kibi-cli 2.30.0 → 2.31.1

package/dist/public/operations/specs/check-rules.generated.js

@@ -62,7 +62,9 @@ export const SELECTABLE_RULE_NAMES = [
     "supersedes-reason-acknowledged",
     "policy-ownership",
     "policy-markers",
+    "kb-consistency",
+    "kb-consistency-unresolved",
 ];
 // implements REQ-006
 /** Comma-separated "Allowed:" fragment for the kb_check rules description. */
-export const SELECTABLE_RULES_ALLOWED = "must-priority-coverage, symbol-coverage, symbol-traceability, symbol-granularity, no-dangling-refs, source-relationship-parity, branch-store-not-compiled, source-path-dangling, no-cycles, required-fields, deprecated-adr-no-successor, superseded-requirement-open, scenario-feasibility, scenario-feasibility-unknown, exception-claim-keys, numeric-string-value, rule-key-arguments-missing, domain-contradictions, logic-coverage, rule-safety, rule-verifiability, query-plan-safety, req-status-vocabulary, strict-fact-shape, strict-req-fact-pairing, predicate-verifiability, strict-readiness, semantic-completeness, related-requirement-unmodeled, proof-contract-symbols, entity-id-style, domain-redundancy, domain-implication, subject-key-identity, subject-key-shape, ontology-quality, exception-unapproved, exception-approval-self-attested, agent-requirement-unapproved, requirement-rationale-missing, symbol-owner-superseded, adr-unlinked, adr-proposed, predicate-schema-conformance, entity-context-missing, entity-context-acknowledged, decision-firm-unreferenced, decision-firm-superseded, decision-firm-edited, supersedes-reason-missing, supersedes-reason-acknowledged, policy-ownership, policy-markers";
+export const SELECTABLE_RULES_ALLOWED = "must-priority-coverage, symbol-coverage, symbol-traceability, symbol-granularity, no-dangling-refs, source-relationship-parity, branch-store-not-compiled, source-path-dangling, no-cycles, required-fields, deprecated-adr-no-successor, superseded-requirement-open, scenario-feasibility, scenario-feasibility-unknown, exception-claim-keys, numeric-string-value, rule-key-arguments-missing, domain-contradictions, logic-coverage, rule-safety, rule-verifiability, query-plan-safety, req-status-vocabulary, strict-fact-shape, strict-req-fact-pairing, predicate-verifiability, strict-readiness, semantic-completeness, related-requirement-unmodeled, proof-contract-symbols, entity-id-style, domain-redundancy, domain-implication, subject-key-identity, subject-key-shape, ontology-quality, exception-unapproved, exception-approval-self-attested, agent-requirement-unapproved, requirement-rationale-missing, symbol-owner-superseded, adr-unlinked, adr-proposed, predicate-schema-conformance, entity-context-missing, entity-context-acknowledged, decision-firm-unreferenced, decision-firm-superseded, decision-firm-edited, supersedes-reason-missing, supersedes-reason-acknowledged, policy-ownership, policy-markers, kb-consistency, kb-consistency-unresolved";

package/dist/public/operations/specs/check.d.ts

@@ -12,7 +12,7 @@ export declare const checkSpec: {
                     readonly type: "string";
                     readonly enum: readonly string[];
                 };
-                readonly description: "Optional rule subset. Allowed: must-priority-coverage, symbol-coverage, symbol-traceability, symbol-granularity, no-dangling-refs, source-relationship-parity, branch-store-not-compiled, source-path-dangling, no-cycles, required-fields, deprecated-adr-no-successor, superseded-requirement-open, scenario-feasibility, scenario-feasibility-unknown, exception-claim-keys, numeric-string-value, rule-key-arguments-missing, domain-contradictions, logic-coverage, rule-safety, rule-verifiability, query-plan-safety, req-status-vocabulary, strict-fact-shape, strict-req-fact-pairing, predicate-verifiability, strict-readiness, semantic-completeness, related-requirement-unmodeled, proof-contract-symbols, entity-id-style, domain-redundancy, domain-implication, subject-key-identity, subject-key-shape, ontology-quality, exception-unapproved, exception-approval-self-attested, agent-requirement-unapproved, requirement-rationale-missing, symbol-owner-superseded, adr-unlinked, adr-proposed, predicate-schema-conformance, entity-context-missing, entity-context-acknowledged, decision-firm-unreferenced, decision-firm-superseded, decision-firm-edited, supersedes-reason-missing, supersedes-reason-acknowledged, policy-ownership, policy-markers. If omitted, server runs canonical and advisory rules plus the full-KB qualityDiagnostics audit scan, including usage telemetry acceptance when evidence exists; migration rules run only when explicitly selected. Advisory and migration findings are non-blocking qualityDiagnostics. If supplied, server preserves scoped validation and skips the full-KB advisory scan.";
+                readonly description: "Optional rule subset. Allowed: must-priority-coverage, symbol-coverage, symbol-traceability, symbol-granularity, no-dangling-refs, source-relationship-parity, branch-store-not-compiled, source-path-dangling, no-cycles, required-fields, deprecated-adr-no-successor, superseded-requirement-open, scenario-feasibility, scenario-feasibility-unknown, exception-claim-keys, numeric-string-value, rule-key-arguments-missing, domain-contradictions, logic-coverage, rule-safety, rule-verifiability, query-plan-safety, req-status-vocabulary, strict-fact-shape, strict-req-fact-pairing, predicate-verifiability, strict-readiness, semantic-completeness, related-requirement-unmodeled, proof-contract-symbols, entity-id-style, domain-redundancy, domain-implication, subject-key-identity, subject-key-shape, ontology-quality, exception-unapproved, exception-approval-self-attested, agent-requirement-unapproved, requirement-rationale-missing, symbol-owner-superseded, adr-unlinked, adr-proposed, predicate-schema-conformance, entity-context-missing, entity-context-acknowledged, decision-firm-unreferenced, decision-firm-superseded, decision-firm-edited, supersedes-reason-missing, supersedes-reason-acknowledged, policy-ownership, policy-markers, kb-consistency, kb-consistency-unresolved. If omitted, server runs canonical and advisory rules plus the full-KB qualityDiagnostics audit scan, including usage telemetry acceptance when evidence exists; migration rules run only when explicitly selected. Advisory and migration findings are non-blocking qualityDiagnostics. If supplied, server preserves scoped validation and skips the full-KB advisory scan.";
             };
             readonly sourceFiles: {
                 readonly type: "array";

