font-size:10.8px;margin-right:auto}.group-destinations>.section-head{margin-bottom:12px}.group-destination-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:11px}.group-destination-card{display:grid;grid-template-columns:minmax(0,1fr) 100px;gap:16px;min-height:150px;padding:18px;background:var(--panel);border:1px solid var(--line);border-radius:10px;text-decoration:none;box-shadow:0 2px 8px rgba(21,40,33,.025)}.group-destination-card:hover{border-color:var(--accent-light)}.group-destination-card h3{font-size:15.6px;margin:5px 0 7px}.group-destination-card p:not(.kicker){color:var(--muted);font-size:10.8px;line-height:1.5;margin:0}.destination-rollup{align-self:center;text-align:right}.destination-rollup strong,.destination-rollup small{display:block}.destination-rollup strong{font:500 32.4px Georgia,serif}.destination-rollup small{color:var(--muted);font-size:9.6px;line-height:1.35;margin-top:3px}
-.collection-review-panel{margin:16px 0 22px}.collection-review-panel.required{border-color:#d8bd78}.collection-review-panel.current{border-color:#b9dac6}.collection-review-head{display:flex;align-items:flex-start;justify-content:space-between;gap:24px}.collection-review-head h3{margin:4px 0 6px}.collection-review-head p:not(.kicker){max-width:900px;margin:0;color:var(--muted);font-size:11px;line-height:1.5}.collection-review-panel details{margin-top:13px;padding:10px 12px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft)}.collection-review-panel summary{cursor:pointer;font-size:11px;font-weight:750}.collection-review-panel ul,.collection-review-checks ul{margin:9px 0 0;padding-left:20px;color:var(--muted);font-size:10.4px;line-height:1.55}.collection-review-foot{display:flex;align-items:center;justify-content:space-between;gap:20px;margin-top:13px}.collection-review-result{display:flex;align-items:baseline;gap:8px;margin:0}.collection-review-result strong{font-size:11px}.collection-review-result span{color:var(--muted);font-size:10.4px}.collection-review-checks{margin:13px 0;padding:11px 13px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft)}.collection-review-checks>strong{font-size:11px}.event-dialog-steps.collection-review-checks{margin:15px 0 0;padding:10px;border:0}.collection-review-dialog textarea{box-sizing:border-box;width:100%;resize:vertical}.review-save-status{margin-right:auto;color:var(--muted);font-size:11px}.resource-review-criteria{margin:16px 0 22px;padding:13px 15px;border:1px solid var(--line);border-radius:8px;background:var(--panel)}.resource-review-criteria>strong{font-size:11px}.resource-review-criteria ul{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:5px 28px;margin:9px 0 0;padding-left:20px;color:var(--muted);font-size:10.4px;line-height:1.5}.commit-dialog .resource-review-criteria{margin:12px 0;background:var(--surface-soft)}.record-workflow-action{display:grid;grid-template-columns:auto minmax(140px,1fr);gap:7px;align-items:start;min-width:240px;text-decoration:none}.record-workflow-action strong,.record-workflow-action small{display:block}.record-workflow-action strong{font-size:10.4px}.record-workflow-action small{margin-top:2px;color:var(--muted);font-size:9.2px;line-height:1.35}.record-workflow-clear{color:var(--muted);font-size:10px;white-space:nowrap}.workflow-guidance{margin:16px 0 22px}.workflow-guidance .panel-head{align-items:flex-start;margin-bottom:12px}.workflow-guidance .panel-head h3{margin:4px 0}.workflow-guidance .panel-head p:not(.kicker){margin:4px 0 0;color:var(--muted);font-size:11px}.workflow-findings{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:7px}.workflow-findings>a,.workflow-findings>div{display:grid;grid-template-columns:auto minmax(0,1fr);gap:9px;align-items:start;padding:10px 11px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft);text-decoration:none}.workflow-findings strong,.workflow-findings small{display:block}.workflow-findings strong{font-size:11px}.workflow-findings small{margin-top:3px;color:var(--muted);font-size:9.6px;line-height:1.4}.workflow-finding-status{min-width:62px;padding:3px 5px;border-radius:99px;background:var(--accent-soft);color:var(--accent);font-size:8.4px;font-weight:750;text-align:center;text-transform:uppercase;letter-spacing:.04em}.workflow-finding-status.overdue,.workflow-finding-status.blocked{background:#f5ded9;color:#8d352c}.workflow-finding-status.ready,.workflow-finding-status.due,.workflow-finding-status.open{background:#f7e9cf;color:#855717}.workflow-finding-status.complete{background:#ddefe5;color:#176143}.workflow-guidance-more{margin:10px 