openpitstop 1.8.1 → 1.9.0

package/README.md

@@ -50,6 +50,10 @@ Requires **Node.js 22+**, that is the only dependency. For the full setup
   your app in a sandbox and labels each issue PROVEN, indicated, or unproven.
 - **You are tired of agents quietly deleting a failing test.** `integrity` and the
   gate catch focused, deleted, or rewritten tests and exit 2 (confirmed cheat).
+- **You want proof a fix is real, not just a green suite.** `baseline-verify` proves the
+  verification FAILED on the broken state and PASSES after the fix; `state-verify` proves the
+  changes your agent *claimed* actually landed on disk and in git; `verifier-check` proves the
+  referee itself can still say NO.
 - **You want CI to fail on a regression, not just a new bug.** Drift compares every
   `pen` run to the last sealed one and goes red on a NEW finding.
 - **You need a score you can show your team or an auditor.** `report` and `honesty`
@@ -86,7 +90,7 @@ your agent.
 | [Feature tour](#feature-tour) — every feature, in plain English | [Install](#install) · [Usage](#usage) · [Tool support](#tool-support) |
 | [Architecture](#architecture) | [Known limitations](#known-limitations) · [Contributing](#contributing) · [License](#license) |
 
-**Straight to one feature:** [The scan](#the-scan) · [Security fixes](#security-fixes) · [Try it on your repo](#try-it-on-your-repo) · [The test pyramid](#the-test-pyramid) · [The gate](#the-gate) · [Integrity](#integrity) · [The pen test](#the-pen-test) · [Honesty](#honesty) · [Verify](#verify) · [Trends](#trends) · [Inspect](#inspect) · [Repro](#repro) · [Report](#report) · [Share](#share) · [The live shield](#the-live-shield) · [The GitHub Action](#the-github-action) · [The pre-commit hook](#the-pre-commit-hook)
+**Straight to one feature:** [The scan](#the-scan) · [Security fixes](#security-fixes) · [Try it on your repo](#try-it-on-your-repo) · [The test pyramid](#the-test-pyramid) · [The gate](#the-gate) · [Integrity](#integrity) · [Baseline-aware verification](#baseline-aware-verification) · [State verification](#state-verification-dont-trust-the-claim) · [Verifier health](#verifier-health-falsifiability) · [Holdout verification](#holdout-verification-anti-overfitting) · [Acceptance verification](#acceptance-verification-did-the-agent-satisfy-the-requirement) · [Regression verification](#regression-verification-dont-break-what-already-worked) · [The evidence chain](#the-evidence-chain-why-should-i-trust-this-verdict) · [Repo discipline](#repo-discipline-understand--plan--architecture--stack--flow) · [The pen test](#the-pen-test) · [Honesty](#honesty) · [Verify](#verify) · [Trends](#trends) · [Inspect](#inspect) · [Repro](#repro) · [Report](#report) · [Share](#share) · [The live shield](#the-live-shield) · [The GitHub Action](#the-github-action) · [The pre-commit hook](#the-pre-commit-hook)
 
 **Receipts:** [Caught in the wild](docs/caught-in-the-wild.md) — real gate output, screenshot-ready.
 
@@ -152,9 +156,18 @@ failing layer and it prints **DO NOT SHIP** and exits 1.
 
 ### The gate
 
-`pitstop gate` is the contract for CI and pre-commit hooks. It checks the score,
-regression risk and diff integrity, then exits `0` (clean), `1` (issues) or `2`
-(confirmed cheat). The exit code is the truth a build can block on.
+`pitstop gate` is the final independent verification authority. It does not ask the agent
+whether it's done — it reasons over the **evidence model**: the live scan (score, tests,
+regression risk), the integrity diff, the baseline evidence signature, and every sealed
+deep-verification layer (baseline-aware, state, acceptance, regression, security/pen drift,
+holdout, verifier health). A deterministic decision matrix — evaluated strictly in order —
+produces the verdict: **CHEAT** (manipulated evidence, CONFIRMED_CHEAT) → **BLOCKED**
+(critical regression, proven critical security, drift) → **FAILED** (required verification
+failed) → **UNPROVEN** (insufficient evidence) → **VERIFIED** (strong evidence, all clear).
+Layers that never ran are rendered `NOT_CONFIGURED` — never faked into a pass. Configure
+mandatory layers with `--require baseline,acceptance,holdout`. Exit codes: `0` pass, `1`
+fail, `2` cheat. The old single-box output and `gateOutcome` remain for backward
+compatibility.
 
 ### Integrity
 
@@ -162,6 +175,110 @@ regression risk and diff integrity, then exits `0` (clean), `1` (issues) or `2`
 patterns: focused tests, deleted tests, rewritten tests, swallowed errors,
 hardcoded-to-pass values. It exits `0/1/2` the same way.
 
