kibi-cli 2.32.0 → 2.35.1

package/dist/report/html-report.js

@@ -143,6 +143,8 @@ function implementationOwned(stages) {
     return productionSymbols.every((symbol) => !missingCoordinates.has(symbol));
 }
 function passesProofGate(row, gate) {
+    if (gate === "proved")
+        return row.evidenceLevel === "proved";
     if (row.proofStatus === "tested")
         return true;
     const stages = record(row.proofStages);
@@ -174,10 +176,16 @@ function proofGates(rows) {
             "Production ownership is source-bound",
         ],
         ["e2e", "E2E", "A scenario-backed end-to-end test exists"],
-        ["evidence", "Evidence", "Every strict proof stage passes now"],
+        ["evidence", "Tested", "Fresh passing receipts cover every scenario"],
+        ["proved", "Proved", "Every claim has a re-checked certificate"],
     ];
+    const claims = claimTotals(rows);
+    const claimDetail = claims.applicable === 0
+        ? ""
+        : ` · ${claims.proved.toLocaleString("en-US")} of ${claims.applicable.toLocaleString("en-US")} claims proved`;
     let candidates = [...rows];
-    return definitions.map(([key, label, detail]) => {
+    return definitions.map(([key, label, baseDetail]) => {
+        const detail = key === "proved" ? `${baseDetail}${claimDetail}` : baseDetail;
         const remainingRows = candidates.filter((row) => passesProofGate(row, key));
         const gate = {
             key,
@@ -206,6 +214,25 @@ export function earliestUnmetGate(row) {
         return "tested";
     return firstFailingProofGate(["semantic", "scenario", "implementation", "e2e", "evidence"], (gate) => passesProofGate(row, gate));
 }
+// The rail's last step: a tested requirement still short of a certificate
+// for every claim stops at "proved". Signoff keeps earliestUnmetGate, where
+// tested is the end of the strict chain.
+function reportGate(row) {
+    const gate = earliestUnmetGate(row);
+    if (gate !== "tested")
+        return gate;
+    return passesProofGate(row, "proved") ? "tested" : "proved";
+}
+function claimTotals(rows) {
+    let proved = 0;
+    let applicable = 0;
+    for (const row of rows) {
+        const claims = record(row.claimSummary);
+        proved += count(claims.proved);
+        applicable += count(claims.applicable);
+    }
+    return { proved, applicable };
+}
 function evidenceStage(passingE2e, testSources, repository) {
     const evidence = records(passingE2e.receiptEvidence);
     const passed = evidence.find((item) => item.state === "passed");
@@ -550,7 +577,7 @@ function renderRequirement(row, repository) {
     const requirementSource = sourceCoordinate({
         path: text(record(record(row.proofStages).sourceCoordinates).requirementPath, text(row.source)),
     }) ?? sourceCoordinate({ path: text(row.source) });
-    const gate = earliestUnmetGate(row);
+    const gate = reportGate(row);
     return `<article class="requirement requirement--${escapeHtml(proofStatus)}" data-state="${rowStates(row)}" data-gate="${escapeHtml(gate)}">
     <header class="requirement__header">
       <div>
@@ -594,13 +621,29 @@ function metric(label, value, tone = "") {
     return `<div class="metric${tone ? ` metric--${tone}` : ""}"><span>${escapeHtml(label)}</span><strong>${value.toLocaleString("en-US")}</strong></div>`;
 }
 function renderProofGate(gate, index) {
-    const state = gate.remaining === 0 ? "blocked" : "active";
+    // Proved sits above the default tested floor, so stopping before it is not
+    // a block; floors that require proved show up as Below evidence floor.
+    const optional = gate.key === "proved";
+    const state = optional
+        ? "optional"
+        : gate.remaining === 0
+            ? "blocked"
+            : "active";
     const drop = gate.blocked === 0
         ? "No drop"
-        : `−${gate.blocked.toLocaleString("en-US")} blocked here`;
-    const accessible = `${gate.label}. ${gate.blocked} blocked here. Filter requirements whose earliest unmet proof gate is ${gate.label}.`;
+        : optional
+            ? `${gate.blocked.toLocaleString("en-US")} tested, not proved`
+            : `−${gate.blocked.toLocaleString("en-US")} blocked here`;
+    const stopped = optional
+        ? `${gate.blocked} tested, not proved`
+        : `${gate.blocked} blocked here`;
+    // A gate nobody stops at has nothing to show, so it is not a filter.
+    const empty = gate.blocked === 0;
+    const accessible = empty
+        ? `${gate.label}. No requirement stops here.`
+        : `${gate.label}. ${stopped}. Filter requirements whose earliest unmet proof gate is ${gate.label}.`;
     return `<li>
-    <button type="button" class="proof-gate proof-gate--${state}" data-gate="${escapeHtml(gate.key)}" aria-pressed="false" aria-controls="requirements" aria-label="${escapeHtml(accessible)}">
+    <button type="button" class="proof-gate proof-gate--${state}" data-gate="${escapeHtml(gate.key)}" data-label="${escapeHtml(gate.label)}" aria-pressed="false" aria-controls="requirements" aria-label="${escapeHtml(accessible)}"${empty ? " disabled" : ""}>
       <div class="proof-gate__node"><span>${index + 1}</span></div>