0 0;color:var(--muted);font-size:9.6px}.workflow-guidance-more>summary{cursor:pointer;font-weight:750}.workflow-findings-more{margin-top:9px}.workflow-guidance-more>p{margin:8px 0 0}.context-workflow{display:flex;align-items:center;justify-content:space-between;gap:24px;margin:-8px 0 18px;padding:17px 19px;background:var(--accent-soft);border:1px solid #cbd3ff;border-radius:10px}.context-workflow h3{font-size:16px;margin:4px 0 5px}.context-workflow p:not(.kicker){color:var(--muted);font-size:12px;line-height:1.5;margin:0;max-width:850px}.context-workflow .button{white-space:nowrap}.policy-lifecycle-note{display:grid;grid-template-columns:minmax(0,1.5fr) minmax(260px,1fr);gap:24px;margin-top:18px}.policy-lifecycle-note h3{margin:5px 0 8px}.policy-lifecycle-note p:not(.kicker),.policy-library-proposals p{color:var(--muted);font-size:11px;line-height:1.55}.policy-library-proposals{display:grid;gap:8px}.policy-library-proposals article{padding:11px;border:1px solid var(--line);border-radius:8px;background:var(--surface-soft)}.policy-library-proposals p{margin:5px 0 8px}.policy-activation{display:grid;gap:12px;margin-top:22px}.policy-activation-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.policy-activation-card{padding:17px 18px;border:1px solid #d8bd78;border-radius:10px;background:var(--panel)}.policy-activation-card.active-and-operating{border-color:#b9dac6}.policy-activation-card h3{margin:7px 0 0}.policy-activation-gaps{display:grid;gap:9px;margin-top:13px}.policy-activation-gaps>div{padding-top:8px;border-top:1px solid var(--line)}.policy-activation-gaps small{display:block;margin-bottom:6px;color:var(--muted);font-size:9.6px;font-weight:700;text-transform:uppercase;letter-spacing:.05em}.policy-activation-warning{margin:11px 0 0;padding:9px 10px;border-radius:7px;background:#f7e9cf;color:#6d4917;font-size:10.4px;line-height:1.45}.evidence-map{display:grid;gap:12px;margin-top:18px}.evidence-map-head{display:flex;align-items:center;justify-content:space-between;gap:24px;padding:20px 22px;background:var(--accent-soft);border:1px solid #cbd3ff;border-radius:11px}.evidence-map-head>div:first-child{max-width:760px}.evidence-map-head h2{font:500 24px Georgia,serif;margin:5px 0 7px}.evidence-map-head p:not(.kicker){color:var(--muted);font-size:12px;line-height:1.55;margin:0}.evidence-map-actions{display:flex;gap:8px}.evidence-map-card{padding:18px 20px;background:var(--panel);border:1px solid var(--line);border-radius:10px;box-shadow:0 2px 8px rgba(21,40,33,.025)}.evidence-map-card.complete{border-color:#b9dac6}.evidence-map-card-head{display:flex;align-items:start;justify-content:space-between;gap:20px}.evidence-map-card-head h3{font-size:16px;margin:7px 0 0}.evidence-map-card-head>small{color:var(--muted);font-size:10px;text-align:right}.evidence-map-card>p{color:var(--muted);font-size:12px;line-height:1.55;margin:12px 0}.evidence-map-expectation{display:grid;grid-template-columns:120px minmax(0,1fr);gap:12px;padding:8px 0;border-top:1px solid var(--line);font-size:11px;line-height:1.5}.evidence-map-expectation strong{color:var(--muted);font-size:9.6px;text-transform:uppercase;letter-spacing:.06em}.evidence-map-expectation code{background:var(--paper);border-radius:4px;padding:2px 5px}.evidence-map-links{display:grid;grid-template-columns:minmax(220px,1fr) minmax(280px,1.2fr);gap:20px;margin-top:13px;padding-top:13px;border-top:1px solid var(--line)}.evidence-map-links>div>small{display:block;color:var(--muted);font-size:9.6px;font-weight:700;text-transform:uppercase;letter-spacing:.06em;margin-bottom:7px}.evidence-map-references,.evidence-map-sources{display:flex;flex-wrap:wrap;gap:5px}.evidence-map-source{display:flex;align-items:center;gap:7px;padding:7px 9px;background:var(--paper);border:1px solid var(--line);border-radius:7px;font-size:11px;text-decoration:none}.evidence-map-source.complete{border-color:#b9dac6;background:#edf7f1}.evidence-map-source small{color:var(--muted);font-size:9px}.evidence-map-status{padding:9px 11px;background:var(--paper);border-radius:7px}.evidence-map-empty{padding:24px;background:var(--panel);border:1px solid var(--line);border-radius:10px}.evidence-map-empty h3{margin:6px 0}.evidence-map-empty p:not(.kicker){color:var(--muted);font-size:12px;margin:0 