package/dist/public/operations/specs/reporting.d.ts

@@ -125,7 +125,7 @@ export declare const findGapsSpec: {
  * + bound-symbol code scope) and hand the Prolog coverage stage a
  * TestId -> BindingHash dict. This is the default binding mode since slice 3;
  * KIBI_PROOF_BINDING_MODE=strict-snapshot opts out (receipts then match only
- * against the whole-workspace snapshot they were proven on).
+ * against the whole-workspace snapshot they were produced on).
  */
 export declare function currentProofBindingMode(): "per_contract" | "strict_snapshot";
 export declare function perContractTestBindings(context: OperationContext): Promise<string | null>;
@@ -141,7 +141,7 @@ export declare function executeCoverage(input: CoverageInput, context: Operation
 export declare const coverageSpec: {
     readonly name: "kb_coverage";
     readonly cliName: "coverage";
-    readonly description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Use it to ask which requirements are proven and what blocks the rest; use kb_find_gaps for a plain list of missing links and kb_check for rule violations. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.";
+    readonly description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Use it to ask which requirements are tested end to end, how strong each requirement's evidence is (evidenceLevel: proved, tested, asserted or unverified), and what blocks the rest; use kb_find_gaps for a plain list of missing links and kb_check for rule violations. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.";
     readonly businessInputSchema: {
         readonly type: "object";
         readonly properties: {
@@ -161,13 +161,13 @@ export declare const coverageSpec: {
             readonly includePassing: {
                 readonly type: "boolean";
                 readonly default: false;
-                readonly description: "Also return rows that are already proven or not applicable. By default only rows that still need repair are returned.";
+                readonly description: "Also return rows that are already tested or not applicable. By default only rows that still need repair are returned.";
             };
             readonly statuses: {
                 readonly type: "array";
                 readonly items: {
                     readonly type: "string";
-                    readonly enum: readonly ["proven", "missing", "unresolved", "not_applicable"];
+                    readonly enum: readonly ["tested", "missing", "unresolved", "not_applicable"];
                 };
                 readonly description: "Requirement proof-status filter (req mode): include only rows whose proofStatus is listed. Selecting statuses implies include-passing; not_applicable rows carry their typed applicability reason in proofStages.applicability.reason. The summary always reflects the whole KB.";
             };

package/dist/public/operations/specs/reporting.js

@@ -30,7 +30,7 @@ function validateEntityType(type) {
     }
 }
 const COVERAGE_PROOF_STATUSES = new Set([
-    "proven",
+    "tested",
     "missing",
     "unresolved",
     "not_applicable",
@@ -120,7 +120,7 @@ export const findGapsSpec = {
  * + bound-symbol code scope) and hand the Prolog coverage stage a
  * TestId -> BindingHash dict. This is the default binding mode since slice 3;
  * KIBI_PROOF_BINDING_MODE=strict-snapshot opts out (receipts then match only
- * against the whole-workspace snapshot they were proven on).
+ * against the whole-workspace snapshot they were produced on).
  */
 // implements REQ-kibi-verification-evidence-contract
 export function currentProofBindingMode() {
@@ -286,13 +286,13 @@ export async function executeCoverage(input, context) {
             },
         };
         const fullyCovered = Number(enrichedPayload.summary?.fullyCovered ?? 0);
-        const proofProven = Number(enrichedPayload.summary?.proofProven ?? 0);
+        const proofTested = Number(enrichedPayload.summary?.proofTested ?? 0);
         const total = Number(enrichedPayload.summary?.total ?? 0);
         return {
             content: [
                 {
                     type: "text",
-                    text: `Coverage summary: ${fullyCovered} structurally covered and ${proofProven} proven out of ${total}.`,
+                    text: `Coverage summary: ${fullyCovered} structurally covered and ${proofTested} tested end to end out of ${total}.`,
                 },
             ],
             structuredContent: enrichedPayload,
@@ -306,7 +306,7 @@ export async function executeCoverage(input, context) {
 export const coverageSpec = {
     name: "kb_coverage",
     cliName: "coverage",
-    description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Use it to ask which requirements are proven and what blocks the rest; use kb_find_gaps for a plain list of missing links and kb_check for rule violations. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.",
+    description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Use it to ask which requirements are tested end to end, how strong each requirement's evidence is (evidenceLevel: proved, tested, asserted or unverified), and what blocks the rest; use kb_find_gaps for a plain list of missing links and kb_check for rule violations. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.",
     businessInputSchema: {
         type: "object",
         properties: {
@@ -324,13 +324,13 @@ export const coverageSpec = {
             includePassing: {
                 type: "boolean",
                 default: false,
-                description: "Also return rows that are already proven or not applicable. By default only rows that still need repair are returned.",
+                description: "Also return rows that are already tested or not applicable. By default only rows that still need repair are returned.",
             },
             statuses: {
                 type: "array",
                 items: {
                     type: "string",
-                    enum: ["proven", "missing", "unresolved", "not_applicable"],
+                    enum: ["tested", "missing", "unresolved", "not_applicable"],
                 },
                 description: "Requirement proof-status filter (req mode): include only rows whose proofStatus is listed. Selecting statuses implies include-passing; not_applicable rows carry their typed applicability reason in proofStages.applicability.reason. The summary always reflects the whole KB.",
             },