+### Baseline-aware verification
+
+`pitstop baseline-verify` closes the hole in "the test passed, so it's fixed." A passing
+verification proves nothing unless the *same* verification demonstrably FAILED on the
+broken state — otherwise the agent is grading its own homework. So OpenPitStop runs the
+verification against a known-bad baseline commit (must FAIL, evidence sealed), then against
+the candidate (must PASS), and only calls it `VERIFIED` when both hold, the verification
+identity (command + file hashes) is identical on both sides, and nothing was tampered with.
+Anything less is honestly `FAILED`, `UNPROVEN`, or `INTEGRITY_FAILURE`. It runs in isolated
+git worktrees, so your working tree is never touched. Full semantics:
+[docs/baseline-verify.md](docs/baseline-verify.md).
+
+### State verification (don't trust the claim)
+
+`pitstop state-verify` never reads the agent's natural-language summary — it inspects the
+actual filesystem and git. You give it structured claims (`--claim modified:src/auth.ts`,
+`--claim created:x`, `--claim deleted:y`) and it independently checks existence, content
+hashes, line counts, `git status`/HEAD, catching the classic failures: the tool returned
+HTTP 200 but the file never changed, was written empty, was reverted, or a *different*
+file changed. Verdicts: `STATE_VERIFIED`, `STATE_MISMATCH`, `UNPROVEN`,
+`INTEGRITY_FAILURE`. This proves **that** a change occurred — never whether the code is
+correct. Full semantics: [docs/state-verify.md](docs/state-verify.md).
+
+### Verifier health (falsifiability)
+
+`pitstop verifier-check` asks the referee's own question: **can this verification actually
+say NO?** It runs the verification on a known-good state (must PASS) and a controlled
+known-bad state — an explicit bad ref or your declared mutation, applied in a temp worktree
+(must FAIL). `VERIFIER_VALID` means the verification demonstrated falsifiability and its
+PASS carries information; `VERIFIER_WEAK` means the seeded fault sailed through;
+`VERIFIER_BROKEN` means it fails even when things are correct. A referee that cannot fail
+is not a referee. Full semantics: [docs/verifier-check.md](docs/verifier-check.md).
+
+### Holdout verification (anti-overfitting)
+
+`pitstop holdout-verify` is the final, hidden exam. An agent that iterates against visible
+checks learns the *evaluator*, not the task — so OpenPitStop separates the two: the checks
+it iterates against stay visible, and a **holdout suite defined OUTSIDE the repository**
+runs once, at the final stage, in a fresh isolated worktree of the candidate commit. The
+agent cannot read the holdout, cannot modify it (every suite file is hashed before and
+after execution), and sees only redacted ids + verdicts — never commands, expectations, or
+output. With `--baseline`, the suite must FAIL on the known-bad baseline and PASS on the
+candidate, so a suite that only ever says PASS is exposed as `HOLDOUT_UNPROVEN`. Verdicts:
+`HOLDOUT_PASS`, `HOLDOUT_FAIL`, `HOLDOUT_UNPROVEN`, `HOLDOUT_INTEGRITY_FAILURE`. Full
+semantics: [docs/holdout-verify.md](docs/holdout-verify.md).
+
+### Acceptance verification (did the agent satisfy the requirement?)
+
+`pitstop acceptance-verify` answers the question everything else orbits: **did the agent
+actually satisfy the original task requirements?** A structured acceptance contract —
+requirements with deterministic criteria (`command`, real `http` requests against the
+booted app, `fileExists`, `fileContains`) — is the source of truth, not the agent's
+self-report. In-repo contracts are hash-pinned: if the agent quietly redefines success,
+OpenPitStop reports `INTEGRITY_FAILURE` until a human re-authorizes. With `--baseline`,
+criteria that already passed there don't count as the agent's work — a contract that
+passes on both sides is `UNPROVEN`. This catches the classic failure: green unit test,
+plausible diff, real user flow broken. Verdicts: `SATISFIED`, `NOT_SATISFIED`,
+`UNPROVEN`, `INTEGRITY_FAILURE`. Deterministic and observable by design — never an LLM
+judge. Full semantics: [docs/acceptance-verify.md](docs/acceptance-verify.md).
+
+### Regression verification (don't break what already worked)
+
+`pitstop regression-check` compares check-level results (per-test names where the runner
+exposes them) between a baseline and the candidate, both in isolated worktrees — and is
+honest about what each difference means: only previously **verified passing** behavior
+that now fails is a `REGRESSION`; already-broken checks that stay broken are `UNCHANGED`;
+fixes are `FIXED`; new checks are `NEW_PASS`/`NEW_FAILURE`; flaky checks (with `--runs >1`)
+and vanished checks are `UNPROVEN` rather than guessed. Regressions hard-block the gate.
+Full semantics: [docs/regression-check.md](docs/regression-check.md).
+
+### The evidence chain (why should I trust this verdict?)
+
+`pitstop explain` aggregates every sealed verification document in `.pitstop/` into one
+explainable chain — baseline → state → tests → acceptance → security → regression →
+integrity → holdout — re-verifies each seal, and derives the verdict instead of asserting
+it. Components that ran show their real status with evidence references and digests;
+never-run components are listed as **NOT_CONFIGURED** (never rendered as a pass); skipped
+tools are **SKIPPED**; tampered evidence is **TAMPERED** and blocks. `BLOCKED` verdicts
+quote the underlying reasons ("previously passing check(s) now failing — check B").
+Full semantics: [docs/explain.md](docs/explain.md).
+
+### Repo discipline (understand → plan → architecture → stack → flow)
+
+The stages that make the referee *repo-aware*:
+
+- **`pitstop understand`** — builds the sealed repo-awareness artifact: languages,
+  frameworks, package manager, verification commands (test/typecheck/lint/build), test
+  layers, CI, module map, entry points, CODEOWNERS ownership, and the architecture config.
+- **`pitstop plan`** — plan before patching: goal, steps, the paths the change may touch
+  (`expectedPaths`), and the verification commands that will judge it. A sealed contract.
+- **`pitstop architecture-check`** — does the change FIT THE SYSTEM? Declared import
+  boundaries, protected paths (auth/deploy/CI require explicit `--approved`), forbidden
+  paths (secrets), CODEOWNERS routing, the AI-cheat detectors as shortcut findings, and —
+  with `--against-plan` — scope-creep detection against the plan.
+- **`pitstop verify-stack`** — beyond "did the test pass": unit/integration/e2e +
+  typecheck + lint + build, whatever the repo has, with a deterministic **failure
+  diagnosis** per layer (type-error TSxxxx, missing-dependency, assertion-failure,
+  lint rule, environment, timeout) so fixes are targeted instead of random edits.
+- **`pitstop flow`** — the whole pipeline in one command: understand → contract? →
+  plan-scope → verify-stack → architecture → baseline? → regression? → holdout? → GATE.
+  Unconfigured stages are SKIPPED honestly.
+
+Full semantics: [docs/repo-discipline.md](docs/repo-discipline.md).
+
 ### The pen test
 
 `pitstop pen` boots your app in a sandbox and fires real attack traffic, so a
@@ -380,7 +497,7 @@ For reference, `/pitstop --menu` shows this list:
 OpenPitStop modes:
  (enter) — full autonomous loop (scan, confirm, fix, verify, repeat)
   --scan-only — scan and report, no fixes
-  --ledger — payment idempotency fuzzing only
+  --ledger — payment idempotency fuzzing only
  --integrity-only — re-check the last commit for cheat patterns, no scanning
  --pen — penetration test: live attacks + proof + fixes (regression tests, patches)
  (your own ask) — reply with anything else, e.g. "check the security of this app"
@@ -417,7 +534,7 @@ automatically by `pitstop install` when their commands-folder convention is know
 us your CLI and we'll add it to the auto-install list. Legacy/alternate locations are
 also written where tool docs are inconsistent across versions (see
 `src/installer/targets.ts`). Existing files are never overwritten unless you pass
-`-y`/`--force`; `npx openpitstop install --uninstall` removes everything.
+`-y`/`--force`; `npx openpitstop install --uninstall` removes everything.
 
