kibi-cli 2.31.0 → 2.32.0

package/dist/public/skills/kibi-usage/resources/workflows.md

@@ -116,7 +116,7 @@ The canonical workflow for any KB operation follows this pattern:
 7. **Create endpoints**: validated `kb_upsert` for new entities, sequentially
 8. **Link**: validated `kb_upsert` with `requires_rule`, `requires_predicate`, `constrains`, or `requires_property`, sequentially
 9. **Validate coverage and consistency**: targeted `rule-safety`, `rule-verifiability`, `semantic-completeness`, `logic-coverage`, `predicate-verifiability`, and `domain-contradictions`, then final full `kb_check`
-10. **Prove execution**: read `kb_status.proofSnapshot`, run `kibi prove` so each configured integration executes once and its `kibi.proof-run.v1` artifact is evaluated against every selected test's `kibi.proof-contract.v1` obligations, appending idempotent `kibi.proof-receipt.v1` receipts; then re-run `kb_coverage`. Never promote durable test status into fresh evidence.
+10. **Prove execution**: read `kb_status.proofSnapshot`, run `kibi prove` so each configured integration executes once and its `kibi.proof-run.v1` artifact is evaluated against every selected test's `kibi.proof-contract.v1` obligations, appending idempotent `kibi.proof-receipt.v2` receipts; then re-run `kb_coverage` and read each requirement's `evidenceLevel` and `evidenceFloor`. Never promote durable test status into fresh evidence.
 11. **Repair incrementally**: require `kb_coverage.repairPlan.scope.complete`, apply only one `ready` dependency batch per requirement, validate before every sequential write, and rerun coverage before selecting the next batch
 12. **Gate workflow evidence**: when `.kb/usage.log` exists, run `kibi usage-metrics --format json --require-acceptance`; repair ranked telemetry diagnostics and never treat stale or insufficient evidence as a pass
 
@@ -144,7 +144,7 @@ choose package managers, ground semantic claims, resolve contradictions, rerun
 E2E tests, rewrite receipt history, remap authored symbols, or accept
 limitations. Those actions remain explicit review/operator/execution steps.
 
-For `e2e_receipt_freshness_low`, query each listed requirement/test gap and run `kibi prove --requirement <id>` (or the covering integration); this appends proof receipts idempotently and preserves history. If `coverage_depth_review` conflicts with a coverage row whose `proofStages.passingE2e.status` is `passed`, report the diagnostic as a stale heuristic and keep any independent proof gaps unresolved.
+For `e2e_receipt_freshness_low`, query each listed requirement/test gap and run `kibi prove --requirement <id>` (or the covering integration); this appends proof receipts idempotently and preserves history. If `coverage_depth_review` conflicts with a coverage row whose `proofStages.passingE2e.status` is `passed`, report the diagnostic as a stale heuristic and keep any independent proof gaps unresolved. For `coarse_anchor_only_review`, the requirement is implemented only by whole-file anchors: link the functions, methods or types that implement it (with `covered_by` to their tests) so its `tested` evidence is tied to that code.
 
 ## Creating a New Feature
 ```
@@ -172,8 +172,8 @@ Do not create a test-fact pair. Facts describe invariants; requirements or scena
 
 1. Confirm the exact `REQ -> SCEN -> TEST` path and require typed `verification_scope: end_to_end`; direct requirement-to-test links do not satisfy the conservative scenario stage.
 2. Read `kb_status` and retain its available `proofSnapshot`. Stop if the runtime reports `unknown`; proof must fail closed when the code identity cannot be computed.
-3. Run the exact E2E command against that snapshot. Record runner, command, start/finish timestamps, outcome, an environment SHA-256, and an artifact/output SHA-256. Do not mint a passed receipt from an authored test status or from an unexecuted assertion.
-4. Preserve every existing receipt byte-for-byte and append the derived `kibi.proof-receipt.v1` object with strictly later `finished_at`. Earlier receipts may bind older contracts or fingerprints; they remain audit history but cannot prove the current contract. Mutation and incremental sync reject history removal, rewriting, and reordering.
+3. Run `kibi prove --test TEST-<id>` (or `--requirement`, `--integration`, `--all`). It runs the configured producer once against that snapshot and appends a `kibi.proof-receipt.v2` receipt per evaluated contract. Never hand-write a receipt, and never mint a passed receipt from an authored test status or from an unexecuted assertion.