       <div class="proof-gate__count">${gate.remaining.toLocaleString("en-US")}</div>
       <div class="proof-gate__label">${escapeHtml(gate.label)}</div>
@@ -694,7 +737,7 @@ export function renderHtmlReport(input) {
     const filterCounts = reportFilterCounts(currentRows.map((row) => ({
         text: `${text(row.id)} ${text(row.title)}`,
         states: rowStates(row).split(" ").filter(Boolean),
-        earliestGate: earliestUnmetGate(row),
+        earliestGate: reportGate(row),
     })));
     const identity = reportIdentity({ ...input, repository });
     const faviconHref = renderKibiFaviconDataUri();
@@ -748,17 +791,17 @@ export function renderHtmlReport(input) {
       </section>
       <section class="metrics" aria-label="Requirement health summary">
         ${metric("Requirements", currentRequirements)}
-        ${metric("Tested end to end", tested, "good")}
         ${metric("Proved by certificate", evidenceCount(currentRows, "proved"), evidenceCount(currentRows, "proved") ? "good" : "")}
+        ${metric("Tested end to end", tested, "good")}
         ${metric("Asserted, no current test", evidenceCount(currentRows, "asserted"), evidenceCount(currentRows, "asserted") ? "warn" : "")}
         ${metric("Unverified", evidenceCount(currentRows, "unverified"), evidenceCount(currentRows, "unverified") ? "warn" : "")}
         ${metric("Below evidence floor", belowFloor, belowFloor ? "bad" : "good")}
         ${metric("Pending re-proof", pendingReproof, pendingReproof ? "warn" : "")}
-        ${metric("Missing scenarios", missingScenarios, missingScenarios ? "warn" : "")}
         ${metric("Stale E2E evidence", staleEvidence, staleEvidence ? "warn" : "")}
-        ${metric("Contradictions", contradictions.length, contradictions.length ? "bad" : "")}
-        ${metric("Unmapped production symbols", unmappedProductionSymbols, unmappedProductionSymbols ? "bad" : "")}
+        ${metric("Missing scenarios", missingScenarios, missingScenarios ? "warn" : "")}
         ${metric("Requirements without implementation", withoutImplementation, withoutImplementation ? "warn" : "")}
+        ${metric("Unmapped production symbols", unmappedProductionSymbols, unmappedProductionSymbols ? "bad" : "")}
+        ${metric("Contradictions", contradictions.length, contradictions.length ? "bad" : "")}
       </section>
       ${renderKbCertificates(input.kbCertificates)}
       <section>
@@ -772,6 +815,7 @@ export function renderHtmlReport(input) {
             ${renderFilters(filterCounts)}
           </div>
         </div>
+        <p class="gate-status" id="gate-status" aria-live="polite" hidden><span></span> <button type="button" class="gate-status__clear">Show all</button></p>
         <div class="requirements" id="requirements">${currentRows.map((row) => renderRequirement(row, repository)).join("")}</div>
         <div class="empty" id="empty" aria-live="polite">No requirements match this view.</div>
       </section>
@@ -788,6 +832,8 @@ export function renderHtmlReport(input) {
       const filters = [...document.querySelectorAll(".filter")];
       const gates = [...document.querySelectorAll(".proof-gate")];
       const empty = document.querySelector("#empty");
+      const gateStatus = document.querySelector("#gate-status");
+      const gateStatusText = gateStatus.querySelector("span");
       let activeFilter = "all";
       let activeGate = "all";
       const formatRelativeAge = (fromMs, nowMs) => {
@@ -824,7 +870,20 @@ export function renderHtmlReport(input) {
           if (!card.hidden) visible += 1;
         }
         empty.dataset.visible = String(visible === 0);
+        const selectedGate = gates.find((candidate) => candidate.dataset.gate === activeGate);
+        gateStatus.hidden = selectedGate === undefined;
+        if (selectedGate) {
+          gateStatusText.textContent = visible + (visible === 1 ? " requirement stops" : " requirements stop") + " at " + (selectedGate.dataset.label || activeGate) + ".";
+        }
+      };
+      const selectGate = (selected) => {
+        activeGate = selected;
+        for (const candidate of gates) {
+          candidate.setAttribute("aria-pressed", String(candidate.dataset.gate === activeGate));
+        }
+        apply();
       };
+      gateStatus.querySelector("button").addEventListener("click", () => selectGate("all"));
       search.addEventListener("input", apply);
       for (const filter of filters) {
         filter.addEventListener("click", () => {
@@ -836,11 +895,9 @@ export function renderHtmlReport(input) {
       for (const gate of gates) {
         gate.addEventListener("click", () => {
           const selected = gate.dataset.gate || "all";
-          activeGate = activeGate === selected ? "all" : selected;
-          for (const candidate of gates) {
-            candidate.setAttribute("aria-pressed", String(candidate.dataset.gate === activeGate));
-          }
-          apply();
+          selectGate(activeGate === selected ? "all" : selected);
+          // The ledger sits below the fold; bring the filtered rows into view.
+          if (activeGate !== "all") gateStatus.scrollIntoView({ behavior: "smooth", block: "start" });
         });
       }
       refreshAges();

