mjolnir-qa 0.5.23 → 0.5.24

package/CHANGELOG.md

@@ -9,6 +9,12 @@ Rule behavior changes (new rules, FP-rate changes against the corpus,
 severity changes) are first-class entries here — rule IDs are immutable
 once shipped, so this file is the record of what changed between versions.
 
+## [0.5.24] — 2026-09-08
+
+### Changes since 0.5.23
+
+- L4 ruling: tier-enforcement INCONCLUSIVE without live verdicts (MEASURED_FP = historical artifact only) (#58)
+
 ## [0.5.23] — 2026-09-08
 
 ### Changes since 0.5.22

package/dist/cli.d.mts

@@ -728,7 +728,7 @@ declare const runScan: typeof runScan$1, buildUniversalRules: typeof buildUniver
  * `scripts/sync-sarif-version.cjs` on release and guarded by
  * `tests/version-consistency.spec.ts` locally.
  */
-declare const CLI_VERSION = "0.5.23";
+declare const CLI_VERSION = "0.5.24";
 /** A usage-error detail: the offending token, when one exists. */
 interface UsageErrorDetail {
   /** The unknown flag or rejected value (e.g. `--nope`, `loud`). */

package/dist/cli.mjs

@@ -13290,7 +13290,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.5.23",
+			version: "0.5.24",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -18025,14 +18025,16 @@ function measurementBlock(rules = RULES) {
 */
 function checkTierEnforcement(verdictsDir, rules = RULES) {
 	const details = [];
+	if (!existsSync(verdictsDir)) return check("tier-enforcement", "inconclusive", ["INCONCLUSIVE: live verdicts unavailable (tests/corpus/verdicts missing — installed package) — tier claims cannot be proven without live evidence; MEASURED_FP is a historical artifact and does not substitute (owner ruling 2026-09-08, L4)"]);
 	const classifiedPerRule = /* @__PURE__ */ new Map();
 	const byId = new Map(rules.map((r) => [r.id, r]));
 	for (const [id, m] of Object.entries(MEASURED_FP)) {
 		const rule = byId.get(id);
 		if (rule && m.detectorRevision === declaredDetectorRevision(rule)) classifiedPerRule.set(id, m.n);
 	}
+	let live;
 	try {
-		const live = /* @__PURE__ */ new Map();
+		live = /* @__PURE__ */ new Map();
 		const files = readdirSync(verdictsDir).filter((f) => f.endsWith(".jsonl"));
 		for (const f of files) {
 			const lines = readFileSync(join(verdictsDir, f), "utf8").split("\n").filter((l) => l.trim().length > 0);
@@ -18041,8 +18043,10 @@ function checkTierEnforcement(verdictsDir, rules = RULES) {
 				if (entry.verdict === "TP" || entry.verdict === "FP") live.set(entry.ruleId, (live.get(entry.ruleId) ?? 0) + 1);
 			} catch {}
 		}
-		if (live.size > 0) for (const [id, n] of live) classifiedPerRule.set(id, n);
-	} catch {}
+	} catch (e) {
+		return check("tier-enforcement", "inconclusive", [`INCONCLUSIVE: live verdicts unreadable — ${errorText(e)} (owner ruling 2026-09-08, L4)`]);
+	}
+	if (live.size > 0) for (const [id, n] of live) classifiedPerRule.set(id, n);
 	const coreRules = rules.filter((r) => effectiveTier(r) === "core");
 	for (const r of coreRules) {
 		const n = classifiedPerRule.get(r.id) ?? 0;
@@ -18619,7 +18623,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.5.23";
+const CLI_VERSION = "0.5.24";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",

package/dist/mcp/stdio.mjs

@@ -13289,7 +13289,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.5.23",
+			version: "0.5.24",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -17507,14 +17507,16 @@ function measurementBlock(rules = RULES) {
 */
 function checkTierEnforcement(verdictsDir, rules = RULES) {
 	const details = [];
+	if (!existsSync(verdictsDir)) return check("tier-enforcement", "inconclusive", ["INCONCLUSIVE: live verdicts unavailable (tests/corpus/verdicts missing — installed package) — tier claims cannot be proven without live evidence; MEASURED_FP is a historical artifact and does not substitute (owner ruling 2026-09-08, L4)"]);
 	const classifiedPerRule = /* @__PURE__ */ new Map();
 	const byId = new Map(rules.map((r) => [r.id, r]));
 	for (const [id, m] of Object.entries(MEASURED_FP)) {
 		const rule = byId.get(id);
 		if (rule && m.detectorRevision === declaredDetectorRevision(rule)) classifiedPerRule.set(id, m.n);
 	}
+	let live;
 	try {
-		const live = /* @__PURE__ */ new Map();
+		live = /* @__PURE__ */ new Map();
 		const files = readdirSync(verdictsDir).filter((f) => f.endsWith(".jsonl"));
 		for (const f of files) {
 			const lines = readFileSync(join(verdictsDir, f), "utf8").split("\n").filter((l) => l.trim().length > 0);
@@ -17523,8 +17525,10 @@ function checkTierEnforcement(verdictsDir, rules = RULES) {
 				if (entry.verdict === "TP" || entry.verdict === "FP") live.set(entry.ruleId, (live.get(entry.ruleId) ?? 0) + 1);
 			} catch {}
 		}
-		if (live.size > 0) for (const [id, n] of live) classifiedPerRule.set(id, n);
-	} catch {}
+	} catch (e) {
+		return check("tier-enforcement", "inconclusive", [`INCONCLUSIVE: live verdicts unreadable — ${errorText(e)} (owner ruling 2026-09-08, L4)`]);
+	}
+	if (live.size > 0) for (const [id, n] of live) classifiedPerRule.set(id, n);
 	const coreRules = rules.filter((r) => effectiveTier(r) === "core");
 	for (const r of coreRules) {
 		const n = classifiedPerRule.get(r.id) ?? 0;
@@ -18255,7 +18259,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.5.23";
+const CLI_VERSION = "0.5.24";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mjolnir-qa",
-  "version": "0.5.23",
+  "version": "0.5.24",
   "description": "Mjölnir — the Verification Trust Engine for QA. Audits test suites and CI pipelines, reports a worthiness score and prioritized findings.",
   "type": "module",
   "engines": {