+4. Receipts are append-only. Earlier receipts, including `kibi.proof-receipt.v1` ones, may bind older contracts or fingerprints; they remain audit history but cannot prove the current contract. Mutation and incremental sync reject history removal, rewriting, and reordering.
 5. Re-read `kb_status`; if the snapshot changed during the run, discard the candidate as proof and rerun against the new snapshot. Then run `kb_coverage` and inspect `proofStages.passingE2e.receiptEvidence` plus gap codes.
 
 Only the newest receipt matching the live snapshot, current contract hash, and current execution fingerprint qualifies, and it must be passed, no more than seven days old, and no more than five minutes in the future. Wrong-snapshot and older-contract history is retained but cannot prove the current test. `missing_proof_receipt`, `stale_proof_receipt`, `failed_proof_receipt`, `invalid_proof_receipt`, `proof_contract_mismatch`, and `proof_snapshot_unavailable` are repair states, not warnings to waive.

package/dist/report/html-report.css

@@ -363,6 +363,24 @@ h1 span {
   text-transform: uppercase;
   letter-spacing: .06em;
 }
+.claims-proved {
+  margin-left: 6px;
+  opacity: 0.75;
+  font-weight: 400;
+}
+.evidence-floor {
+  margin-left: 6px;
+  font-weight: 400;
+  opacity: 0.75;
+}
+.evidence-floor--below {
+  color: var(--red);
+  opacity: 1;
+}
+.evidence-floor--pending_reproof {
+  color: var(--amber);
+  opacity: 1;
+}
 .requirement__id {
   margin-bottom: 7px;
   color: var(--muted);
@@ -392,6 +410,11 @@ h1 span {
   color: var(--green);
   background: rgba(98, 230, 167, 0.08);
 }
+.proof-badge--proved {
+  border-color: rgba(98, 230, 167, 0.45);
+  color: var(--green);
+  background: rgba(98, 230, 167, 0.16);
+}
 .proof-badge--unresolved {
   border-color: rgba(255, 125, 144, 0.25);
   color: var(--red);
@@ -1036,6 +1059,11 @@ h1 {
   color: var(--success);
   background: rgba(99, 201, 154, 0.07);
 }
+.proof-badge--proved {
+  border-color: rgba(99, 201, 154, 0.55);
+  color: var(--success);
+  background: rgba(99, 201, 154, 0.16);
+}
 .proof-badge--unresolved {
   border-color: rgba(240, 113, 120, 0.3);
   color: var(--danger);
@@ -1043,6 +1071,9 @@ h1 {
 }
 .stages {
   grid-template-columns: repeat(5, minmax(0, 1fr));
+}
+.stages:has(> :nth-child(6)) {
+  grid-template-columns: repeat(6, minmax(0, 1fr));
   gap: 0;
 }
 .stage {
@@ -1178,7 +1209,8 @@ footer {
   .proof-path__header p {
     text-align: left;
   }
-  .stages {
+  .stages,
+  .stages:has(> :nth-child(6)) {
     grid-template-columns: 1fr;
   }
   .stage {
@@ -1245,3 +1277,8 @@ footer {
     color: inherit;
   }
 }
+.kb-certificates {
+  margin: 14px 0 28px;
+  color: var(--muted);
+  font-size: 13px;
+}

package/dist/report/html-report.d.ts

@@ -8,14 +8,22 @@ export type HtmlReportCoverage = Readonly<{
     rows: readonly UnknownRecord[];
     meta?: UnknownRecord;
 }>;
+/** A kibi.certificates.v1 bundle published next to the report. */
+export type HtmlReportKbCertificates = Readonly<{
+    count: number;
+    kinds: Readonly<Record<string, number>>;
+    href: string;
+}>;
 export type HtmlReportInput = Readonly<{
     requirements: HtmlReportCoverage;
     symbols: HtmlReportCoverage;
     branch: string;
     generatedAt: Date;
     repository?: ReportRepository;
+    kbCertificates?: HtmlReportKbCertificates;
 }>;
 export declare function firstFailingProofGate(gates: readonly ProofGateKey[], passes: (gate: ProofGateKey) => boolean): ProofGateKey | "tested";
 export declare function earliestUnmetGate(row: UnknownRecord): ProofGateKey | "tested";
+export declare function certificateRejectionLines(row: UnknownRecord): readonly string[];
 export declare function renderHtmlReport(input: HtmlReportInput): string;
 //# sourceMappingURL=html-report.d.ts.map

package/dist/report/html-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"html-report.d.ts","sourceRoot":"","sources":["../../src/report/html-report.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuB9D,eAAO,MAAM,UAAU,6FACqE,CAAC;AAG7F,eAAO,MAAM,wBAAwB,gEAC0B,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AAkNH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GACtC,YAAY,GAAG,QAAQ,CAKzB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,QAAQ,CAM7E;AAqZD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAuM/D"}
