kibi-cli 2.31.1 → 2.35.1

package/dist/operations/proof/code-runner.js

@@ -0,0 +1,164 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import path from "node:path";
+/**
+ * How Kibi runs a small evaluator script against the workspace's own code:
+ * the TypeScript and JavaScript runners (bun, the workspace's tsx, node with
+ * type stripping) and the Python interpreters a project uses. The proof kinds
+ * that read a model from the code (exhaustive domains, rule tables, state
+ * machines, patterns, data schemas, route tables) all load code this way.
+ */
+// Node's type stripping resolves only exact specifiers. TypeScript apps
+// import relative modules without an extension, or with `.js` for a `.ts`
+// file; this resolve hook retries those as the TypeScript files they name.
+export const TS_RESOLVE_HOOKS = `
+const SUFFIXES = [".ts", ".tsx", ".mts", ".cts", ".js", ".mjs", "/index.ts", "/index.tsx", "/index.js"];
+export async function resolve(specifier, context, next) {
+  try {
+    return await next(specifier, context);
+  } catch (error) {
+    if (error?.code !== "ERR_MODULE_NOT_FOUND" || !/^\\.\\.?\\//.test(specifier)) throw error;
+    const base = specifier.replace(/\\.[cm]?js$/, "");
+    for (const suffix of SUFFIXES) {
+      try {
+        return await next(base + suffix, context);
+      } catch {}
+    }
+    throw error;
+  }
+}
+`;
+export function workspaceBin(workspaceRoot, name) {
+    let dir = path.resolve(workspaceRoot);
+    for (;;) {
+        const candidate = path.join(dir, "node_modules", ".bin", name);
+        if (existsSync(candidate))
+            return candidate;
+        if (path.dirname(dir) === dir)
+            return null;
+        dir = path.dirname(dir);
+    }
+}
+/**
+ * The Python interpreters a domain loads with, most specific first: the
+ * KIBI_PYTHON override, the active virtualenv, a project virtualenv (`.venv`
+ * or `venv`) between the domain file and the workspace root, then python3
+ * and python on PATH. The system interpreter usually cannot import the
+ * project's dependencies, so a project environment comes before it.
+ */
+// implements REQ-kibi-code-proof-kinds
+export function pythonDomainInterpreters(workspaceRoot, sourceFile, env = process.env) {
+    const interpreters = [];
+    const add = (candidate) => {
+        if (candidate && !interpreters.includes(candidate))
+            interpreters.push(candidate);
+    };
+    add(env.KIBI_PYTHON?.trim() || undefined);
+    const venvPython = (venv) => [
+        path.join(venv, "bin", "python"),
+        path.join(venv, "Scripts", "python.exe"),
+    ].find((candidate) => existsSync(candidate));
+    if (env.VIRTUAL_ENV)
+        add(venvPython(env.VIRTUAL_ENV));
+    const root = path.resolve(workspaceRoot);
+    let dir = path.dirname(path.resolve(root, sourceFile));
+    for (;;) {
+        for (const name of [".venv", "venv"])
+            add(venvPython(path.join(dir, name)));
+        if (dir === root || path.dirname(dir) === dir)
+            break;
+        if (!dir.startsWith(`${root}${path.sep}`))
+            break;
+        dir = path.dirname(dir);
+    }
+    add("python3");
+    add("python");
+    return interpreters;
+}
+/** The line of a runner's stderr that names the failure. */
+function failureLine(stderr, python) {
+    const lines = stderr
+        .trim()
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line !== "");
+    // A Python traceback names the exception on its last line.
+    return (python ? lines.at(-1) : lines[0]) ?? "";
+}
+/**
+ * Run an evaluator script against the workspace code and return the JSON it
+ * prints last. A TypeScript or JavaScript file runs with bun when it is on
+ * PATH, else the workspace's tsx, else node's type stripping (which retries
+ * extensionless relative imports as TypeScript files); a Python file (`.py`)
+ * runs with the first interpreter pythonDomainInterpreters finds. A runner
+ * whose output `accept` rejects (or that fails to start) yields to the next.
+ */
+// implements REQ-kibi-non-numeric-proof-kinds
+export function runCodeEvaluator(workspaceRoot, sourceFile, scripts, args, accept = () => true, options = {}) {
+    const python = /\.py$/i.test(sourceFile);
+    const tsx = python ? null : workspaceBin(workspaceRoot, "tsx");
+    const runners = python
+        ? pythonDomainInterpreters(workspaceRoot, sourceFile).map((interpreter) => [
+            interpreter,
+            ["-c", scripts.python],
+        ])
+        : (options.runners ?? ["bun", "tsx", "node"]).flatMap((runner) => {
+            if (runner === "bun")
+                return [["bun", ["-e", scripts.js]]];
+            if (runner === "tsx")
+                return tsx === null
+                    ? []
+                    : [[tsx, ["--eval", scripts.js, "--"]]];
+            return [
+                [
+                    process.execPath,
+                    [
+                        "--experimental-strip-types",
+                        "--no-warnings",
+                        "--input-type=module",
+                        "-e",
+                        scripts.js,
+                    ],
+                ],
+            ];
+        });
+    let failure = "";
+    for (const [command, argv] of runners) {
+        const run = spawnSync(command, [...argv, ...args], {
+            cwd: workspaceRoot,
+            encoding: "utf8",
+            timeout: 60_000,
+            maxBuffer: 64 * 1024 * 1024,
+        });
+        if (run.error)
+            continue;
+        const line = (run.stdout ?? "").trim().split("\n").pop() ?? "";
+        try {
+            const parsed = JSON.parse(line);
+            if (accept(parsed))
+                return { ok: true, value: parsed, python };
+        }
+        catch {
+            // Fall through to the next runner.
+        }
+        failure = failureLine(run.stderr ?? "", python);
+    }
+    return { ok: false, failure, python };
+}

