tamperward 2.22.0 → 2.23.0

package/dist/cli/index.js

@@ -198,15 +198,15 @@ function socketRefusal(paths, uid = currentUid()) {
   return null;
 }
 function forwardedEnv(env) {
-  const out2 = {};
+  const out3 = {};
   for (const k of FORWARDED_ENV) {
     const v = env[k];
-    if (typeof v === "string") out2[k] = v;
+    if (typeof v === "string") out3[k] = v;
   }
-  return out2;
+  return out3;
 }
 function exchange(paths, req2, timeoutMs) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve15) => {
     let done = false;
     let handedOff = false;
     let accepted = false;
@@ -217,7 +217,7 @@ function exchange(paths, req2, timeoutMs) {
       done = true;
       clearTimeout(timer);
       sock.destroy();
-      resolve11(value);
+      resolve15(value);
     };
     const sock = createConnection(paths.socket);
     const timer = setTimeout(() => finish(handedOff ? acceptedFailure("timeout") : null), timeoutMs);
@@ -339,23 +339,23 @@ var init_lazy_deps = __esm({
 
 // src/policy.ts
 function applyVersionGates(rules, version, gates = BLOCK_SINCE) {
-  const out2 = { ...rules };
+  const out3 = { ...rules };
   for (const [rule, since] of Object.entries(gates)) {
-    if (since > version && out2[rule]?.severity === "block") {
-      out2[rule] = { ...out2[rule], severity: "warn" };
+    if (since > version && out3[rule]?.severity === "block") {
+      out3[rule] = { ...out3[rule], severity: "warn" };
     }
   }
-  return out2;
+  return out3;
 }
 function normalizeGlob(glob) {
   return glob.startsWith("/") ? glob.replace(/^\/+/, "") : glob;
 }
 function mergeRules(base, user) {
-  const out2 = { ...base };
+  const out3 = { ...base };
   for (const [name, cfg] of Object.entries(user ?? {})) {
-    out2[name] = { ...out2[name] ?? {}, ...cfg ?? {} };
+    out3[name] = { ...out3[name] ?? {}, ...cfg ?? {} };
   }
-  return out2;
+  return out3;
 }
 function hasControlChar(path) {
   return CONTROL.test(path);
@@ -411,12 +411,12 @@ function isIgnored(path, policy) {
   return matchesAny(path, policy.ignore);
 }
 function mergeProtected(base, user) {
-  const out2 = { ...base };
+  const out3 = { ...base };
   for (const [cat, globs4] of Object.entries(user ?? {})) {
-    const have = new Set(out2[cat] ?? []);
-    out2[cat] = [...out2[cat] ?? [], ...(globs4 ?? []).filter((g) => !have.has(g))];
+    const have = new Set(out3[cat] ?? []);
+    out3[cat] = [...out3[cat] ?? [], ...(globs4 ?? []).filter((g) => !have.has(g))];
   }
-  return out2;
+  return out3;
 }
 function defaultPolicy(version = 1) {
   const p = {
@@ -712,16 +712,16 @@ function unjudgeableFinding(cwd, rel) {
   };
 }
 function unjudgeableProtected(cwd, policy, changes) {
-  const out2 = [];
+  const out3 = [];
   const seen = /* @__PURE__ */ new Set();
   for (const c of changes) {
     if (c.kind !== "file" || c.op === "delete" || seen.has(c.path)) continue;
     seen.add(c.path);
     if (!isProtected(c.path, policy)) continue;
     const f = unjudgeableFinding(cwd, c.path);
-    if (f) out2.push(f);
+    if (f) out3.push(f);
   }
-  return out2;
+  return out3;
 }
 var READ_CAP, NO_META, O_READ;
 var init_disk = __esm({
@@ -903,7 +903,7 @@ function parseHunk(lines, start) {
   const oldLines = m[2] !== void 0 ? Number(m[2]) : 1;
   const newStart = Number(m[3]);
   const newLines = m[4] !== void 0 ? Number(m[4]) : 1;
-  const out2 = [];
+  const out3 = [];
   let oldLine = oldStart;
   let newLine = newStart;
   let i = start + 1;
@@ -914,20 +914,20 @@ function parseHunk(lines, start) {
     const tag = l[0];
     const content = l.slice(1);
     if (tag === "+") {
-      out2.push({ type: "add", content, oldLine: null, newLine });
+      out3.push({ type: "add", content, oldLine: null, newLine });
       newLine++;
     } else if (tag === "-") {
-      out2.push({ type: "del", content, oldLine, newLine: null });
+      out3.push({ type: "del", content, oldLine, newLine: null });
       oldLine++;
     } else if (tag === " ") {
-      out2.push({ type: "context", content, oldLine, newLine });
+      out3.push({ type: "context", content, oldLine, newLine });
       oldLine++;
       newLine++;
     } else {
       break;
     }
   }
-  return { hunk: { oldStart, oldLines, newStart, newLines, lines: out2 }, next: i };
+  return { hunk: { oldStart, oldLines, newStart, newLines, lines: out3 }, next: i };
 }
 var HUNK_RE, C_ESCAPES;
 var init_parse = __esm({
@@ -1178,13 +1178,13 @@ function diffWorktreeWithUntracked(opts = {}, keepIgnored) {
   return [...tracked, ...untracked, ...ignored];
 }
 function hiddenTrackedPaths(opts = {}) {
-  const out2 = [];
+  const out3 = [];
   for (const entry of git(["ls-files", "-v", "-z"], opts.cwd).split("\0")) {
     if (entry.length < 3 || entry[1] !== " ") continue;
     const tag = entry[0];
-    if (tag === "S" || tag !== tag.toUpperCase()) out2.push(entry.slice(2));
+    if (tag === "S" || tag !== tag.toUpperCase()) out3.push(entry.slice(2));
   }
-  return out2;
+  return out3;
 }
 var DIFF_ARGS, SKIP_DIRS, IGNORED_LS;
 var init_build = __esm({
@@ -1340,7 +1340,7 @@ var init_finding = __esm({
 
 // src/detectors/command.ts
 function segments(raw) {
-  const out2 = [];
+  const out3 = [];
   let single = false;
   let double = false;
   let last = 0;
@@ -1369,12 +1369,12 @@ function segments(raw) {
     else if (ch === "|" && prev !== ">") len = 1;
     else if (ch === "&" && prev !== ">" && next !== ">") len = 1;
     if (!len) continue;
-    out2.push(raw.slice(last, i));
+    out3.push(raw.slice(last, i));
     i += len - 1;
     last = i + 1;
   }
-  out2.push(raw.slice(last));
-  return out2.map((s) => s.trim()).filter(Boolean);
+  out3.push(raw.slice(last));
+  return out3.map((s) => s.trim()).filter(Boolean);
 }
 function tokens(seg) {
   return seg.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g) ?? [];
@@ -1409,15 +1409,15 @@ var init_command = __esm({
 
 // src/detectors/no-verify.ts
 function gitArgs(toks, sub) {
-  const out2 = [];
+  const out3 = [];
   for (let j = toks.indexOf(sub) + 1; j < toks.length; j++) {
     if (TAKES_VALUE.has(toks[j])) {
       j++;
       continue;
     }
-    out2.push(toks[j]);
+    out3.push(toks[j]);
   }
-  return out2;
+  return out3;
 }
 var RULE, RAW, ENV, SKIP, SKIP_WHY, ENV_PREFIX, ASSIGNMENT, HOOK_SUBCOMMANDS, NO_VERIFY, NO_HOOKS, SHORT_N, TAKES_VALUE, noVerify;
 var init_no_verify = __esm({
@@ -1452,7 +1452,7 @@ var init_no_verify = __esm({
       surface: ["command"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "command") continue;
           let carriedSkip = null;
@@ -1498,7 +1498,7 @@ var init_no_verify = __esm({
             }
             if (!why && toks.includes(NO_HOOKS)) why = "--no-hooks disables hook execution";
             if (why) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE, policy, {
                   message: `Command bypasses git hooks: ${why}.`,
                   evidence,
@@ -1508,7 +1508,7 @@ var init_no_verify = __esm({
             }
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -1705,7 +1705,7 @@ function unmatchedAfter(before, after) {
       lcs[i2][j2] = same(i2, j2) ? lcs[i2 + 1][j2 + 1] + 1 : Math.max(lcs[i2 + 1][j2], lcs[i2][j2 + 1]);
     }
   }
-  const out2 = [];
+  const out3 = [];
   let i = 0;
   let j = 0;
   while (j < m) {
@@ -1715,11 +1715,11 @@ function unmatchedAfter(before, after) {
     } else if (i < n && lcs[i + 1][j] >= lcs[i][j + 1]) {
       i++;
     } else {
-      out2.push(after[j]);
+      out3.push(after[j]);
       j++;
     }
   }
-  return out2;
+  return out3;
 }
 var RULE2, DECLARATION, OUT_OF_BUDGET_PATH, GENERATED_HEADER, HEADER_LINES, tsCastGrowth;
 var init_ts_cast_growth = __esm({
@@ -1740,7 +1740,7 @@ var init_ts_cast_growth = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "file" || c.op === "delete" || c.after == null) continue;
           if (!isCodeFile(c.path) || outOfBudget(c.path, c.before)) continue;
@@ -1758,7 +1758,7 @@ var init_ts_cast_growth = __esm({
           const parts = [];
           if (dType > 0) parts.push(`+${dType} type assertion${dType === 1 ? "" : "s"} (\`as T\` / \`<T>x\`)`);
           if (dNonNull > 0) parts.push(`+${dNonNull} non-null assertion${dNonNull === 1 ? "" : "s"} (\`x!\`)`);
-          out2.push(
+          out3.push(
             makeFinding(RULE2, policy, {
               file: c.path,
               ...first ? { line: first.line } : {},
@@ -1769,7 +1769,7 @@ var init_ts_cast_growth = __esm({
             })
           );
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -1845,7 +1845,7 @@ var init_ts_any_cast = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "file" || !isCodeFile(c.path)) continue;
           const inTest = protectedCategory(c.path, policy) === "tests";
@@ -1864,7 +1864,7 @@ var init_ts_any_cast = __esm({
             if (dSuppr > 0) blockReasons.push("@ts-ignore/@ts-expect-error/@ts-nocheck suppression");
             if (dJsdoc > 0) blockReasons.push("JSDoc `@type {any}` cast");
             if (blockReasons.length) {
-              out2.push(
+              out3.push(
                 makeFinding(inTest ? WARN_RULE : BLOCK_RULE, policy, {
                   file: c.path,
                   message: inTest ? `Type-checker escape in a test file: ${blockReasons.join("; ")} (test infrastructure \u2014 flagged, not blocked).` : `Type safety discarded: ${blockReasons.join("; ")}.`,
@@ -1875,7 +1875,7 @@ var init_ts_any_cast = __esm({
               );
             }
             if (dBroad > 0) {
-              out2.push(
+              out3.push(
                 makeFinding(WARN_RULE, policy, {
                   file: c.path,
                   message: `Type laundered to \`any\`: introduces ${dBroad} new \`any\`-typed value(s) in a type/generic position (e.g. : any, Record<string, any>).`,
@@ -1890,7 +1890,7 @@ var init_ts_any_cast = __esm({
           const jsdocCast = JS_FILE.test(c.path) ? new RegExp(JSDOC_ANY_CAST.source) : null;
           for (const l of addedLines(c)) {
             if (NARROW_LINE.test(l.content) || lineHasDoubleCast(l.content) || jsdocCast && jsdocCast.test(l.content)) {
-              out2.push(
+              out3.push(
                 makeFinding(inTest ? WARN_RULE : BLOCK_RULE, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
@@ -1901,7 +1901,7 @@ var init_ts_any_cast = __esm({
                 })
               );
             } else if (BROAD_LINE.test(l.content)) {
-              out2.push(
+              out3.push(
                 makeFinding(WARN_RULE, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
@@ -1914,7 +1914,7 @@ var init_ts_any_cast = __esm({
             }
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -1980,7 +1980,7 @@ var init_lint_suppression = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "file") continue;
           const lang = langOf(c.path);
@@ -1991,7 +1991,7 @@ var init_lint_suppression = __esm({
             for (const p of patterns) {
               const m = p.re.exec(l.content);
               if (!m || insideStringLiteral(l.content, m.index, lang)) continue;
-              out2.push(
+              out3.push(
                 makeFinding(RULE3, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
@@ -2004,7 +2004,7 @@ var init_lint_suppression = __esm({
             }
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -2029,13 +2029,13 @@ function scriptKind2(path) {
   return ts.ScriptKind.TS;
 }
 function addedLineNumbers(c) {
-  const out2 = /* @__PURE__ */ new Set();
+  const out3 = /* @__PURE__ */ new Set();
   for (const h of c.hunks) {
     for (const line of h.lines) {
-      if (line.type === "add" && line.newLine != null) out2.add(line.newLine);
+      if (line.type === "add" && line.newLine != null) out3.add(line.newLine);
     }
   }
-  return out2;
+  return out3;
 }
 function moduleName(expr) {
   return ts.isStringLiteralLike(expr) ? expr.text : null;
@@ -2081,11 +2081,11 @@ function symbolAt(ctx, node) {
   return ctx.checker.getSymbolAtLocation(node) ?? null;
 }
 function importAliases(ctx) {
-  const out2 = /* @__PURE__ */ new Map();
+  const out3 = /* @__PURE__ */ new Map();
   const simpleAliases = [];
   const add = (id, causes = [id]) => {
     const sym = symbolAt(ctx, id);
-    if (sym) out2.set(sym, { causes });
+    if (sym) out3.set(sym, { causes });
   };
   for (const stmt of ctx.sf.statements) {
     if (ts.isImportDeclaration(stmt) && ts.isStringLiteralLike(stmt.moduleSpecifier)) {
@@ -2121,19 +2121,19 @@ function importAliases(ctx) {
     let changed = false;
     for (const alias of simpleAliases) {
       const localSym = symbolAt(ctx, alias.local);
-      if (!localSym || out2.has(localSym)) continue;
+      if (!localSym || out3.has(localSym)) continue;
       const sourceSym = symbolAt(ctx, alias.source);
-      const sourceBinding = sourceSym ? out2.get(sourceSym) : void 0;
+      const sourceBinding = sourceSym ? out3.get(sourceSym) : void 0;
       const implicitGlobal = sourceSym == null && JS_RUNNERS.has(alias.source.text);
       if (!sourceBinding && !implicitGlobal) continue;
-      out2.set(localSym, {
+      out3.set(localSym, {
         causes: [alias.local, ...sourceBinding?.causes ?? []]
       });
       changed = true;
     }
     if (!changed) break;