+{"version":3,"file":"html-report.d.ts","sourceRoot":"","sources":["../../src/report/html-report.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuB9D,eAAO,MAAM,UAAU,6FACqE,CAAC;AAG7F,eAAO,MAAM,wBAAwB,gEAC0B,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,cAAc,CAAC,EAAE,wBAAwB,CAAC;CAC3C,CAAC,CAAC;AAkNH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GACtC,YAAY,GAAG,QAAQ,CAKzB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,QAAQ,CAM7E;AAyWD,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,aAAa,GACjB,SAAS,MAAM,EAAE,CAWnB;AA2LD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAiN/D"}

package/dist/report/html-report.js

@@ -285,6 +285,7 @@ function requirementStages(row, repository) {
     const testSources = sourceCoordinates(record(stages.scenarioTests).sources);
     const productionSources = sourceCoordinates(productionSymbols.coordinates);
     const executableSources = sourceCoordinates(executableSymbols.coordinates);
+    const certificate = certificateStage(row);
     let implementationState = "failed";
     let implementationDetail = "No production symbol ownership";
     if (stageStatus(productionSymbols) === "passed" &&
@@ -342,6 +343,7 @@ function requirementStages(row, repository) {
             state: e2eState,
         },
         evidenceStage(passingE2e, testSources, repository),
+        ...(certificate === undefined ? [] : [certificate]),
     ];
 }
 function renderStage(stage) {
@@ -395,16 +397,36 @@ function renderContradiction(conflict) {
     <p>${escapeHtml(text(conflict.reason, "Two current requirements encode incompatible claims."))}</p>
   </div>`;
 }
+/**
+ * The requirement's evidence floor, when it has one: required_evidence, or
+ * tested for a firm requirement. A floor of unverified accepts anything and
+ * reads as no floor.
+ */
+// implements REQ-kibi-evidence-floors
+function evidenceFloor(row) {
+    const floor = record(row.evidenceFloor);
+    const required = text(floor.required);
+    if (!required || required === "unverified")
+        return undefined;
+    return {
+        required,
+        source: text(floor.source, "explicit"),
+        status: text(floor.status, "below"),
+    };
+}
 function rowSeverity(row) {
     const gaps = strings(row.proofGaps);
     if (gaps.includes("blocking_contradiction"))
         return 0;
-    if (gaps.includes("stale_proof_receipt"))
+    if (evidenceFloor(row)?.status === "below")
         return 1;
-    if (row.proofStatus !== "tested")
+    if (gaps.includes("stale_proof_receipt"))
         return 2;
-    return 3;
+    if (row.proofStatus !== "tested")
+        return 3;
+    return 4;
 }
+// implements REQ-kibi-html-health-report, REQ-kibi-evidence-floors
 function rowStates(row) {
     const states = new Set();
     const gaps = strings(row.proofGaps);
@@ -412,18 +434,95 @@ function rowStates(row) {
         states.add("tested");
     else
         states.add("attention");
+    if (row.evidenceLevel === "proved")
+        states.add("proved");
+    const floorStatus = evidenceFloor(row)?.status;
+    if (floorStatus === "below")
+        states.add("below_floor");
+    if (floorStatus === "pending_reproof")
+        states.add("pending_reproof");
     if (gaps.includes("stale_proof_receipt"))
         states.add("stale");
     if (gaps.includes("blocking_contradiction"))
         states.add("contradiction");
     return [...states].join(" ");
 }
+const FLOOR_STATUS_LABELS = {
+    met: "met",
+    below: "below",
+    pending_reproof: "pending re-proof",
+};
+// implements REQ-kibi-evidence-floors
+function renderFloorChip(floor) {
+    if (floor === undefined)
+        return "";
+    const origin = floor.source === "firmness"
+        ? "the default floor for a firm requirement"
+        : "set by required_evidence";
+    const status = FLOOR_STATUS_LABELS[floor.status] ?? humanize(floor.status);
+    return ` <span class="evidence-floor evidence-floor--${escapeHtml(floor.status)}" title="Evidence floor: ${escapeHtml(floor.required)}, ${escapeHtml(origin)}">floor ${escapeHtml(floor.required)}${floor.source === "explicit" ? "*" : ""} · ${escapeHtml(status)}</span>`;
+}
+/**
+ * Certificates a requirement's tests carry: the proof kinds that earned
+ * proved, and certificates or claim bindings that no longer re-check.