 ## What OpenPitStop actually does
 
@@ -502,7 +619,7 @@ test"` to a repo and it is picked up automatically on the next run.)
 
 ## Every command
 
-All 24 commands, grouped by job. Run them from inside a repo as `pitstop …` (CLI) or
+All 39 commands, grouped by job. Run them from inside a repo as `pitstop …` (CLI) or
 `npx openpitstop …` (one-off); `/pitstop` in a tool drives the loop, the rest are
 one-shot.
 
@@ -524,6 +641,9 @@ one-shot.
 | Command | What it does |
 |---|---|
 | `pitstop drive <finding-id> [path]` | Hands one finding to *your own agent* (`PITSTOP_AGENT` or `--agent '…{prompt}'`) with explicit orders: write a failing repro first, fix it, make the repro pass, then verify. OpenPitStop referees the whole thing and never edits your code. |
+| `pitstop next [path]` | Reads the sealed artifacts and prints the single best next command plus a checklist of everything still open — repo-aware (detects language, framework, tests, CI). |
+| `pitstop fix [path]` | Autopilot without an agent: chains **scan → pen --fix → verify → gate**, showing the `next` card after each hop. |
+| `pitstop ask "<your ask>"` | Maps a plain-English request ("check the security of this app", "are our tests flaky?") to the right command, states its interpretation, and confirms before fixing. |
 | `pitstop memory add/list/relevant` | A scratchpad inside the repo: record a decision (`add`), see them newest-first (`list`), or pull up anything related to a file (`relevant`) — so past fixes and rejected approaches survive across sessions. |
 | `pitstop inspect <finding-id>` | Opens up one finding: the code snippet, the root cause, whether a repro test exists, and what OpenPitStop remembers about these files. |
 
@@ -531,10 +651,27 @@ one-shot.
 
 | Command | What it does |
 |---|---|
-| `pitstop gate [--score 60]` | A commit gate for CI, pre-commit hooks or PRs: score threshold + regression risk + diff integrity + evidence signature. **Exit 0 = PASS · 1 = FAIL · 2 = CONFIRMED_CHEAT.** |
+| `pitstop gate [--score 60]` | A commit gate for CI, pre-commit hooks or PRs: score threshold + regression risk + diff integrity + evidence signature + the newest baseline-verify / state-verify / verifier-check reports. **Exit 0 = PASS · 1 = FAIL · 2 = CONFIRMED_CHEAT.** |
 | `pitstop integrity [path]` | Checks the latest commit or working tree for cheat patterns *without* a full scan: deleted or neutered tests, swallowed errors, suppression comments, hardcoded-to-pass values, mocked modules, forced exits. **Exit 0 = CLEAN · 1 = SUSPICIOUS · 2 = CONFIRMED_CHEAT.** |
 | `pitstop ci [path]` | CI-friendly scan + verify against the base branch → a PR-ready markdown report — the gate as a PR comment. It only reports; fixes stay local via `/pitstop`. Wired into the [GitHub Action](docs/github-action.md), which comments the gate on every PR and fails the check when it fails. |
 