package/dist/operations/proof/code-scope.d.ts

@@ -1,5 +1,6 @@
 import type { PrologPort } from "../../public/operations/runtime-types.js";
-import type { ProofContract } from "../../public/proof-protocol.js";
+import { type SourceSpec } from "../../public/proof-sources.js";
+import { type ProofContract } from "../../public/proof-protocol.js";
 /**
  * Which symbols a proof receipt's per-contract binding covers. Receipt ingest
  * (which writes `binding_hash`) and coverage (which checks it) must derive
@@ -22,6 +23,8 @@ export declare function loadCoveredBySymbolsByTest(prolog: Pick<PrologPort, "que
  * make every receipt of that test silently fall back to snapshot matching.
  */
 export declare function receiptBindingContract(raw: unknown): ProofContract | null;
+/** Every project source a contract reads: its source, source counts and source domains. */
+export declare function contractSources(contract: ProofContract): SourceSpec[];
 export type ReceiptBindingInput = Readonly<{
     workspaceRoot: string;
     readFile: (absolutePath: string) => Promise<string>;
@@ -42,4 +45,14 @@ export type ReceiptBindingInput = Readonly<{
  * therefore carry the same binding.
  */
 export declare function currentReceiptBindingHash(input: ReceiptBindingInput): Promise<string | undefined>;
+/**
+ * The binding hashes a receipt of this test may carry and still be current:
+ * the current hash first, then the hash Kibi wrote before relationship links
+ * left the binding (when it differs). The test document is hashed without
+ * `proof_receipts` and without `links`: links to scenarios or requirements
+ * change what the test is evidence for, not what the code does, so editing
+ * them never stales a receipt. Receipts written under the earlier binding
+ * stay current until the test's own inputs change.
+ */
+export declare function currentReceiptBindingHashes(input: ReceiptBindingInput): Promise<readonly string[] | undefined>;
 //# sourceMappingURL=code-scope.d.ts.map

