progmune-runtime 2.1.6 → 3.2.0

package/dist/learning-ranker.test.js

@@ -0,0 +1,291 @@
+"use strict";
+/**
+ * P2.6: Ranking Evolution Test — Self-Improving Loop Verification
+ *
+ * Proves that the feedback loop works:
+ *   Repair A accepted 90 times, Repair B accepted 10 times
+ *   → LearningRanker ranks A > B
+ *   → Then Repair B accepted 100 more times
+ *   → LearningRanker now ranks B > A
+ *
+ * This is the first proof that Progmune is a Learning System,
+ * not just a Rule System.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const planner_telemetry_1 = require("./planner-telemetry");
+const learning_ranker_1 = require("./learning-ranker");
+const repair_ranker_1 = require("./repair-ranker");
+const analytics_1 = require("./analytics");
+// ── Test setup ──
+const EVO_DIR = path.resolve(__dirname, "..", "test-ranking-evolution");
+process.env.PROGMUNE_PROJECT_DIR = EVO_DIR;
+fs.mkdirSync(EVO_DIR, { recursive: true });
+fs.mkdirSync(path.join(EVO_DIR, ".progmune_corpus", "telemetry"), { recursive: true });
+fs.mkdirSync(path.join(EVO_DIR, ".progmune_corpus", "lifecycles"), { recursive: true });
+const ctx = {
+    protocol: "FileProtocol",
+    currentState: ["FILE_OPEN"],
+    targetState: [],
+    violationType: "resource_leak",
+    constraints: [],
+    rules: new Map(),
+};
+function makeCandidate(id, source, actions) {
+    return {
+        id,
+        source,
+        actions: actions.map(fn => ({ kind: "call", function: fn, args: [] })),
+        explanation: `${id}: ${actions.join(" → ")}`,
+    };
+}
+(0, vitest_1.describe)("Ranking Evolution", () => {
+    (0, vitest_1.it)("accepted repairs rise over time (self-improving loop)", () => {
+        const runId = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+        const evoPath = path.join(EVO_DIR, ".progmune_corpus", "telemetry", `evo-${runId}.jsonl`);
+        const t = new planner_telemetry_1.PlannerTelemetry(evoPath);
+        const fpA = (0, planner_telemetry_1.candidateFingerprint)(`fp-${runId}`, ["open_file", "write_file", "close_file"], "resource_leak");
+        const fpB = (0, planner_telemetry_1.candidateFingerprint)(`fp-${runId}`, ["atomic_write"], "resource_leak");
+        // Use weights that favor historical success (learning test — not goal-match)
+        const base = (0, repair_ranker_1.createLinearRanker)({ safety: 0.4, successRate: 0.3, performance: 0.2, auditability: 0.1, goalMatch: 0 });
+        const learner = new learning_ranker_1.LearningRanker(base, t);
+        // Two candidates: A (safe) and B (fast)
+        const safeA = makeCandidate("safe", "protocol", ["open_file", "write_file", "close_file"]);
+        const fastB = makeCandidate("fast", "corpus", ["atomic_write"]);
+        const safeFeatures = {
+            protocolSafety: 1.0, historicalSuccessRate: 0.5, actionCount: 3,
+            latencyCost: 0.6, auditability: 0.8, corpusEvidence: 0, source: "protocol",
+            goalMatch: 0,
+        };
+        const fastFeatures = {
+            protocolSafety: 0.7, historicalSuccessRate: 0.99, actionCount: 1,
+            latencyCost: 0.1, auditability: 0.5, corpusEvidence: 42, source: "corpus",
+            goalMatch: 0,
+        };
+        // ── Phase 1: A accepted 90 times, B accepted 10 times ──
+        for (let i = 0; i < 90; i++) {
+            const id = t.recordDecision({
+                goal: "safely write config file",
+                protocol: "FileProtocol",
+                violationType: "resource_leak",
+                candidates: [
+                    { candidateId: fpA, source: "protocol", evidenceSources: ["protocol"], actions: ["open_file", "write_file", "close_file"], explanation: "safe" },
+                    { candidateId: fpB, source: "corpus", evidenceSources: ["corpus"], actions: ["atomic_write"], explanation: "fast" },