package/dist/public/skills/kibi-commit-review/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-commit-review
 name: kibi-commit-review
 description: "Use when kibi check --staged or the Kibi pre-commit hook blocks a commit (kibi_impact_evidence_missing, symbols_manifest_stale, symbol_granularity_violation, symbol-coverage, kibi check-generated drift, Staged impact review failed), or when preparing a commit or pull-request impact review. Covers reading the per-file Detail lines, authoring .kb/symbols.yaml symbol entries through kb_upsert, kibi sync --refresh-symbol-coordinates, staging the tracked Kibi evidence with git add, kb_prepare_impact_review for a staged or diff scope, the kibi signoff requirements summary to show before a commit, and how merge commits and migration renames are judged."
-version: 1.2.0
+version: 1.2.1
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -85,8 +85,9 @@ requirement with its statement (before and after for a rewrite), firmness,
 origin, scenarios and proof state. Put it in your reply unchanged (in the
 messaging tool's message when replies go through one), then add one or two
 sentences on why the requirements changed. Offer the full page with
-`kibi signoff --format html --open`, or attach or publish
-`.kb/briefs/signoff/latest.html` when your host can carry a file or a page;
+`kibi signoff --format html --open`, or publish `.kb/briefs/signoff/latest.html`
+as a rendered page when your host has a page tool (the Artifact tool in Claude
+apps); never attach the `.html` as a file, which chat apps show as raw source;
 past 15 requirements the Markdown stops and only the page lists them all.
 Host details: `kibi-decisions`, `resources/signoff-views.md`. `--no-proof` skips the proof lookup, which reads coverage and is slow
 on a large knowledge base. The summary is not an approval: never set

package/dist/public/skills/kibi-decisions/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-decisions
 name: kibi-decisions
 description: "Use when the person states a rule or decision (must, never, always, from now on, we decided), when a Kibi hook asks to confirm or warns about an edit to code that implements a firm requirement, when the Stop hook says source files changed but nothing was recorded, when kb_check quotes requirement_statement_unverified, or when a request conflicts with a recorded requirement or ADR. Covers reading firmness and origin, recording a person's rule as firm with origin.ref, superseding with a Why this changed section, the kb_compile_intent unresolved/reviewCandidates/conflictReviews loop, asking before overriding a firm rule, and putting decisions to the person as one numbered kibi signoff --questions view."
-version: 1.2.0
+version: 1.2.1
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi

package/dist/public/skills/kibi-decisions/resources/signoff-views.md

@@ -13,7 +13,8 @@ statements and lists that render in any chat or messaging surface. Put it in
 your reply unchanged: never wrap it in a code block, summarize it or retell a
 requirement in your own words. Every run also writes
 `.kb/briefs/signoff/latest.json`, `latest.md` and `latest.html` (git-ignored);
-`latest.html` is a self-contained page with the full view.
+`latest.html` is a self-contained page with the full view, meant to be opened
+in a browser or published as a page, not attached as a file.
 
 ## Showing it on your host
 
@@ -21,7 +22,7 @@ requirement in your own words. Every run also writes
 | --- | --- |
 | Claude Code, Codex, Cursor, ZCode, VS Code chat | Paste the default output; `/kibi-signoff` (Claude Code, Cursor, ZCode) runs it. Offer `kibi signoff --format html --open` for the page |
 | OpenCode terminal | `kibi signoff --format md` and paste the fenced block unchanged: kibi-opencode draws it as a card, and `/kibi-signoff` reopens it |
-| Replies sent through a messaging tool (cloud or project threads, chat bots) | Pass the default output as the message text, and attach or publish `.kb/briefs/signoff/latest.html` next to it when the tool can carry a file or a page |
+| Replies sent through a messaging tool (cloud or project threads, chat bots) | Pass the default output as the message text. Share `latest.html` only as a rendered page: in Claude apps (claude.ai, the mobile and desktop apps, Claude Code on the web) publish it with the Artifact tool and give its link. Never attach the `.html` as a file: the Claude apps, Slack and most chat apps show it as raw source or a download. With no page tool, the message text is the whole view |
 | VS Code or Cursor with the kibi-vscode extension | The **Kibi: Show Requirements Signoff** panel follows every run |
 | Remote machine, no browser | Give the person the path of `latest.html` |
 

package/dist/public/skills/kibi-freshness/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-freshness
 name: kibi-freshness
 description: Check exact Git attachment, branch migration/quarantine, compiled-store freshness, source linkage, and repair state before decisions or writes.
-version: 2.0.0
+version: 2.1.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -53,7 +53,7 @@ echo '{}' | npx --no-install kibi status --input -
   `committed_with_repairs`, follow required typed `nextActions`; never retry the
   original operation.
 