package/dist/operations/proof/code-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code-scope.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/code-scope.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAKpE;;;;;;;;;;;GAWG;AAEH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAClC,MAAM,EAAE,CAoBV;AAED,4EAA4E;AAE5E,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAiBjD;AAQD;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAkBzE;AAGD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,2EAA2E;IAC3E,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AAEH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuB7B"}
+{"version":3,"file":"code-scope.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/code-scope.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAE3E,OAAO,EAAE,KAAK,UAAU,EAAsB,MAAM,+BAA+B,CAAC;AACpF,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,gCAAgC,CAAC;AAKxC;;;;;;;;;;;GAWG;AAEH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAClC,MAAM,EAAE,CAoBV;AAED,4EAA4E;AAE5E,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAiBjD;AAQD;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAmBzE;AAED,2FAA2F;AAE3F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,UAAU,EAAE,CAQrE;AAGD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,2EAA2E;IAC3E,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AAEH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B;AAED;;;;;;;;GAQG;AAEH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAuCxC"}

package/dist/operations/proof/code-scope.js

@@ -11,6 +11,8 @@ import { join } from "node:path";
 import { resolveBoundSymbolScope } from "../../extractors/manifest.js";
 import { normalizeEntityId, parseTriples } from "../../prolog/codec.js";
 import { receiptBindingHash } from "../../public/proof-fingerprint.js";
+import { sourceDependencies } from "../../public/proof-sources.js";
+import { optionalProofContractFields, } from "../../public/proof-protocol.js";
 import { normalizeRepoRelativePath } from "../../utils/repo-relative-path.js";
 import { resolveContainedSourcePath } from "../mutation/source-authoring.js";
 import { removeFrontmatterBlock } from "./receipt-document.js";
@@ -94,8 +96,23 @@ export function receiptBindingContract(raw) {
             };
         }),
         success_policy: contract.success_policy,
+        ...optionalProofContractFields(contract),
     };
 }
+/** Every project source a contract reads: its source, source counts and source domains. */
+// implements REQ-kibi-source-proof-kinds
+export function contractSources(contract) {
+    const specs = [];
+    if (contract.source !== undefined)
+        specs.push(contract.source);
+    for (const entry of contract.value_source ?? [])
+        if ("source" in entry)
+            specs.push(entry.source);
+    for (const entry of Object.values(contract.domains ?? {}))
+        if ("source" in entry)
+            specs.push(entry.source);
+    return specs;
+}
 /**
  * The current per-contract binding hash of one proof-bearing test, or
  * undefined when the test has no markdown source the binding can hash.
@@ -110,6 +127,19 @@ export function receiptBindingContract(raw) {
  */
 // implements REQ-kibi-fresh-verification-receipts-v2
 export async function currentReceiptBindingHash(input) {
+    return (await currentReceiptBindingHashes(input))?.[0];
+}
+/**
+ * The binding hashes a receipt of this test may carry and still be current:
+ * the current hash first, then the hash Kibi wrote before relationship links
+ * left the binding (when it differs). The test document is hashed without
+ * `proof_receipts` and without `links`: links to scenarios or requirements
+ * change what the test is evidence for, not what the code does, so editing
+ * them never stales a receipt. Receipts written under the earlier binding
+ * stay current until the test's own inputs change.
+ */
+// implements REQ-kibi-fresh-verification-receipts-v2
+export async function currentReceiptBindingHashes(input) {
     const contract = receiptBindingContract(input.test.proof_contract);
     if (!contract)
         return undefined;
@@ -122,9 +152,21 @@ export async function currentReceiptBindingHash(input) {
     try {
         const absolute = resolveContainedSourcePath(input.workspaceRoot, relative);
         const authored = await input.readFile(absolute);
-        const stripped = removeFrontmatterBlock(authored, "proof_receipts");
+        const withoutReceipts = removeFrontmatterBlock(authored, "proof_receipts") ?? authored;
+        const withoutLinks = removeFrontmatterBlock(withoutReceipts, "links") ?? withoutReceipts;
         const codeScope = resolveBoundSymbolScope(join(input.workspaceRoot, ".kb", "symbols.yaml"), receiptCodeScopeSymbolIds(contract, input.test.proof_bindings, input.coveredBySymbols));
-        return receiptBindingHash(contract, stripped ?? authored, codeScope);
+        // A contract that reads project sources stales when what it reads
+        // changes: each file's contents and the set of files a glob matches.
+        const scope = [
+            ...codeScope,
+            ...contractSources(contract).flatMap((spec) => sourceDependencies(input.workspaceRoot, spec).map((dependency) => ({
+                symbolId: dependency.id,
+                sourceHash: dependency.hash,
+            }))),
+        ];
+        const current = receiptBindingHash(contract, withoutLinks, scope);
+        const legacy = receiptBindingHash(contract, withoutReceipts, scope);
+        return legacy === current ? [current] : [current, legacy];
     }
     catch {
         return undefined;