+                ],
+                selectedCandidateId: fpA,
+            });
+            t.recordFeedback(id, {
+                decision: "accepted",
+                executionResult: { success: true, violations: [] },
+                timestamp: Date.now(),
+            });
+        }
+        for (let i = 0; i < 10; i++) {
+            const id = t.recordDecision({
+                goal: "quick config update",
+                protocol: "FileProtocol",
+                violationType: "resource_leak",
+                candidates: [
+                    { candidateId: fpA, source: "protocol", evidenceSources: ["protocol"], actions: ["open_file", "write_file", "close_file"], explanation: "safe" },
+                    { candidateId: fpB, source: "corpus", evidenceSources: ["corpus"], actions: ["atomic_write"], explanation: "fast" },
+                ],
+                selectedCandidateId: fpB,
+            });
+            // B accepted but only 30% execution success → effective reward penalized
+            const execOk = i < 3;
+            t.recordFeedback(id, {
+                decision: "accepted",
+                executionResult: { success: execOk, violations: execOk ? [] : ["resource_leak"] },
+                timestamp: Date.now(),
+            });
+        }
+        // After phase 1: A should rank above B (A has higher effective reward)
+        const ctx1 = { protocol: `fp-${runId}`, violationType: "resource_leak" };
+        const ranked1 = learner.rank([safeA, fastB], [safeFeatures, fastFeatures], ctx1);
+        (0, vitest_1.expect)(ranked1[0].id).toBe("safe");
+        (0, vitest_1.expect)(ranked1[0].acceptance).toBeGreaterThan(0.8);
+        (0, vitest_1.expect)(ranked1[0].effectiveReward).toBe(1.0);
+        // Verify TelemetryIndex stats
+        const statsA1 = t.getCandidateStats(fpA);
+        (0, vitest_1.expect)(statsA1.accepted).toBe(90);
+        (0, vitest_1.expect)(statsA1.executionSuccess).toBe(90);
+        const statsB1 = t.getCandidateStats(fpB);
+        (0, vitest_1.expect)(statsB1.accepted).toBe(10);
+        (0, vitest_1.expect)(statsB1.executionFailure).toBe(7);
+        // ── Phase 2: B gets 100 more accepts → overtakes A ──
+        for (let i = 0; i < 100; i++) {
+            const id = t.recordDecision({
+                goal: "quick config update",
+                protocol: "FileProtocol",
+                violationType: "resource_leak",
+                candidates: [
+                    { candidateId: fpA, source: "protocol", evidenceSources: ["protocol"], actions: ["open_file", "write_file", "close_file"], explanation: "safe" },
+                    { candidateId: fpB, source: "corpus", evidenceSources: ["corpus"], actions: ["atomic_write"], explanation: "fast" },
+                ],
+                selectedCandidateId: fpB,
+            });
+            t.recordFeedback(id, {
+                decision: "accepted",
+                executionResult: { success: true, violations: [] },
+                timestamp: Date.now(),
+            });
+            // also record execution results for B
+            t.recordExecutionResult(id, true, [], 3);
+        }
+        // After phase 2: B should overtake A (110 accepts, 103 execution successes)
+        const ranked2 = learner.rank([safeA, fastB], [safeFeatures, fastFeatures], { protocol: `fp-${runId}`, violationType: "resource_leak" });
+        (0, vitest_1.expect)(ranked2[0].id).toBe("fast");
+        (0, vitest_1.expect)(ranked2[0].acceptance).toBeGreaterThan(0.9);
+        (0, vitest_1.expect)(ranked2[0].effectiveReward).toBeGreaterThan(0.9);
+        // Verify stats after evolution (>= because disk persistence may accumulate)
+        const statsB2 = t.getCandidateStats(fpB);
+        (0, vitest_1.expect)(statsB2.accepted).toBeGreaterThanOrEqual(110);