   }
-  return out2;
+  return out3;
 }
 function topLevelStaticStrings(ctx) {
   const pending = /* @__PURE__ */ new Map();
@@ -2454,7 +2454,7 @@ var init_test_skip = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "file") continue;
           if (!isProtected(c.path, policy, "tests")) continue;
@@ -2467,7 +2467,7 @@ var init_test_skip = __esm({
             astAuthoritative = analysis.authoritative;
             for (const hit of analysis.hits) {
               astHitLines.add(hit.line);
-              out2.push(
+              out3.push(
                 makeFinding(RULE4, policy, {
                   file: c.path,
                   line: hit.line,
@@ -2485,7 +2485,7 @@ var init_test_skip = __esm({
               if (astAuthoritative && p.astOwned) continue;
               if (comment && !p.comment) continue;
               if (matchesOutsideString(p, l.content, lang)) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE4, policy, {
                     file: c.path,
                     line: l.newLine ?? void 0,
@@ -2499,7 +2499,7 @@ var init_test_skip = __esm({
             }
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -2551,12 +2551,12 @@ function branchRefs(ctx) {
   if (hit !== void 0) return hit;
   let refs = null;
   try {
-    const out2 = execFileSync4("git", ["for-each-ref", "--format=%(refname:short)", "refs/heads", "refs/remotes"], {
+    const out3 = execFileSync4("git", ["for-each-ref", "--format=%(refname:short)", "refs/heads", "refs/remotes"], {
       cwd: ctx.cwd,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     });
-    refs = new Set(out2.split("\n").map((l) => l.trim()).filter(Boolean));
+    refs = new Set(out3.split("\n").map((l) => l.trim()).filter(Boolean));
   } catch {
     refs = null;
   }
@@ -2645,14 +2645,14 @@ function numericOf(e) {
   }
   return void 0;
 }
-function metricsOf(expr, resolve11) {
-  const obj = resolve11(expr);
+function metricsOf(expr, resolve15) {
+  const obj = resolve15(expr);
   if (!ts.isObjectLiteralExpression(obj)) return void 0;
-  const out2 = { values: {}, opaque: false };
+  const out3 = { values: {}, opaque: false };
   let any = false;
   for (const p of obj.properties) {
     if (ts.isSpreadAssignment(p)) {
-      out2.opaque = true;
+      out3.opaque = true;
       any = true;
       continue;
     }
@@ -2660,11 +2660,11 @@ function metricsOf(expr, resolve11) {
     const k = keyName(p.name);
     if (k === null || !isMetric(k)) continue;
     any = true;
-    const n = numericOf(resolve11(p.initializer));
-    if (n === void 0) out2.opaque = true;
-    else out2.values[k] = n;
+    const n = numericOf(resolve15(p.initializer));
+    if (n === void 0) out3.opaque = true;
+    else out3.values[k] = n;
   }
-  return any ? out2 : void 0;
+  return any ? out3 : void 0;
 }
 function underKey(node, key2) {
   for (let p = node.parent; p; p = p.parent) {
@@ -2706,17 +2706,17 @@ function parseThresholds(src) {
   const res = { paths: /* @__PURE__ */ new Map(), present: false, opaque: false };
   try {
     const sf = sourceOf(src);
-    const resolve11 = resolverFor(sf);
+    const resolve15 = resolverFor(sf);
     const visit = (node) => {
       if (ts.isPropertyAssignment(node)) {
         const key2 = keyName(node.name);
         if (key2 === "coverageThreshold" || key2 === "thresholds" && underKey(node, "coverage")) {
           res.present = true;
-          const init = resolve11(node.initializer);
+          const init = resolve15(node.initializer);
           if (!ts.isObjectLiteralExpression(init)) {
             res.opaque = true;
           } else {
-            const flat = metricsOf(init, resolve11);
+            const flat = metricsOf(init, resolve15);
             if (flat) res.global = merge(res.global, flat);
             for (const p of init.properties) {
               if (ts.isSpreadAssignment(p)) {
@@ -2730,7 +2730,7 @@ function parseThresholds(src) {
                 res.global = merge(res.global, { values: { branches: 100, functions: 100, lines: 100, statements: 100 }, opaque: false });
                 continue;
               }
-              const m = metricsOf(p.initializer, resolve11);
+              const m = metricsOf(p.initializer, resolve15);
               if (!m) continue;
               if (k === "global") res.global = merge(res.global, m);
               else res.paths.set(norm(k), m);
@@ -2763,18 +2763,18 @@ function parseLists(src) {
   const res = { collectFrom: null, collectKey: "collectCoverageFrom", ignore: [], opaqueCollect: false, opaqueIgnore: false };
   try {
     const sf = sourceOf(src);
-    const resolve11 = resolverFor(sf);
+    const resolve15 = resolverFor(sf);
     const visit = (node) => {
       if (ts.isPropertyAssignment(node)) {
         const k = keyName(node.name);
         const vitestCoverage = ownerKey(node) === "coverage";
         if (k === "collectCoverageFrom" || k === "include" && vitestCoverage) {
-          const { items, opaque } = literals(resolve11(node.initializer));
+          const { items, opaque } = literals(resolve15(node.initializer));
           res.collectFrom = items;
           res.collectKey = k === "include" ? "coverage.include" : k;
           if (opaque) res.opaqueCollect = true;
         } else if (k === "coveragePathIgnorePatterns" || k === "exclude" && vitestCoverage) {
-          const { items, opaque } = literals(resolve11(node.initializer));
+          const { items, opaque } = literals(resolve15(node.initializer));
           res.ignore.push(...items);
           if (opaque) res.opaqueIgnore = true;
         }
@@ -2790,13 +2790,13 @@ function parseSwitches(src) {
   const res = {};
   try {
     const sf = sourceOf(src);
-    const bool = (e) => e.kind === ts.SyntaxKind.TrueKeyword ? true : e.kind === ts.SyntaxKind.FalseKeyword ? false : void 0;
+    const bool2 = (e) => e.kind === ts.SyntaxKind.TrueKeyword ? true : e.kind === ts.SyntaxKind.FalseKeyword ? false : void 0;
     const visit = (node) => {
       if (ts.isPropertyAssignment(node)) {
         const k = keyName(node.name);
         const owner = ownerKey(node);
-        if (k === "enabled" && owner === "coverage") res.enabled = bool(node.initializer);
-        else if (k === "perFile" && owner === "thresholds" && underKey(node, "coverage")) res.perFile = bool(node.initializer);
+        if (k === "enabled" && owner === "coverage") res.enabled = bool2(node.initializer);
+        else if (k === "perFile" && owner === "thresholds" && underKey(node, "coverage")) res.perFile = bool2(node.initializer);
       }
       ts.forEachChild(node, visit);
     };
@@ -2808,30 +2808,30 @@ function parseSwitches(src) {
 function sectionText(src, key2) {
   try {
     const sf = sourceOf(src);
-    let out2 = "";
+    let out3 = "";
     const visit = (node) => {
-      if (out2) return;
+      if (out3) return;
       if (ts.isPropertyAssignment(node) && keyName(node.name) === key2 && ts.isObjectLiteralExpression(node.initializer)) {
-        out2 = node.initializer.getText(sf);
+        out3 = node.initializer.getText(sf);
         return;
       }
       ts.forEachChild(node, visit);
     };
     visit(sf);
-    return out2;
+    return out3;
   } catch {
     return "";
   }
 }
-function compareMetrics(scope, before, after, out2) {
+function compareMetrics(scope, before, after, out3) {
   if (!before) return;
   for (const m of METRICS) {
     const bv = before.values[m];
     if (bv === void 0) continue;
     const av = after?.values[m];
     if (av === void 0) {
-      if (!after?.opaque) out2.push(`${scope} ${m} threshold removed (was ${bv})`);
-    } else if (av < bv) out2.push(`${scope} ${m} threshold lowered ${bv} \u2192 ${av}`);
+      if (!after?.opaque) out3.push(`${scope} ${m} threshold removed (was ${bv})`);
+    } else if (av < bv) out3.push(`${scope} ${m} threshold lowered ${bv} \u2192 ${av}`);
   }
 }
 function overrideTargetExists(key2, configPath, ctx) {
@@ -2848,34 +2848,34 @@ function overrideTargetExists(key2, configPath, ctx) {
   return files.some((f) => f.startsWith(root) && m(f.slice(root.length)));
 }
 function weakenings(before, after, configPath, movedElsewhere, ctx) {
-  const out2 = [];
+  const out3 = [];
   if (before.present && !after.present) {
-    if (!movedElsewhere) out2.push("the coverage threshold gate was removed");
-    return out2;
+    if (!movedElsewhere) out3.push("the coverage threshold gate was removed");
+    return out3;
   }
-  if (after.opaque && !after.global && after.paths.size === 0) return out2;
-  compareMetrics("global", before.global, after.global, out2);
+  if (after.opaque && !after.global && after.paths.size === 0) return out3;
+  compareMetrics("global", before.global, after.global, out3);
   const paths = /* @__PURE__ */ new Set([...before.paths.keys(), ...after.paths.keys()]);
   for (const p of paths) {
     const scope = `required coverage for ${p}:`;
     const b = before.paths.get(p);
     const a = after.paths.get(p);
     if (b && a) {
-      compareMetrics(scope, b, a, out2);
+      compareMetrics(scope, b, a, out3);
     } else if (a) {
       const g = before.global;
       if (!g) continue;
       for (const m of METRICS) {
         const gv = g.values[m];
         const av = a.values[m];
-        if (gv !== void 0 && av !== void 0 && av < gv) out2.push(`${scope} ${m} threshold lowered ${gv} \u2192 ${av}`);
+        if (gv !== void 0 && av !== void 0 && av < gv) out3.push(`${scope} ${m} threshold lowered ${gv} \u2192 ${av}`);
       }
     } else if (b) {
       if (overrideTargetExists(p, configPath, ctx) === false) continue;
-      compareMetrics(scope, b, after.global, out2);
+      compareMetrics(scope, b, after.global, out3);
     }
   }
-  return out2;
+  return out3;
 }
 function sourceSamples(configPath, policy, ctx) {
   const files = trackedFiles(ctx);
@@ -2885,33 +2885,33 @@ function sourceSamples(configPath, policy, ctx) {
   return own.length ? own : CANONICAL_SOURCES;
 }
 function narrowings(before, after, sources) {
-  const out2 = [];
+  const out3 = [];
   if (before.collectFrom && after.collectFrom && !after.opaqueCollect && !before.opaqueCollect) {
     const pb = globList(before.collectFrom);
     const pa = globList(after.collectFrom);
     const dropped = sources.filter((s) => pb(s) && !pa(s));
     if (dropped.length) {
       const shown = dropped.slice(0, 3).map((d) => JSON.stringify(d)).join(", ");
-      out2.push(`${after.collectKey} no longer measures ${shown}${dropped.length > 3 ? ` (+${dropped.length - 3} more)` : ""}`);
+      out3.push(`${after.collectKey} no longer measures ${shown}${dropped.length > 3 ? ` (+${dropped.length - 3} more)` : ""}`);
     }
     const had2 = new Set(before.collectFrom);
     for (const g of after.collectFrom) {
       if (g.startsWith("!") && !had2.has(g) && !BENIGN_EXEMPTION.test(g) && !dropped.some((d) => globs([g.slice(1)])(d))) {
-        out2.push(`${after.collectKey} now exempts ${JSON.stringify(g)}`);
+        out3.push(`${after.collectKey} now exempts ${JSON.stringify(g)}`);
       }
     }
   }
   const had = new Set(before.ignore);
   for (const g of after.ignore) {
-    if (!had.has(g) && !BENIGN_EXEMPTION.test(g)) out2.push(`coverage now exempts ${JSON.stringify(g)} (coveragePathIgnorePatterns / coverage.exclude)`);
+    if (!had.has(g) && !BENIGN_EXEMPTION.test(g)) out3.push(`coverage now exempts ${JSON.stringify(g)} (coveragePathIgnorePatterns / coverage.exclude)`);
   }
-  return out2;
+  return out3;
 }
 function switchWeakenings(before, after) {
-  const out2 = [];
-  if (before.enabled === true && after.enabled === false) out2.push("coverage.enabled switched off \u2014 the thresholds are never checked");
-  if (before.perFile === true && after.perFile !== true) out2.push("thresholds.perFile removed \u2014 a single uncovered file now hides behind the aggregate");
-  return out2;
+  const out3 = [];
+  if (before.enabled === true && after.enabled === false) out3.push("coverage.enabled switched off \u2014 the thresholds are never checked");
+  if (before.perFile === true && after.perFile !== true) out3.push("thresholds.perFile removed \u2014 a single uncovered file now hides behind the aggregate");
+  return out3;
 }
 function* scopedLines(src) {
   const stack = [];
@@ -2927,25 +2927,25 @@ function* scopedLines(src) {
   }
 }
 function scopedKeys(src, key2) {
-  const out2 = [];
-  for (const [line, scope] of scopedLines(src)) if (key2.test(line)) out2.push(scope);
-  return out2;
+  const out3 = [];
+  for (const [line, scope] of scopedLines(src)) if (key2.test(line)) out3.push(scope);
+  return out3;
 }
 function numbersOf(src, key2, scoped = false) {
-  const out2 = [];
+  const out3 = [];
   for (const [line, inScope] of scopedLines(src)) {
     const scope = scoped ? inScope : "";
     if (key2.global) {
-      for (const m of line.matchAll(key2)) out2.push({ v: numOf(m[1]), scope });
+      for (const m of line.matchAll(key2)) out3.push({ v: numOf(m[1]), scope });
     } else {
       const m = line.match(key2);
-      if (m) out2.push({ v: numOf(m[1]), scope });
+      if (m) out3.push({ v: numOf(m[1]), scope });
     }
   }
-  return out2;
+  return out3;
 }
 function simpleWeakeningsOf(spec, before, after) {
-  const out2 = [];