package/dist/report/report-view.d.ts

@@ -1,6 +1,6 @@
 export declare const REPORT_FILTERS: readonly ["all", "proved", "tested", "attention", "below_floor", "pending_reproof", "stale", "contradiction"];
 export type ReportFilter = (typeof REPORT_FILTERS)[number];
-export declare const PROOF_GATE_KEYS: readonly ["semantic", "scenario", "implementation", "e2e", "evidence"];
+export declare const PROOF_GATE_KEYS: readonly ["semantic", "scenario", "implementation", "e2e", "evidence", "proved"];
 export type ProofGateKey = (typeof PROOF_GATE_KEYS)[number];
 export type RequirementView = Readonly<{
     text: string;

package/dist/report/report-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report-view.d.ts","sourceRoot":"","sources":["../../src/report/report-view.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,+GASjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe,wEAMlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,YAAY,GAAG,QAAQ,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,YAAY,GAAG,KAAK,CAAC;CAC5B,CAAC,CAAC;AAGH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAQT;AAGD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAexC"}
+{"version":3,"file":"report-view.d.ts","sourceRoot":"","sources":["../../src/report/report-view.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,+GASjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,eAAO,MAAM,eAAe,kFAOlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,YAAY,GAAG,QAAQ,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,YAAY,GAAG,KAAK,CAAC;CAC5B,CAAC,CAAC;AAGH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAQT;AAGD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAexC"}

package/dist/report/report-view.js

@@ -14,6 +14,7 @@ export const PROOF_GATE_KEYS = [
     "implementation",
     "e2e",
     "evidence",
+    "proved",
 ];
 // implements REQ-kibi-html-health-report
 export function matchesReportView(row, view) {