+        (0, vitest_1.expect)(statsB2.executionSuccess).toBeGreaterThanOrEqual(103);
+        // Adoption rate KPI
+        const adoptionRate = (0, analytics_1.getRepairAdoptionRate)(t);
+        (0, vitest_1.expect)(adoptionRate).toBe(1.0); // 200/200
+    });
+    (0, vitest_1.it)("rejected repairs sink in ranking", () => {
+        const t = new planner_telemetry_1.PlannerTelemetry(path.join(EVO_DIR, ".progmune_corpus", "telemetry", `sink-${Date.now()}.jsonl`));
+        const learner = new learning_ranker_1.LearningRanker((0, repair_ranker_1.createLinearRanker)(), t);
+        const good = makeCandidate("good", "protocol", ["verify_password", "generate_jwt"]);
+        const bad = makeCandidate("bad", "antibody", ["skip_auth"]);
+        const goodFp = (0, planner_telemetry_1.candidateFingerprint)("AuthProtocol", ["verify_password", "generate_jwt"], "missing_prerequisite");
+        const badFp = (0, planner_telemetry_1.candidateFingerprint)("AuthProtocol", ["skip_auth"], "missing_prerequisite");
+        const features = {
+            protocolSafety: 0.8, historicalSuccessRate: 0.5, actionCount: 2,
+            latencyCost: 0.3, auditability: 0.7, corpusEvidence: 0, source: "protocol",
+        };
+        // Good: accepted 50 times
+        for (let i = 0; i < 50; i++) {
+            const id = t.recordDecision({
+                goal: "authenticate user",
+                protocol: "AuthProtocol",
+                violationType: "missing_prerequisite",
+                candidates: [
+                    { candidateId: goodFp, source: "protocol", evidenceSources: ["protocol"], actions: ["verify_password", "generate_jwt"], explanation: "proper auth" },
+                    { candidateId: badFp, source: "antibody", evidenceSources: ["antibody"], actions: ["skip_auth"], explanation: "skip auth" },
+                ],
+                selectedCandidateId: goodFp,
+            });
+            t.recordFeedback(id, { decision: "accepted", timestamp: Date.now() });
+        }
+        // Bad: rejected 50 times
+        for (let i = 0; i < 50; i++) {
+            const id = t.recordDecision({
+                goal: "authenticate user",
+                protocol: "AuthProtocol",
+                violationType: "missing_prerequisite",
+                candidates: [
+                    { candidateId: goodFp, source: "protocol", evidenceSources: ["protocol"], actions: ["verify_password", "generate_jwt"], explanation: "proper auth" },
+                    { candidateId: badFp, source: "antibody", evidenceSources: ["antibody"], actions: ["skip_auth"], explanation: "skip auth" },
+                ],
+                selectedCandidateId: badFp,
+            });
+            t.recordFeedback(id, { decision: "rejected", timestamp: Date.now() });
+        }
+        const ranked = learner.rank([good, bad], [features, { ...features, source: "antibody" }], { protocol: "AuthProtocol", violationType: "missing_prerequisite" });
+        (0, vitest_1.expect)(ranked[0].id).toBe("good");
+        (0, vitest_1.expect)(ranked[1].acceptance).toBeLessThan(0.2); // ~0%
+        // Verify rejection stats
+        (0, vitest_1.expect)(t.getCandidateStats(badFp).rejected).toBe(50);
+    });
+    (0, vitest_1.it)("execution failure reduces effective reward", () => {
+        const t = new planner_telemetry_1.PlannerTelemetry(path.join(EVO_DIR, ".progmune_corpus", "telemetry", `execfail-${Date.now()}.jsonl`));
+        const learner = new learning_ranker_1.LearningRanker((0, repair_ranker_1.createLinearRanker)(), t);
+        const safe = makeCandidate("safe", "protocol", ["open_file", "write_file", "close_file"]);
+        const leaky = makeCandidate("leaky", "corpus", ["open_file", "write_file"]); // missing close
+        const safeFp = (0, planner_telemetry_1.candidateFingerprint)("FileProtocol", ["open_file", "write_file", "close_file"], "resource_leak");