+  const out3 = [];
   for (const k of spec.keys) {
     const bAll = numbersOf(before, k.key, spec.scoped);
     const aAll = numbersOf(after, k.key, spec.scoped);
@@ -2957,28 +2957,28 @@ function simpleWeakeningsOf(spec, before, after) {
       const a = aAll.filter((n) => n.scope === scope).map((n) => n.v).sort(desc);
       if (b.length === 0) continue;
       if (a.length === 0) {
-        if (spec.removable) out2.push(`${label} removed (was ${b.join(", ")})`);
+        if (spec.removable) out3.push(`${label} removed (was ${b.join(", ")})`);
         continue;
       }
       if (k.weakens === "lower") {
         for (let i = 0; i < b.length; i++) {
           const av = a[Math.min(i, a.length - 1)];
           if (lessThan(av, b[i])) {
-            out2.push(`${label} lowered ${b[i]} \u2192 ${av}`);
+            out3.push(`${label} lowered ${b[i]} \u2192 ${av}`);
             break;
           }
         }
       } else {
         const bMax = b[0];
         const aMax = a[0];
-        if (lessThan(bMax, aMax)) out2.push(`${label} raised ${bMax} \u2192 ${aMax} (a wider permitted drop)`);
+        if (lessThan(bMax, aMax)) out3.push(`${label} raised ${bMax} \u2192 ${aMax} (a wider permitted drop)`);
       }
     }
   }
-  return out2;
+  return out3;
 }
 function listEntries(src, key2) {
-  const out2 = [];
+  const out3 = [];
   const lines = src.split("\n");
   for (let i = 0; i < lines.length; i++) {
     const m = lines[i].match(key2);
@@ -2993,13 +2993,13 @@ function listEntries(src, key2) {
     }
     for (const e of rest.replace(/[[\]]/g, "").split(",")) {
       const v = e.trim().replace(/^(['"])(.*)\1$/, "$2");
-      if (v) out2.push(v);
+      if (v) out3.push(v);
     }
   }
-  return out2;
+  return out3;
 }
 function simpleNarrowings(path, before, after) {
-  const out2 = [];
+  const out3 = [];
   const spec = [
     [COVERAGE_PY, /^\s*omit\s*=\s*(.*)$/, "omit now exempts"],
     [CODECOV, /^ignore:\s*(.*)$/, "codecov now ignores"]
@@ -3007,27 +3007,27 @@ function simpleNarrowings(path, before, after) {
   for (const [file, key2, what] of spec) {
     if (!file.test(path)) continue;
     const had = new Set(listEntries(before, key2));
-    for (const e of listEntries(after, key2)) if (!had.has(e) && !BENIGN_EXEMPTION.test(e)) out2.push(`${what} ${JSON.stringify(e)}`);
+    for (const e of listEntries(after, key2)) if (!had.has(e) && !BENIGN_EXEMPTION.test(e)) out3.push(`${what} ${JSON.stringify(e)}`);
   }
   if (CODECOV.test(path)) {
     const off2 = (s) => new Set(s.split("\n").map((l) => l.match(/^\s*(project|patch):\s*off\b/)?.[1]).filter((x) => !!x));
     const had = off2(before);
-    for (const s of off2(after)) if (!had.has(s)) out2.push(`codecov status.${s} switched off`);
+    for (const s of off2(after)) if (!had.has(s)) out3.push(`codecov status.${s} switched off`);
     const informational = (s) => new Set(scopedKeys(s, /^\s*informational:\s*true\b/).filter((scope) => scope !== "patch" && scope !== "changes"));
     const was = informational(before);
-    for (const scope of informational(after)) if (!was.has(scope)) out2.push(`codecov ${scope || "project"} status informational: true added \u2014 the status can no longer fail`);
+    for (const scope of informational(after)) if (!was.has(scope)) out3.push(`codecov ${scope || "project"} status informational: true added \u2014 the status can no longer fail`);
   }
-  return out2;
+  return out3;
 }
 function simpleWeakenings(path, before, after) {
   const spec = SIMPLE_FILES.find((s) => s.file.test(path));
-  const out2 = spec ? simpleWeakeningsOf(spec, before, after) : [];
+  const out3 = spec ? simpleWeakeningsOf(spec, before, after) : [];
   if ((path.split("/").pop() ?? path) === "package.json") {
     const b = sectionText(before, "nyc");
     const a = sectionText(after, "nyc");
-    if (b && a) out2.push(...simpleWeakeningsOf({ file: /./, keys: NYC_KEYS, removable: false }, b, a).map((r) => `nyc ${r}`));
+    if (b && a) out3.push(...simpleWeakeningsOf({ file: /./, keys: NYC_KEYS, removable: false }, b, a).map((r) => `nyc ${r}`));
   }
-  return out2;
+  return out3;
 }
 function dirHasSpec(configPath, policy, ctx) {
   const files = trackedFiles(ctx);
@@ -3171,7 +3171,7 @@ var init_coverage_lowering = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy, _view, ctx) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "file") continue;
           if (!isProtected(c.path, policy, "config")) continue;
@@ -3188,7 +3188,7 @@ var init_coverage_lowering = __esm({
             reasons.push(...simpleWeakenings(c.path, c.before ?? "", c.after));
             reasons.push(...simpleNarrowings(c.path, c.before ?? "", c.after));
             for (const reason of reasons) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE5, policy, {
                   file: c.path,
                   message: `Coverage gate weakened: ${reason}.`,
@@ -3201,7 +3201,7 @@ var init_coverage_lowering = __esm({
             const before = c.before ?? "";
             const gated = isJsConfig(c.path) ? parseThresholds(before).present : simpleWeakenings(c.path, before, "").length > 0 || SIMPLE_FILES.some((s) => s.file.test(c.path) && s.keys.some((k) => numbersOf(before, k.key).length));
             if (gated && !gateMovedElsewhere(c, changes, policy)) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE5, policy, {
                   file: c.path,
                   message: "Coverage gate weakened: the coverage config was deleted.",
@@ -3215,7 +3215,7 @@ var init_coverage_lowering = __esm({
           const removed = removedLines(c);
           const removedCoverage = removed.find((l) => /--coverage\b/.test(l.content));
           if (removedCoverage && !added.some((l) => /--coverage\b/.test(l.content))) {
-            out2.push(
+            out3.push(
               makeFinding(RULE5, policy, {
                 file: c.path,
                 message: "The --coverage flag was removed from a test script.",
@@ -3229,7 +3229,7 @@ var init_coverage_lowering = __esm({
               if (!s.re.test(l.content)) continue;
               if (removed.some((r) => s.re.test(r.content))) continue;
               if (/passWithNoTests/.test(s.re.source) && dirHasSpec(c.path, policy, ctx) === false) continue;
-              out2.push(
+              out3.push(
                 makeFinding(RULE5, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
@@ -3252,7 +3252,7 @@ var init_coverage_lowering = __esm({
               if (!m) continue;
               const ov = oldNums.get(m[1]);
               if (ov !== void 0 && Number(m[2]) < ov) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE5, policy, {
                     file: c.path,
                     line: l.newLine ?? void 0,
@@ -3266,7 +3266,7 @@ var init_coverage_lowering = __esm({
           }
         }
         const seen = /* @__PURE__ */ new Set();
-        return out2.filter((f) => {
+        return out3.filter((f) => {
           const k = `${f.rule}|${f.file ?? ""}|${f.message}`;
           if (seen.has(k)) return false;
           seen.add(k);
@@ -3359,7 +3359,7 @@ function survives(removedCore, isUses, afterCores, addedCores) {
   return neutralised ? { state: "neutralised", by: neutralised } : { state: "gone" };
 }
 function lex(src) {
-  const out2 = [];
+  const out3 = [];
   let i = 0;
   while (i < src.length) {
     const ch = src[i];
@@ -3378,31 +3378,31 @@ function lex(src) {
         else s += src[j++];
       }
       if (j >= src.length) return null;
-      out2.push({ t: "str", v: s });
+      out3.push({ t: "str", v: s });
       i = j + 1;
       continue;
     }
     const num = src.slice(i).match(/^-?\d+(?:\.\d+)?/);
     if (num) {
-      out2.push({ t: "num", v: num[0] });
+      out3.push({ t: "num", v: num[0] });
       i += num[0].length;
       continue;
     }
     const op = src.slice(i).match(/^(?:==|!=|&&|\|\||<=|>=|[!()<>,[\]])/);
     if (op) {
-      out2.push({ t: "op", v: op[0] });
+      out3.push({ t: "op", v: op[0] });
       i += op[0].length;
       continue;
     }
     const id = src.slice(i).match(/^[A-Za-z_][\w.\-*]*/);
     if (id) {
-      out2.push({ t: "id", v: id[0] });
+      out3.push({ t: "id", v: id[0] });
       i += id[0].length;
       continue;
     }
     return null;
   }
-  return out2;
+  return out3;
 }
 function foldConst(src) {
   const toks = lex(src);
@@ -3545,15 +3545,15 @@ function jobOf(lines, i) {
   return [h, e];
 }
 function runBlocks(lines) {
-  const out2 = [];
+  const out3 = [];
   for (let i = 0; i < lines.length; i++) {
     if (!/^\s*-?\s*run:\s*[|>][-+]?\s*$/.test(lines[i])) continue;
     const ind = indentOf(lines[i].replace(/^(\s*)-\s+/, "$1  "));
     let e = i + 1;
     while (e < lines.length && (lines[e].trim() === "" || indentOf(lines[e]) > ind)) e++;
-    out2.push({ start: i, end: e, body: lines.slice(i + 1, e) });
+    out3.push({ start: i, end: e, body: lines.slice(i + 1, e) });
   }
-  return out2;
+  return out3;
 }
 function flowList(v) {
   const m = v.trim().match(/^\[(.*)\]$/);
@@ -3639,32 +3639,32 @@ function sourceProbes(ctx) {
   return code2.length ? code2 : CODE_PROBES;
 }
 function triggerNarrowings(before, after, opts) {
-  const out2 = [];
-  if (!before.present || !after.present) return out2;
+  const out3 = [];
+  if (!before.present || !after.present) return out3;
   const isDefault = (b) => opts.defaultBranch ? b === opts.defaultBranch : DEFAULT_BRANCH.test(b);
   const namesDefault = (l) => l.some(isDefault);
   for (const e of CODE_EVENTS) {
-    if (before.events.has(e) && !after.events.has(e)) out2.push(`the ${e} trigger was removed \u2014 the workflow no longer runs on it`);
+    if (before.events.has(e) && !after.events.has(e)) out3.push(`the ${e} trigger was removed \u2014 the workflow no longer runs on it`);
   }
   for (const [e, list2] of after.pathsIgnore) {
     const had = before.pathsIgnore.get(e) ?? [];
-    if (list2.some((g) => ALL(g) && !had.includes(g))) out2.push(`on.${e}.paths-ignore now ignores every path \u2014 the workflow never runs on ${e}`);
+    if (list2.some((g) => ALL(g) && !had.includes(g))) out3.push(`on.${e}.paths-ignore now ignores every path \u2014 the workflow never runs on ${e}`);
   }
   for (const [e, list2] of after.paths) {
     if (!CODE_EVENTS.includes(e) || !after.events.has(e)) continue;
     const had = before.paths.get(e);
     if (had && !pathsMatchSource(had, opts.sources)) continue;
-    if (!pathsMatchSource(list2, opts.sources)) out2.push(`on.${e}.paths matches no source file (now [${list2.join(", ")}]) \u2014 the workflow never runs on code`);
+    if (!pathsMatchSource(list2, opts.sources)) out3.push(`on.${e}.paths matches no source file (now [${list2.join(", ")}]) \u2014 the workflow never runs on code`);
   }
   for (const [e, list2] of after.types) {
     if (!/^pull_request(?:_target)?$/.test(e) || !after.events.has(e)) continue;
     const had = before.types.get(e);
     if (had && !had.some((t) => PR_CODE_TYPES.test(t))) continue;
-    if (!list2.some((t) => PR_CODE_TYPES.test(t))) out2.push(`on.${e}.types no longer includes opened/synchronize (now [${list2.join(", ")}]) \u2014 the workflow does not run on the pull request's code`);
+    if (!list2.some((t) => PR_CODE_TYPES.test(t))) out3.push(`on.${e}.types no longer includes opened/synchronize (now [${list2.join(", ")}]) \u2014 the workflow does not run on the pull request's code`);
   }
   for (const [e, list2] of after.branchesIgnore) {
     const had = before.branchesIgnore.get(e) ?? [];
-    if (list2.some((g) => (ALL(g) || isDefault(g)) && !had.includes(g))) out2.push(`on.${e}.branches-ignore now covers the default branch`);
+    if (list2.some((g) => (ALL(g) || isDefault(g)) && !had.includes(g))) out3.push(`on.${e}.branches-ignore now covers the default branch`);
   }
   for (const [e, was] of before.branches) {
     const now = after.branches.get(e);
@@ -3673,9 +3673,9 @@ function triggerNarrowings(before, after, opts) {
     const renamed = (b) => DEFAULT_BRANCH.test(b) && opts.hasBranch(b) !== false;
     const lostDefault = namesDefault(was) && !namesDefault(now) && !now.some(renamed);
     const replaced = !namesDefault(was) && !namesDefault(now) && was.length > 0 && !was.some((b) => now.includes(b));
-    if (lostDefault || replaced) out2.push(`on.${e}.branches no longer names ${was.filter((b) => !now.includes(b)).join(", ")} (now [${now.join(", ")}])`);
+    if (lostDefault || replaced) out3.push(`on.${e}.branches no longer names ${was.filter((b) => !now.includes(b)).join(", ")} (now [${now.join(", ")}])`);
   }
-  return out2;
+  return out3;
 }
 var RULE6, USES, CHECK, YAML_KEY, INVOKES_TOOL, INVOKES_SCRIPT, invokesCheck, EXPR_TOKEN, MATRIX_TOKEN, MATRIX_FLAG, usesRef, SUITE_NARROWING_FLAGS, NEUTRALISING_SUFFIX, TIMEOUT_WRAP, PATH_SHAPED, uncommented, TRUTHY, truthy, SHELL_ERREXIT, indentOf, STEP_START, REPORTER_ACTION, usesCheck, stepHasCheck, jobHasCheck, NEUTRALISERS, LIST_KEYS, DEFAULT_BRANCH, ALL, CODE_EVENTS, PR_CODE_TYPES, CODE_PROBES, REUSED_WORKFLOW, ciTampering;
 var init_ci_tampering = __esm({
@@ -3737,14 +3737,14 @@ var init_ci_tampering = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy, _view, ctx) {
-        const out2 = [];
+        const out3 = [];