package/dist/operations/proof/compact-receipts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compact-receipts.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/compact-receipts.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAUjF,OAAO,EACL,+BAA+B,EAGhC,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC,CAAC;AAGH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAGH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,OAAO,+BAA+B,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC5C,OAAO,EAAE,SAAS,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAClE,CAAC,CAAC;AAWH;;;;;;GAMG;AAEH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACvC,YAAY,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,EAC1D,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED;;;;;;;GAOG;AAEH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,qBAAqB,CAAC;CAC1C,CAAC,CA+FD"}
+{"version":3,"file":"compact-receipts.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/compact-receipts.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAUjF,OAAO,EACL,+BAA+B,EAGhC,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC,CAAC;AAGH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAGH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,OAAO,+BAA+B,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC5C,OAAO,EAAE,SAAS,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAClE,CAAC,CAAC;AAWH;;;;;;GAMG;AAEH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACvC,YAAY,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,EAC1D,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED;;;;;;;GAOG;AAEH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,qBAAqB,CAAC;CAC1C,CAAC,CAiGD"}

package/dist/operations/proof/compact-receipts.js

@@ -21,7 +21,7 @@ import { proofReceiptHistoryErrors } from "../../public/proof-receipt.js";
 import { projectEntityProperties } from "../mutation/entity-projection.js";
 import { resolveContainedSourcePath } from "../mutation/source-authoring.js";
 import { executeUpsert } from "../mutation/upsert.js";
-import { currentReceiptBindingHash, loadCoveredBySymbolsByTest, } from "./code-scope.js";
+import { currentReceiptBindingHashes, loadCoveredBySymbolsByTest, } from "./code-scope.js";
 import { PROOF_RECEIPT_COMPACTION_POLICY, compactProofReceipts, isOrderedReceiptSubsequence, } from "./receipt-compaction.js";
 import { patchReceiptsIntoDocument } from "./receipt-document.js";
 function receiptRecords(value) {
@@ -109,15 +109,16 @@ export async function executeCompactReceipts(args, context) {
             });
             continue;
         }
-        const bindingHash = await currentReceiptBindingHash({
+        const [bindingHash, ...legacyBindingHashes] = (await currentReceiptBindingHashes({
             workspaceRoot: context.workspaceRoot,
             readFile: (absolute) => fs.readFile(absolute),
             test,
             coveredBySymbols: coveredBy.get(testId) ?? [],
-        });
+        })) ?? [];
         const { kept, removed } = compactProofReceipts(receipts, {
             codeSnapshot: snapshot,
             ...(bindingHash === undefined ? {} : { bindingHash }),
+            ...(legacyBindingHashes.length > 0 ? { legacyBindingHashes } : {}),
         });
         if (removed === 0)
             continue;