package/dist/schemas/entity.schema.json

@@ -785,13 +785,40 @@
                         "exhaustive",
                         "typecheck",
                         "arithmetic",
-                        "smt"
+                        "smt",
+                        "rule",
+                        "state_machine",
+                        "regex",
+                        "source"
                     ],
-                    "description": "What the checker establishes; absent means e2e. exhaustive, typecheck, arithmetic and smt must leave a kibi.code-certificate.v1 that Kibi re-checks before the receipt counts as proved."
+                    "description": "What the checker establishes; absent means e2e. exhaustive, typecheck, arithmetic, smt, rule, state_machine and regex must leave a kibi.code-certificate.v1 that Kibi re-checks before the receipt counts as proved. source reads the contract's source itself: the run may leave {version, kind: source, test_id, source} or nothing, and Kibi stores its own read as the certificate."
+                },
+                "source": {
+                    "type": "object",
+                    "description": "source: the project source a source proof reads. A project source Kibi reads by itself. reader json or yaml: {file, path?, select?: keys|values|items}. glob: {pattern, capture?, ignore?} (capture true reads what each * matched). openapi: {file, select?: operations|unsecured_operations|security_schemes|responses}. references: {files, extract: env|imports|calls|string_args|thrown|property, callee?, key?, ignore?}. schema: {format: drizzle|prisma|sql, file (drizzle, prisma) or files (sql migrations), exports?, table?, select?: tables|columns|required_columns|nullable_columns|foreign_keys}. routes: {file, export, framework?: hono|express, path_prefix?, names_from?, select?: routes|middleware}. validator: {file, export, select?: fields|required_fields|optional_fields}. Paths are repository-relative. A member Kibi cannot read statically fails the read with its location.",
+                    "required": [
+                        "reader"
+                    ],
+                    "properties": {
+                        "reader": {
+                            "type": "string",
+                            "enum": [
+                                "json",
+                                "yaml",
+                                "glob",
+                                "openapi",
+                                "references",
+                                "schema",
+                                "routes",
+                                "validator"
+                            ]
+                        }
+                    },
+                    "additionalProperties": true
                 },
                 "domain_source": {
                     "type": "object",
-                    "description": "exhaustive and typecheck: the symbol that defines the finite domain. The proof must import it from its source file; a hand-listed domain downgrades the receipt to example. Kibi reads the export named `export`, or the symbol's title when `export` is absent.",
+                    "description": "exhaustive and typecheck: the symbol that defines the finite domain (typecheck: also the type whose fields a required_fields fact names). state_machine: the transition table or next-state function. The proof must import it from its source file; a hand-listed domain downgrades the receipt to example. Kibi reads the export named `export`, or the symbol's title when `export` is absent.",
                     "required": [
                         "symbol_id"
                     ],
@@ -824,7 +851,7 @@
                 },
                 "proves": {
                     "type": "array",
-                    "description": "Certificate kinds: the requirement claim keys (CLAIM-...) this certificate proves. Each must be a modeled claim of a current requirement the test reaches through its scenarios. Kibi derives what the certificate must establish from the claim's grounding fact (a set fact for exhaustive or typecheck, a numeric fact for arithmetic or smt); a claim with no such derivation is only attested and never counts as proved.",
+                    "description": "Certificate kinds: the requirement claim keys (CLAIM-...) this certificate proves. Each must be a modeled claim of a current requirement the test reaches through its scenarios. Kibi derives what the certificate must establish from the claim's grounding fact (a set fact for exhaustive or typecheck, a numeric fact for arithmetic or smt, a rule, predicate or set fact for rule and state_machine, a string fact for regex); a claim with no such derivation is only attested and never counts as proved.",
                     "minItems": 1,
                     "items": {
                         "type": "string",
@@ -834,9 +861,59 @@
                 },
                 "value_source": {
                     "type": "array",
-                    "description": "arithmetic and smt: code constants the assumptions read. Kibi evaluates each export at ingest and requires the certificate to assume the variable equals that value, so the proof is about the code and not only the knowledge base.",
+                    "description": "arithmetic and smt: code constants the assumptions read. Kibi evaluates each export at ingest and requires the certificate to assume the variable equals that value, so the proof is about the code and not only the knowledge base. With measure count the value is the size of a list, set, map or object export, so a count claim reads the collection itself. An entry {source, measure: count} counts the members Kibi reads from a project source (routes, tables, environment variables).",
                     "minItems": 1,
                     "items": {
+                        "type": "object",
+                        "properties": {