         const afterByPath = /* @__PURE__ */ new Map();
         for (const c of changes) if (c.kind === "file" && c.after != null) afterByPath.set(c.path, c.after);
         let triggerOpts = null;
         for (const c of changes) {
           if (c.kind !== "file") continue;
           if (c.op === "rename" && c.oldPath && isActiveWorkflow(c.oldPath) && !isActiveWorkflow(c.path)) {
-            out2.push(
+            out3.push(
               makeFinding(RULE6, policy, {
                 file: c.path,
                 message: `A CI workflow was renamed so it no longer runs (${c.oldPath} \u2192 ${c.path}).`,
@@ -3768,7 +3768,7 @@ var init_ci_tampering = __esm({
               if (job && !jobHasCheck(afterLines, job)) continue;
             }
             if (coe && isTruthy(coe[1])) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE6, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
@@ -3778,7 +3778,7 @@ var init_ci_tampering = __esm({
                 })
               );
             } else if (cond && isAlwaysFalse(cond[1])) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE6, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
@@ -3798,7 +3798,7 @@ var init_ci_tampering = __esm({
                 if (!addedAt.has(idx + 1)) continue;
                 const n = NEUTRALISERS.find((x) => x.re.test(b.body[k]));
                 if (!n || propagates && /set\s\+e/.test(b.body[k])) continue;
-                out2.push(
+                out3.push(
                   makeFinding(RULE6, policy, {
                     file: c.path,
                     line: idx + 1,
@@ -3814,7 +3814,7 @@ var init_ci_tampering = __esm({
               if (SHELL_ERREXIT.test(uncommented(l.content.replace(/^\s*-?\s*shell:\s*/, "")))) continue;
               const step = stepOf(afterLines, l.newLine - 1);
               if (step && !stepHasCheck(afterLines, step)) continue;
-              out2.push(
+              out3.push(
                 makeFinding(RULE6, policy, {
                   file: c.path,
                   line: l.newLine,
@@ -3827,7 +3827,7 @@ var init_ci_tampering = __esm({
             if (c.before != null && c.after != null) {
               triggerOpts ??= { defaultBranch: defaultBranch(ctx), sources: sourceProbes(ctx), hasBranch: (b) => branchExists(b, ctx) };
               for (const reason of triggerNarrowings(parseTriggers(c.before), parseTriggers(c.after), triggerOpts)) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE6, policy, {
                     file: c.path,
                     message: `The workflow's triggers were narrowed: ${reason}.`,
@@ -3856,7 +3856,7 @@ var init_ci_tampering = __esm({
             const s = survives(commandCore(l.content), isUsesLine, afterCores, addedCores);
             if (s.state === "kept") continue;
             if (s.state === "neutralised") {
-              out2.push(
+              out3.push(
                 makeFinding(RULE6, policy, {
                   file: c.path,
                   message: "A CI check command was neutralised in place: it still runs, but its result no longer decides (or its suite was narrowed).",
@@ -3866,7 +3866,7 @@ var init_ci_tampering = __esm({
               );
               continue;
             }
-            out2.push(
+            out3.push(
               makeFinding(RULE6, policy, {
                 file: c.path,
                 message: isUsesLine ? "A CI check step (test/lint/typecheck) was removed." : "A CI check command was removed from a run block.",
@@ -3876,7 +3876,7 @@ var init_ci_tampering = __esm({
             );
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -4173,7 +4173,7 @@ function insertsDeadGuard(line) {
   return !!m && alwaysFalse(m[1]);
 }
 function joinContinued(lines) {
-  const out2 = [];
+  const out3 = [];
   let cur = null;
   for (const l of lines) {
     cur = cur === null ? l : cur + " " + l.trimStart();
@@ -4182,17 +4182,17 @@ function joinContinued(lines) {
       cur = cur.slice(0, -1);
       continue;
     }
-    out2.push(cur);
+    out3.push(cur);
     cur = null;
   }
-  if (cur !== null) out2.push(cur);
-  return out2;
+  if (cur !== null) out3.push(cur);
+  return out3;
 }
 function stripHeredocs(lines) {
-  const out2 = [];
+  const out3 = [];
   for (let i = 0; i < lines.length; i++) {
     const l = lines[i];
-    out2.push(l);
+    out3.push(l);
     if (isComment(l)) continue;
     const m = stripComment(l).match(/<<(-?)\s*(?:'([^']+)'|"([^"]+)"|\\?([A-Za-z_]\w*))/);
     if (!m) continue;
@@ -4203,7 +4203,7 @@ function stripHeredocs(lines) {
       if (t === word) break;
     }
   }
-  return out2;
+  return out3;
 }
 function explodeKeywords(line) {
   if (isComment(line)) return [line];
@@ -4705,23 +4705,23 @@ function scriptWeakening(before, after, opts = {}) {
   const live = (inv) => new Set(inv.filter((i) => i.state === "live").map((i) => i.identity));
   const bl = live(beforeInv);
   const al = live(afterInv);
-  const out2 = [];
+  const out3 = [];
   for (const id of bl) {
     if (al.has(id)) continue;
     const trace = afterInv.find((i) => i.identity === id) ?? afterInv.find((i) => baseIdentity(i.identity) === baseIdentity(id));
     const how = trace?.state === "neutered" ? `neutralised in place (${trace.why ?? "its failure can no longer fail the hook"})` : trace?.state === "unreachable" ? `made unreachable (${trace.why ?? "behind an always-false guard or an early exit"})` : trace?.state === "comment" ? "commented out" : trace && trace.identity !== id ? `replaced by \`${trace.identity}\`` : "removed";
     const evidence = (trace?.line ?? before.find((l) => checkIdentity(stripComment(l).trim().replace(/^!\s+/, "").replace(PREFIX, "")) === id) ?? id).trim();
-    out2.push({ reason: `the check invocation \`${id}\` was ${how}`, evidence });
+    out3.push({ reason: `the check invocation \`${id}\` was ${how}`, evidence });
   }
   const floor = beforeInv.flatMap((i) => i.state === "live" && i.pin && PLAIN_SEMVER.test(i.pin) ? [i.pin] : []).sort((a, b) => compareVersions(a, b) ?? 0)[0];
   if (floor) {
     for (const inv of afterInv) {
       if (inv.state !== "live" || !inv.pin) continue;
-      if (!PLAIN_SEMVER.test(inv.pin)) out2.push({ reason: `the gate's pin was changed from ${floor} to \`${inv.pin}\`, which is not a plain version \u2014 a range, tag or pre-release resolves to whatever the registry serves`, evidence: inv.line.trim() });
-      else if ((compareVersions(inv.pin, floor) ?? 0) < 0) out2.push({ reason: `the gate's pin was lowered from ${floor} to ${inv.pin}`, evidence: inv.line.trim() });
+      if (!PLAIN_SEMVER.test(inv.pin)) out3.push({ reason: `the gate's pin was changed from ${floor} to \`${inv.pin}\`, which is not a plain version \u2014 a range, tag or pre-release resolves to whatever the registry serves`, evidence: inv.line.trim() });
+      else if ((compareVersions(inv.pin, floor) ?? 0) < 0) out3.push({ reason: `the gate's pin was lowered from ${floor} to ${inv.pin}`, evidence: inv.line.trim() });
     }
   }
-  return out2;
+  return out3;
 }
 function shebangProblem(src) {
   const first = src.split("\n")[0] ?? "";
@@ -4783,16 +4783,16 @@ function ownersOf(content, critical) {
   return owners;
 }
 function codeownersWeakening(before, after, extra = []) {
-  const out2 = [];
+  const out3 = [];
   const files = [.../* @__PURE__ */ new Set([...GATE_CRITICAL, ...extra.map((f) => f.startsWith("/") ? f : "/" + f)])];
   for (const critical of files) {
     const was = ownersOf(before, critical);
     if (!was || was.length === 0) continue;
     const now = ownersOf(after, critical);
-    if (!now) out2.push(`the code-owner rule covering ${critical} was removed \u2014 the gate's own files no longer require a human reviewer`);
-    else if (now.length === 0) out2.push(`the code-owner rule covering ${critical} lost its owners \u2014 the gate's own files no longer require a human reviewer`);
+    if (!now) out3.push(`the code-owner rule covering ${critical} was removed \u2014 the gate's own files no longer require a human reviewer`);
+    else if (now.length === 0) out3.push(`the code-owner rule covering ${critical} lost its owners \u2014 the gate's own files no longer require a human reviewer`);
   }
-  return out2;
+  return out3;
 }
 function parseDoc(src) {
   try {
@@ -4807,27 +4807,27 @@ function gateOf(command) {
   return live ? { identity: live.identity, pin: live.pin ?? "" } : null;
 }
 function gateDrift(what, was, now) {
-  const out2 = [];
+  const out3 = [];
   if (was.gate && now.gate) {
-    if (now.gate.identity !== was.gate.identity) out2.push(`${what} now runs \`${now.gate.identity}\` instead of \`${was.gate.identity}\` \u2014 another check`);
+    if (now.gate.identity !== was.gate.identity) out3.push(`${what} now runs \`${now.gate.identity}\` instead of \`${was.gate.identity}\` \u2014 another check`);
     if (PLAIN_SEMVER.test(was.gate.pin) && now.gate.pin) {
-      if (!PLAIN_SEMVER.test(now.gate.pin)) out2.push(`${what} pins the gate to \`${now.gate.pin}\`, which is not a plain version (was ${was.gate.pin}) \u2014 a range, tag or pre-release resolves to whatever the registry serves`);
-      else if ((compareVersions(now.gate.pin, was.gate.pin) ?? 0) < 0) out2.push(`${what} lowered the gate's pin from ${was.gate.pin} to ${now.gate.pin}`);
+      if (!PLAIN_SEMVER.test(now.gate.pin)) out3.push(`${what} pins the gate to \`${now.gate.pin}\`, which is not a plain version (was ${was.gate.pin}) \u2014 a range, tag or pre-release resolves to whatever the registry serves`);
+      else if ((compareVersions(now.gate.pin, was.gate.pin) ?? 0) < 0) out3.push(`${what} lowered the gate's pin from ${was.gate.pin} to ${now.gate.pin}`);
     }
   }
-  if (now.env.length && now.env.join(",") !== was.env.join(",")) out2.push(`${what} sets ${now.env.map((e) => e.split("=")[0]).join(", ")} in its \`env\` \u2014 the gate's runtime is redirected`);
-  return out2;
+  if (now.env.length && now.env.join(",") !== was.env.join(",")) out3.push(`${what} sets ${now.env.map((e) => e.split("=")[0]).join(", ")} in its \`env\` \u2014 the gate's runtime is redirected`);
+  return out3;
 }
 function mergeDocs(base, over) {
-  const out2 = { ...base };
+  const out3 = { ...base };
   for (const [k, v] of Object.entries(over)) {
-    const b = out2[k];
-    out2[k] = isDoc(b) && isDoc(v) ? mergeDocs(b, v) : v;
+    const b = out3[k];
+    out3[k] = isDoc(b) && isDoc(v) ? mergeDocs(b, v) : v;
   }
-  return out2;
+  return out3;
 }
 function lefthookEntries(doc) {
-  const out2 = /* @__PURE__ */ new Map();
+  const out3 = /* @__PURE__ */ new Map();
   for (const [section, v] of Object.entries(doc)) {
     if (!isDoc(v)) continue;
     const sectionExclude = list(v.exclude_tags);
@@ -4841,7 +4841,7 @@ function lefthookEntries(doc) {
         if (!GATE.test(str(run)) && !named) continue;
         const tags = list(cfg.tags);
         const gate = run === void 0 ? named ? { identity: "tamperward check --staged", pin: "" } : null : gateOf(str(run));
-        out2.set(`${section}.${group}.${name}`, {
+        out3.set(`${section}.${group}.${name}`, {
           live: gate !== null,
           gate,
           env: redirectingEnv(cfg.env),
@@ -4856,33 +4856,33 @@ function lefthookEntries(doc) {
       }
     }
   }
-  return out2;
+  return out3;
 }
 function lefthookWeakening(before, after) {
-  const out2 = [];
+  const out3 = [];
   const b = lefthookEntries(before);
   const a = lefthookEntries(after);
   for (const [key2, was] of b) {
     if (!was.live) continue;
     const now = a.get(key2);
     if (!now) {
-      out2.push(`lefthook entry ${key2} (the gate) was removed`);
+      out3.push(`lefthook entry ${key2} (the gate) was removed`);
       continue;
     }
-    if (!now.live) out2.push(`lefthook entry ${key2} no longer runs \`tamperward check\` live`);
-    out2.push(...gateDrift(`lefthook entry ${key2} (the gate)`, was, now));
-    if (!off(now.skip) && off(was.skip)) out2.push(`lefthook entry ${key2} (the gate) is now \`skip: ${str(now.skip)}\``);
-    if (!off(now.sectionSkip) && off(was.sectionSkip)) out2.push(`the lefthook hook carrying ${key2} (the gate) is now \`skip: ${str(now.sectionSkip)}\``);
-    if (!off(now.only) && str(now.only) !== str(was.only)) out2.push(`lefthook entry ${key2} (the gate) gained or changed \`only\` (${str(now.only)})`);
-    if (!off(now.sectionOnly) && str(now.sectionOnly) !== str(was.sectionOnly)) out2.push(`the lefthook hook carrying ${key2} (the gate) gained or changed \`only\` (${str(now.sectionOnly)})`);
-    if (now.glob !== was.glob && now.glob) out2.push(`lefthook entry ${key2} (the gate) gained or changed \`glob\` (${now.glob}) \u2014 it no longer runs on every commit`);
-    if (now.exclude !== was.exclude && now.exclude) out2.push(`lefthook entry ${key2} (the gate) gained or changed \`exclude\` (${now.exclude})`);
-    if (now.excludedByTag.length && !was.excludedByTag.length) out2.push(`lefthook entry ${key2} (the gate) is tagged ${now.excludedByTag.join(", ")}, which the hook's \`exclude_tags\` switches off`);
+    if (!now.live) out3.push(`lefthook entry ${key2} no longer runs \`tamperward check\` live`);
+    out3.push(...gateDrift(`lefthook entry ${key2} (the gate)`, was, now));