package/dist/operations/proof/explain.d.ts

@@ -30,12 +30,44 @@ export type ProofExplainSymbolBlock = {
     readonly reasonText?: string;
     readonly coverageCandidates: readonly ProofCoverageCandidate[];
 };
+export type ClaimSummary = Readonly<{
+    applicable: number;
+    proved: number;
+    attested: number;
+    tested: number;
+    unresolved: number;
+}>;
+export type ClaimExplainEntry = Readonly<{
+    claimKey: string;
+    status: string;
+    applicable: boolean;
+    level: string | null;
+    blocker?: string;
+    bindings: readonly Readonly<{
+        test: string;
+        kind: string;
+        binding: string;
+        scope: string;
+        reason?: string;
+    }>[];
+}>;
 export type RequirementProofExplainView = {
     readonly kind: "requirement";
     readonly id: string;
     readonly proofVersion: string;
     readonly proofStatus: string;
     readonly proofGaps: readonly string[];
+    readonly evidenceLevel?: string;
+    /** Tests whose receipt claimed proved but whose certificate no longer re-checks. */
+    readonly certificateRejections?: readonly {
+        test: string;
+        reason: string;
+    }[];
+    /** How many applicable claims reach each level, and which are not proved. */
+    readonly claimSummary?: ClaimSummary;
+    readonly unprovedClaims?: readonly string[];
+    /** One entry per inventory claim, with the certificate bindings behind it. */
+    readonly claims?: readonly ClaimExplainEntry[];
     readonly scenarios: readonly {
         id: string;
         tests: readonly string[];

package/dist/operations/proof/explain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/explain.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,0CAA0C,CAAC;AAQlD,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAChE,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACzD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,sBAAsB,CAAC;AA8E3B,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,2BAA2B,CAsE7B;AAGD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,sBAAsB,CAcxB;AAGD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAGjE;AAgGD,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,GAAG,SAAS,EACtB,OAAO,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAcxC;AAwBD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC9C,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAmBvE"}
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/explain.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,0CAA0C,CAAC;AAQlD,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAChE,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,SAAS,QAAQ,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,EAAE,CAAC;CACN,CAAC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,oFAAoF;IACpF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7E,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACzD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,sBAAsB,CAAC;AA8E3B,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,2BAA2B,CAqF7B;AAoFD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,sBAAsB,CAcxB;AAGD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAGjE;AAuGD,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,GAAG,SAAS,EACtB,OAAO,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAcxC;AAwBD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC9C,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAmBvE"}