+                            "symbol_id": {
+                                "type": "string",
+                                "minLength": 1
+                            },
+                            "export": {
+                                "type": "string",
+                                "minLength": 1
+                            },
+                            "source": {
+                                "type": "object",
+                                "description": "A project source Kibi reads by itself. reader json or yaml: {file, path?, select?: keys|values|items}. glob: {pattern, capture?, ignore?} (capture true reads what each * matched). openapi: {file, select?: operations|unsecured_operations|security_schemes|responses}. references: {files, extract: env|imports|calls|string_args|thrown|property, callee?, key?, ignore?}. schema: {format: drizzle|prisma|sql, file (drizzle, prisma) or files (sql migrations), exports?, table?, select?: tables|columns|required_columns|nullable_columns|foreign_keys}. routes: {file, export, framework?: hono|express, path_prefix?, names_from?, select?: routes|middleware}. validator: {file, export, select?: fields|required_fields|optional_fields}. Paths are repository-relative. A member Kibi cannot read statically fails the read with its location.",
+                                "required": [
+                                    "reader"
+                                ],
+                                "properties": {
+                                    "reader": {
+                                        "type": "string",
+                                        "enum": [
+                                            "json",
+                                            "yaml",
+                                            "glob",
+                                            "openapi",
+                                            "references",
+                                            "schema",
+                                            "routes",
+                                            "validator"
+                                        ]
+                                    }
+                                },
+                                "additionalProperties": true
+                            },
+                            "measure": {
+                                "type": "string",
+                                "enum": [
+                                    "value",
+                                    "count"
+                                ],
+                                "description": "value (default for an export): the export is a number. count (the only measure of a source): the number of members of a list, set, map or object export, or of a source."
+                            }
+                        },
+                        "additionalProperties": false
+                    }
+                },
+                "predicate_source": {
+                    "type": "object",
+                    "description": "rule: the code function behind each predicate a claim's rule, predicate or set fact names, keyed by predicate name. Each export takes the predicate's arguments in order and returns a boolean; Kibi calls it on every combination of its argument domains.",
+                    "minProperties": 1,
+                    "additionalProperties": {
                         "type": "object",
                         "required": [
                             "symbol_id"
@@ -848,12 +925,116 @@
                             },
                             "export": {
                                 "type": "string",
-                                "minLength": 1
+                                "minLength": 1,
+                                "description": "The exported function's name in the symbol's source file. Without it Kibi reads the export named by the symbol's title."
+                            },
+                            "harness_for": {
+                                "type": "array",
+                                "minItems": 1,
+                                "items": {
+                                    "type": "string",
+                                    "minLength": 1
+                                },
+                                "description": "The predicate is a test harness that decides the predicate by driving these code symbols (for example by calling the handler with each role). The symbols must be covered_by the test; a claim the harness proves is bound with scope harness."
                             }
                         },
                         "additionalProperties": false
                     }
                 },
+                "domains": {
+                    "type": "object",
+                    "description": "rule: the finite domain of each argument type, keyed by type name (an array, Set, Map or object export, or a Python list, set, dict or Enum), or {source} for the members Kibi reads from a project source (every route, every table, every environment variable). state_machine with a next-state function: the `state` and `event` domains it is called on.",
+                    "minProperties": 1,
+                    "additionalProperties": {
+                        "anyOf": [
+                            {
+                                "type": "object",
+                                "required": [
+                                    "symbol_id"
+                                ],
+                                "properties": {
+                                    "symbol_id": {
+                                        "type": "string",
+                                        "minLength": 1
+                                    },
+                                    "export": {
+                                        "type": "string",