+    if (!off(now.skip) && off(was.skip)) out3.push(`lefthook entry ${key2} (the gate) is now \`skip: ${str(now.skip)}\``);
+    if (!off(now.sectionSkip) && off(was.sectionSkip)) out3.push(`the lefthook hook carrying ${key2} (the gate) is now \`skip: ${str(now.sectionSkip)}\``);
+    if (!off(now.only) && str(now.only) !== str(was.only)) out3.push(`lefthook entry ${key2} (the gate) gained or changed \`only\` (${str(now.only)})`);
+    if (!off(now.sectionOnly) && str(now.sectionOnly) !== str(was.sectionOnly)) out3.push(`the lefthook hook carrying ${key2} (the gate) gained or changed \`only\` (${str(now.sectionOnly)})`);
+    if (now.glob !== was.glob && now.glob) out3.push(`lefthook entry ${key2} (the gate) gained or changed \`glob\` (${now.glob}) \u2014 it no longer runs on every commit`);
+    if (now.exclude !== was.exclude && now.exclude) out3.push(`lefthook entry ${key2} (the gate) gained or changed \`exclude\` (${now.exclude})`);
+    if (now.excludedByTag.length && !was.excludedByTag.length) out3.push(`lefthook entry ${key2} (the gate) is tagged ${now.excludedByTag.join(", ")}, which the hook's \`exclude_tags\` switches off`);
   }
-  return out2;
+  return out3;
 }
 function preCommitEntries(doc) {
-  const out2 = /* @__PURE__ */ new Map();
+  const out3 = /* @__PURE__ */ new Map();
   const repos = Array.isArray(doc.repos) ? doc.repos : [];
   const defaults = Array.isArray(doc.default_stages) ? doc.default_stages.map(String).map(normStage) : ALL_STAGES;
   for (const repo of repos) {
@@ -4892,7 +4892,7 @@ function preCommitEntries(doc) {
       if (!isDoc(h)) continue;
       if (!GATE.test(`${str(repo.repo)} ${str(h.id)} ${str(h.entry)} ${str(h.name)}`)) continue;
       const gate = h.entry !== void 0 ? gateOf(`${str(h.entry)} ${list(h.args).join(" ")}`.trim()) : GATE.test(`${str(repo.repo)} ${str(h.id)}`) ? { identity: "tamperward check --staged", pin: "" } : null;
-      out2.set(`${str(repo.repo)}:${str(h.id)}`, {
+      out3.set(`${str(repo.repo)}:${str(h.id)}`, {
         live: gate !== null,
         gate,
         env: redirectingEnv(h.env),
@@ -4906,36 +4906,36 @@ function preCommitEntries(doc) {
       });
     }
   }
-  return out2;
+  return out3;
 }
 function preCommitWeakening(before, after) {
-  const out2 = [];
+  const out3 = [];
   const b = preCommitEntries(before);
   const a = preCommitEntries(after);
   for (const [key2, was] of b) {
     if (!was.live) continue;
     const now = a.get(key2);
     if (!now) {
-      out2.push(`pre-commit hook ${key2} (the gate) was removed`);
+      out3.push(`pre-commit hook ${key2} (the gate) was removed`);
       continue;
     }
-    if (!now.live) out2.push(`pre-commit hook ${key2} no longer runs \`tamperward check\` live`);
-    out2.push(...gateDrift(`pre-commit hook ${key2} (the gate)`, was, now));
-    if (now.deps && now.deps !== was.deps) out2.push(`pre-commit hook ${key2} (the gate) gained or changed \`additional_dependencies\` (${now.deps}) \u2014 they choose which gate the hook installs`);
+    if (!now.live) out3.push(`pre-commit hook ${key2} no longer runs \`tamperward check\` live`);
+    out3.push(...gateDrift(`pre-commit hook ${key2} (the gate)`, was, now));
+    if (now.deps && now.deps !== was.deps) out3.push(`pre-commit hook ${key2} (the gate) gained or changed \`additional_dependencies\` (${now.deps}) \u2014 they choose which gate the hook installs`);
     const lost = was.stages.filter((s) => GATE_STAGES.has(s) && !now.stages.includes(s));
     if (lost.length && !now.stages.some((s) => GATE_STAGES.has(s))) {
-      out2.push(`pre-commit hook ${key2} (the gate) now runs only at stages [${now.stages.join(", ")}] \u2014 no commit or push triggers it`);
+      out3.push(`pre-commit hook ${key2} (the gate) now runs only at stages [${now.stages.join(", ")}] \u2014 no commit or push triggers it`);
     } else if (lost.length) {
-      out2.push(`pre-commit hook ${key2} (the gate) no longer runs at stage(s) ${lost.join(", ")}${now.explicitStages ? "" : " (default_stages changed)"}`);
+      out3.push(`pre-commit hook ${key2} (the gate) no longer runs at stage(s) ${lost.join(", ")}${now.explicitStages ? "" : " (default_stages changed)"}`);
     }
-    if (now.exclude !== was.exclude && now.exclude) out2.push(`pre-commit hook ${key2} (the gate) gained or changed \`exclude\` (${now.exclude})`);
-    if (now.files !== was.files && now.files) out2.push(`pre-commit hook ${key2} (the gate) gained or changed \`files\` (${now.files})`);
-    if (now.types !== was.types && now.types && !now.alwaysRun) out2.push(`pre-commit hook ${key2} (the gate) is scoped by file type (${now.types}) without \`always_run\``);
+    if (now.exclude !== was.exclude && now.exclude) out3.push(`pre-commit hook ${key2} (the gate) gained or changed \`exclude\` (${now.exclude})`);
+    if (now.files !== was.files && now.files) out3.push(`pre-commit hook ${key2} (the gate) gained or changed \`files\` (${now.files})`);
+    if (now.types !== was.types && now.types && !now.alwaysRun) out3.push(`pre-commit hook ${key2} (the gate) is scoped by file type (${now.types}) without \`always_run\``);
   }
   const topB = str(before.exclude);
   const topA = str(after.exclude);
-  if (topA && topA !== topB && b.size > 0) out2.push(`a top-level pre-commit \`exclude\` was added or changed (${topA}) \u2014 it scopes every hook, the gate included`);
-  return out2;
+  if (topA && topA !== topB && b.size > 0) out3.push(`a top-level pre-commit \`exclude\` was added or changed (${topA}) \u2014 it scopes every hook, the gate included`);
+  return out3;
 }
 function installerOf(script) {
   for (const seg of script.split(/&&|\|\||;|\n/)) {
@@ -5460,24 +5460,24 @@ function entryShape(h) {
   return { problems, runs };
 }
 function gateCandidates(s, event) {
-  const out2 = [];
+  const out3 = [];
   for (const group of eventEntries(s, event) ?? []) {
     if (!isObj(group)) {
-      if (mentionsGate(group)) out2.push({ key: JSON.stringify(group), runs: false, problems: ["the matcher entry is not an object"], pin: null, tools: null });
+      if (mentionsGate(group)) out3.push({ key: JSON.stringify(group), runs: false, problems: ["the matcher entry is not an object"], pin: null, tools: null });
       continue;
     }
     if (!Array.isArray(group.hooks)) {
-      if (mentionsGate(group)) out2.push({ key: JSON.stringify(group), runs: false, problems: ["`hooks` is not a list"], pin: null, tools: null });
+      if (mentionsGate(group)) out3.push({ key: JSON.stringify(group), runs: false, problems: ["`hooks` is not a list"], pin: null, tools: null });
       continue;
     }
     for (const h of group.hooks) {
       if (!isObj(h)) {
-        if (mentionsGate(h)) out2.push({ key: JSON.stringify(h), runs: false, problems: ["the hook entry is not an object"], pin: null, tools: null });
+        if (mentionsGate(h)) out3.push({ key: JSON.stringify(h), runs: false, problems: ["the hook entry is not an object"], pin: null, tools: null });
         continue;
       }
       const cmd = typeof h.command === "string" ? h.command : null;
       if (cmd === null) {
-        if (mentionsGate(h)) out2.push({ key: JSON.stringify(h), runs: false, problems: ["the gate is not in a `command` string"], pin: null, tools: null });
+        if (mentionsGate(h)) out3.push({ key: JSON.stringify(h), runs: false, problems: ["the gate is not in a `command` string"], pin: null, tools: null });
         continue;
       }
       if (!MENTIONS_GATE.test(cmd)) continue;
@@ -5496,34 +5496,34 @@ function gateCandidates(s, event) {
         problems.push(`a \`matcher\` (${JSON.stringify(group.matcher)}) on the Stop entry`);
         runs = false;
       }
-      out2.push({ key: JSON.stringify({ m: group.matcher, h }), runs, problems, pin: a.pin, tools });
+      out3.push({ key: JSON.stringify({ m: group.matcher, h }), runs, problems, pin: a.pin, tools });
     }
   }
-  return out2;
+  return out3;
 }
 function otherCommands(s, event) {
-  const out2 = [];
+  const out3 = [];
   for (const group of eventEntries(s, event) ?? []) {
     if (!isObj(group) || !Array.isArray(group.hooks)) continue;
     for (const h of group.hooks) {
       if (!isObj(h) || typeof h.command !== "string" || MENTIONS_GATE.test(h.command)) continue;
-      out2.push(h.command);
+      out3.push(h.command);
     }
   }
-  return out2;
+  return out3;
 }
 function allEntries(s) {
   const hooks = s.hooks;
   if (!isObj(hooks)) return [];
-  const out2 = [];
+  const out3 = [];
   for (const [event, arr] of Object.entries(hooks)) {
     if (!Array.isArray(arr)) continue;
     for (const group of arr) {
       if (!isObj(group) || !Array.isArray(group.hooks)) continue;
-      for (const h of group.hooks) out2.push({ event, key: JSON.stringify({ e: event, m: group.matcher, h }), group, h });
+      for (const h of group.hooks) out3.push({ event, key: JSON.stringify({ e: event, m: group.matcher, h }), group, h });
     }
   }
-  return out2;
+  return out3;
 }
 function schemaProblem(group, h) {
   if (group.matcher !== void 0 && typeof group.matcher !== "string") return `the matcher ${JSON.stringify(group.matcher)} is not a string`;
@@ -5895,7 +5895,7 @@ They WILL FAIL in v10.0.0
       surface: ["file", "command"],
       certainty: "mechanical",
       run(changes, policy, _view, ctx) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           let semantic;
           if (c.kind === "file") {
@@ -5903,7 +5903,7 @@ They WILL FAIL in v10.0.0
             if (!targetsHook) {
               if (isPackageJson(c.path) && c.before != null && c.after != null) {
                 for (const reason of packageJsonWeakening(c.before, c.after)) {
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       message: `The hook installation was weakened: ${reason}.`,
@@ -5916,7 +5916,7 @@ They WILL FAIL in v10.0.0
               continue;
             }
             if (c.op !== "delete" && c.oldMode && c.newMode && ownerExec2(c.oldMode) && !ownerExec2(c.newMode)) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE7, policy, {
                   file: c.path,
                   message: `Execute permission was removed from a protected hook (${c.oldMode} \u2192 ${c.newMode}) \u2014 git will skip it.`,
@@ -5926,7 +5926,7 @@ They WILL FAIL in v10.0.0
               );
             }
             if (c.op === "delete") {
-              out2.push(
+              out3.push(
                 makeFinding(RULE7, policy, {
                   file: c.path,
                   message: "A protected hook/policy file was deleted.",
@@ -5935,7 +5935,7 @@ They WILL FAIL in v10.0.0
                 })
               );
             } else if (c.op === "rename" && !renameKept(c)) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE7, policy, {
                   file: c.path,
                   message: `A protected hook/policy file was renamed (${c.oldPath} \u2192 ${c.path}).`,
@@ -5944,12 +5944,12 @@ They WILL FAIL in v10.0.0
                 })
               );
             } else if ((c.path.endsWith(POLICY_FILE) || resolvesToClaudeSettings(c.path)) && (semantic = c.path.endsWith(POLICY_FILE) ? policyFindings(c, policy) : claudeSettingsFindings(c, policy)) !== null) {
-              out2.push(...semantic);
+              out3.push(...semantic);
             } else if (c.op === "rename") {
             } else if (isCodeowners(c.path)) {
               if (c.before != null && c.after != null) {
                 for (const reason of codeownersWeakening(c.before, c.after, [...repoGateFiles(ctx), c.path])) {
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       message: `CODEOWNERS was weakened: ${reason}.`,
@@ -5960,7 +5960,7 @@ They WILL FAIL in v10.0.0
                 }
               }
             } else if ((isLefthook(c.path) || isPreCommitConfig(c.path)) && (semantic = configFindings(c, changes, policy, ctx)) !== null) {
-              out2.push(...semantic);
+              out3.push(...semantic);
             } else if (!c.path.endsWith(POLICY_FILE)) {
               if ((c.op === "add" || c.op === "modify") && huskyRuntimeWrite(c.path, c.after, ctx)) continue;
               const husky = isHuskyScript(c.path);
@@ -5970,7 +5970,7 @@ They WILL FAIL in v10.0.0
                 const afterPin = initScriptPin(c.after);
                 const kept = afterPin !== null && (beforePin === "" ? afterPin === "" || PLAIN_SEMVER.test(afterPin) : pinNotBelow(afterPin, beforePin));
                 if (!kept) {
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       message: "A protected hook script no longer matches the shape `tamperward init` writes.",
@@ -5993,7 +5993,7 @@ They WILL FAIL in v10.0.0
                 const live = gate.find((i) => i.state === "live");
                 if (shebang || !live) {
                   const why = shebang ?? (gate.length ? `its \`${gate[0].identity}\` is ${gate[0].state}${gate[0].why ? ` (${gate[0].why})` : ""}` : "it runs no `tamperward check`");
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       message: `A protected hook script was added that does not run the gate live: ${why}. A new gate script needs a sign-off unless the gate is live in it.`,
@@ -6002,7 +6002,7 @@ They WILL FAIL in v10.0.0
                     })
                   );