package/dist/operations/proof/explain.js

@@ -134,12 +134,98 @@ export function projectRequirementExplain(proof) {
         proofVersion: asString(proof.proofVersion),
         proofStatus: asString(proof.proofStatus),
         proofGaps: asStringArray(proof.proofGaps),
+        ...(typeof proof.evidenceLevel === "string"
+            ? { evidenceLevel: proof.evidenceLevel }
+            : {}),
+        ...(Array.isArray(proof.certificateRejections)
+            ? {
+                certificateRejections: proof.certificateRejections.map((row) => {
+                    const entry = asRecord(row);
+                    return {
+                        test: asString(entry.test),
+                        reason: asString(entry.reason),
+                    };
+                }),
+            }
+            : {}),
+        ...claimFields(proof),
         scenarios,
         tests,
         productionSymbols: explanations.filter((item) => !structuralIds.has(item.symbolId)),
         structuralSymbols: explanations.filter((item) => structuralIds.has(item.symbolId)),
     };
 }
+function claimFields(proof) {
+    const summary = asRecord(proof.claimSummary);
+    const count = (key) => typeof summary[key] === "number" ? summary[key] : 0;
+    return {
+        ...(proof.claimSummary !== undefined
+            ? {
+                claimSummary: {
+                    applicable: count("applicable"),
+                    proved: count("proved"),
+                    attested: count("attested"),
+                    tested: count("tested"),
+                    unresolved: count("unresolved"),
+                },
+            }
+            : {}),
+        ...(Array.isArray(proof.unprovedClaims)
+            ? { unprovedClaims: asStringArray(proof.unprovedClaims) }
+            : {}),
+        ...(Array.isArray(proof.claimEvidence)
+            ? {
+                claims: proof.claimEvidence.map((item) => {
+                    const entry = asRecord(item);
+                    return {
+                        claimKey: asString(entry.claimKey),
+                        status: asString(entry.status),
+                        applicable: asBoolean(entry.applicable),
+                        level: typeof entry.level === "string" ? entry.level : null,
+                        ...(typeof entry.blocker === "string"
+                            ? { blocker: entry.blocker }
+                            : {}),
+                        bindings: (Array.isArray(entry.bindings)
+                            ? entry.bindings
+                            : []).map((raw) => {
+                            const binding = asRecord(raw);
+                            return {
+                                test: asString(binding.test),
+                                kind: asString(binding.kind),
+                                binding: asString(binding.binding),
+                                scope: asString(binding.scope),
+                                ...(typeof binding.reason === "string"
+                                    ? { reason: binding.reason }
+                                    : {}),
+                            };
+                        }),
+                    };
+                }),
+            }
+            : {}),
+    };
+}
+function renderClaims(view) {
+    if (view.claims === undefined)
+        return [];
+    const summary = view.claimSummary;
+    const lines = [
+        "",
+        summary === undefined
+            ? "Claims"
+            : `Claims (${summary.proved}/${summary.applicable} proved, ${summary.attested} attested, ${summary.tested} tested, ${summary.unresolved} unresolved)`,
+    ];
+    if (view.claims.length === 0)
+        lines.push("  (none)");
+    for (const claim of view.claims) {
+        lines.push(claim.applicable
+            ? `  ${claim.claimKey} ${claim.level ?? "unverified"} (${claim.status})${claim.blocker ? ` blocked by ${claim.blocker}` : ""}`
+            : `  ${claim.claimKey} not applicable (${claim.status})`);
+        for (const binding of claim.bindings)
+            lines.push(`    ${binding.test} ${binding.kind}: ${binding.binding}${binding.binding === "derived" ? ` (${binding.scope})` : ""}${binding.reason ? `: ${binding.reason}` : ""}`);
+    }
+    return lines;
+}
 // implements REQ-kibi-verification-evidence-contract
 export function projectSymbolExplain(payload) {
     const proofs = Array.isArray(payload.proofs)
@@ -168,6 +254,11 @@ function renderRequirementExplain(view) {
         `proofVersion: ${view.proofVersion}`,
         `proofStatus: ${view.proofStatus}`,
         `proofGaps: ${view.proofGaps.join(", ") || "(none)"}`,
+        ...(view.evidenceLevel === undefined
+            ? []
+            : [`evidenceLevel: ${view.evidenceLevel}`]),
+        ...(view.certificateRejections ?? []).map((row) => `certificate rejected for ${row.test}: ${row.reason}`),
+        ...renderClaims(view),
         "",
         "Scenarios",
     ];

package/dist/operations/proof/ingest-proof.d.ts

@@ -1,6 +1,6 @@
 import { type ProofGap } from "../../proof/evaluate.js";
 import type { OperationContext } from "../../public/operations/runtime-types.js";
-import { type ProofReceipt } from "../../public/proof-receipt.js";
+import { type ClaimBinding, type ProofReceipt } from "../../public/proof-receipt.js";
 export type IngestProofArgs = Readonly<{
     snapshot: string;
     artifact: Readonly<Record<string, unknown>>;
@@ -16,6 +16,14 @@ export type IngestProofTestResult = Readonly<{
     /** Superseded receipts the ingest compaction dropped from the history. */
     compacted: number;
     gaps: readonly ProofGap[];
+    /** How the receipt's certificate binds to each claim its contract names. */
+    claimBindings?: readonly ClaimBinding[];
+    /** The contract's proof kind (e2e when the contract names none). */
+    kind?: string;
+    /** The evidence level the receipt supports: proved or tested. */
+    evidenceLevel?: string;
+    /** Why the test's certificate did not re-check, for a certificate kind. */
+    certificateRejection?: string;
 }>;
 export type IngestProofResult = Readonly<{
     artifactDigest: string;