+                                        "minLength": 1
+                                    }
+                                },
+                                "additionalProperties": false
+                            },
+                            {
+                                "type": "object",
+                                "required": [
+                                    "source"
+                                ],
+                                "properties": {
+                                    "source": {
+                                        "type": "object",
+                                        "description": "A project source Kibi reads by itself. reader json or yaml: {file, path?, select?: keys|values|items}. glob: {pattern, capture?, ignore?} (capture true reads what each * matched). openapi: {file, select?: operations|unsecured_operations|security_schemes|responses}. references: {files, extract: env|imports|calls|string_args|thrown|property, callee?, key?, ignore?}. schema: {format: drizzle|prisma|sql, file (drizzle, prisma) or files (sql migrations), exports?, table?, select?: tables|columns|required_columns|nullable_columns|foreign_keys}. routes: {file, export, framework?: hono|express, path_prefix?, names_from?, select?: routes|middleware}. validator: {file, export, select?: fields|required_fields|optional_fields}. Paths are repository-relative. A member Kibi cannot read statically fails the read with its location.",
+                                        "required": [
+                                            "reader"
+                                        ],
+                                        "properties": {
+                                            "reader": {
+                                                "type": "string",
+                                                "enum": [
+                                                    "json",
+                                                    "yaml",
+                                                    "glob",
+                                                    "openapi",
+                                                    "references",
+                                                    "schema",
+                                                    "routes",
+                                                    "validator"
+                                                ]
+                                            }
+                                        },
+                                        "additionalProperties": true
+                                    }
+                                },
+                                "additionalProperties": false
+                            }
+                        ]
+                    }
+                },
+                "initial_source": {
+                    "type": "object",
+                    "required": [
+                        "symbol_id"
+                    ],
+                    "properties": {
+                        "symbol_id": {
+                            "type": "string",
+                            "minLength": 1
+                        },
+                        "export": {
+                            "type": "string",
+                            "minLength": 1
+                        }
+                    },
+                    "additionalProperties": false,
+                    "description": "state_machine: the export holding the initial state (or states), needed for initial_states and reachable_states facts."
+                },
+                "pattern_source": {
+                    "type": "object",
+                    "required": [
+                        "symbol_id"
+                    ],
+                    "properties": {
+                        "symbol_id": {
+                            "type": "string",
+                            "minLength": 1
+                        },
+                        "export": {
+                            "type": "string",
+                            "minLength": 1
+                        }
+                    },
+                    "additionalProperties": false,
+                    "description": "regex: the export holding the code's pattern (a RegExp, or a Python re.Pattern) or string constant that a string fact is about."
+                },
                 "constraint_source": {
                     "type": "object",
                     "description": "arithmetic and smt: the typed numeric property_value facts the certificate's assumptions come from. Kibi checks the assumptions (or the query's assertions) are exactly these facts' constraints, so the proof is about the knowledge base, not numbers the test chose.",
@@ -1199,7 +1380,11 @@
                             "exhaustive",
                             "typecheck",
                             "arithmetic",
-                            "smt"
+                            "smt",
+                            "rule",
+                            "state_machine",
+                            "regex",
+                            "source"
                         ]
                     },
                     "evidence_level": {
@@ -1254,6 +1439,8 @@
                                     "type": "string",
                                     "enum": [
                                         "code",
+                                        "source",
+                                        "harness",
                                         "intent"
                                     ]
                                 },
@@ -1338,7 +1525,11 @@
                 "lt",
                 "lte",
                 "gt",
-                "gte"
+                "gte",
+                "matches",
+                "includes",
+                "subset_of",
+                "excludes"
             ]
         },
         "value_type": {