                 } else if (earlyExit) {
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       line: earlyExit.newLine ?? void 0,
@@ -6024,7 +6024,7 @@ They WILL FAIL in v10.0.0
                     earlyExit ? `an early \`exit 0\` was inserted (\`${earlyExit.content.trim()}\`)` : null,
                     deadGuard2 ? `a guard that can never be true was inserted (\`${deadGuard2.content.trim()}\`)` : null
                   ].filter((d) => d !== null);
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       message: `A hand-written protected hook script was changed: ${detail.length ? detail.join("; ") : "an edit other than a pin raise"}. Every edit to a gate script other than raising its pin needs a sign-off.`,
@@ -6036,7 +6036,7 @@ They WILL FAIL in v10.0.0
                 continue;
               }
               if (shebangChanged && c.after != null) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE7, policy, {
                     file: c.path,
                     line: 1,
@@ -6047,7 +6047,7 @@ They WILL FAIL in v10.0.0
                 );
               }
               if (earlyExit) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE7, policy, {
                     file: c.path,
                     line: earlyExit.newLine ?? void 0,
@@ -6059,7 +6059,7 @@ They WILL FAIL in v10.0.0
               }
               const deadGuard = c.before == null || c.after == null ? added.find((l) => insertsDeadGuard(l.content)) : void 0;
               if (deadGuard) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE7, policy, {
                     file: c.path,
                     line: deadGuard.newLine ?? void 0,
@@ -6071,7 +6071,7 @@ They WILL FAIL in v10.0.0
               }
               const lost = scriptWeakening(beforeLines, afterLines, opts);
               if (lost.length) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE7, policy, {
                     file: c.path,
                     message: `A check invocation was removed from a protected hook: ${lost[0].reason}.`,
@@ -6090,7 +6090,7 @@ They WILL FAIL in v10.0.0
               for (const l of addedLines(c)) {
                 const m = l.content.match(INLINE);
                 if (m && m[2] === "warn" && removedSeverity.get(m[1]) === "block") {
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       line: l.newLine ?? void 0,
@@ -6100,7 +6100,7 @@ They WILL FAIL in v10.0.0
                     })
                   );
                 } else if (/enabled:\s*false\b/.test(l.content)) {
-                  out2.push(
+                  out3.push(
                     makeFinding(RULE7, policy, {
                       file: c.path,
                       line: l.newLine ?? void 0,
@@ -6118,7 +6118,7 @@ They WILL FAIL in v10.0.0
               const toks = tokens(seg).map(unquote);
               const hiding = updateIndexHiding(toks, policy);
               if (hiding) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE7, policy, {
                     file: repoRelative(hiding.file, ctx),
                     message: `Hook tampering via shell: ${hiding.reason}.`,
@@ -6134,7 +6134,7 @@ They WILL FAIL in v10.0.0
                 const target = shellHookTarget(seg, toks, policy, ctx) ?? shellHookTarget("", fed, policy, ctx);
                 const file = target ? repoRelative(target, ctx) : void 0;
                 const outside = file !== void 0 && (isAbsolute5(file) || /^[A-Za-z]:\//.test(file)) && isClaudeSettings(file) ? ` \u2014 ${file} is a Claude Code settings file the runtime reads hooks from` : "";
-                out2.push(
+                out3.push(
                   makeFinding(RULE7, policy, {
                     ...file !== void 0 ? { file } : {},
                     message: `Hook tampering via shell: ${why}${outside}.`,
@@ -6147,7 +6147,7 @@ They WILL FAIL in v10.0.0
             }
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -6222,7 +6222,7 @@ function pytestBlock(src) {
   const head = /^\s*\[(pytest|tool:pytest|tool\.pytest\.ini_options)\]\s*$/;
   let i = lines.findIndex((l) => head.test(l));
   if (i < 0) return null;
-  const out2 = {};
+  const out3 = {};
   let key2 = null;
   for (i += 1; i < lines.length; i++) {
     const line = lines[i];
@@ -6233,12 +6233,12 @@ function pytestBlock(src) {
     const m = line.match(/^(\w[\w.-]*)\s*[=:]\s*(.*)$/);
     if (m) {
       key2 = m[1];
-      out2[key2] = m[2].trim();
+      out3[key2] = m[2].trim();
       continue;
     }
-    if (key2 && /^\s+\S/.test(line)) out2[key2] += " " + line.trim();
+    if (key2 && /^\s+\S/.test(line)) out3[key2] += " " + line.trim();
   }
-  return out2;
+  return out3;
 }
 function pytestTokens(raw) {
   const v = raw.trim();
@@ -6488,11 +6488,11 @@ function suiteNarrowings(before, after, path, samples) {
   if (!a.present || a.opaque) return [];
   const pb = predicate(b, runner);
   const pa = predicate(a, runner);
-  const out2 = [];
+  const out3 = [];
   for (const s of samples) {
-    if (pb.selects(s) && !pa.selects(s)) out2.push({ path: s, reason: pa.why(s) });
+    if (pb.selects(s) && !pa.selects(s)) out3.push({ path: s, reason: pa.why(s) });
   }
-  return out2;
+  return out3;
 }
 var JEST_DEFAULT_MATCH, JEST_DEFAULT_IGNORE, VITEST_DEFAULT_INCLUDE, PYTEST_DEFAULT_INCLUDE, PYTEST_DEFAULT_IGNORE, VITEST_DEFAULT_EXCLUDE, CANONICAL_SAMPLES, PYTEST_CANONICAL_SAMPLES, isStr, PYTEST_INI_ORDER, pathGlobs, isWorkspaceFile, empty, stripRootDir, JEST_SELECTION_KEYS, globs3, globList2, regexes, underDir;
 var init_suite_config = __esm({
@@ -6673,13 +6673,13 @@ function countTestBlocks(src, path = "spec.ts") {
   return countTests(src, path).min;
 }
 function significantLines(src, path) {
-  const out2 = /* @__PURE__ */ new Set();
+  const out3 = /* @__PURE__ */ new Set();
   const lang = langOf(path);
   for (const raw of src.split("\n")) {
     const l = raw.trim();
-    if (isSignificantLine(l, lang)) out2.add(l);
+    if (isSignificantLine(l, lang)) out3.add(l);
   }
-  return out2;
+  return out3;
 }
 function runnerSamples(configPath, policy, ctx, runner) {
   const lang = runner === "pytest" ? "py" : "js";
@@ -6708,7 +6708,7 @@ function scriptNarrowings(before, after, path) {
   };
   const was = scriptsOf(before);
   const now = scriptsOf(after);
-  const out2 = [];
+  const out3 = [];
   for (const [name, cmd] of Object.entries(now)) {
     if (!WHOLE_SUITE_SCRIPT.test(name) || !/\b(?:jest|vitest)\b/.test(cmd)) continue;
     const prev = was[name] ?? "";
@@ -6719,11 +6719,11 @@ function scriptNarrowings(before, after, path) {
       const one = new RegExp(SUITE_NARROWING_FLAGS.source);
       if (one.test(prev) && prev.includes(flag)) continue;
       if (excludesOtherRunner(flag, cmd)) continue;
-      out2.push({ script: name, flag, before: prev, after: cmd });
+      out3.push({ script: name, flag, before: prev, after: cmd });
       break;
     }
   }
-  return out2;
+  return out3;
 }
 function joinRoot(root, to) {
   const parts = root ? root.split("/") : [];
@@ -6816,7 +6816,7 @@ var init_test_deletion = __esm({
       surface: ["file", "command"],
       certainty: "mechanical",
       run(changes, policy, _view, ctx) {
-        const out2 = [];
+        const out3 = [];
         const isSpec = (p) => isProtected(p, policy, "tests") && !isProtected(p, policy, "snapshots");
         const addedTestLines = /* @__PURE__ */ new Set();
         let addedTestBlocks = 0;
@@ -6842,7 +6842,7 @@ var init_test_deletion = __esm({
             const isTest = isSpec(c.path);
             if (c.op === "delete" && isTest) {
               if (c.before != null && isRelocation(significantLines(c.before, c.path), countTestBlocks(c.before, c.path))) continue;
-              out2.push(
+              out3.push(
                 makeFinding(RULE8, policy, {
                   file: c.path,
                   message: "A test file was deleted.",
@@ -6851,7 +6851,7 @@ var init_test_deletion = __esm({
                 })
               );
             } else if (c.op === "rename" && c.oldPath && isSpec(c.oldPath) && !isTest) {
-              out2.push(
+              out3.push(
                 makeFinding(RULE8, policy, {
                   file: c.path,
                   message: `A test file was renamed out of the test glob (${c.oldPath} \u2192 ${c.path}).`,
@@ -6866,7 +6866,7 @@ var init_test_deletion = __esm({
                 const afterLines = significantLines(c.after, c.path);
                 const removed = new Set([...significantLines(c.before, c.path)].filter((l) => !afterLines.has(l)));
                 if (isRelocation(removed, before.min - after.min)) continue;
-                out2.push(
+                out3.push(
                   makeFinding(RULE8, policy, {
                     file: c.path,
                     message: `Test blocks removed: ${before.min} \u2192 ${after.min} it()/test() in this spec (each-table rows count as tests).`,
@@ -6879,7 +6879,7 @@ var init_test_deletion = __esm({
               const rn = runnerOf(c.path, c.after);
               const readable = rn !== "pytest" || effectivePytestConfig(c.path, ctx);
               for (const n of readable ? suiteNarrowings(c.before, c.after, c.path, runnerSamples(c.path, policy, ctx, rn)) : []) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE8, policy, {
                     file: c.path,
                     message: `The runner no longer selects ${n.path}: ${n.reason}.`,
@@ -6889,7 +6889,7 @@ var init_test_deletion = __esm({
                 );
               }
               for (const n of scriptNarrowings(c.before, c.after, c.path)) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE8, policy, {
                     file: c.path,
                     message: `The test script now narrows the suite: ${n.flag} added to scripts.${n.script}.`,
@@ -6977,7 +6977,7 @@ var init_test_deletion = __esm({
                 }
               }
               if (why) {
-                out2.push(
+                out3.push(
                   makeFinding(RULE8, policy, {
                     message: `Test removed via shell: ${why}.`,
                     evidence,
@@ -6988,8 +6988,8 @@ var init_test_deletion = __esm({
             }
           }
         }
-        out2.push(...pytestPrecedenceFindings(changes, policy, ctx));
-        return out2;
+        out3.push(...pytestPrecedenceFindings(changes, policy, ctx));
+        return out3;
       }
     };
   }
@@ -7025,13 +7025,13 @@ function eachTables(src, path) {
   return { rows, open };
 }
 function significantLinesOrdered(src, path) {
-  const out2 = [];
+  const out3 = [];
   const lang = langOf(path);
   for (const raw of src.split("\n")) {
     const l = raw.trim();
-    if (isSignificantLine(l, lang)) out2.push(l);
+    if (isSignificantLine(l, lang)) out3.push(l);
   }
-  return out2;
+  return out3;
 }
 var RULE9, MIN_REMOVED_LINES, MIN_REMOVED_ROWS, ws, TEST_DIR_FILE, testContentRemoval;
 var init_test_content_removal = __esm({
@@ -7052,7 +7052,7 @@ var init_test_content_removal = __esm({
       surface: ["file"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         let keptPool = "";
         let addedPool = "";
         for (const c of changes) {
@@ -7088,7 +7088,7 @@ var init_test_content_removal = __esm({
           const tableAfter = eachTables(c.after, c.path);
           const goneRows = table.rows.size && tableAfter.open ? [...table.rows].filter(([k]) => !tableAfter.rows.has(k) && !addedPool.includes(k)).map(([, text]) => text) : [];
           if (goneRows.length >= MIN_REMOVED_ROWS) {
-            out2.push(
+            out3.push(
               makeFinding(RULE9, policy, {
                 file: c.path,
                 message: `Rows removed from a test table: ${goneRows.length} case(s) gone from an each-table that spreads from elsewhere, and they reappear nowhere in the change.`,
@@ -7099,7 +7099,7 @@ var init_test_content_removal = __esm({
             continue;
           }
           if (gone.length >= MIN_REMOVED_LINES && netDrop >= MIN_REMOVED_LINES) {
-            out2.push(
+            out3.push(
               makeFinding(RULE9, policy, {
                 file: c.path,
                 message: `Test content removed from a surviving spec: ${gone.length} significant line(s) gone with no test block deleted.`,
@@ -7109,7 +7109,7 @@ var init_test_content_removal = __esm({
             );
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -7144,8 +7144,8 @@ var init_snapshot_rewrite = __esm({
       surface: ["command", "file"],
       certainty: "mechanical",
       run(changes, policy) {
-        const out2 = [];
-        const warn = (input) => out2.push(makeFinding(RULE10, policy, { ...input, defaultSeverity: "warn" }));
+        const out3 = [];
+        const warn = (input) => out3.push(makeFinding(RULE10, policy, { ...input, defaultSeverity: "warn" }));
         for (const c of changes) {
           if (c.kind === "command") {
             for (const seg of segments(c.raw)) {
@@ -7180,7 +7180,7 @@ var init_snapshot_rewrite = __esm({
             remediation: "If the intended output genuinely changed, a human should confirm the new expectation against the requirement; if the test was failing, fix the code instead of re-recording the expectation from it."