-For every freshness, branch, or completion question, call `kb_status` first, then `kb_query` the entities and source files that status names, then `kb_check` as the last Kibi call before answering. Never skip the query step, even when status alone seems to answer the question. If another query or write follows a check, run `kb_check` again before answering. When asked whether requirements are consistent or proven, run `kb_query`, then `kb_check` with the domain-contradictions rule, then `kb_coverage`, and read whether the analysis was complete. Report any unmodeled or unknown clause as incomplete analysis, not as consistent. Only when every clause is fully modeled and compatible, state plainly that no conflict was found. For authorized knowledge changes, keep the exact supplied target and intended relationship edges, and discover and query those targets first. Validate the payload with `kb_upsert` and `dryRun: true`, then perform the authorized `kb_upsert` with that same payload and read the result back exactly before the final checks. A passing dry run is validation, not completion. Distinct authorized payloads may need several sequential writes, each validated and read back, but never retry a mutation that already committed. If a mutation returns `committed_with_repairs`, follow its typed `nextActions` instead of repeating the original operation.
+For every freshness, branch, or completion question, call `kb_status` first, then `kb_query` the entities and source files that status names, then `kb_check` as the last Kibi call before answering. Never skip the query step, even when status alone seems to answer the question. If another query or write follows a check, run `kb_check` again before answering. When asked whether requirements are consistent or proven, run `kb_query`, then `kb_check` with the rules `domain-contradictions`, `kb-consistency` and `kb-consistency-unresolved`, then `kb_coverage`, and read whether the analysis was complete. `domain-contradictions` compares facts two at a time; `kb-consistency` checks every fact of a property together, so a clean pairwise result is not proof. Report a `kb-consistency` violation as a conflict, name every requirement it lists, and give superseding or changing one of them as the next step; never edit or delete facts to make the check pass. Report a context `kb-consistency-unresolved` names as unresolved, never as consistent, with the step that would make it comparable. Report any unmodeled or unknown clause as incomplete analysis, not as consistent. Only when every clause is fully modeled and compatible, state plainly that no conflict was found. For authorized knowledge changes, keep the exact supplied target and intended relationship edges, and discover and query those targets first. Validate the payload with `kb_upsert` and `dryRun: true`, then perform the authorized `kb_upsert` with that same payload and read the result back exactly before the final checks. A passing dry run is validation, not completion. Distinct authorized payloads may need several sequential writes, each validated and read back, but never retry a mutation that already committed. If a mutation returns `committed_with_repairs`, follow its typed `nextActions` instead of repeating the original operation.
 