+        const leakyFp = (0, planner_telemetry_1.candidateFingerprint)("FileProtocol", ["open_file", "write_file"], "resource_leak");
+        const features = {
+            protocolSafety: 0.8, historicalSuccessRate: 0.5, actionCount: 2,
+            latencyCost: 0.3, auditability: 0.7, corpusEvidence: 0, source: "protocol",
+        };
+        // Both accepted 50 times, but leaky always fails at execution
+        for (let i = 0; i < 50; i++) {
+            const safeId = t.recordDecision({
+                goal: "write file",
+                protocol: "FileProtocol",
+                violationType: "resource_leak",
+                candidates: [
+                    { candidateId: safeFp, source: "protocol", evidenceSources: ["protocol"], actions: ["open_file", "write_file", "close_file"], explanation: "safe" },
+                    { candidateId: leakyFp, source: "corpus", evidenceSources: ["corpus"], actions: ["open_file", "write_file"], explanation: "fast but leaky" },
+                ],
+                selectedCandidateId: safeFp,
+            });
+            t.recordFeedback(safeId, {
+                decision: "accepted",
+                executionResult: { success: true, violations: [] },
+                timestamp: Date.now(),
+            });
+            const leakyId = t.recordDecision({
+                goal: "write file",
+                protocol: "FileProtocol",
+                violationType: "resource_leak",
+                candidates: [
+                    { candidateId: safeFp, source: "protocol", evidenceSources: ["protocol"], actions: ["open_file", "write_file", "close_file"], explanation: "safe" },
+                    { candidateId: leakyFp, source: "corpus", evidenceSources: ["corpus"], actions: ["open_file", "write_file"], explanation: "fast but leaky" },
+                ],
+                selectedCandidateId: leakyFp,
+            });
+            t.recordFeedback(leakyId, {
+                decision: "accepted",
+                executionResult: { success: false, violations: ["resource_leak"] },
+                timestamp: Date.now(),
+            });
+        }
+        const ranked = learner.rank([safe, leaky], [features, features], { protocol: "FileProtocol", violationType: "resource_leak" });
+        // Safe ranks higher despite equal acceptance (execution success matters)
+        (0, vitest_1.expect)(ranked[0].id).toBe("safe");
+        // Safe has higher effectiveReward
+        (0, vitest_1.expect)(ranked[0].effectiveReward).toBeGreaterThan(ranked[1].effectiveReward);
+        // Safe: acceptance=1.0, execution=1.0 → effectiveReward=1.0
+        // Leaky: acceptance=1.0, execution=0.0 → effectiveReward=0.5
+        (0, vitest_1.expect)(ranked[0].effectiveReward).toBe(1.0);
+        (0, vitest_1.expect)(ranked[1].effectiveReward).toBe(0.5);
+        // Verify stats
+        const safeStats = t.getCandidateStats(safeFp);
+        (0, vitest_1.expect)(safeStats.accepted).toBe(50);
+        (0, vitest_1.expect)(safeStats.executionSuccess).toBe(50);
+        (0, vitest_1.expect)(safeStats.executionFailure).toBe(0);
+        const leakyStats = t.getCandidateStats(leakyFp);
+        (0, vitest_1.expect)(leakyStats.accepted).toBe(50);
+        (0, vitest_1.expect)(leakyStats.executionSuccess).toBe(0);
+        (0, vitest_1.expect)(leakyStats.executionFailure).toBe(50);
+    });
+});

package/dist/ledger/accountability.js

@@ -0,0 +1,322 @@
+"use strict";
+/**
+ * Phase 10: Accountability Ledger
+ *
+ * Builds an actor-attributed chain of custody on top of the
+ * provenance chain. Maps technical events to accountable actors,
+ * identifies custody gaps, and computes the full AI supply chain
+ * from human intent through AI generation to production deployment.