           });
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -7302,8 +7302,8 @@ function callbackFor(node) {
   return cb && (ts.isArrowFunction(cb) || ts.isFunctionExpression(cb)) ? cb : null;
 }
 function blocks(src, path) {
-  const out2 = /* @__PURE__ */ new Map();
-  if (langOf(path) !== "js") return out2;
+  const out3 = /* @__PURE__ */ new Map();
+  if (langOf(path) !== "js") return out3;
   try {
     const sf = ts.createSourceFile(path, src, ts.ScriptTarget.Latest, true, scriptKindForPath(path));
     const visit = (node, suites) => {
@@ -7333,9 +7333,9 @@ function blocks(src, path) {
           };
           collect2(cb);
           const identity2 = [...suites, title].join(" > ");
-          const list2 = out2.get(identity2) ?? [];
+          const list2 = out3.get(identity2) ?? [];
           list2.push({ title, identity: identity2, assertions });
-          out2.set(identity2, list2);
+          out3.set(identity2, list2);
           return;
         }
       }
@@ -7344,7 +7344,7 @@ function blocks(src, path) {
     visit(sf, []);
   } catch {
   }
-  return out2;
+  return out3;
 }
 function pureRemoval(before, after) {
   if (after.length >= before.length) return null;
@@ -7385,13 +7385,13 @@ function directionalWeakening(before, after) {
   return null;
 }
 function findingForBlock(path, before, after, policy) {
-  const weakened = directionalWeakening(before.assertions, after.assertions);
-  if (weakened) {
-    const message = weakened.kind === "throw-specificity" ? `Assertion weakened in test "${before.identity}": exception-message specificity was removed from toThrow().` : `Assertion weakened in test "${before.identity}": ${weakened.before.matcher} was replaced by weaker ${weakened.after.matcher} on the same subject.`;
+  const weakened2 = directionalWeakening(before.assertions, after.assertions);
+  if (weakened2) {
+    const message = weakened2.kind === "throw-specificity" ? `Assertion weakened in test "${before.identity}": exception-message specificity was removed from toThrow().` : `Assertion weakened in test "${before.identity}": ${weakened2.before.matcher} was replaced by weaker ${weakened2.after.matcher} on the same subject.`;
     return makeFinding(RULE12, policy, {
       file: path,
       message,
-      evidence: `${weakened.before.text} -> ${weakened.after.text}`,
+      evidence: `${weakened2.before.text} -> ${weakened2.after.text}`,
       remediation: "Keep the stronger expectation and fix the code under test. If the contract genuinely changed, review the test change explicitly; this rule is warning-only while its precision is measured."
     });
   }
@@ -7425,7 +7425,7 @@ var init_assertion_weakening = __esm({
       surface: ["file"],
       certainty: "heuristic",
       run(changes, policy) {
-        const out2 = [];
+        const out3 = [];
         for (const c of changes) {
           if (c.kind !== "file" || c.op !== "modify" && c.op !== "rename" || c.before == null || c.after == null || langOf(c.path) !== "js" || !isProtected(c.path, policy, "tests") || isProtected(c.path, policy, "snapshots")) {
             continue;
@@ -7436,10 +7436,10 @@ var init_assertion_weakening = __esm({
             const newList = afterBlocks.get(identity2);
             if (!newList || oldList.length !== 1 || newList.length !== 1) continue;
             const f = findingForBlock(c.path, oldList[0], newList[0], policy);
-            if (f) out2.push(f);
+            if (f) out3.push(f);
           }
         }
-        return out2;
+        return out3;
       }
     };
   }
@@ -7499,11 +7499,11 @@ function activeChanges(changes, policy) {
 }
 function evaluate(changes, policy, detectors = allDetectors, view, ctx) {
   const active = activeChanges(changes, policy);
-  const out2 = [];
+  const out3 = [];
   for (const d of detectors) {
     if (d.id !== GUARDED_RULE && !isEnabled(d.id, policy)) continue;
     try {
-      out2.push(...d.run(active, policy, view, ctx));
+      out3.push(...d.run(active, policy, view, ctx));
     } catch (e) {
       process.stderr.write(`tamperward: detector "${d.id}" errored: ${String(e)}
 `);
@@ -7516,12 +7516,12 @@ function evaluate(changes, policy, detectors = allDetectors, view, ctx) {
           remediation: "A rule that cannot run is not a rule that passed. Fix the input or the detector; do not read this as clean.",
           signoff: { required: true, command: `tamperward allow detector-error --reason "..."` }
         };
-        out2.push(failed2);
+        out3.push(failed2);
       }
     }
   }
   const seen = /* @__PURE__ */ new Set();
-  const deduped = out2.filter((f) => {
+  const deduped = out3.filter((f) => {
     const k = key(f);
     if (seen.has(k)) return false;
     seen.add(k);
@@ -7571,30 +7571,30 @@ function ledgerInsideRepo(ledger) {
   return norm2 !== ".." && !norm2.startsWith("../") && !norm2.startsWith("/");
 }
 function validate(r, where) {
-  function bad(msg) {
+  function bad2(msg) {
     throw new PolicyError(`${where}: ${msg}`);
   }
   const show = (v) => JSON.stringify(v) ?? String(v);
-  const out2 = {};
-  if (r.version !== void 0) out2.version = r.version;
+  const out3 = {};
+  if (r.version !== void 0) out3.version = r.version;
   const unknown = Object.keys(r).filter((k) => !TOP_LEVEL_KEYS.has(k));
   if (unknown.length) {
-    bad(`unknown top-level key${unknown.length === 1 ? "" : "s"} ${unknown.map((k) => JSON.stringify(k)).join(", ")} (expected one of ${[...TOP_LEVEL_KEYS].join(", ")})`);
+    bad2(`unknown top-level key${unknown.length === 1 ? "" : "s"} ${unknown.map((k) => JSON.stringify(k)).join(", ")} (expected one of ${[...TOP_LEVEL_KEYS].join(", ")})`);
   }
   if (r.rules !== void 0) {
-    if (!isMapping(r.rules)) bad(`rules must be a mapping of rule name to { severity, enabled, exclude }, got ${show(r.rules)}`);
+    if (!isMapping(r.rules)) bad2(`rules must be a mapping of rule name to { severity, enabled, exclude }, got ${show(r.rules)}`);
     const rules = {};
     for (const [name, cfg] of Object.entries(r.rules)) {
-      if (!isMapping(cfg)) bad(`rules.${name} must be a mapping like { severity: block }, got ${show(cfg)}`);
+      if (!isMapping(cfg)) bad2(`rules.${name} must be a mapping like { severity: block }, got ${show(cfg)}`);
       const { severity, enabled, exclude } = cfg;
       if (severity !== void 0 && !isSeverity(severity)) {
-        bad(`rules.${name}.severity must be "block" or "warn", got ${show(severity)}`);
+        bad2(`rules.${name}.severity must be "block" or "warn", got ${show(severity)}`);
       }
       if (enabled !== void 0 && typeof enabled !== "boolean") {
-        bad(`rules.${name}.enabled must be true or false, got ${show(enabled)}`);
+        bad2(`rules.${name}.enabled must be true or false, got ${show(enabled)}`);
       }
       if (exclude !== void 0 && !isStringList(exclude)) {
-        bad(`rules.${name}.exclude must be a list of globs, got ${show(exclude)}`);
+        bad2(`rules.${name}.exclude must be a list of globs, got ${show(exclude)}`);
       }
       rules[name] = {
         ...severity !== void 0 ? { severity } : {},
@@ -7602,64 +7602,64 @@ function validate(r, where) {
         ...exclude !== void 0 ? { exclude } : {}
       };
     }
-    out2.rules = rules;
+    out3.rules = rules;
   }
   if (r.ignore !== void 0) {
-    if (!isStringList(r.ignore)) bad(`ignore must be a list of globs, got ${show(r.ignore)}`);
-    out2.ignore = r.ignore;
+    if (!isStringList(r.ignore)) bad2(`ignore must be a list of globs, got ${show(r.ignore)}`);
+    out3.ignore = r.ignore;
   }
   if (r.protected !== void 0) {
-    if (!isMapping(r.protected)) bad(`protected must be a mapping of category to a list of globs, got ${show(r.protected)}`);
+    if (!isMapping(r.protected)) bad2(`protected must be a mapping of category to a list of globs, got ${show(r.protected)}`);
     const categories = {};
     for (const [cat, globs4] of Object.entries(r.protected)) {
-      if (!isStringList(globs4)) bad(`protected.${cat} must be a list of globs, got ${show(globs4)}`);
+      if (!isStringList(globs4)) bad2(`protected.${cat} must be a list of globs, got ${show(globs4)}`);
       categories[cat] = globs4;
     }
-    out2.protected = categories;
+    out3.protected = categories;
   }
   if (r.signoff !== void 0) {
-    if (!isMapping(r.signoff)) bad(`signoff must be a mapping, got ${show(r.signoff)}`);
+    if (!isMapping(r.signoff)) bad2(`signoff must be a mapping, got ${show(r.signoff)}`);
     const signoff = {};
     for (const key2 of ["required_for", "requiredFor"]) {
       const v = r.signoff[key2];
       if (v === void 0) continue;
       if (!(Array.isArray(v) && v.every(isSeverity))) {
-        bad(`signoff.${key2} must be a list of "block" / "warn", got ${show(v)}`);
+        bad2(`signoff.${key2} must be a list of "block" / "warn", got ${show(v)}`);
       }
       signoff[key2] = v;
     }
     const ledger = r.signoff.ledger;
-    if (ledger !== void 0 && typeof ledger !== "string") bad(`signoff.ledger must be a path, got ${show(ledger)}`);
+    if (ledger !== void 0 && typeof ledger !== "string") bad2(`signoff.ledger must be a path, got ${show(ledger)}`);
     if (typeof ledger === "string") {
-      if (!ledgerInsideRepo(ledger)) bad(`signoff.ledger must be a relative path inside the repository, got ${show(ledger)}`);
+      if (!ledgerInsideRepo(ledger)) bad2(`signoff.ledger must be a relative path inside the repository, got ${show(ledger)}`);
       signoff.ledger = ledger;
     }
-    out2.signoff = signoff;
+    out3.signoff = signoff;
   }
   if (r.verify !== void 0) {
-    if (!isMapping(r.verify)) bad(`verify must be a mapping like { command: "npm test" }, got ${show(r.verify)}`);
+    if (!isMapping(r.verify)) bad2(`verify must be a mapping like { command: "npm test" }, got ${show(r.verify)}`);
     const v = r.verify;
     const { command, budget, inputs, backend, image } = v;
-    if (command !== void 0 && typeof command !== "string") bad(`verify.command must be a string, got ${show(command)}`);
+    if (command !== void 0 && typeof command !== "string") bad2(`verify.command must be a string, got ${show(command)}`);
     if (budget !== void 0 && !(typeof budget === "number" && Number.isFinite(budget) && budget > 0)) {
-      bad(`verify.budget must be a positive number of seconds, got ${show(budget)}`);
+      bad2(`verify.budget must be a positive number of seconds, got ${show(budget)}`);
     }
-    if (inputs !== void 0 && !isStringList(inputs)) bad(`verify.inputs must be a list of globs, got ${show(inputs)}`);
+    if (inputs !== void 0 && !isStringList(inputs)) bad2(`verify.inputs must be a list of globs, got ${show(inputs)}`);
     if (backend !== void 0 && backend !== "local" && backend !== "container") {
-      bad(`verify.backend must be "local" or "container", got ${show(backend)}`);
+      bad2(`verify.backend must be "local" or "container", got ${show(backend)}`);
     }
     if (image !== void 0 && typeof image !== "string") {
-      bad(`verify.image must be an immutable container image reference, got ${show(image)}`);
+      bad2(`verify.image must be an immutable container image reference, got ${show(image)}`);
     }
     if ((backend ?? "local") === "container") {
-      if (typeof image !== "string") bad('verify.image is required when verify.backend is "container"');
+      if (typeof image !== "string") bad2('verify.image is required when verify.backend is "container"');
       if (!/^(?!-)[^\s@]+@sha256:[0-9a-f]{64}$/i.test(image)) {
-        bad(`verify.image must be pinned by sha256 digest (name@sha256:<64 hex>), got ${show(image)}`);
+        bad2(`verify.image must be pinned by sha256 digest (name@sha256:<64 hex>), got ${show(image)}`);
       }
     } else if (image !== void 0) {
-      bad('verify.image is only valid when verify.backend is "container"');
+      bad2('verify.image is only valid when verify.backend is "container"');
     }
-    out2.verify = {
+    out3.verify = {
       ...command !== void 0 ? { command } : {},
       ...budget !== void 0 ? { budget } : {},
       ...inputs !== void 0 ? { inputs } : {},
@@ -7667,7 +7667,7 @@ function validate(r, where) {
       ...image !== void 0 ? { image } : {}
     };
   }
-  return out2;
+  return out3;
 }
 function parsePolicy(raw, where = POLICY_FILE) {
   const doc = raw ?? {};
@@ -7769,16 +7769,16 @@ function ledgerPath(cwd, policy) {
 function readLedger(cwd, policy) {
   const p = ledgerPath(cwd, policy);
   if (!existsSync5(p)) return [];
-  const out2 = [];
+  const out3 = [];
   for (const line of readFileSync6(p, "utf8").split("\n")) {
     if (!line.trim()) continue;
     try {
       const e = ledgerEntryFrom(JSON.parse(line));
-      if (e) out2.push(e);
+      if (e) out3.push(e);
     } catch {
     }
   }
-  return out2;
+  return out3;
 }
 function appendEntry(cwd, policy, e) {
   const p = ledgerPath(cwd, policy);
@@ -7808,11 +7808,11 @@ function oobToken(want, oob, head) {
       if (!head && t === want) return t;
       continue;
     }
-    const [rule, sha2] = [t.slice(0, at), t.slice(at + 1)];
+    const [rule, sha3] = [t.slice(0, at), t.slice(at + 1)];
     if (rule !== want) continue;
     if (!head) return t;
     const normalizedHead = head.trim().toLowerCase();
-    const normalizedSha = sha2.trim().toLowerCase();
+    const normalizedSha = sha3.trim().toLowerCase();
     if (/^[0-9a-f]+$/.test(normalizedHead) && normalizedSha === normalizedHead) return t;
   }
   return null;
@@ -7850,11 +7850,23 @@ var init_signoff = __esm({
 function machineOutput(payload) {
   return { ...payload, schema_version: MACHINE_SCHEMA_VERSION };
 }
-var MACHINE_SCHEMA_VERSION;
+var MACHINE_SCHEMA_VERSION, RUN_VERDICTS;
 var init_machine_output = __esm({
   "src/machine-output.ts"() {
     "use strict";
     MACHINE_SCHEMA_VERSION = 1;
+    RUN_VERDICTS = [
+      "VERIFIED",
+      "AGENT_TIMEOUT",
+      "AGENT_FAILED",
+      "ENFORCEMENT_FAILED",
+      "CANNOT_ADJUDICATE",
+      "OBJECT_REWRITE",
+      "HISTORY_REWRITE",
+      "DEPENDENCY_DRIFT",
+      "NOT_QUIESCENT",
+      "TRANSIENT_OBSERVER_BLOCK"
+    ];
   }
 });
 
@@ -7874,18 +7886,18 @@ function paint(s, code2, on) {
   return on ? code2 + s + RESET : s;
 }
 function wrap(text, width) {
-  const out2 = [];
+  const out3 = [];
   let cur = "";
   for (const w of stripControl(text).split(/\s+/).filter(Boolean)) {
     if (cur === "") cur = w;
     else if (cur.length + 1 + w.length <= width) cur += " " + w;
     else {
-      out2.push(cur);
+      out3.push(cur);
       cur = w;
     }
   }
-  if (cur) out2.push(cur);
-  return out2.length ? out2 : [""];
+  if (cur) out3.push(cur);
+  return out3.length ? out3 : [""];
 }
 function stripControl(v) {
   let outStr = "";
@@ -7925,15 +7937,15 @@ function renderText(input, opts) {
   const blocks2 = findings.filter((f) => f.severity === "block");
   const warns = findings.filter((f) => f.severity === "warn");
   const c = opts.colour;
-  const out2 = [];
+  const out3 = [];
   if (findings.length === 0) {
     return `${paint("tamperward: clean", GREEN, c)} \u2014 no integrity findings (${scopePhrase(scanned, ignoredFiles)}).