+**Deep verification — can the referee say NO?**
+
+| Command | What it does |
+|---|---|
+| `pitstop baseline-verify --baseline <ref> --command <cmd> …` | Proves a fix is real: runs the SAME verification on a known-baseline commit (must FAIL) and the candidate (must PASS), in isolated git worktrees, with sealed tamper-evident evidence and a verification-identity hash. `VERIFIED` only when both hold and nothing changed; otherwise `FAILED` / `UNPROVEN` / `INTEGRITY_FAILURE`. Exit 0/1/2/3. See [docs/baseline-verify.md](docs/baseline-verify.md). |
+| `pitstop state-verify --claim modified:src/auth.ts …` | Independent external state check: verifies the agent's structured claims against the actual filesystem + git (existence, content hashes, line counts, porcelain status, HEAD). Catches "HTTP 200 but nothing changed", empty writes, reverts, wrong-file changes, whitespace-only edits. `STATE_VERIFIED` / `STATE_MISMATCH` / `UNPROVEN` / `INTEGRITY_FAILURE`. Exit 0/1/2/3. See [docs/state-verify.md](docs/state-verify.md). |
+| `pitstop verifier-check --command <cmd> --mutate …` | Verifier self-test: runs the verification on a known-good state (must PASS) and a controlled known-bad state (must FAIL) in temp worktrees. `VERIFIER_VALID` = falsifiable; `VERIFIER_WEAK` = the seeded fault sailed through; `VERIFIER_BROKEN` = fails a correct state. Never mutates your working tree. See [docs/verifier-check.md](docs/verifier-check.md). |
+| `pitstop holdout-verify --suite <dir-or-id> [--baseline <ref>]` | Final hidden exam against verifier overfitting: a holdout suite defined OUTSIDE the repo runs once in a fresh isolated worktree of the candidate commit — the agent never saw it and cannot modify it (files hashed before/after); output is redacted to ids + verdicts. With `--baseline` the suite must FAIL there and PASS on the candidate. `HOLDOUT_PASS` / `HOLDOUT_FAIL` / `HOLDOUT_UNPROVEN` / `HOLDOUT_INTEGRITY_FAILURE`. See [docs/holdout-verify.md](docs/holdout-verify.md). |
+| `pitstop acceptance-verify --contract <dir\|file\|id> [--baseline <ref>]` | Requirement verification: a structured acceptance contract (deterministic `command`/`http`/`fileExists`/`fileContains` criteria — never an LLM judge) is the source of truth for "did the agent satisfy the original requirement?". Boots the app when the contract declares a start command; in-repo contracts are hash-pinned so the agent cannot redefine success without `--authorize`; `--baseline` exposes contracts that pass on both sides. `SATISFIED` / `NOT_SATISFIED` / `UNPROVEN` / `INTEGRITY_FAILURE`. See [docs/acceptance-verify.md](docs/acceptance-verify.md). |
+| `pitstop regression-check --command <cmd> --baseline <ref>` | Per-check regression comparison: previously **verified passing** checks that now fail are `REGRESSION` (hard-blocks the gate); already-broken stays `UNCHANGED`; fixes are `FIXED`; new checks are `NEW_PASS`/`NEW_FAILURE`; flaky (`--runs >1`) and vanished checks are `UNPROVEN` rather than guessed. Per-test names parsed from TAP/spec/jest/pytest/go output, suite-level fallback. See [docs/regression-check.md](docs/regression-check.md). |
+| `pitstop explain [--verbose]` | The unified evidence chain: aggregates every sealed verification document, re-verifies each seal, and derives VERIFIED / BLOCKED / UNPROVEN with per-item evidence references, digests and reasons. Never-run components are NOT_CONFIGURED — never rendered as passes. See [docs/explain.md](docs/explain.md). |
+| `pitstop understand [path]` | Repo awareness: builds the sealed understanding artifact — languages, frameworks, verification commands (test/typecheck/lint/build), test layers, CI, module map, entry points, CODEOWNERS ownership, architecture config. Stage 1 of the pipeline. See [docs/repo-discipline.md](docs/repo-discipline.md). |
+| `pitstop plan --goal … --path … --verify-command …` | Plan before patching: a sealed change contract (goal, steps, `expectedPaths` the change may touch, verification commands). `--show` renders the latest plan with live scope status. See [docs/repo-discipline.md](docs/repo-discipline.md). |
+| `pitstop architecture-check [--against-plan] [--approved]` | Does the change FIT THE SYSTEM? Declared import boundaries, protected paths (auth/deploy/CI need explicit `--approved`), forbidden paths, CODEOWNERS routing, shortcut detectors on the diff, and scope-creep detection against the plan. `CONFORMS` / `APPROVAL_REQUIRED` / `VIOLATIONS` / `INTEGRITY_FAILURE`. See [docs/repo-discipline.md](docs/repo-discipline.md). |
+| `pitstop verify-stack [--only …]` | The full verification stack — unit/integration/e2e + typecheck + lint + build, whatever the repo has — with a deterministic failure DIAGNOSIS per layer (type-error TSxxxx, missing-dependency, assertion-failure, lint rule, environment, timeout) so fixes are targeted, not random edits. See [docs/repo-discipline.md](docs/repo-discipline.md). |
+| `pitstop flow [--baseline …] [--contract …] [--suite …]` | The whole pipeline in one command: understand → contract? → plan-scope → verify-stack → architecture → baseline? → regression? → holdout? → GATE. Unconfigured stages are SKIPPED honestly. See [docs/repo-discipline.md](docs/repo-discipline.md). |
+
 **Penetration test — attack your own app**
 
 | Command | What it does |
@@ -548,7 +685,7 @@ one-shot.
 | Command | What it does |
 |---|---|
 | `pitstop report --html` | One self-contained `PITSTOP_REPORT.html` (inline SVG trends, integrity timeline, zero external assets). Also writes `PITSTOP_BADGE.svg` — a README-ready shield: `![OpenPitStop score](PITSTOP_BADGE.svg)`. |
-| `pitstop share` | Renders a 1200×630 share card (`PITSTOP_CARD.html`) — score, trend, integrity/evidence chips, top findings. Screenshot it and post it. |
+| `pitstop share` | Renders a 1200×630 share card (`PITSTOP_CARD.html`) — score, trend, integrity/evidence chips, top findings. Screenshot it and post it. |
 | `pitstop digest [--days N] [--md]` | The progress story: how the score moved, what got fixed and what regressed, gate results, cheat catches, flakies, open findings. |
 | `pitstop honesty [--html]` | The proof that the numbers are real: evidence chain + integrity history + verify deltas + committed repro tests → one verdict, or a shareable HTML certificate. |
 
@@ -558,13 +695,14 @@ one-shot.
 |---|---|
 | `pitstop install` / `install --uninstall` | Writes `/pitstop` into every supported tool (project + user level). `--uninstall` removes it all. `--hooks` also installs (or with `--uninstall`, removes) the git pre-commit gate. |
 | `pitstop` (no args) | The guided first-run: detects your AI tools and git repo, then offers to install or score this repo (`try .`). Non-TTY prints the one-line menu instead. |
+| `pitstop demo` | Full loop rehearsal in a throwaway temp dir — walk the slash-command loop by hand against a seeded-broken repo, ending with a `PITSTOP_REPORT.md`. |
 | `pitstop doctor` | Explains why categories show `skipped`: checks your toolchain (Node, git, jscpd, gitleaks, pa11y) and prints copy-paste install hints. Semgrep is optional and opt-in, so doctor won't flag its absence. |
 | `pitstop prompt [--args …]` | Prints the exact prompt your AI tool expands `/pitstop` into, with your arguments filled in — full transparency into what the agent was told. |
 
 ### The score & badge
 
 Skipped categories are excluded and the weights re-adjusted, so a missing `jscpd` never
-silently drags the number down. The verify Δ compares against the last scan with the *exact
+silently drags the number down. The verify Δ compares against the last scan with the *exact
 same categories measured* — a category skipped on both sides can't move the score. The
 score only moves when your code does.
 