0 14px}.stage-pages{margin-top:24px}.stage-page-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.stage-page-card{position:relative;display:flex;flex-direction:column;min-width:0;padding:18px;background:var(--panel);border:1px solid var(--line);border-radius:10px;box-shadow:0 2px 8px rgba(21,40,33,.025);transition:border-color .15s,box-shadow .15s}.stage-page-card:hover{border-color:var(--accent-light);box-shadow:0 5px 16px rgba(21,40,33,.07)}.stage-page-card.complete{border-color:#b9dac6}.stage-page-card-link{position:absolute;inset:0;z-index:1;border-radius:10px}.stage-page-card-link:focus-visible{outline:2px solid var(--focus);outline-offset:2px}.stage-page-card-head{display:flex;align-items:center;justify-content:space-between;gap:18px}.stage-page-card-head h3{font-size:15.6px;line-height:1.35;margin:4px 0 0}.stage-page-card-head>div>small{display:block;color:var(--accent);font-size:9.6px;font-weight:700}.stage-page-card>p{color:var(--muted);font-size:12px;line-height:1.5;margin:13px 0 0}.stage-page-tasks{position:relative;z-index:2;display:grid;gap:6px;margin-top:13px}.stage-page-tasks>a{display:grid;grid-template-columns:auto minmax(0,1fr);gap:8px;align-items:start;padding:9px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft);text-decoration:none}.stage-page-tasks>a:hover{border-color:var(--accent-light)}.stage-page-tasks strong,.stage-page-tasks small{display:block}.stage-page-tasks strong{font-size:10.8px}.stage-page-tasks small{margin-top:2px;color:var(--muted);font-size:9.4px;line-height:1.35}.stage-page-tasks-more{color:var(--muted);font-size:9.4px}.stage-page-rollup{display:flex;flex:0 0 104px;flex-direction:column;justify-content:center;text-align:right}.stage-page-rollup strong,.stage-page-rollup small{display:block}.stage-page-rollup strong{font:500 24px Georgia,serif}.stage-page-rollup small{color:var(--muted);font-size:9.6px;line-height:1.35;margin-top:2px}.stage-page-card-foot{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-top:auto;padding-top:15px}.stage-page-completion-state{color:var(--muted);font-size:10.8px}.stage-page-completion-state.complete{color:#176143;font-weight:700}.stage-page-open{color:var(--accent);font-size:12px;font-weight:700}.work-queue-section{margin-top:28px}.work-queue-section>.section-head{align-items:end}
+.collection-review-panel{margin:16px 0 22px}.collection-review-panel.required{border-color:#d8bd78}.collection-review-panel.current{border-color:#b9dac6}.collection-review-head{display:flex;align-items:flex-start;justify-content:space-between;gap:24px}.collection-review-head h3{margin:4px 0 6px}.collection-review-head p:not(.kicker){max-width:900px;margin:0;color:var(--muted);font-size:11px;line-height:1.5}.collection-review-panel details{margin-top:13px;padding:10px 12px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft)}.collection-review-panel summary{cursor:pointer;font-size:11px;font-weight:750}.collection-review-panel ul,.collection-review-checks ul{margin:9px 0 0;padding-left:20px;color:var(--muted);font-size:10.4px;line-height:1.55}.collection-review-foot{display:flex;align-items:center;justify-content:space-between;gap:20px;margin-top:13px}.collection-review-result{display:flex;align-items:baseline;gap:8px;margin:0}.collection-review-result strong{font-size:11px}.collection-review-result span{color:var(--muted);font-size:10.4px}.collection-review-checks{margin:13px 0;padding:11px 13px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft)}.collection-review-checks>strong{font-size:11px}.event-dialog-steps.collection-review-checks{margin:15px 0 0;padding:10px;border:0}.collection-review-dialog textarea{box-sizing:border-box;width:100%;resize:vertical}.review-save-status{margin-right:auto;color:var(--muted);font-size:11px}.resource-review-criteria{margin:16px 0 22px;padding:13px 15px;border:1px solid var(--line);border-radius:8px;background:var(--panel)}.resource-review-criteria>strong{font-size:11px}.resource-review-criteria ul{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:5px 28px;margin:9px 0 0;padding-left:20px;color:var(--muted);font-size:10.4px;line-height:1.5}.commit-dialog .resource-review-criteria{margin:12px 0;background:var(--surface-soft)}.record-workflow-action{display:grid;grid-template-columns:auto minmax(140px,1fr);gap:7px;align-items:start;min-width:240px;text-decoration:none}.record-workflow-action