+ *
+ * Usage:
+ *   buildAccountabilityChain(sessionId, humanActor?)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAccountabilityChain = buildAccountabilityChain;
+exports.verifyAccountabilityChain = verifyAccountabilityChain;
+const crypto = __importStar(require("crypto"));
+const chain_builder_1 = require("./chain-builder");
+const signatures_1 = require("./signatures");
+// ── Core Builder ──
+function shortHash(data) {
+    return crypto.createHash("sha256").update(data).digest("hex").slice(0, 16);
+}
+function hashAccountabilityEvent(index, actorId, actorType, step, artifact, prevHash, timestamp, result) {
+    return shortHash(`${index}|${actorId}|${actorType}|${step}|${artifact}|${prevHash}|${timestamp}|${result}`);
+}
+function computeActorType(provEvent) {
+    const actor = provEvent.actor || "";
+    if (actor === "human")
+        return "human";
+    if (actor === "llm")
+        return "llm";
+    if (actor === "validator" || actor === "system")
+        return "validator";
+    if (actor === "planner")
+        return "llm"; // planner = LLM-driven
+    if (actor === "antibody")
+        return "validator"; // antibody = automated
+    return "validator";
+}
+function computeActorLabel(provEvent, options) {
+    const step = provEvent.step;
+    const actor = provEvent.actor || "";
+    const timestamp = provEvent.timestamp || "";
+    // Human actors from options
+    if (step === "generation" && options.author) {
+        return {
+            actorId: options.author.id,
+            actorType: "human",
+            actorLabel: `${options.author.name} (${options.author.id}, ${options.author.role})`,
+        };
+    }
+    if (step === "approval" && options.approver) {
+        return {
+            actorId: options.approver.id,
+            actorType: "reviewer",
+            actorLabel: `${options.approver.name} (${options.approver.id}, approved)`,
+        };
+    }
+    if (step === "deploy" && options.deployer) {
+        return {
+            actorId: options.deployer.id,
+            actorType: "deployer",
+            actorLabel: `${options.deployer.name} (${options.deployer.id})`,
+        };
+    }
+    // Fallback: infer from provenance actor string
+    const actorType = computeActorType(provEvent);
+    let actorId = "";
+    let actorLabel = "";
+    switch (actorType) {
+        case "llm":
+            actorId = `llm:${actor}@${timestamp.slice(0, 10)}`;
+            actorLabel = `${actor} (LLM)`;
+            break;
+        case "validator":
+            actorId = `system:progmune-ssg@${timestamp.slice(0, 10)}`;
+            actorLabel = `Progmune Validator (SSG)`;
+            break;
+        case "human":
+            actorId = `human:${actor}@${timestamp.slice(0, 10)}`;
+            actorLabel = `${actor} (Human)`;
+            break;
+        case "reviewer":
+            actorId = `reviewer:${actor}@${timestamp.slice(0, 10)}`;
+            actorLabel = `${actor} (Reviewer)`;
+            break;
+        case "deployer":
+            actorId = `deployer:${actor}@${timestamp.slice(0, 10)}`;
+            actorLabel = `${actor} (Deployer)`;
+            break;
+        default:
+            actorId = `unknown:${actor}@${timestamp.slice(0, 10)}`;
+            actorLabel = `${actor}`;
+    }
+    return { actorId, actorType, actorLabel };
+}
+// ── Main Entry Point ──
+function buildAccountabilityChain(sessionId, options = {}) {
+    // 1. Build the underlying provenance chain
+    const provChain = (0, chain_builder_1.buildProvenanceChain)(sessionId);
+    // 2. Convert each provenance event to an accountability event
+    const events = [];
+    let prevHash = "";
+    const custodyGaps = [];
+    for (const provEvent of provChain.events) {
+        const { actorId, actorType, actorLabel } = computeActorLabel(provEvent, options);