@@ -643,7 +781,7 @@ cheat its own referee. That separation is the product.
 - **Windows** is a first-class, CI-verified platform (build + smoke on `ubuntu-latest`
   and `windows-latest` every push). `watch`, `pen`, `pen --fix` and `scan --ledger` were
    each run end-to-end on a real Windows host against sample apps, with a live watch
-   delta, PROVEN ledger double-charges (sealed evidence) and honest pen verdicts
+   delta, PROVEN ledger double-charges (sealed evidence) and honest pen verdicts
   (including the honest "0 patches" case) all verified. The only open caveat is breadth,
   not correctness: not every exotic repo shape has been hand-exercised on Windows yet.
 - **Codex App / VS Code extension** isn't supported and won't be until OpenAI ships custom
@@ -678,6 +816,36 @@ cheat its own referee. That separation is the product.
 - **`drive` verdicts** for runtime pen findings come from the repro test (FAIL first, PASS
   after the fix), not from the static score — the static gate has nothing to say about a
   runtime-only finding.
+- **Baseline-aware verification honesty:** without an explicit `expectedFailure` predicate,
+  a non-zero baseline exit cannot prove the failure was the *intended* bug rather than a
+  broken environment — such results are downgraded to `UNPROVEN`, never `VERIFIED`. The
+  verification identity covers only the files you declare (`--test-file`/`--config`).
+  See [docs/baseline-verify.md](docs/baseline-verify.md).
+- **State verification is not semantic verification.** A content hash proves content
+  changed, not that the change is correct or complete; untracked files without a snapshot
+  have no before-state and are reported `UNPROVEN` rather than guessed. Files over 8 MB are
+  recorded but not hashed. See [docs/state-verify.md](docs/state-verify.md).
+- **Verifier health is per fault class.** Passing one known-bad case proves the verifier can
+  fail, not that it covers every regression; choosing a meaningful known-bad state is the
+  caller's responsibility, and the evidence records exactly what was seeded.
+  See [docs/verifier-check.md](docs/verifier-check.md).
+- **A holdout is a sample, not a guarantee.** It proves the candidate satisfies checks it
+  could not see or modify — not correctness in general. Suites must live outside the
+  agent's modifiable workspace (a hidden file inside the repo is not a holdout), and a
+  suite that cannot fail on a known-bad baseline is reported `HOLDOUT_UNPROVEN` rather than
+  trusted. See [docs/holdout-verify.md](docs/holdout-verify.md).
+- **Acceptance is only as strong as its contract.** `acceptance-verify` proves the
+  candidate satisfies the contract's *observable* criteria — not that the contract captures
+  the whole requirement, and not unobservable qualities (UX, load, security beyond the
+  asserted properties). It is deterministic by design, never an LLM judge; a contract that
+  passes on the baseline is reported `UNPROVEN` rather than trusted.
+  See [docs/acceptance-verify.md](docs/acceptance-verify.md).
+- **Regression detection vs flaky tests:** with the default single run, a flaky candidate
+  check is indistinguishable from a regression and IS reported as one; `--runs <n>` detects
+  candidate-side inconsistency (`UNPROVEN`), but the baseline is a single run, so a flaky
+  baseline check can still mislabel a fix or hide a regression. Per-test granularity depends
+  on the runner's output; unparseable output degrades to one suite-level check.
+  See [docs/regression-check.md](docs/regression-check.md).
 
 ## Privacy
 

package/demo-repo/PITSTOP_PEN_REPORT.md

@@ -0,0 +1,46 @@
+# OpenPitStop Penetration Test — D:\OpenPitStop cli\demo-repo
+
+_2026-08-20T14:19:19.581Z_ · static: on · dynamic: on
+
+## Summary
+
+| | | | | |
+|---|---|---|---|---|
+| critical | high | medium | low | info |
+| 0 | 1 | 1 | 0 | 0 |
+
+Confidence: **1 proven** · 1 indicated · 0 heuristic
+
+Static findings verified live: **0 proven** · 0 indicated · 0 unproven · 2 not tested — every pattern finding was either confirmed by a live attack or honestly labeled unproven.
+
+Dynamic: aborted — 0 routes, 0, boot 212ms, 0 outbound events.
+> app did not come up within 25s (start: "node src/server.js")
+
+## Drift vs last run (2026-08-20T14:14:56.321Z)
+
+No change — identical to the last sealed run.
+
+## Findings
+
+### HIGH — hardcoded credential committed to source `pen-4434f26c`
+
+- **Confidence**: proven
+- **Where**: `src/config.js:2`
+
+hardcoded credential found in src/config.js:2 (AKIA12345678…). This credential is recoverable from git history and any CI log that runs the repo.
+
+- **Runtime verification**: not tested — no runtime verification: the dynamic phase did not run (app did not come up within 25s (start: "node src/server.js"))
+- **Reproduce**: grep -n "AKIA12345678" "src/config.js"
+- **Fix**: Rotate the credential NOW (it may already be compromised), remove it from source, and move it to an environment variable / secret manager. Add the value to .gitignore'd .env and to a secrets policy so it never returns.
+  Run `pitstop repro pen-4434f26c` to capture it as a regression test, then `pitstop pen` again.
+
+### MEDIUM — no helmet / security headers middleware `pen-bb7aa572`
+
+- **Confidence**: indicated
+- **Where**: `src/server.js:4`
+
+An Express app without helmet() (or manual CSP / X-Frame-Options / X-Content-Type-Options headers). Clickjacking, MIME sniffing and mixed-content protections are all off.
+
+- **Runtime verification**: not tested — no runtime verification: the dynamic phase did not run (app did not come up within 25s (start: "node src/server.js"))
+- **Fix**: Install helmet and `app.use(helmet());` after app creation (deterministic patch generated by `pitstop pen --fix` when helmet is already installed).
+  Run `pitstop repro pen-bb7aa572` to capture it as a regression test, then `pitstop pen` again.