strong,.record-workflow-action small{display:block}.record-workflow-action strong{font-size:10.4px}.record-workflow-action small{margin-top:2px;color:var(--muted);font-size:9.2px;line-height:1.35}.record-workflow-clear{color:var(--muted);font-size:10px;white-space:nowrap}.workflow-guidance{margin:16px 0 22px}.workflow-guidance .panel-head{align-items:flex-start;margin-bottom:12px}.workflow-guidance .panel-head h3{margin:4px 0}.workflow-guidance .panel-head p:not(.kicker){margin:4px 0 0;color:var(--muted);font-size:11px}.workflow-findings{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:7px}.workflow-findings>a,.workflow-findings>div{display:grid;grid-template-columns:auto minmax(0,1fr);gap:9px;align-items:start;padding:10px 11px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft);text-decoration:none}.workflow-findings strong,.workflow-findings small{display:block}.workflow-findings strong{font-size:11px}.workflow-findings small{margin-top:3px;color:var(--muted);font-size:9.6px;line-height:1.4}.workflow-finding-status{min-width:62px;padding:3px 5px;border-radius:99px;background:var(--accent-soft);color:var(--accent);font-size:8.4px;font-weight:750;text-align:center;text-transform:uppercase;letter-spacing:.04em}.workflow-finding-status.overdue,.workflow-finding-status.blocked{background:#f5ded9;color:#8d352c}.workflow-finding-status.ready,.workflow-finding-status.due,.workflow-finding-status.open{background:#f7e9cf;color:#855717}.workflow-finding-status.complete{background:#ddefe5;color:#176143}.workflow-guidance-more{margin:10px 0 0;color:var(--muted);font-size:9.6px}.workflow-guidance-more>summary{cursor:pointer;font-weight:750}.workflow-findings-more{margin-top:9px}.workflow-guidance-more>p{margin:8px 0 0}.context-workflow{display:flex;align-items:center;justify-content:space-between;gap:24px;margin:-8px 0 18px;padding:17px 19px;background:var(--accent-soft);border:1px solid #cbd3ff;border-radius:10px}.context-workflow h3{font-size:16px;margin:4px 0 5px}.context-workflow p:not(.kicker){color:var(--muted);font-size:12px;line-height:1.5;margin:0;max-width:850px}.context-workflow .button{white-space:nowrap}.policy-lifecycle-note{display:grid;grid-template-columns:minmax(0,1.5fr) minmax(260px,1fr);gap:24px;margin-top:18px}.policy-lifecycle-note h3{margin:5px 0 8px}.policy-lifecycle-note p:not(.kicker),.policy-library-proposals p{color:var(--muted);font-size:11px;line-height:1.55}.policy-library-proposals{display:grid;gap:8px}.policy-library-proposals article{padding:11px;border:1px solid var(--line);border-radius:8px;background:var(--surface-soft)}.policy-library-proposals p{margin:5px 0 8px}.policy-activation{display:grid;gap:12px;margin-top:22px}.policy-activation-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.policy-activation-card{padding:17px 18px;border:1px solid #d8bd78;border-radius:10px;background:var(--panel)}.policy-activation-card.active-and-operating{border-color:#b9dac6}.policy-activation-card h3{margin:7px 0 0}.policy-activation-gaps{display:grid;gap:9px;margin-top:13px}.policy-activation-gaps>div{padding-top:8px;border-top:1px solid var(--line)}.policy-activation-gaps small{display:block;margin-bottom:6px;color:var(--muted);font-size:9.6px;font-weight:700;text-transform:uppercase;letter-spacing:.05em}.policy-activation-warning{margin:11px 0 0;padding:9px 10px;border-radius:7px;background:#f7e9cf;color:#6d4917;font-size:10.4px;line-height:1.45}.evidence-map{display:grid;gap:12px;margin-top:18px}.evidence-map-head{display:flex;align-items:center;justify-content:space-between;gap:24px;padding:20px 22px;background:var(--accent-soft);border:1px solid #cbd3ff;border-radius:11px}.evidence-map-head>div:first-child{max-width:760px}.evidence-map-head h2{font:500 24px Georgia,serif;margin:5px 0 7px}.evidence-map-head p:not(.kicker){color:var(--muted);font-size:12px;line-height:1.55;margin:0}.evidence-map-actions{display:flex;gap:8px}.evidence-map-card{padding:18px 20px;background:var(--panel);border:1px solid var(--line);border-radius:10px;box-shadow:0 2px 8px rgba(21,40,33,.025)}.evidence-map-card.complete{border-color:#b9dac6}.evidence-map-card-head{display:flex;align-items:start;justify-content:space-between;gap:20px}.evidence-map-card-head h3{font-size:16px;margin:7px 0 0}.evidence-map-card-head>small{color:var(--muted);font-size:10px;text-align:right}.evidence-map-card>p{color:var(--muted);font-size:12px;line-height:1.55;margin:12px 