+        const action = describeAction(provEvent);
+        const eventHash = hashAccountabilityEvent(provEvent.index, actorId, actorType, provEvent.step, provEvent.artifact, prevHash, provEvent.timestamp, provEvent.result);
+        // Check custody gap: any event without verified actor identity
+        const hasGap = actorId.startsWith("unknown:") ||
+            (actorType === "human" && !options.author && !options.approver);
+        custodyGaps.push(hasGap);
+        // Try to sign the event
+        let signature;
+        try {
+            const payload = (0, signatures_1.buildSignPayload)(provEvent.index, actorId, provEvent.step, provEvent.artifact, provEvent.timestamp, provEvent.result, prevHash);
+            const sigResult = (0, signatures_1.trySign)(actorId, payload);
+            if (sigResult)
+                signature = sigResult.signature;
+        }
+        catch { /* signing is best-effort */ }
+        const aev = {
+            index: provEvent.index,
+            step: provEvent.step,
+            timestamp: provEvent.timestamp,
+            actorId,
+            actorType,
+            actorLabel,
+            artifact: provEvent.artifact,
+            action,
+            hash: eventHash,
+            prevHash,
+            result: provEvent.result,
+            signature,
+            detail: provEvent.detail,
+        };
+        events.push(aev);
+        prevHash = eventHash;
+    }
+    // 3. Add explicit human events from options (if not already in chain)
+    if (options.author && events.length > 0) {
+        // Prepend human author event
+        const humanEvent = makeHumanEvent("author", options.author, events[0].hash, events.length);
+        events.unshift(humanEvent);
+        // Recompute hashes forward
+        recomputeChainHashes(events);
+    }
+    if (options.reviewers && events.length > 0) {
+        // Insert reviewer events after validation
+        let valIdx = -1;
+        for (let i = events.length - 1; i >= 0; i--) {
+            if (events[i].step === "validation" || events[i].step === "repair") {
+                valIdx = i;
+                break;
+            }
+        }
+        const insertIdx = valIdx >= 0 ? valIdx + 1 : events.length;
+        for (const reviewer of options.reviewers) {
+            const prev = insertIdx > 0 ? events[insertIdx - 1].hash : "";
+            const re = makeHumanEvent("reviewer", reviewer, prev, insertIdx);
+            events.splice(insertIdx, 0, re);
+        }
+        recomputeChainHashes(events);
+    }
+    if (options.approver && events.length > 0) {
+        // Add approval event before deploy
+        const depIdx = events.findIndex((e) => e.step === "deploy");
+        const insertIdx = depIdx >= 0 ? depIdx : events.length;
+        const prev = insertIdx > 0 ? events[insertIdx - 1].hash : "";
+        const ae = makeHumanEvent("approver", options.approver, prev, insertIdx);
+        events.splice(insertIdx, 0, ae);
+        recomputeChainHashes(events);
+    }
+    // 4. Compute chain hash and stats
+    const chainHash = computeAccountabilityChainHash(events);
+    const humanEvents = events.filter((e) => e.actorType === "human" || e.actorType === "reviewer").length;
+    const aiEvents = events.filter((e) => e.actorType === "llm").length;
+    const autoEvents = events.filter((e) => e.actorType === "validator" || e.actorType === "deployer").length;
+    const hasGap = custodyGaps.some(Boolean);
+    return {
+        sessionId: provChain.sessionId,
+        intent: provChain.intent,
+        events,
+        chainHash,
+        integrity: provChain.integrity,
+        custodyGap: hasGap,
+        totalEvents: events.length,
+        humanEvents,
+        aiEvents,
+        automatedEvents: autoEvents,
+    };
+}
+// ── Helpers ──
+function describeAction(ev) {
+    switch (ev.step) {
+        case "generation":