+ */
+// implements REQ-kibi-code-proof-kinds
+function certificateStage(row) {
+    const certificate = records(row.evidence).find((entry) => text(entry.kind) === "certificate");
+    const rejections = certificateRejectionLines(row);
+    const claims = record(row.claimSummary);
+    const applicable = count(claims.applicable);
+    const proved = count(claims.proved);
+    const claimText = applicable > 0 ? `${proved}/${applicable} claims proved` : "";
+    if (certificate !== undefined) {
+        const kinds = strings(certificate.kinds).join(", ");
+        const tests = strings(certificate.tests);
+        return {
+            label: "Certificate",
+            detail: escapeHtml([
+                `${kinds || "certificate"} · ${tests.length} ${tests.length === 1 ? "test" : "tests"}`,
+                claimText,
+            ]
+                .filter(Boolean)
+                .join(" · ")),
+            state: rejections.length > 0 ? "warning" : "passed",
+        };
+    }
+    if (rejections.length > 0) {
+        return {
+            label: "Certificate",
+            detail: escapeHtml(`${rejections.length} ${rejections.length === 1 ? "certificate does" : "certificates do"} not re-check`),
+            state: "failed",
+        };
+    }
+    if (proved > 0 || count(claims.attested) > 0) {
+        return {
+            label: "Certificate",
+            detail: escapeHtml(claimText),
+            state: "warning",
+        };
+    }
+    return undefined;
+}
+// implements REQ-kibi-code-proof-kinds
+export function certificateRejectionLines(row) {
+    return [
+        ...records(row.certificateRejections).map((item) => `${text(item.test, "test")}: certificate rejected, ${text(item.reason, "no reason given")}`),
+        ...records(row.claimBindingRejections).map((item) => `${text(item.test, "test")}: binding for ${text(item.claimKey, "claim")} rejected, ${text(item.reason, "no reason given")}`),
+    ];
+}
 function renderIssueList(codes, className, singular, plural) {
     if (codes.length === 0)
         return "";
     const label = `${codes.length} ${codes.length === 1 ? singular : plural}`;
     return `<details class="${className}"><summary>${escapeHtml(label)}</summary><ul>${codes.map((code) => `<li>${escapeHtml(humanize(code))}</li>`).join("")}</ul></details>`;
 }
+function renderRejectionList(lines) {
+    if (lines.length === 0)
+        return "";
+    const label = `${lines.length} ${lines.length === 1 ? "certificate rejection" : "certificate rejections"}`;
+    return `<details class="proof-gaps certificate-rejections"><summary>${escapeHtml(label)}</summary><ul>${lines.map((line) => `<li>${escapeHtml(line)}</li>`).join("")}</ul></details>`;
+}
 function renderRequirement(row, repository) {
     const id = text(row.id, "REQ-UNKNOWN");
     const title = text(row.title, "Untitled requirement");
@@ -439,8 +538,15 @@ function renderRequirement(row, repository) {
         : proofAdvisories;
     const conflicts = records(record(record(row.proofStages).contradictions).conflicts).filter((conflict) => text(conflict.status) === "contradiction");
     const stages = requirementStages(row, repository);
-    const badgeLabel = proofStatus === "tested" ? "Tested" : "Needs attention";
     const evidenceLevel = text(row.evidenceLevel, "unverified");
+    const badgeLabel = proofStatus !== "tested"
+        ? "Needs attention"
+        : evidenceLevel === "proved"
+            ? "Proved"
+            : "Tested";
+    const floor = evidenceFloor(row);
+    const rejections = certificateRejectionLines(row);
+    const claims = claimsProvedLabel(row);
     const requirementSource = sourceCoordinate({
         path: text(record(record(row.proofStages).sourceCoordinates).requirementPath, text(row.source)),
     }) ?? sourceCoordinate({ path: text(row.source) });
@@ -448,22 +554,42 @@ function renderRequirement(row, repository) {
     return `<article class="requirement requirement--${escapeHtml(proofStatus)}" data-state="${rowStates(row)}" data-gate="${escapeHtml(gate)}">
     <header class="requirement__header">