package/dist/operations/proof/ingest-proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingest-proof.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/ingest-proof.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAiBjF,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AAkBvC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC3B,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,KAAK,iBAAiB,GAAG;IACvB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAAC;AAolBF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAuC5B"}
+{"version":3,"file":"ingest-proof.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/ingest-proof.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAkBjF,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AAoBvC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,KAAK,iBAAiB,GAAG;IACvB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAAC;AA8nBF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAuC5B"}

package/dist/operations/proof/ingest-proof.js

@@ -5,7 +5,7 @@ import { loadProofIntegrations, resolveIntegration, toExecution, } from "../../p
 import { loadEntities } from "../../public/operations/discovery-entities.js";
 import { readWorkspaceSnapshot } from "../../public/operations/workspace-snapshot.js";
 import { environmentHash as canonicalEnvironmentHash, effectiveProofFingerprint, jsonDigest, proofContractHash, } from "../../public/proof-fingerprint.js";
-import { PROOF_CONTRACT_VERSION, PROOF_RECEIPT_VERSION, proofBindingsErrors, proofRunArtifactErrors, } from "../../public/proof-protocol.js";
+import { PROOF_CONTRACT_VERSION, PROOF_RECEIPT_VERSION, optionalProofContractFields, proofBindingsErrors, proofRunArtifactErrors, } from "../../public/proof-protocol.js";
 import { MAX_PROOF_RECEIPTS, proofReceiptCurrentBindingErrors, proofReceiptHistoryErrors, } from "../../public/proof-receipt.js";
 import { projectEntityProperties } from "../mutation/entity-projection.js";
 import { resolveContainedSourcePath } from "../mutation/source-authoring.js";
@@ -14,6 +14,8 @@ import { executeUpsert } from "../mutation/upsert.js";
 import { acquireWorkspaceMutationLock, releaseWorkspaceMutationLock, } from "../mutation/workspace-mutation-lock.js";
 import { MutationRollbackFailureError } from "../mutation/saga.js";
 import { patchReceiptsIntoDocument } from "./receipt-document.js";
+import { judgeClaimBindings, receiptEvidenceLevel } from "./claim-bindings.js";
+import { checkCodeCertificate } from "./code-certificates.js";
 async function rollbackUncommittedReceipts(pending, originalError, lifecycle) {
     const failures = [];
     for (const entry of pending) {
@@ -66,6 +68,7 @@ function parseContract(test) {
             })
             : [],
         success_policy: success_policy,
+        ...optionalProofContractFields(candidate),
     };
     if (!contract || contract.version !== PROOF_CONTRACT_VERSION)
         throw new Error(`Proof ingest failed: test ${String(test.id)} has no proof_contract (${PROOF_CONTRACT_VERSION})`);
@@ -253,6 +256,18 @@ async function executeIngestProofUnlocked(args, context, lifecycle) {
                 test,
                 coveredBySymbols: coveredBy.get(testId) ?? [],
             });
+        const verdict = await checkCodeCertificate(context, {
+            testId,
+            contract,
+            outcome: evaluation.outcome,
+            certificate: (artifact.certificates ?? []).find((entry) => entry.test_id === testId),
+        });
+        const claimBindings = await judgeClaimBindings(context, {
+            testId,
+            contract,
+            verdict,
+            coveredBySymbols: coveredBy.get(testId) ?? [],
+        });
         const receipt = {
             version: PROOF_RECEIPT_VERSION,
             receipt_id: `PR-${jsonDigest({
@@ -281,6 +296,9 @@ async function executeIngestProofUnlocked(args, context, lifecycle) {
                 ...result,
             })),
             ...(evaluation.gaps.length > 0 ? { gaps: evaluation.gaps } : {}),
+            ...verdict,
+            evidence_level: receiptEvidenceLevel(verdict.evidence_level, claimBindings),
+            ...(claimBindings !== undefined ? { claim_bindings: claimBindings } : {}),
         };
         prepared.push({
             testId,
@@ -292,6 +310,26 @@ async function executeIngestProofUnlocked(args, context, lifecycle) {
         });
     }
     const results = [];
+    // implements REQ-kibi-code-proof-kinds
+    // What each receipt says about its proof kind, evidence level, certificate
+    // and claim bindings, so the caller sees a rejected certificate at ingest.
+    const bindingsOf = new Map(prepared.map((entry) => [
+        entry.testId,
+        {
+            ...(entry.receipt.claim_bindings === undefined
+                ? {}
+                : { claimBindings: entry.receipt.claim_bindings }),
+            ...(typeof entry.receipt.kind === "string"
+                ? { kind: entry.receipt.kind }
+                : {}),
+            ...(typeof entry.receipt.evidence_level === "string"
+                ? { evidenceLevel: entry.receipt.evidence_level }
+                : {}),
+            ...(typeof entry.receipt.certificate_rejection === "string"
+                ? { certificateRejection: entry.receipt.certificate_rejection }
+                : {}),
+        },
+    ]));
     const pendingCommits = [];
     let passed = 0;
     let failed = 0;
@@ -316,6 +354,7 @@ async function executeIngestProofUnlocked(args, context, lifecycle) {
                     receiptCount: existing.length,
                     compacted: 0,
                     gaps: evaluation.gaps,
+                    ...bindingsOf.get(testId),
                 });
                 continue;
             }
@@ -448,11 +487,12 @@ async function executeIngestProofUnlocked(args, context, lifecycle) {
                 receiptCount: entry.receiptCount,
                 compacted: entry.compacted,
                 gaps: entry.gaps,
+                ...bindingsOf.get(entry.testId),
             });
         }
     }
     const summary = passed > 0
-        ? `Proved ${passed} test(s)${failed > 0 ? `, ${failed} failed` : ""}${unchanged > 0 ? `, ${unchanged} unchanged` : ""}.`
+        ? `Passed ${passed} test(s)${failed > 0 ? `, ${failed} failed` : ""}${unchanged > 0 ? `, ${unchanged} unchanged` : ""}.`
         : `No passing proof: ${failed} failed, ${unchanged} unchanged.`;
     return {
         content: [{ type: "text", text: `Ingested proof evidence. ${summary}` }],