package/dist/cli.js

@@ -29,6 +29,18 @@ import { testCmd } from "./commands/test.js";
 import { nextCmd } from "./commands/next.js";
 import { fix } from "./commands/fix.js";
 import { askCmd } from "./commands/ask.js";
+import { baselineVerify } from "./commands/baselineVerify.js";
+import { stateVerify } from "./commands/stateVerify.js";
+import { verifierCheck } from "./commands/verifierCheck.js";
+import { holdoutVerify } from "./commands/holdoutVerify.js";
+import { acceptanceVerify } from "./commands/acceptanceVerify.js";
+import { regressionCheck } from "./commands/regressionCheck.js";
+import { explain } from "./commands/explain.js";
+import { understand } from "./commands/understand.js";
+import { plan } from "./commands/plan.js";
+import { architectureCheck } from "./commands/architectureCheck.js";
+import { verifyStack } from "./commands/verifyStack.js";
+import { flow } from "./commands/flow.js";
 import { guidedFirstRun } from "./firstRun.js";
 /**
  * Last line of defense: a crash is a bug report, not a stack dump on someone's
@@ -100,5 +112,17 @@ program.addCommand(testCmd);
 program.addCommand(nextCmd);
 program.addCommand(fix);
 program.addCommand(askCmd);
+program.addCommand(baselineVerify);
+program.addCommand(stateVerify);
+program.addCommand(verifierCheck);
+program.addCommand(holdoutVerify);
+program.addCommand(acceptanceVerify);
+program.addCommand(regressionCheck);
+program.addCommand(explain);
+program.addCommand(understand);
+program.addCommand(plan);
+program.addCommand(architectureCheck);
+program.addCommand(verifyStack);
+program.addCommand(flow);
 program.parseAsync(process.argv);
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,GAAY;IAC/C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,mCAAmC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9D,IAAI;YACJ,KAAK,CAAC,GAAG,CACP,qDAAqD;gBACnD,6EAA6E;gBAC7E,uDAAuD;gBACvD,+EAA+E,CAClF,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;IACvC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC7C,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,iBAAiB,CAAC;KAC9B,OAAO,CAAC,WAAW,EAAE,CAAC;KACtB,MAAM,CAAC,cAAc,CAAC,CAAC;AAE1B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACvB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC7B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAE3B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,GAAY;IAC/C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,mCAAmC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9D,IAAI;YACJ,KAAK,CAAC,GAAG,CACP,qDAAqD;gBACnD,6EAA6E;gBAC7E,uDAAuD;gBACvD,+EAA+E,CAClF,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;IACvC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC7C,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,iBAAiB,CAAC;KAC9B,OAAO,CAAC,WAAW,EAAE,CAAC;KACtB,MAAM,CAAC,cAAc,CAAC,CAAC;AAE1B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACvB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC7B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3B,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACpC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACtC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAEzB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/commands/acceptanceVerify.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const acceptanceVerify: Command;
+export default acceptanceVerify;

package/dist/commands/acceptanceVerify.js

@@ -0,0 +1,89 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import boxen from "boxen";
+import path from "node:path";
+import { verifyAcceptance, sealAcceptanceResult, checkAcceptanceEvidence, } from "../verify/acceptance.js";
+import { addEntry } from "../memory/store.js";
+const MARK = (pass) => pass === null ? chalk.yellow("?") : pass ? chalk.green("✓") : chalk.red("✗");
+export const acceptanceVerify = new Command("acceptance-verify")
+    .description("Requirement / acceptance verification: verify the agent satisfied the ORIGINAL TASK " +
+    "requirements via a structured acceptance contract (deterministic criteria: command, http, " +
+    "fileExists, fileContains) — never the agent's self-report and never an LLM judge. In-repo " +
+    "contracts are hash-pinned; changes are INTEGRITY_FAILURE until re-authorized with --authorize. " +
+    "With --baseline, the contract must discriminate (fail there, pass on the candidate).")
+    .argument("[repo]", "path to the repo", ".")
+    .requiredOption("--contract <dir|file|id>", "acceptance contract: a path to acceptance.json (or a dir containing it) or an id under PITSTOP_ACCEPTANCE_HOME (default ~/.openpitstop/acceptance/<id>)")
+    .option("--candidate <ref>", "candidate commit/ref to verify (default: HEAD)", "HEAD")
+    .option("--baseline <ref>", "baseline commit/ref — criteria passing there do not count as evidence of the agent's work")
+    .option("--authorize", "explicitly re-authorize a changed in-repo contract (pins the new version)")
+    .option("--timeout <ms>", "per-criterion / app-boot timeout in ms")
+    .option("--json", "machine-readable output")
+    .action(async (repoArg, opts) => {
+    const repo = path.resolve(repoArg);
+    let result = await verifyAcceptance({
+        repo,
+        contractSpec: opts.contract,
+        candidateRef: opts.candidate,
+        baselineRef: opts.baseline,
+        authorize: opts.authorize,
+        timeoutMs: opts.timeout ? Number(opts.timeout) : undefined,
+    });
+    result = sealAcceptanceResult(result);
+    if (opts.json) {
+        console.log(JSON.stringify({
+            repo: result.repo,
+            contract: { id: result.contractId, path: result.contractPath, hash: result.contractHash, external: result.contractExternal },
+            candidate: { ref: result.candidateRef, sha: result.candidateSha },
+            baseline: { ref: result.baselineRef, sha: result.baselineSha },
+            requirements: result.requirements,
+            evidence: result.evidence,
+            verdict: result.verdict,
+            reasons: result.reasons,
+            notes: result.notes,
+            discriminative: result.discriminative,
+            totalCriteria: result.totalCriteria,
+            sealedPath: result.sealedPath,
+        }, null, 2));
+    }
+    else {
+        const verified = result.evidence.filter((e) => e.pass === true).length;
+        const lines = [`${chalk.bold("ACCEPTANCE")}`, ""];
+        for (const r of result.requirements) {
+            const mark = MARK(r.satisfied);
+            lines.push(`${mark} ${chalk.bold(r.id)}${r.description ? chalk.dim(` — ${r.description}`) : ""}`);
+            for (const c of result.evidence.filter((e) => e.requirementId === r.id)) {
+                lines.push(`    ${MARK(c.pass)} ${chalk.dim(c.criterionId)} [${c.type}]  ${chalk.dim(c.observed.slice(0, 110))}`);
+            }
+        }
+        lines.push("");
+        lines.push(`${chalk.bold("Evidence:")} ${verified}/${result.totalCriteria} criteria verified` +
+            (result.baselineRef ? chalk.dim(` · ${result.discriminative} discriminate vs baseline ${result.baselineRef}`) : chalk.dim(" · no baseline supplied")));
+        console.log(boxen(lines.join("\n"), {
+            title: ` PITSTOP — ACCEPTANCE ${result.contractId} `,
+            titleAlignment: "center",
+            borderStyle: "round",
+            padding: 1,
+            borderColor: result.verdict === "SATISFIED" ? "green" : result.verdict === "NOT_SATISFIED" ? "red" : "yellow",
+        }));
+        const color = result.verdict === "SATISFIED" ? "green" : result.verdict === "NOT_SATISFIED" ? "red" : "yellow";
+        console.log(boxen(`${chalk.bold(result.verdict)}\n\n` +
+            result.reasons.map((r) => `· ${r}`).join("\n") +
+            (result.notes.length ? "\n\n" + result.notes.map((n) => chalk.dim(`· ${n}`)).join("\n") : "") +
+            `\n\n${chalk.dim("the contract — not the agent — defines success; criteria are deterministic and observable")}`, { title: " VERDICT ", titleAlignment: "center", borderStyle: "double", padding: 1, borderColor: color }));
+        if (result.sealedPath) {
+            console.log(chalk.dim(`\nSealed evidence written to ${result.sealedPath}\n`));
+            const ev = checkAcceptanceEvidence(result.sealedPath);
+            if (ev.status !== "verified")
+                console.log(chalk.red(`Evidence check: ${ev.status} — ${ev.reason}`));
+        }
+    }
+    addEntry(repo, {
+        type: "fix",
+        summary: `acceptance-verify ${result.contractId}: ${result.verdict}`,
+        context: `${result.discriminative}/${result.totalCriteria} criteria discriminate · candidate ${result.candidateRef} · baseline ${result.baselineRef ?? "none"}`,
+    });
+    process.exitCode =
+        result.verdict === "SATISFIED" ? 0 : result.verdict === "NOT_SATISFIED" ? 1 : result.verdict === "UNPROVEN" ? 2 : 3;
+});
+export default acceptanceVerify;
+//# sourceMappingURL=acceptanceVerify.js.map