       <div>
-        <div class="requirement__id">${linkedLabel(id, sourceWebUrl(repository, requirementSource))} <span class="evidence-level evidence-level--${escapeHtml(evidenceLevel)}" title="Evidence level">${escapeHtml(evidenceLevel)}</span></div>
+        <div class="requirement__id">${linkedLabel(id, sourceWebUrl(repository, requirementSource))} <span class="evidence-level evidence-level--${escapeHtml(evidenceLevel)}" title="Evidence level">${escapeHtml(evidenceLevel)}</span>${renderFloorChip(floor)}${claims === null ? "" : ` <span class="claims-proved" title="Requirement claims a re-checked certificate derives">${escapeHtml(claims)}</span>`}</div>
         <h3>${linkedLabel(title, sourceWebUrl(repository, requirementSource))}</h3>
       </div>
-      <span class="proof-badge proof-badge--${escapeHtml(proofStatus)}">${escapeHtml(badgeLabel)}</span>
+      <span class="proof-badge proof-badge--${escapeHtml(badgeLabel === "Proved" ? "proved" : proofStatus)}">${escapeHtml(badgeLabel)}</span>
     </header>
     <ul class="stages">${stages.map(renderStage).join("")}</ul>
     ${conflicts.map(renderContradiction).join("")}
     ${renderIssueList(blockingGaps, "proof-gaps", "proof gap", "proof gaps")}
     ${renderIssueList(advisories, "proof-advisories", "advisory", "advisories")}
+    ${renderRejectionList(rejections)}
   </article>`;
 }
+// implements REQ-kibi-claim-bound-proofs
+function claimsProvedLabel(row) {
+    const summary = record(row.claimSummary);
+    const applicable = summary.applicable;
+    if (typeof applicable !== "number" || applicable === 0)
+        return null;
+    const proved = typeof summary.proved === "number" ? summary.proved : 0;
+    return `${proved}/${applicable} claims proved`;
+}
 // implements REQ-kibi-evidence-levels
 function evidenceCount(rows, level) {
     return rows.filter((row) => text(row.evidenceLevel, "unverified") === level)
         .length;
 }
+// implements REQ-kibi-kb-certificates
+function renderKbCertificates(bundle) {
+    if (bundle === undefined)
+        return "";
+    const kinds = Object.entries(bundle.kinds)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([kind, total]) => `${total.toLocaleString("en-US")} ${humanize(kind).toLowerCase()}`)
+        .join(", ");
+    return `<p class="kb-certificates">KB consistency: ${bundle.count.toLocaleString("en-US")} ${bundle.count === 1 ? "certificate" : "certificates"}${kinds ? ` (${escapeHtml(kinds)})` : ""} · <a href="${escapeHtml(bundle.href)}">${escapeHtml(bundle.href)}</a> · re-check with <code>kibi check --certificates ${escapeHtml(bundle.href)}</code></p>`;
+}
 function metric(label, value, tone = "") {
     return `<div class="metric${tone ? ` metric--${tone}` : ""}"><span>${escapeHtml(label)}</span><strong>${value.toLocaleString("en-US")}</strong></div>`;
 }
@@ -519,8 +645,11 @@ function reportIdentity(input) {
 function renderFilters(counts) {
     const labels = {
         all: "All",
+        proved: "Proved",
         tested: "Tested",
         attention: "Needs attention",
+        below_floor: "Below floor",
+        pending_reproof: "Pending re-proof",
         stale: "Stale evidence",
         contradiction: "Contradictions",
     };
@@ -551,6 +680,8 @@ export function renderHtmlReport(input) {
     const staleEvidence = currentRows.filter((row) => strings(row.proofGaps).includes("stale_proof_receipt")).length;
     const withoutImplementation = currentRows.filter((row) => strings(row.proofGaps).includes("missing_production_symbol")).length;
     const contradictions = contradictionRows(currentRows);
+    const belowFloor = currentRows.filter((row) => evidenceFloor(row)?.status === "below").length;
+    const pendingReproof = currentRows.filter((row) => evidenceFloor(row)?.status === "pending_reproof").length;
     const unmappedProductionSymbols = Math.max(0, count(symbolSummary.uncovered) - count(symbolSummary.mixedRole));
     const generatedAt = input.generatedAt.toISOString();
     const snapshot = text(input.requirements.meta?.proofSnapshot);
@@ -618,14 +749,18 @@ export function renderHtmlReport(input) {