package/dist/traceability/evidence-model.d.ts

@@ -62,7 +62,7 @@ export interface KibiImpactSymbolsManifestFileDetail {
     /** Symbol count extraction finds in the staged source content. */
     expectedCount: number;
     /**
-     * Extracted symbols that have a matching staged manifest+coordinates entry
+     * Extracted symbols that have a matching staged symbols manifest entry
      * (`expectedCount - missing.length`); evidence-only entries in `extra` are
      * not counted.
      */
@@ -76,20 +76,21 @@ export interface KibiImpactSymbolsManifestFileDetail {
     extra: string[];
 }
 /**
- * Deterministic symbol coordinates artifact state for the staged change-set.
+ * Whether the staged symbol manifest covers the declarations of the staged
+ * behavior files. Coordinates are derived from source, so only titles count.
  *
- * - `not_required`: symbol extraction output did not change for the listed
- *   staged source paths.
- * - `fresh`: a staged coordinate refresh covers the listed source paths.
- * - `stale`: coordinate artifact content is reverted, outdated, or otherwise does not match
- *   the staged symbol extraction result.
- * - `missing`: a refresh is required but no staged coordinate artifact exists.
+ * - `not_required`: the listed files declare nothing and own no records.
+ * - `fresh`: every declaration in the listed files has a manifest record and
+ *   every granular record names a declaration; this is evidence for their
+ *   behavior edits.
+ * - `stale`: the listed files have uncovered declarations or records whose
+ *   declaration is gone.
  */
 export interface KibiImpactSymbolsManifest {
-    /** Canonical repo-relative symbol coordinate artifact path. */
+    /** Canonical repo-relative symbol manifest path. */
     path: string;
-    /** Explicit manifest freshness state. */
-    state: "not_required" | "fresh" | "stale" | "missing";
+    /** Explicit manifest coverage state. */
+    state: "not_required" | "fresh" | "stale";
     /** Repo-relative staged source paths whose symbol output this state describes. */
     sourcePaths: string[];
     /**
@@ -157,7 +158,7 @@ export interface KibiImpactEvidence {
 export declare function getBehaviorSourcePaths(evidence: KibiImpactEvidence): string[];
 /** Returns staged source paths covered by explicit KB artifacts. */
 export declare function getKbCoveredSourcePaths(evidence: KibiImpactEvidence): string[];
-/** Returns staged source paths covered by a fresh symbol coordinate refresh. */
+/** Returns staged source paths whose declarations the symbol manifest covers. */
 export declare function getFreshSymbolsManifestSourcePaths(evidence: KibiImpactEvidence): string[];
 /**
  * Returns all staged evidence file paths that a later CLI integration can cite

package/dist/traceability/evidence-model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evidence-model.d.ts","sourceRoot":"","sources":["../../src/traceability/evidence-model.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,+BAA+B,iDACI,CAAC;AAEjD,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAE9D,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAE7D,qFAAqF;AACrF,eAAO,MAAM,4BAA4B,gCAAgC,CAAC;AAE1E,mEAAmE;AACnE,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,oEAAoE;AACpE,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,UAAU,GACV,MAAM,GACN,KAAK,GACL,MAAM,GACN,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,0BAA0B,CAAC;AAE/B,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,CAAC;IAC7C,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sEAAsE;IACtE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mCAAmC;IAClD,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,KAAK,EAAE,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACtD,kFAAkF;IAClF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,mCAAmC,EAAE,CAAC;CAC9D;AAED,0DAA0D;AAC1D,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,4BAA4B,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oCAAoC;IACpC,WAAW,EAAE,OAAO,0BAA0B,CAAC;IAC/C,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,MAAM,EAAE,kBAAkB,CAAC;IAC3B,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,oEAAoE;IACpE,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED,0EAA0E;AAC1E,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,8BAA8B,GAC9B,qBAAqB,CAAC;AAE1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACxC,2EAA2E;IAC3E,eAAe,EAAE,yBAAyB,CAAC;IAC3C,wDAAwD;IACxD,IAAI,EAAE,cAAc,CAAC;CACtB;AAMD,0DAA0D;AAC1D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAK7E;AAED,oEAAoE;AACpE,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CAQV;AAED,gFAAgF;AAChF,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CAMV;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAYzE;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAK1E;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CAQV"}
+{"version":3,"file":"evidence-model.d.ts","sourceRoot":"","sources":["../../src/traceability/evidence-model.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,+BAA+B,iDACI,CAAC;AAEjD,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAE9D,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAE7D,qFAAqF;AACrF,eAAO,MAAM,4BAA4B,gCAAgC,CAAC;AAE1E,mEAAmE;AACnE,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,oEAAoE;AACpE,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,UAAU,GACV,MAAM,GACN,KAAK,GACL,MAAM,GACN,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,0BAA0B,CAAC;AAE/B,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,CAAC;IAC7C,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sEAAsE;IACtE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mCAAmC;IAClD,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,yBAAyB;IACxC,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,KAAK,EAAE,cAAc,GAAG,OAAO,GAAG,OAAO,CAAC;IAC1C,kFAAkF;IAClF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,mCAAmC,EAAE,CAAC;CAC9D;AAED,0DAA0D;AAC1D,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,4BAA4B,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oCAAoC;IACpC,WAAW,EAAE,OAAO,0BAA0B,CAAC;IAC/C,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,MAAM,EAAE,kBAAkB,CAAC;IAC3B,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,oEAAoE;IACpE,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED,0EAA0E;AAC1E,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,8BAA8B,GAC9B,qBAAqB,CAAC;AAE1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACxC,2EAA2E;IAC3E,eAAe,EAAE,yBAAyB,CAAC;IAC3C,wDAAwD;IACxD,IAAI,EAAE,cAAc,CAAC;CACtB;AAMD,0DAA0D;AAC1D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAK7E;AAED,oEAAoE;AACpE,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CAQV;AAED,iFAAiF;AACjF,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CAMV;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAYzE;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAK1E;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CAQV"}