package/dist/commands/acceptanceVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptanceVerify.js","sourceRoot":"","sources":["../../src/commands/acceptanceVerify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,IAAI,GAAG,CAAC,IAAoB,EAAE,EAAE,CACpC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC;KAC7D,WAAW,CACV,sFAAsF;IACpF,4FAA4F;IAC5F,4FAA4F;IAC5F,iGAAiG;IACjG,sFAAsF,CACzF;KACA,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC;KAC3C,cAAc,CACb,0BAA0B,EAC1B,yJAAyJ,CAC1J;KACA,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,EAAE,MAAM,CAAC;KACrF,MAAM,CAAC,kBAAkB,EAAE,2FAA2F,CAAC;KACvH,MAAM,CAAC,aAAa,EAAE,2EAA2E,CAAC;KAClG,MAAM,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;KAClE,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAS,EAAE,EAAE;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnC,IAAI,MAAM,GAAG,MAAM,gBAAgB,CAAC;QAClC,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,YAAY,EAAE,IAAI,CAAC,SAAS;QAC5B,WAAW,EAAE,IAAI,CAAC,QAAQ;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3D,CAAC,CAAC;IACH,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE;YAC5H,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE;YACjE,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE;YAC9D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACvE,MAAM,KAAK,GAAa,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,QAAQ,IAAI,MAAM,CAAC,aAAa,oBAAoB;YAC3F,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,6BAA6B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACzJ,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtB,KAAK,EAAE,yBAAyB,MAAM,CAAC,UAAU,GAAG;YACpD,cAAc,EAAE,QAAQ;YACxB,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;SAC9G,CAAC,CACH,CAAC;QACF,MAAM,KAAK,GACT,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnG,OAAO,CAAC,GAAG,CACT,KAAK,CACH,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;YACjC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9C,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,KAAK,CAAC,GAAG,CAAC,2FAA2F,CAAC,EAAE,EACjH,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CACxG,CACF,CAAC;QACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,EAAE,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,qBAAqB,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,OAAO,EAAE;QACpE,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,aAAa,sCAAsC,MAAM,CAAC,YAAY,eAAe,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE;KAChK,CAAC,CAAC;IAEH,OAAO,CAAC,QAAQ;QACd,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC,CAAC,CAAC;AAEL,eAAe,gBAAgB,CAAC"}

package/dist/commands/architectureCheck.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const architectureCheck: Command;
+export default architectureCheck;