0}.evidence-map-expectation{display:grid;grid-template-columns:120px minmax(0,1fr);gap:12px;padding:8px 0;border-top:1px solid var(--line);font-size:11px;line-height:1.5}.evidence-map-expectation strong{color:var(--muted);font-size:9.6px;text-transform:uppercase;letter-spacing:.06em}.evidence-map-expectation code{background:var(--paper);border-radius:4px;padding:2px 5px}.evidence-map-links{display:grid;grid-template-columns:minmax(220px,1fr) minmax(280px,1.2fr);gap:20px;margin-top:13px;padding-top:13px;border-top:1px solid var(--line)}.evidence-map-links>div>small{display:block;color:var(--muted);font-size:9.6px;font-weight:700;text-transform:uppercase;letter-spacing:.06em;margin-bottom:7px}.evidence-map-references,.evidence-map-sources{display:flex;flex-wrap:wrap;gap:5px}.evidence-map-source{display:flex;align-items:center;gap:7px;padding:7px 9px;background:var(--paper);border:1px solid var(--line);border-radius:7px;font-size:11px;text-decoration:none}.evidence-map-source.complete{border-color:#b9dac6;background:#edf7f1}.evidence-map-source small{color:var(--muted);font-size:9px}.evidence-map-status{padding:9px 11px;background:var(--paper);border-radius:7px}.evidence-map-empty{padding:24px;background:var(--panel);border:1px solid var(--line);border-radius:10px}.evidence-map-empty h3{margin:6px 0}.evidence-map-empty p:not(.kicker){color:var(--muted);font-size:12px;margin:0 0 14px}.stage-pages{margin-top:24px}.stage-page-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}.stage-page-card{position:relative;display:flex;flex-direction:column;min-width:0;padding:18px;background:var(--panel);border:1px solid var(--line);border-radius:10px;box-shadow:0 2px 8px rgba(21,40,33,.025);transition:border-color .15s,box-shadow .15s}.stage-page-card:hover{border-color:var(--accent-light);box-shadow:0 5px 16px rgba(21,40,33,.07)}.stage-page-card.complete{border-color:#b9dac6}.stage-page-card-head{display:flex;align-items:center;justify-content:space-between;gap:18px}.stage-page-card-head h3{font-size:15.6px;line-height:1.35;margin:4px 0 0}.stage-page-card-head>div>small{display:block;color:var(--accent);font-size:9.6px;font-weight:700}.stage-page-card>p{color:var(--muted);font-size:12px;line-height:1.5;margin:13px 0 0}.stage-page-tasks{position:relative;z-index:2;display:grid;gap:6px;margin-top:13px}.stage-page-tasks>a{display:grid;grid-template-columns:auto minmax(0,1fr);gap:8px;align-items:start;padding:9px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft);text-decoration:none}.stage-page-tasks>a:hover{border-color:var(--accent-light)}.stage-page-tasks strong,.stage-page-tasks small{display:block}.stage-page-tasks strong{font-size:10.8px}.stage-page-tasks small{margin-top:2px;color:var(--muted);font-size:9.4px;line-height:1.35}.stage-page-tasks-more{color:var(--muted);font-size:9.4px}.stage-page-rollup{display:flex;flex:0 0 104px;flex-direction:column;justify-content:center;text-align:right}.stage-page-rollup strong,.stage-page-rollup small{display:block}.stage-page-rollup strong{font:500 24px Georgia,serif}.stage-page-rollup small{color:var(--muted);font-size:9.6px;line-height:1.35;margin-top:2px}.stage-page-card-foot{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-top:auto;padding-top:15px}.stage-page-completion-state{color:var(--muted);font-size:10.8px}.stage-page-completion-state.complete{color:#176143;font-weight:700}.stage-page-open{color:var(--accent);font-size:12px;font-weight:700}.work-queue-section{margin-top:28px}.work-queue-section>.section-head{align-items:end}
+.stage-page-card-actions{display:flex;align-items:center;gap:10px}.stage-page-card-actions .stage-page-open{white-space:nowrap}.stage-page-open::after{content:"";position:absolute;inset:0;z-index:1;border-radius:10px}.stage-page-open:focus-visible::after{outline:2px solid var(--focus);outline-offset:2px}.stage-page-open>span{position:relative;z-index:2}
 .workflow-findings>a:hover{border-color:var(--accent-light);box-shadow:0 3px 9px rgba(21,40,33,.05)}.workflow-findings>a:focus-visible{outline:2px solid var(--focus);outline-offset:2px}.stage-page-card-head{align-items:flex-start}.stage-page-completion-state{flex:0 0 auto;max-width:150px;padding:5px 8px;border-radius:99px;background:#f7e9cf;color:#855717;font-size:9.6px;font-weight:750;line-height:1.25;text-align:right}.stage-page-completion-state.complete{background:#ddefe5;color:#176143}.obligation-card.workflow-target{outline:2px solid var(--focus);outline-offset:3px}.obligation-card-foot{flex-wrap:wrap}.obligation-card-foot .obligation-links{flex:1 1 120px}