+            return `Generated ${ev.artifact}`;
+        case "validation":
+            return `Validated ${ev.artifact}`;
+        case "repair":
+            return `Repaired ${ev.artifact}`;
+        case "approval":
+            return `Approved ${ev.artifact}`;
+        case "deploy":
+            return `Deployed ${ev.artifact}`;
+        default:
+            return ev.step;
+    }
+}
+function makeHumanEvent(role, human, prevHash, index) {
+    const step = role === "author" ? "generation" : role === "reviewer" ? "approval" : "approval";
+    const timestamp = new Date().toISOString();
+    const eventHash = hashAccountabilityEvent(index, human.id, "human", step, `intent: ${human.role}`, prevHash, timestamp, "approved");
+    return {
+        index,
+        step: step,
+        timestamp,
+        actorId: human.id,
+        actorType: role === "author" ? "human" : "reviewer",
+        actorLabel: `${human.name} (${human.id}, ${human.role})`,
+        artifact: `Intent from ${human.name}`,
+        action: role === "author" ? "Initiated code generation"
+            : role === "reviewer" ? "Reviewed and approved"
+                : "Approved deployment",
+        hash: eventHash,
+        prevHash,
+        result: "approved",
+    };
+}
+function recomputeChainHashes(events) {
+    let ph = "";
+    for (let i = 0; i < events.length; i++) {
+        events[i].index = i;
+        events[i].prevHash = ph;
+        events[i].hash = hashAccountabilityEvent(i, events[i].actorId, events[i].actorType, events[i].step, events[i].artifact, ph, events[i].timestamp, events[i].result);
+        ph = events[i].hash;
+    }
+}
+function computeAccountabilityChainHash(events) {
+    return shortHash(events.map((e) => e.hash).join(""));
+}
+// ── Verify accountability chain integrity ──
+function verifyAccountabilityChain(chain) {
+    let ph = "";
+    let unsignedCount = 0;
+    let signedCount = 0;
+    for (const e of chain.events) {
+        // 1. Verify hash chain
+        const recomputed = hashAccountabilityEvent(e.index, e.actorId, e.actorType, e.step, e.artifact, ph, e.timestamp, e.result);
+        if (recomputed !== e.hash) {
+            return {
+                valid: false,
+                brokenAt: e.index,
+                detail: `Hash mismatch at event ${e.index}: expected ${recomputed}, got ${e.hash}`,
+                unsignedCount, signedCount,
+            };
+        }
+        // 2. Verify signature (if present)
+        if (e.signature) {
+            try {
+                const { verifySignature, loadPublicKey } = require("./signatures");
+                const payload = (0, signatures_1.buildSignPayload)(e.index, e.actorId, e.step, e.artifact, e.timestamp, e.result, e.prevHash);
+                const pubKey = loadPublicKey(e.actorId);
+                if (pubKey) {
+                    const verification = verifySignature(payload, e.signature, pubKey);
+                    e.signatureVerified = verification.valid;
+                    if (!verification.valid) {
+                        return {
+                            valid: false,
+                            brokenAt: e.index,
+                            detail: `Signature verification failed at event ${e.index}: ${verification.detail}`,
+                            unsignedCount, signedCount,
+                        };
+                    }
+                }
+                signedCount++;
+            }
+            catch { /* skip signature check if verification fails */ }
+        }
+        else {
+            unsignedCount++;
+        }
+        ph = e.hash;
+    }
+    if (computeAccountabilityChainHash(chain.events) !== chain.chainHash) {
+        return { valid: false, detail: "Chain root hash mismatch", unsignedCount, signedCount };
+    }
+    return { valid: true, unsignedCount, signedCount };
+}