package/dist/commands/architectureCheck.js

@@ -0,0 +1,94 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import boxen from "boxen";
+import path from "node:path";
+import { checkArchitecture, sealArchitectureResult } from "../verify/architecture.js";
+import { addEntry } from "../memory/store.js";
+const KIND_PAINT = {
+    "boundary-violation": chalk.red,
+    "forbidden-path": chalk.red,
+    "scope-creep": chalk.red,
+    shortcut: chalk.yellow,
+    "protected-path": chalk.yellow,
+    "review-required": chalk.dim,
+};
+export const architectureCheck = new Command("architecture-check")
+    .description("Architecture & boundary verification: does the change FIT THE SYSTEM? Checks the diff " +
+    "against the repo's declared architecture config (openpitstop.architecture.json: " +
+    "boundaries, protected paths, forbidden paths), CODEOWNERS ownership, the AI-cheat " +
+    "detectors (shortcuts), and — with --against-plan — the change plan's declared scope.")
+    .argument("[repo]", "path to the repo", ".")
+    .option("--from <ref>", "baseline ref (default HEAD)", "HEAD")
+    .option("--to <ref>", "candidate ref (default: working tree)")
+    .option("--against-plan", "also flag changed files outside the latest plan's expectedPaths")
+    .option("--approved", "record explicit human approval for protected-path touches")
+    .option("--json", "machine-readable output")
+    .action(async (repoArg, opts) => {
+    const repo = path.resolve(repoArg);
+    let result = await checkArchitecture({
+        repo,
+        from: opts.from,
+        to: opts.to,
+        againstPlan: opts.againstPlan,
+        approved: opts.approved,
+    });
+    result = sealArchitectureResult(result);
+    if (opts.json) {
+        console.log(JSON.stringify({
+            repo: result.repo, from: result.from, to: result.to,
+            configPath: result.configPath, changedFiles: result.changedFiles,
+            entries: result.entries, verdict: result.verdict,
+            reasons: result.reasons, notes: result.notes,
+            planRef: result.planRef, approved: result.approved,
+            sealedPath: result.sealedPath,
+        }, null, 2));
+    }
+    else {
+        const bySeverity = {
+            violation: result.entries.filter((e) => e.severity === "violation"),
+            approval: result.entries.filter((e) => e.severity === "approval"),
+            info: result.entries.filter((e) => e.severity === "info"),
+        };
+        const lines = [];
+        lines.push(`${chalk.bold("changed files:")} ${result.changedFiles.length}`);
+        lines.push(`${chalk.bold("config:")} ${result.configPath ?? chalk.dim("none (generic checks only)")}`);
+        if (result.entries.length === 0) {
+            lines.push("");
+            lines.push(chalk.green("no entries — nothing flagged"));
+        }
+        for (const [sev, list] of Object.entries(bySeverity)) {
+            if (!list.length)
+                continue;
+            lines.push("");
+            lines.push(chalk.bold(sev === "violation" ? "VIOLATIONS (blocking):" : sev === "approval" ? "APPROVAL REQUIRED:" : "INFORMATIONAL:"));
+            for (const e of list.slice(0, 20)) {
+                const paint = KIND_PAINT[e.kind] ?? chalk.dim;
+                lines.push(`  ${paint(e.kind.padEnd(20))} ${e.file} — ${e.detail}${e.reason ? chalk.dim(` (${e.reason})`) : ""}`);
+            }
+            if (list.length > 20)
+                lines.push(chalk.dim(`  … ${list.length - 20} more`));
+        }
+        console.log(boxen(lines.join("\n"), {
+            title: " PITSTOP — ARCHITECTURE CHECK ",
+            titleAlignment: "center",
+            borderStyle: "round",
+            padding: 1,
+            borderColor: result.verdict === "CONFORMS" ? "green" : result.verdict === "APPROVAL_REQUIRED" ? "yellow" : "red",
+        }));
+        const color = result.verdict === "CONFORMS" ? "green" : result.verdict === "APPROVAL_REQUIRED" ? "yellow" : "red";
+        console.log(boxen(`${chalk.bold(result.verdict)}\n\n${result.reasons.map((r) => `· ${r}`).join("\n")}` +
+            (result.notes.length ? "\n\n" + result.notes.map((n) => chalk.dim(`· ${n}`)).join("\n") : "") +
+            `\n\n${chalk.dim("a change can pass every test and still be wrong for the system — this checks the system fit")}`, { title: " VERDICT ", titleAlignment: "center", borderStyle: "double", padding: 1, borderColor: color }));
+        if (result.sealedPath)
+            console.log(chalk.dim(`\nSealed evidence written to ${result.sealedPath}\n`));
+    }
+    addEntry(repo, {
+        type: "fix",
+        summary: `architecture-check: ${result.verdict} (${result.entries.length} entries)`,
+        context: result.reasons.join("; ").slice(0, 200),
+    });
+    process.exitCode =
+        result.verdict === "CONFORMS" ? 0 : result.verdict === "APPROVAL_REQUIRED" ? (result.approved ? 0 : 2) : result.verdict === "VIOLATIONS" ? 1 : 3;
+});
+export default architectureCheck;
+//# sourceMappingURL=architectureCheck.js.map

package/dist/commands/architectureCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architectureCheck.js","sourceRoot":"","sources":["../../src/commands/architectureCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,UAAU,GAA0C;IACxD,oBAAoB,EAAE,KAAK,CAAC,GAAG;IAC/B,gBAAgB,EAAE,KAAK,CAAC,GAAG;IAC3B,aAAa,EAAE,KAAK,CAAC,GAAG;IACxB,QAAQ,EAAE,KAAK,CAAC,MAAM;IACtB,gBAAgB,EAAE,KAAK,CAAC,MAAM;IAC9B,iBAAiB,EAAE,KAAK,CAAC,GAAG;CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC,oBAAoB,CAAC;KAC/D,WAAW,CACV,wFAAwF;IACtF,kFAAkF;IAClF,oFAAoF;IACpF,sFAAsF,CACzF;KACA,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC;KAC3C,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,MAAM,CAAC;KAC7D,MAAM,CAAC,YAAY,EAAE,uCAAuC,CAAC;KAC7D,MAAM,CAAC,gBAAgB,EAAE,iEAAiE,CAAC;KAC3F,MAAM,CAAC,YAAY,EAAE,2DAA2D,CAAC;KACjF,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAS,EAAE,EAAE;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACnC,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE;YACnD,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;YAChE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;YAChD,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK;YAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YAClD,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC;YACnE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;YACjE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;SAC1D,CAAC;QACF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;QACvG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACtI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtB,KAAK,EAAE,gCAAgC;YACvC,cAAc,EAAE,QAAQ;YACxB,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;SACjH,CAAC,CACH,CAAC;QACF,MAAM,KAAK,GAAQ,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACvH,OAAO,CAAC,GAAG,CACT,KAAK,CACH,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAClF,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,KAAK,CAAC,GAAG,CAAC,6FAA6F,CAAC,EAAE,EACnH,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CACxG,CACF,CAAC;QACF,IAAI,MAAM,CAAC,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,QAAQ,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,uBAAuB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW;QACnF,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KACjD,CAAC,CAAC;IAEH,OAAO,CAAC,QAAQ;QACd,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrJ,CAAC,CAAC,CAAC;AAEL,eAAe,iBAAiB,CAAC"}