 .collection-review-panel.current details{margin-top:8px}.collection-review-detail-content{margin-top:10px}.collection-review-complete-summary{display:flex;align-items:baseline;gap:10px}.collection-review-complete-summary>.kicker{margin:0;white-space:nowrap}.collection-review-panel.current .collection-review-foot{justify-content:flex-end;margin-top:8px}
 .collection-review-current-row{display:flex;align-items:center;gap:10px;flex-wrap:wrap}.collection-review-panel.current .collection-review-details{flex:0 0 auto;margin:0;padding:0;border:0;background:transparent}.collection-review-panel.current .collection-review-details>summary{color:var(--accent);white-space:nowrap}.collection-review-panel.current .collection-review-details[open]{flex-basis:100%;order:3;padding:10px 12px;border:1px solid var(--line);border-radius:7px;background:var(--surface-soft)}.collection-review-panel.current .collection-review-details[open]>summary{margin-bottom:10px}.collection-review-panel.current .collection-review-details[open] .collection-review-detail-content{margin-top:0}.collection-review-panel.current .button{margin-left:auto}
 @media(max-width:520px){.collection-review-complete-summary{flex:1 1 180px;min-width:0;flex-wrap:wrap}.collection-review-complete-summary .collection-review-result{min-width:0;flex-wrap:wrap}.collection-review-complete-summary .collection-review-result span{overflow-wrap:anywhere}.collection-review-panel.current .button{margin-left:0}}
+@media(max-width:520px){.stage-page-card-head{align-items:stretch;flex-direction:column;gap:10px}.stage-page-card-actions{justify-content:space-between}}
 .evidence-attachments .panel-head{align-items:flex-start}.evidence-attachments .panel-head h3{margin:0}.evidence-attachments .panel-head p{margin:4px 0 0;color:var(--muted);font-size:10px}.evidence-attachments ul{list-style:none;margin:0;padding:0}.evidence-attachments li{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:9px 0;border-top:1px solid var(--line)}.evidence-attachments li:first-child{border-top:0}.evidence-attachments strong,.evidence-attachments small{display:block}.evidence-attachments strong{font-size:11px}.evidence-attachments small{margin-top:2px;color:var(--muted);font-size:9px;overflow-wrap:anywhere}.evidence-attachments .attachment-empty{display:block;color:var(--muted);font-size:10px;line-height:1.45}.danger-text{color:var(--red)}
 .policy-lifecycle-note.single{grid-template-columns:1fr}
 .policy-content-table{margin-top:22px}.policy-content-table>.section-head{align-items:end}.policy-content-table>.section-head h2{font:500 27.6px Georgia,serif;margin:5px 0 6px}.policy-content-table>.section-head p:not(.kicker){max-width:720px;margin:0;color:var(--muted);font-size:12px;line-height:1.5}.policy-content-tools{display:flex;align-items:center;justify-content:flex-end;gap:9px;flex-wrap:wrap}.policy-content-tools input[type="search"]{min-width:210px;border:1px solid var(--line);border-radius:7px;background:var(--field);padding:9px 11px}.history-toggle{display:flex;align-items:center;gap:6px;color:var(--muted);font-size:11px}.policy-content-add{position:relative}.policy-content-add>summary{list-style:none}.policy-content-add>summary::-webkit-details-marker{display:none}.policy-content-add>div{position:absolute;right:0;z-index:5;display:grid;min-width:150px;margin-top:6px;padding:5px;border:1px solid var(--line);border-radius:8px;background:var(--panel);box-shadow:var(--shadow)}.policy-content-add button{border:0;border-radius:5px;background:transparent;padding:8px 10px;color:var(--ink);text-align:left;cursor:pointer}.policy-content-add button:hover{background:var(--accent-soft)}.policy-content-type span,.policy-content-approval span{display:block}.policy-content-type small,.policy-content-approval small{display:block;margin-top:3px;color:var(--muted);font-size:9.6px}.policy-content-filter-empty{margin:10px 0 0;padding:16px;border:1px dashed var(--line);border-radius:8px;color:var(--muted);font-size:12px;text-align:center}.policy-content-count{margin:9px 2px 0;color:var(--muted);font-size:10.8px;text-align:right}

package/src/workflow-history-integrity.js

@@ -13,6 +13,7 @@ import { resolveDataPath } from "./paths.js";