 ## Guidance
 

package/dist/public/skills/kibi-usage/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-usage
 name: Kibi Usage
 description: Use Kibi's source-first, exact-Git, migration-aware, proof-aware operations safely across MCP or the trusted local CLI, including partial completion repair.
-version: 2.22.0
+version: 2.24.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -168,7 +168,7 @@ End every task with these five independent fields:
 taskOutcome: complete | interim | blocked
 kbState: clean_fresh | stale | dirty | legacy_compat | not_evaluated
 verificationState: fresh | dirty | unavailable | not_evaluated
-proofState: proven | mixed | unresolved | not_evaluated
+proofState: tested | mixed | unresolved | not_evaluated
 limitationDisposition: none | accepted | unaccepted | not_applicable
 ```
 

package/dist/public/skills/kibi-usage/resources/proof.md

@@ -1,6 +1,6 @@
 # Proof and Verification Workflow
 
-Use this resource when a requirement must be proven before handoff, when
+Use this resource when a requirement must be tested end to end before handoff, when
 wiring a proof-bearing test, or when `kb_ingest_proof` or `kibi prove`
 rejected evidence.
 
@@ -97,9 +97,9 @@ Cosmetic edits (descriptions, labels) never stale proof. Execution-relevant
 edits (command, artifact, targets, options, bindings, contract) change the
 effective fingerprint and do.
 
-## What counts toward proofProven
+## What counts toward proofTested
 
-A requirement is proven only by its scenarios' tests, and a scenario test
+A requirement reaches `proofStatus: tested` only through its scenarios' tests, and a scenario test
 counts only when it is an **end-to-end** test with a valid, fresh, passing
 receipt for the current snapshot.
 
@@ -109,7 +109,7 @@ receipt for the current snapshot.
   `source` path contains `e2e`) counts as end-to-end; anything else is
   `unknown` scope.
 - A `unit` or `integration` receipt is still recorded on the test entity, but
-  it does not move `proofProven` for a behavioural requirement: the
+  it does not move `proofTested` for a behavioural requirement: the
   requirement keeps the `missing_passing_e2e` gap in `proofGaps`. The one
   exception is a scenario whose specifying requirements are all grounded only
   in component-scope UI predicates (`ui_pattern`, `same_pattern`,
@@ -120,6 +120,38 @@ receipt for the current snapshot.
   receipt does not change it, and a `passing` status without a fresh receipt
   proves nothing.
 
+## Evidence levels
+
+Every requirement row also carries `evidenceLevel`, the strength of what backs
+it, and `evidence`, the entries that earned it (each with `kind`, `scope` and
+`level`):
+
+- `proved`: a re-checkable certificate covers every case. No proof kind issues
+  certificates yet, so nothing reaches it today.
+- `tested`: `proofStatus` is `tested`; fresh E2E receipts cover every linked
+  scenario.
+- `asserted`: a person stands behind the statement (approved, or firm by
+  `firmness` or a non-agent origin) but nothing current checks it.
+- `unverified`: an agent wrote it, no person approved it, nothing checks it.
+
+Report the level as it is. Never call an `asserted` or `unverified`
+requirement proven or tested, and never call `tested` proved. Firmness is a
+separate axis: it says how sure the person is, not how strong the evidence is.
+
+## Knowledge-base certificates
+
+`kb_check` (`kibi check`) proves facts about the KB itself in its
+`kb-consistency` rule and re-checks each answer with an independent checker:
+property facts are consistent (a model per subject, property and scope, or an
+irreducible contradiction core), predicate facts and allow/deny decisions are
+consistent, and stored rules are stratified. It catches facts that contradict
+only together, which the pairwise `domain-contradictions` rule misses. A
+`kb-consistency` violation names the core facts and the requirements behind
+them: supersede or change one of those requirements; never edit the facts so
+the check passes. Quote a `kb-consistency-unresolved` diagnostic as
+unresolved, never as consistent. Opposing rule pairs and scenario
+feasibility are not certified yet; their own rules still decide them.
+
 ## Attempt semantics (factual, never optimistic)
 
 - `attempts: {status: "complete", entries: [...]}` — known history; the

package/dist/public/skills/kibi-usage/resources/workflows.md

@@ -9,7 +9,7 @@ success flag):
 taskOutcome: complete | interim | blocked
 kbState: clean_fresh | stale | dirty | legacy_compat | not_evaluated
 verificationState: fresh | dirty | unavailable | not_evaluated
-proofState: proven | mixed | unresolved | not_evaluated
+proofState: tested | mixed | unresolved | not_evaluated
 limitationDisposition: none | accepted | unaccepted | not_applicable
 ```
 

package/dist/report/html-report.css

@@ -341,7 +341,7 @@ h1 span {
   content: "";
   background: var(--amber);
 }
-.requirement--proven::before {
+.requirement--tested::before {
   background: var(--green);
 }
 .requirement--unresolved::before {
@@ -356,6 +356,13 @@ h1 span {
   align-items: start;
   justify-content: space-between;
 }
+.evidence-level {
+  margin-left: 6px;
+  opacity: 0.75;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: .06em;
+}
 .requirement__id {
   margin-bottom: 7px;
   color: var(--muted);
@@ -380,7 +387,7 @@ h1 span {
   letter-spacing: .07em;
   text-transform: uppercase;
 }
-.proof-badge--proven {
+.proof-badge--tested {
   border-color: rgba(98, 230, 167, 0.25);
   color: var(--green);
   background: rgba(98, 230, 167, 0.08);
@@ -1001,7 +1008,7 @@ h1 {
 .requirement::before {
   background: var(--warning);
 }
-.requirement--proven::before {
+.requirement--tested::before {
   background: var(--success);
 }
 .requirement--unresolved::before {
@@ -1024,7 +1031,7 @@ h1 {
   background: rgba(242, 184, 75, 0.07);
   font: 800 9px / 1.2 var(--mono);
 }
-.proof-badge--proven {
+.proof-badge--tested {
   border-color: rgba(99, 201, 154, 0.3);
   color: var(--success);
   background: rgba(99, 201, 154, 0.07);

package/dist/report/html-report.d.ts

@@ -15,7 +15,7 @@ export type HtmlReportInput = Readonly<{
     generatedAt: Date;
     repository?: ReportRepository;
 }>;
-export declare function firstFailingProofGate(gates: readonly ProofGateKey[], passes: (gate: ProofGateKey) => boolean): ProofGateKey | "proven";
-export declare function earliestUnmetGate(row: UnknownRecord): ProofGateKey | "proven";
+export declare function firstFailingProofGate(gates: readonly ProofGateKey[], passes: (gate: ProofGateKey) => boolean): ProofGateKey | "tested";
+export declare function earliestUnmetGate(row: UnknownRecord): ProofGateKey | "tested";
 export declare function renderHtmlReport(input: HtmlReportInput): string;
 //# sourceMappingURL=html-report.d.ts.map