package/dist/operations/proof/receipt-compaction.d.ts

@@ -7,6 +7,8 @@ export declare const PROOF_RECEIPT_COMPACTION_POLICY: "kibi.proof-receipt-compac
 export type ReceiptCompactionAnchor = Readonly<{
     codeSnapshot?: string;
     bindingHash?: string;
+    /** Earlier binding hashes a current receipt may still carry. */
+    legacyBindingHashes?: readonly string[];
 }>;
 export type ReceiptCompaction = Readonly<{
     kept: readonly Readonly<Record<string, unknown>>[];

package/dist/operations/proof/receipt-compaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receipt-compaction.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/receipt-compaction.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,+BAA+B,EAC1C,kCAA2C,CAAC;AAE9C;;;;GAIG;AAEH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,KAAK,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBjD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,EAAE,uBAAuB,GAC9B,iBAAiB,CA0CnB;AAED;;;;GAIG;AAEH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,OAAO,CAcT"}
+{"version":3,"file":"receipt-compaction.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/receipt-compaction.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,+BAA+B,EAC1C,kCAA2C,CAAC;AAE9C;;;;GAIG;AAEH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,KAAK,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBjD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,EAAE,uBAAuB,GAC9B,iBAAiB,CA6CnB;AAED;;;;GAIG;AAEH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,OAAO,CAcT"}