package/dist/traceability/evidence-model.js

@@ -30,7 +30,7 @@ export function getKbCoveredSourcePaths(evidence) {
     }
     return uniqueSorted(evidence.mode.kbArtifacts.flatMap((artifact) => artifact.sourcePaths));
 }
-/** Returns staged source paths covered by a fresh symbol coordinate refresh. */
+/** Returns staged source paths whose declarations the symbol manifest covers. */
 export function getFreshSymbolsManifestSourcePaths(evidence) {
     if (evidence.symbolsManifest.state !== "fresh") {
         return [];

package/dist/traceability/staged-diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"staged-diagnostics.d.ts","sourceRoot":"","sources":["../../src/traceability/staged-diagnostics.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAGL,KAAK,kBAAkB,EAKxB,MAAM,qBAAqB,CAAC;AAQ7B,MAAM,MAAM,sBAAsB,GAC9B,8BAA8B,GAC9B,wBAAwB,GACxB,8BAA8B,GAC9B,+BAA+B,GAC/B,qBAAqB,GACrB,kCAAkC,GAClC,iCAAiC,GACjC,oCAAoC,GACpC,gCAAgC,GAChC,0BAA0B,GAC1B,2BAA2B,GAC3B,6BAA6B,GAC7B,yBAAyB,GACzB,wCAAwC,GACxC,wBAAwB,CAAC;AAE7B,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,uDAAuD;IACvD,EAAE,EAAE,sBAAsB,CAAC;IAC3B,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACxC,iEAAiE;IACjE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,gDAAgD;IAChD,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAsID,wBAAgB,wCAAwC,CACtD,QAAQ,EAAE,kBAAkB,GAC3B,oBAAoB,CAoBtB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,kBAAkB,EAC5B,mBAAmB,GAAE,MAAmC,GACvD,oBAAoB,EAAE,CAiDxB"}
+{"version":3,"file":"staged-diagnostics.d.ts","sourceRoot":"","sources":["../../src/traceability/staged-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAGL,KAAK,kBAAkB,EAKxB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,sBAAsB,GAC9B,8BAA8B,GAC9B,wBAAwB,GACxB,8BAA8B,GAC9B,+BAA+B,GAC/B,qBAAqB,GACrB,kCAAkC,GAClC,iCAAiC,GACjC,oCAAoC,GACpC,gCAAgC,GAChC,0BAA0B,GAC1B,2BAA2B,GAC3B,6BAA6B,GAC7B,yBAAyB,GACzB,wCAAwC,GACxC,wBAAwB,CAAC;AAE7B,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,uDAAuD;IACvD,EAAE,EAAE,sBAAsB,CAAC;IAC3B,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACxC,iEAAiE;IACjE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,gDAAgD;IAChD,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAkJD,wBAAgB,wCAAwC,CACtD,QAAQ,EAAE,kBAAkB,GAC3B,oBAAoB,CAoBtB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,kBAAkB,EAC5B,mBAAmB,GAAE,MAAmC,GACvD,oBAAoB,EAAE,CA4CxB"}