package/dist/report/html-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"html-report.d.ts","sourceRoot":"","sources":["../../src/report/html-report.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuB9D,eAAO,MAAM,UAAU,6FACqE,CAAC;AAG7F,eAAO,MAAM,wBAAwB,gEAC0B,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AAkNH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GACtC,YAAY,GAAG,QAAQ,CAKzB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,QAAQ,CAM7E;AA8YD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAuM/D"}
+{"version":3,"file":"html-report.d.ts","sourceRoot":"","sources":["../../src/report/html-report.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuB9D,eAAO,MAAM,UAAU,6FACqE,CAAC;AAG7F,eAAO,MAAM,wBAAwB,gEAC0B,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AAkNH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GACtC,YAAY,GAAG,QAAQ,CAKzB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,QAAQ,CAM7E;AAqZD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAuM/D"}

package/dist/report/html-report.js

@@ -143,7 +143,7 @@ function implementationOwned(stages) {
     return productionSymbols.every((symbol) => !missingCoordinates.has(symbol));
 }
 function passesProofGate(row, gate) {
-    if (row.proofStatus === "proven")
+    if (row.proofStatus === "tested")
         return true;
     const stages = record(row.proofStages);
     if (gate === "semantic") {
@@ -158,7 +158,7 @@ function passesProofGate(row, gate) {
     if (gate === "e2e") {
         return stagePassed(stages, "scenarioTests") && hasEndToEndTest(stages);
     }
-    return row.proofStatus === "proven";
+    return row.proofStatus === "tested";
 }
 function proofGates(rows) {
     const definitions = [
@@ -197,13 +197,13 @@ export function firstFailingProofGate(gates, passes) {
         if (!passes(gate))
             return gate;
     }
-    return "proven";
+    return "tested";
 }
 // implements REQ-kibi-html-health-report
 // covered_by TEST-kibi-html-health-report
 export function earliestUnmetGate(row) {
-    if (row.proofStatus === "proven")
-        return "proven";
+    if (row.proofStatus === "tested")
+        return "tested";
     return firstFailingProofGate(["semantic", "scenario", "implementation", "e2e", "evidence"], (gate) => passesProofGate(row, gate));
 }
 function evidenceStage(passingE2e, testSources, repository) {
@@ -401,15 +401,15 @@ function rowSeverity(row) {
         return 0;
     if (gaps.includes("stale_proof_receipt"))
         return 1;
-    if (row.proofStatus !== "proven")
+    if (row.proofStatus !== "tested")
         return 2;
     return 3;
 }
 function rowStates(row) {
     const states = new Set();
     const gaps = strings(row.proofGaps);
-    if (row.proofStatus === "proven")
-        states.add("proven");
+    if (row.proofStatus === "tested")
+        states.add("tested");
     else
         states.add("attention");
     if (gaps.includes("stale_proof_receipt"))
@@ -430,8 +430,8 @@ function renderRequirement(row, repository) {
     const proofStatus = text(row.proofStatus, "missing");
     const proofGaps = strings(row.proofGaps);
     const proofAdvisories = strings(row.proofAdvisories);
-    const blockingGaps = proofStatus === "proven" ? [] : proofGaps;
-    const advisories = proofStatus === "proven"
+    const blockingGaps = proofStatus === "tested" ? [] : proofGaps;
+    const advisories = proofStatus === "tested"
         ? [
             ...proofAdvisories,
             ...proofGaps.filter((gap) => !proofAdvisories.includes(gap)),
@@ -439,7 +439,8 @@ function renderRequirement(row, repository) {
         : proofAdvisories;
     const conflicts = records(record(record(row.proofStages).contradictions).conflicts).filter((conflict) => text(conflict.status) === "contradiction");
     const stages = requirementStages(row, repository);
-    const badgeLabel = proofStatus === "proven" ? "Proven" : "Needs attention";
+    const badgeLabel = proofStatus === "tested" ? "Tested" : "Needs attention";
+    const evidenceLevel = text(row.evidenceLevel, "unverified");
     const requirementSource = sourceCoordinate({
         path: text(record(record(row.proofStages).sourceCoordinates).requirementPath, text(row.source)),
     }) ?? sourceCoordinate({ path: text(row.source) });
@@ -447,7 +448,7 @@ function renderRequirement(row, repository) {
     return `<article class="requirement requirement--${escapeHtml(proofStatus)}" data-state="${rowStates(row)}" data-gate="${escapeHtml(gate)}">
     <header class="requirement__header">
       <div>
-        <div class="requirement__id">${linkedLabel(id, sourceWebUrl(repository, requirementSource))}</div>
+        <div class="requirement__id">${linkedLabel(id, sourceWebUrl(repository, requirementSource))} <span class="evidence-level evidence-level--${escapeHtml(evidenceLevel)}" title="Evidence level">${escapeHtml(evidenceLevel)}</span></div>
         <h3>${linkedLabel(title, sourceWebUrl(repository, requirementSource))}</h3>
       </div>
       <span class="proof-badge proof-badge--${escapeHtml(proofStatus)}">${escapeHtml(badgeLabel)}</span>
@@ -458,6 +459,11 @@ function renderRequirement(row, repository) {
     ${renderIssueList(advisories, "proof-advisories", "advisory", "advisories")}
   </article>`;
 }
+// implements REQ-kibi-evidence-levels
+function evidenceCount(rows, level) {
+    return rows.filter((row) => text(row.evidenceLevel, "unverified") === level)
+        .length;
+}
 function metric(label, value, tone = "") {
     return `<div class="metric${tone ? ` metric--${tone}` : ""}"><span>${escapeHtml(label)}</span><strong>${value.toLocaleString("en-US")}</strong></div>`;
 }
@@ -513,7 +519,7 @@ function reportIdentity(input) {
 function renderFilters(counts) {
     const labels = {
         all: "All",
-        proven: "Proven",
+        tested: "Tested",
         attention: "Needs attention",
         stale: "Stale evidence",
         contradiction: "Contradictions",
@@ -537,10 +543,10 @@ export function renderHtmlReport(input) {
     const total = count(summary.total);
     const notApplicable = count(summary.proofNotApplicable);
     const currentRequirements = Math.max(0, total - notApplicable);
-    const proven = count(summary.proofProven);
+    const tested = count(summary.proofTested);
     const proofPercent = currentRequirements === 0
         ? 0
-        : Math.round((proven / currentRequirements) * 100);
+        : Math.round((tested / currentRequirements) * 100);
     const missingScenarios = currentRows.filter((row) => strings(row.proofGaps).includes("missing_scenario")).length;
     const staleEvidence = currentRows.filter((row) => strings(row.proofGaps).includes("stale_proof_receipt")).length;
     const withoutImplementation = currentRows.filter((row) => strings(row.proofGaps).includes("missing_production_symbol")).length;
@@ -561,12 +567,10 @@ export function renderHtmlReport(input) {
     })));
     const identity = reportIdentity({ ...input, repository });
     const faviconHref = renderKibiFaviconDataUri();
-    const scoreLabel = currentRequirements === 0
-        ? "No current requirements"
-        : "Strict proof coverage";
+    const scoreLabel = currentRequirements === 0 ? "No current requirements" : "Tested end to end";
     const scoreRatio = currentRequirements === 0
         ? "No current requirements to prove"
-        : `${proven.toLocaleString("en-US")} of ${currentRequirements.toLocaleString("en-US")} current requirements fully proven end-to-end`;
+        : `${tested.toLocaleString("en-US")} of ${currentRequirements.toLocaleString("en-US")} current requirements fully tested end-to-end`;
     return `<!doctype html>
 <html lang="en">
 <head>
@@ -596,7 +600,7 @@ export function renderHtmlReport(input) {
           <h1>Intent to proof,<br>without the gaps.</h1>
           <p>Kibi compiles product intent into an inspectable chain of semantics, scenarios, implementation ownership, end-to-end tests, and fresh evidence.</p>
         </div>
-        <div class="score" aria-label="${proofPercent}% strict proof coverage, ${proven} of ${currentRequirements} current requirements fully proven end-to-end">
+        <div class="score" aria-label="${proofPercent}% tested end to end, ${tested} of ${currentRequirements} current requirements fully tested end-to-end">
           <div class="score__value">${proofPercent}<span>%</span></div>
           <div class="score__label">${escapeHtml(scoreLabel)}</div>
           <div class="score__ratio">${escapeHtml(scoreRatio)}</div>
@@ -613,7 +617,9 @@ export function renderHtmlReport(input) {
       </section>
       <section class="metrics" aria-label="Requirement health summary">
         ${metric("Requirements", currentRequirements)}
-        ${metric("Strict proof coverage", proven, "good")}
+        ${metric("Tested end to end", tested, "good")}
+        ${metric("Asserted, no current test", evidenceCount(currentRows, "asserted"), evidenceCount(currentRows, "asserted") ? "warn" : "")}
+        ${metric("Unverified", evidenceCount(currentRows, "unverified"), evidenceCount(currentRows, "unverified") ? "warn" : "")}
         ${metric("Missing scenarios", missingScenarios, missingScenarios ? "warn" : "")}
         ${metric("Stale E2E evidence", staleEvidence, staleEvidence ? "warn" : "")}
         ${metric("Contradictions", contradictions.length, contradictions.length ? "bad" : "")}