 import { markdownEntries } from "./resource-markdown.js";
 import { currentCalendarDate, isRfc3339Timestamp, timestampFromLocalDateTime } from "./time.js";
 import { recordsAtRevision, reportingRouteFixedEvidence } from "./reporting-route-integrity.js";
+import { CALCULATED_REVISION_FIELDS, CALCULATED_REVISION_MAP_FIELDS, canonicalCalculatedRevision } from "./revisions.js";
 
 const FINAL_STATUSES = new Map([
   ["reconciliation-dismissal", new Set([undefined])],
@@ -823,18 +824,25 @@ function permittedFinalizedTransition(previous, current) {
     && (previous.evidenceIds || []).every((id) => (current.evidenceIds || []).includes(id))
   ) allowed = ["evidenceIds"];
   return [...new Set([...Object.keys(previous), ...Object.keys(current)])].every((key) => (
-    allowed.includes(key) || sameJson(previous[key], current[key])
+    allowed.includes(key) || sameJson(previous[key], current[key], key)
   ));
 }
 
-function sameJson(left, right) {
-  return JSON.stringify(canonicalJson(left)) === JSON.stringify(canonicalJson(right));
+function sameJson(left, right, field = null) {
+  return JSON.stringify(canonicalJson(left, field)) === JSON.stringify(canonicalJson(right, field));
 }
 
-function canonicalJson(value) {
-  if (Array.isArray(value)) return value.map(canonicalJson);
-  if (!value || typeof value !== "object") return value;
-  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalJson(value[key])]));
+function canonicalJson(value, field = null, revisionMap = false) {
+  if (Array.isArray(value)) return value.map((item) => canonicalJson(item));
+  if (!value || typeof value !== "object") {
+    return typeof value === "string" && (revisionMap || CALCULATED_REVISION_FIELDS.has(field))
+      ? canonicalCalculatedRevision(value)
+      : value;
+  }
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [
+    key,
+    canonicalJson(value[key], key, revisionMap || CALCULATED_REVISION_MAP_FIELDS.has(field))
+  ]));
 }
 
 function proofIds(occurrence, byId) {

package/src/workflow.js

@@ -2,7 +2,7 @@ import { cp, mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { modelSupports } from "../model/index.js";
-import { applicabilityReviewIsCurrent } from "./applicability-scope.js";
+import { applicabilityReviewIsCurrent, applicabilityScopeRevision } from "./applicability-scope.js";
 import { retentionScheduleIsAuthoritative } from "./collection-review.js";
 import { assessRequiredAppointments } from "./appointments.js";
 import { assessSourceCoverageReadiness } from "./source-coverage.js";
@@ -27,6 +27,8 @@ import { resolveProgram } from "./program.js";
 import { resourceReviewRevisions, retentionReviewResourceIds, retentionRuleIsCurrent } from "./retention.js";
 import { signatoryAppointmentIssue, soc2ReportEvidenceIssue, subsequentEventsReviewIssue } from "./soc2.js";
 import { planReconciliation } from "./reconciliation.js";
+import { documentIsAuditSpecific } from "./program-lifecycle.js";
+import { resourceProgramContext } from "./program-path.js";
 import { currentCalendarDate } from "./time.js";
 import { measureTiming } from "./timing.js";
 import { validateWorkspace } from "./validate.js";
@@ -388,10 +390,10 @@ function recordFinalizationFindings(loaded, program) {
     if (["workspace", "renderer-settings"].includes(record.type)) continue;
     const incomplete = recordIncompleteReason(record, loaded, program);
     if (incomplete) {
-      findings.push(finalizationFinding(record, incomplete));
+      findings.push(finalizationFinding(record, incomplete, loaded.model));
     }
     for (const missing of finalizationFields(record, loaded.model, loaded.resources, program)) {
-      findings.push(fieldFinding(record, missing));
+      findings.push(fieldFinding(record, missing, loaded.model));
     }
   }
   return findings;
@@ -531,10 +533,13 @@ function finalizationFields(record, model, resources, program) {
     && model.resources[record.type]?.fields?.applicabilityReview
     && !applicabilityReviewIsCurrent(record.applicabilityReview, record, program, resources, model);
   if (needsReview) {
+    const currentRevision = applicabilityScopeRevision(record, program, resources, model);
     fields.push({
       field: "applicabilityReview",
       requiredness: "required",
-      message: "Review applicability against the current service scope, then record the decision, rationale, reviewer, and date."