       <section class="metrics" aria-label="Requirement health summary">
         ${metric("Requirements", currentRequirements)}
         ${metric("Tested end to end", tested, "good")}
+        ${metric("Proved by certificate", evidenceCount(currentRows, "proved"), evidenceCount(currentRows, "proved") ? "good" : "")}
         ${metric("Asserted, no current test", evidenceCount(currentRows, "asserted"), evidenceCount(currentRows, "asserted") ? "warn" : "")}
         ${metric("Unverified", evidenceCount(currentRows, "unverified"), evidenceCount(currentRows, "unverified") ? "warn" : "")}
+        ${metric("Below evidence floor", belowFloor, belowFloor ? "bad" : "good")}
+        ${metric("Pending re-proof", pendingReproof, pendingReproof ? "warn" : "")}
         ${metric("Missing scenarios", missingScenarios, missingScenarios ? "warn" : "")}
         ${metric("Stale E2E evidence", staleEvidence, staleEvidence ? "warn" : "")}
         ${metric("Contradictions", contradictions.length, contradictions.length ? "bad" : "")}
         ${metric("Unmapped production symbols", unmappedProductionSymbols, unmappedProductionSymbols ? "bad" : "")}
         ${metric("Requirements without implementation", withoutImplementation, withoutImplementation ? "warn" : "")}
       </section>
+      ${renderKbCertificates(input.kbCertificates)}
       <section>
         <div class="section-header">
           <div><p class="eyebrow">Proof ledger</p><h2>Requirements</h2></div>

package/dist/report/report-view.d.ts

@@ -1,4 +1,4 @@
-export declare const REPORT_FILTERS: readonly ["all", "tested", "attention", "stale", "contradiction"];
+export declare const REPORT_FILTERS: readonly ["all", "proved", "tested", "attention", "below_floor", "pending_reproof", "stale", "contradiction"];
 export type ReportFilter = (typeof REPORT_FILTERS)[number];
 export declare const PROOF_GATE_KEYS: readonly ["semantic", "scenario", "implementation", "e2e", "evidence"];
 export type ProofGateKey = (typeof PROOF_GATE_KEYS)[number];

package/dist/report/report-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report-view.d.ts","sourceRoot":"","sources":["../../src/report/report-view.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,mEAMjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe,wEAMlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,YAAY,GAAG,QAAQ,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,YAAY,GAAG,KAAK,CAAC;CAC5B,CAAC,CAAC;AAGH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAQT;AAGD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CASxC"}
+{"version":3,"file":"report-view.d.ts","sourceRoot":"","sources":["../../src/report/report-view.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,+GASjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe,wEAMlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,YAAY,GAAG,QAAQ,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,YAAY,GAAG,KAAK,CAAC;CAC5B,CAAC,CAAC;AAGH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAQT;AAGD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAexC"}

package/dist/report/report-view.js

@@ -1,7 +1,10 @@
 export const REPORT_FILTERS = [
     "all",
+    "proved",
     "tested",
     "attention",
+    "below_floor",
+    "pending_reproof",
     "stale",
     "contradiction",
 ];
@@ -24,8 +27,12 @@ export function matchesReportView(row, view) {
 export function reportFilterCounts(rows) {
     return {
         all: rows.length,
+        proved: rows.filter((row) => row.states.includes("proved")).length,
         tested: rows.filter((row) => row.states.includes("tested")).length,
         attention: rows.filter((row) => row.states.includes("attention")).length,
+        below_floor: rows.filter((row) => row.states.includes("below_floor"))
+            .length,
+        pending_reproof: rows.filter((row) => row.states.includes("pending_reproof")).length,
         stale: rows.filter((row) => row.states.includes("stale")).length,
         contradiction: rows.filter((row) => row.states.includes("contradiction"))
             .length,