package/dist/report/report-view.d.ts

@@ -1,11 +1,11 @@
-export declare const REPORT_FILTERS: readonly ["all", "proven", "attention", "stale", "contradiction"];
+export declare const REPORT_FILTERS: readonly ["all", "tested", "attention", "stale", "contradiction"];
 export type ReportFilter = (typeof REPORT_FILTERS)[number];
 export declare const PROOF_GATE_KEYS: readonly ["semantic", "scenario", "implementation", "e2e", "evidence"];
 export type ProofGateKey = (typeof PROOF_GATE_KEYS)[number];
 export type RequirementView = Readonly<{
     text: string;
     states: readonly string[];
-    earliestGate: ProofGateKey | "proven";
+    earliestGate: ProofGateKey | "tested";
 }>;
 export type ReportViewQuery = Readonly<{
     query: string;

package/dist/report/report-view.js

@@ -1,6 +1,6 @@
 export const REPORT_FILTERS = [
     "all",
-    "proven",
+    "tested",
     "attention",
     "stale",
     "contradiction",
@@ -24,7 +24,7 @@ export function matchesReportView(row, view) {
 export function reportFilterCounts(rows) {
     return {
         all: rows.length,
-        proven: rows.filter((row) => row.states.includes("proven")).length,
+        tested: rows.filter((row) => row.states.includes("tested")).length,
         attention: rows.filter((row) => row.states.includes("attention")).length,
         stale: rows.filter((row) => row.states.includes("stale")).length,
         contradiction: rows.filter((row) => row.states.includes("contradiction"))