+      message: record.applicabilityReview?.scopeRevision
+        ? `Review applicability against the current service scope. Stored revision: ${record.applicabilityReview.scopeRevision}. Current revision: ${currentRevision}. Then record the decision, rationale, reviewer, and date.`
+        : `Review applicability against the current service scope. Current revision: ${currentRevision}. Then record the decision, rationale, reviewer, and date.`
     });
   }
   if (record.type === "policy" && model.resources.policy?.fields?.programRole && !record.programRole) {
@@ -591,13 +596,13 @@ function finalizationFields(record, model, resources, program) {
   return fields;
 }
 
-function finalizationFinding(record, details) {
+function finalizationFinding(record, details, model) {
   const code = `record.${record.type}.${record.id}.finalize`;
   return {
     key: code,
     code,
-    assessment: recordAssessment(record.type),
-    stage: recordStage(record.type),
+    assessment: recordAssessment(record, model),
+    stage: recordStage(record, model),
     state: details.state,
     severity: details.state === "blocked" ? "error" : "warning",
     requiredness: details.requiredness,
@@ -609,13 +614,13 @@ function finalizationFinding(record, details) {
   };
 }
 
-function fieldFinding(record, missing) {
+function fieldFinding(record, missing, model) {
   const code = `record.${record.type}.${record.id}.field.${missing.field}`;
   return {
     key: code,
     code,
-    assessment: recordAssessment(record.type),
-    stage: recordStage(record.type),
+    assessment: recordAssessment(record, model),
+    stage: recordStage(record, model),
     state: "ready",
     severity: "warning",
     requiredness: missing.requiredness,
@@ -1732,22 +1737,27 @@ function shellArgument(value) {
     : `'${text.replaceAll("'", "'\\''")}'`;
 }
 
-function recordAssessment(type) {
-  if (["audit", "audit-request", "audit-population"].includes(type)) return "audit-readiness";
-  if (["action-item", "obligation-event", "control-activity"].includes(type)) return "period-health";
+function recordAssessment(record, model) {
+  const stage = workflowStageForRecord(record, model);
+  if (stage === "audit") return "audit-readiness";
+  if (stage === "operate") return "period-health";
   return "program-configuration";
 }
 
-function recordStage(type) {
-  if (["person", "appointment", "team", "framework", "requirement", "commitment", "system", "vendor"].includes(type)) {
-    return "scope";
-  }
-  if (["policy", "document", "training"].includes(type)) return "policies";
-  if (["control", "complementary-control", "source-coverage", "obligation"].includes(type)) return "controls";
-  if (["audit", "audit-request", "audit-population"].includes(type)) return "audit";
+export function workflowStageForRecord(record, model) {
+  const type = record.type;
+  if (documentIsAuditSpecific(record, model)) return "audit";
+  if (type === "source-coverage") return "controls";
+  const stage = resourceProgramContext(type, model)?.id;
+  if (stage === "run") return "operate";
+  if (stage) return stage;
   return "operate";
 }
 
+function recordStage(record, model) {
+  return workflowStageForRecord(record, model);
+}
+
 function appointmentRequiredness(record, model) {
   return model.appointmentTemplates?.[record.appointmentKind]?.requiredness || "conditional";
 }