package/dist/signoff/collect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../src/signoff/collect.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAIL,KAAK,YAAY,EAEjB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAGrB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AASpB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhD,2DAA2D;AAC3D,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAE1E,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,qEAAqE;IACrE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;IAC1C,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtE,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC,CAAC;AAuCH,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAEpE;AAyGD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,YAAY,EACnB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,cAAc,CAAC,CA6JzB;AAGD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,oBAAoB,CAAC,CA8B/B;AAGD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,SAAS,oBAAoB,EAAE,EACvC,GAAG,GAAE,MAAM,IAAuB,GACjC,gBAAgB,CA4BlB;AA+BD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,GACV,oBAAoB,EAAE,CAkDxB"}
+{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../src/signoff/collect.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAIL,KAAK,YAAY,EAEjB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAGrB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AASpB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhD,2DAA2D;AAC3D,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAE1E,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,qEAAqE;IACrE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;IAC1C,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtE,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC,CAAC;AAuCH,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAEpE;AAyGD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,YAAY,EACnB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAiKzB;AAGD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,oBAAoB,CAAC,CA8B/B;AAGD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,SAAS,oBAAoB,EAAE,EACvC,GAAG,GAAE,MAAM,IAAuB,GACjC,gBAAgB,CA4BlB;AA+BD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,GACV,oBAAoB,EAAE,CAkDxB"}

package/dist/signoff/collect.js

@@ -151,6 +151,10 @@ export async function collectSignoffSummary(workspaceRoot, scope, deps = {}) {
             : undefined;
         const firmness = firmnessOf(entity);
         const origin = entity.origin;
+        // origin.approved_by records who approved an agent-written requirement,
+        // the field its evidence level and agent-requirement-unapproved read. The
+        // top-level approved_by approves an exception and is not read here.
+        const approvedBy = origin?.approved_by;
         return {
             id: entity.id,
             title: flat(entity.title ?? entity.id),
@@ -163,7 +167,7 @@ export async function collectSignoffSummary(workspaceRoot, scope, deps = {}) {
             ...(firmness ? { firmness } : {}),
             ...(origin?.kind ? { originKind: origin.kind } : {}),
             ...(origin?.ref ? { originRef: flat(origin.ref) } : {}),
-            ...(origin?.approved_by ? { approvedBy: origin.approved_by } : {}),
+            ...(approvedBy ? { approvedBy } : {}),
             supersedes: outgoing(entity.id, "supersedes")
                 .map((id) => readRequirement(id))
                 .filter((ref) => ref !== undefined)

package/dist/signoff/html.js

@@ -30,7 +30,7 @@ h2{font-size:16px;margin:28px 0 10px;color:var(--accent)}
 .badge{font-size:12px;padding:1px 8px;border-radius:999px;border:1px solid var(--rail);color:var(--muted)}
 .badge--firm{border-color:var(--warn);color:var(--warn)}
 .badge--exploratory{border-color:var(--signal);color:var(--signal)}
-.badge--proven{border-color:var(--ok);color:var(--ok)}
+.badge--tested{border-color:var(--ok);color:var(--ok)}
 .badge--answered{border-color:var(--ok);color:var(--ok)}
 .badge--approval{border-color:var(--signal);color:var(--signal);font-weight:600}
 .callout{margin:12px 0 4px;padding:10px 14px;border:1px solid var(--signal);border-radius:8px;color:var(--text)}
@@ -98,8 +98,8 @@ function requirementCard(requirement, number) {
             : requirement.scenarios
                 .map((scenario) => `<span class="id">${escapeHtml(scenario.id)}</span>${scenario.title === scenario.id ? "" : ` ${escapeHtml(scenario.title)}`}`)
                 .join("<br>")));
-        const proven = requirement.proof?.gate === "proven";
-        details.push(row("Proof", `<span class="badge${proven ? " badge--proven" : ""}">${escapeHtml(proofLabel(requirement.proof))}</span>`));
+        const tested = requirement.proof?.gate === "tested";
+        details.push(row("Proof", `<span class="badge${tested ? " badge--tested" : ""}">${escapeHtml(proofLabel(requirement.proof))}</span>`));
         for (const conflict of requirement.proof?.contradictions ?? []) {
             details.push(row("Contradiction", `<span class="conflict">${escapeHtml(conflict)}</span>`));
         }

package/dist/signoff/model.d.ts

@@ -30,11 +30,16 @@ export type SignoffStatementRef = Readonly<{
     firmness?: SignoffFirmness;
 }>;
 export type SignoffProof = Readonly<{
-    /** Coverage proof status: proven, missing, unresolved or not_applicable. */
+    /** Coverage proof status: tested, missing, unresolved or not_applicable. */
     status: string;
-    /** The earliest unmet proof gate, or "proven". */
+    /** The earliest unmet proof gate, or "tested". */
     gate: string;
     testCount: number;
+    /**
+     * How strong the evidence is: proved, tested, asserted (a person stands
+     * behind it, nothing current checks it) or unverified.
+     */
+    evidenceLevel?: string;
     contradictions: readonly string[];
 }>;
 export type SignoffRequirement = Readonly<{