 `;
   }
   const headColour = blocks2.length ? RED : YELLOW;
-  out2.push(paint(`tamperward: ${countsPhrase(blocks2.length, warns.length)}`, BOLD + headColour, c));
-  out2.push(paint(`(${scopePhrase(scanned, ignoredFiles)})`, DIM, c));
-  out2.push("");
+  out3.push(paint(`tamperward: ${countsPhrase(blocks2.length, warns.length)}`, BOLD + headColour, c));
+  out3.push(paint(`(${scopePhrase(scanned, ignoredFiles)})`, DIM, c));
+  out3.push("");
   const LABEL = "sign-off".length;
   const pad = (k) => (k + " ".repeat(LABEL)).slice(0, LABEL);
   const body = Math.max(20, opts.width - LABEL - 6);
@@ -7941,22 +7953,22 @@ function renderText(input, opts) {
     const isBlock = f.severity === "block";
     const mark = paint(isBlock ? "BLOCK" : "warn ", isBlock ? BOLD + RED : YELLOW, c);
     const loc = f.file ? `${stripControl(escapeControl(f.file))}${f.line ? `:${f.line}` : ""}` : "(command)";
-    out2.push(`  ${mark}  ${paint(stripControl(f.rule), BOLD, c)}  ${paint(loc, DIM, c)}`);
-    for (const l of wrap(f.message, opts.width - 4)) out2.push(`    ${l}`);
+    out3.push(`  ${mark}  ${paint(stripControl(f.rule), BOLD, c)}  ${paint(loc, DIM, c)}`);
+    for (const l of wrap(f.message, opts.width - 4)) out3.push(`    ${l}`);
     const row = (key2, lines) => {
-      lines.forEach((l, i) => out2.push(`    ${paint(pad(i === 0 ? key2 : ""), DIM, c)}  ${l}`));
+      lines.forEach((l, i) => out3.push(`    ${paint(pad(i === 0 ? key2 : ""), DIM, c)}  ${l}`));
     };
     row("evidence", [paint(clip(f.evidence, body), DIM, c)]);
     row("instead", wrap(f.remediation, body));
     if (f.signoff.required) row("sign-off", [stripControl(f.signoff.command)]);
-    out2.push("");
+    out3.push("");
   }
   if (blocks2.length > 0) {
-    out2.push(
+    out3.push(
       wrap(SIGNOFF_NOTE, opts.width - 2).map((l) => paint(l, DIM, c)).join("\n")
     );
   }
-  return out2.join("\n").replace(/\n+$/, "") + "\n";
+  return out3.join("\n").replace(/\n+$/, "") + "\n";
 }
 var ESC, RESET, BOLD, DIM, RED, YELLOW, GREEN, SIGNOFF_NOTE;
 var init_text = __esm({
@@ -8009,10 +8021,10 @@ function locationCell(f, env) {
   const label = `${f.file}${f.line ? `:${f.line}` : ""}`;
   const server = env.GITHUB_SERVER_URL;
   const repo = env.GITHUB_REPOSITORY;
-  const sha2 = env.GITHUB_SHA;
-  if (!server || !repo || !sha2) return `\`${cell(mdCode(label))}\``;
+  const sha3 = env.GITHUB_SHA;
+  if (!server || !repo || !sha3) return `\`${cell(mdCode(label))}\``;
   const frag = f.line ? `#L${f.line}` : "";
-  return `[\`${cell(mdCode(label))}\`](${server}/${repo}/blob/${sha2}/${mdUrl(f.file)}${frag})`;
+  return `[\`${cell(mdCode(label))}\`](${server}/${repo}/blob/${sha3}/${mdUrl(f.file)}${frag})`;
 }
 function renderSummary(input, env = process.env) {
   const findings = orderFindings(input.findings);
@@ -8025,7 +8037,7 @@ function renderSummary(input, env = process.env) {
 No integrity findings (${scope}).
 `;
   }
-  const out2 = [
+  const out3 = [
     `## Tamperward: ${countsPhrase(blocks2.length, warns.length)}`,
     "",
     `${scope}. Every finding below is also annotated on the diff in **Files changed**.`,
@@ -8035,21 +8047,21 @@ No integrity findings (${scope}).
   ];
   for (const f of findings) {
     const sev = f.severity === "block" ? "**BLOCK**" : "warn";
-    out2.push(
+    out3.push(
       `| ${sev} | \`${cell(f.rule)}\` | ${locationCell(f, env)} | ${cell(f.message)} | ${cell(f.remediation)} |`
     );
   }
   const needSignoff = findings.filter((f) => f.signoff.required);
   if (needSignoff.length) {
-    out2.push("", "### Clearing a blocking finding", "", SIGNOFF_NOTE, "");
+    out3.push("", "### Clearing a blocking finding", "", SIGNOFF_NOTE, "");
     const seen = /* @__PURE__ */ new Set();
     for (const f of needSignoff) {
       if (seen.has(f.signoff.command)) continue;
       seen.add(f.signoff.command);
-      out2.push(`- \`${cell(f.signoff.command)}\``);
+      out3.push(`- \`${cell(f.signoff.command)}\``);
     }
   }
-  return out2.join("\n") + "\n";
+  return out3.join("\n") + "\n";
 }
 function writeSummary(md, env = process.env) {
   const path = env.GITHUB_STEP_SUMMARY;
@@ -8285,14 +8297,14 @@ import { isAbsolute as isAbsolute7, join as join11 } from "node:path";
 import { execFileSync as execFileSync5 } from "node:child_process";
 function ptreeFrom(value) {
   if (!isRecord(value)) return null;
-  const out2 = {};
+  const out3 = {};
   for (const [path, entry] of Object.entries(value)) {
     if (!isRecord(entry)) return null;
     const { hash, mode, size, mtimeMs } = entry;
     if (typeof hash !== "string" || typeof mode !== "number" || typeof size !== "number" || typeof mtimeMs !== "number") return null;
-    out2[path] = { hash, mode, size, mtimeMs };
+    out3[path] = { hash, mode, size, mtimeMs };
   }
-  return out2;
+  return out3;
 }
 function gitDir2(cwd) {
   try {
@@ -8331,7 +8343,7 @@ function snapshotProtected(cwd, policy, prev, cache2) {
   void prev;
   cache2?.beginSnapshot();
   const entryAt = (rel) => cache2 ? cache2.entry(cwd, rel, () => entryOf(inspectRel(cwd, rel))) : entryOf(inspectRel(cwd, rel));
-  const out2 = {};
+  const out3 = {};
   const keep = (rel) => isProtected(rel, policy);
   let pruned = /* @__PURE__ */ new Set();
   let listed = [];
@@ -8360,12 +8372,12 @@ function snapshotProtected(cwd, policy, prev, cache2) {
         continue;
       }
       if (st.isDirectory()) walk2(r);
-      else if (keep(r)) out2[r] = entryAt(r);
+      else if (keep(r)) out3[r] = entryAt(r);
     }
   };
   walk2("");
-  for (const rel of listed) if (out2[rel] === void 0) out2[rel] = entryAt(rel);
-  return out2;
+  for (const rel of listed) if (out3[rel] === void 0) out3[rel] = entryAt(rel);
+  return out3;
 }
 function driftBetween(expected, current) {
   const changed = [];
@@ -8669,8 +8681,8 @@ function runWatch(args) {
     else if (args[i] === "--base" && args[i + 1]) base = args[++i];
   }
   const policy = base ? loadPolicyAt(base, dir) ?? defaultPolicy() : loadPolicy(dir);
-  const out2 = log ?? defaultEventLog(dir);
-  const watcher = startWatcher(dir, out2, policy);
+  const out3 = log ?? defaultEventLog(dir);
+  const watcher = startWatcher(dir, out3, policy);
   let closing = false;
   const shutdown = () => {
     if (closing) return;
@@ -8681,7 +8693,7 @@ function runWatch(args) {
   process.once("SIGTERM", shutdown);
   process.once("SIGINT", shutdown);
   process.stdout.write(
-    `tamperward watch: recording protected-file events under ${dir} -> ${out2} (health: ${watcherHealthPath(out2)}${base ? `; trusted base: ${base}` : ""})
+    `tamperward watch: recording protected-file events under ${dir} -> ${out3} (health: ${watcherHealthPath(out3)}${base ? `; trusted base: ${base}` : ""})
 `
   );
   return -1;
@@ -8912,7 +8924,7 @@ function transientFindings(events, persistentPaths, policy, finalHash) {
     arr.push(e);
     byPath.set(e.path, arr);
   }
-  const out2 = [];
+  const out3 = [];
   const strict = process.env.TAMPERWARD_TRANSIENT === "block";
   for (const [path, evs] of byPath) {
     if (persistentPaths.has(path)) continue;
@@ -8935,9 +8947,9 @@ function transientFindings(events, persistentPaths, policy, finalHash) {
       f.severity = "block";
       f.signoff.required = true;
     }
-    out2.push(f);
+    out3.push(f);
   }
-  return out2;
+  return out3;
 }
 var RULE13, MAX_EVENT_READ_BYTES, MAX_EVENT_SWEEP_BYTES, DEFAULT_EVENT_READ_IO;
 var init_fs_events = __esm({
@@ -9524,12 +9536,12 @@ function pidAlive2(pid) {
   }
 }
 function listening(socket) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve15) => {
     const sock = createConnection2(socket);
     const done = (v) => {
       clearTimeout(timer);
       sock.destroy();
-      resolve11(v);
+      resolve15(v);
     };
     const timer = setTimeout(() => done(false), 1e3);
     sock.once("connect", () => done(true));
@@ -9682,11 +9694,11 @@ async function startHookService(opts) {
   });
   const umask = process.umask(63);
   try {
-    await new Promise((resolve11, reject) => {
+    await new Promise((resolve15, reject) => {
       server.once("error", reject);
       server.listen(paths.socket, () => {
         server.off("error", reject);
-        resolve11();
+        resolve15();
       });
     });
   } finally {
@@ -9703,14 +9715,14 @@ async function startHookService(opts) {
     get served() {
       return served;
     },
-    close: () => new Promise((resolve11) => {
-      if (closed) return resolve11();
+    close: () => new Promise((resolve15) => {
+      if (closed) return resolve15();
       closed = true;
       setSnapshotCache(null);
       server.close(() => {
         removeQuietly(paths.socket);
         removeQuietly(paths.state);
-        resolve11();
+        resolve15();
       });
     })
   };
@@ -10175,8 +10187,8 @@ function planClaudeHooks(cwd) {
 }
 function hooksDir(cwd) {
   try {
-    const out2 = execFileSync6("git", ["rev-parse", "--git-path", "hooks"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
-    if (out2) return resolve3(cwd, out2);
+    const out3 = execFileSync6("git", ["rev-parse", "--git-path", "hooks"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    if (out3) return resolve3(cwd, out3);
   } catch {
   }
   return existsSync10(join14(cwd, ".git")) ? join14(cwd, ".git", "hooks") : null;
@@ -10252,8 +10264,8 @@ ${block.join("\n")}
   const lines = existing.split("\n");
   const dead = unconditionalExitAt(lines);
   const at = lines.findIndex((l) => PRECOMMIT_RE.test(l));
-  const write = (out2) => {
-    writeFileSync7(path, out2.join("\n"));
+  const write = (out3) => {
+    writeFileSync7(path, out3.join("\n"));
     chmodSync2(path, 493);
   };
   if (at !== -1 && (dead === -1 || at < dead)) {
@@ -10288,9 +10300,9 @@ ${block.join("\n")}
       status: "update",
       detail: `move the staged check above line ${dead + 1} (\`${lines[dead].trim()}\`), which ended the script before it ran`,
       apply: () => {
-        const out2 = lines.filter((_, i) => i !== at && i !== at - 1);
-        out2.splice(dead, 0, ...block);
-        write(out2);
+        const out3 = lines.filter((_, i) => i !== at && i !== at - 1);
+        out3.splice(dead, 0, ...block);
+        write(out3);
       }
     };
   }
@@ -10301,9 +10313,9 @@ ${block.join("\n")}
       status: "update",
       detail: `insert the staged check above line ${dead + 1} (\`${lines[dead].trim()}\`), which ends the script \u2014 ${note}`,
       apply: () => {
-        const out2 = [...lines];
-        out2.splice(dead, 0, ...block);
-        write(out2);
+        const out3 = [...lines];
+        out3.splice(dead, 0, ...block);
+        write(out3);
       }
     };
   }
@@ -11086,20 +11098,20 @@ function streamFromRaw(value) {
   };
 }
 function scrubDiagnosticText(input) {
-  let out2 = "";
+  let out3 = "";
   for (const ch of input) {
     const cp = ch.codePointAt(0) ?? 0;
     if (ch === "\n" || ch === "	") {
-      out2 += ch;
+      out3 += ch;
     } else if (cp === 13) {
-      out2 += "\\r";
+      out3 += "\\r";
     } else if (cp < 32 || cp >= 127 && cp <= 159) {
-      out2 += cp <= 255 ? `\\x${cp.toString(16).padStart(2, "0")}` : `\\u{${cp.toString(16)}}`;
+      out3 += cp <= 255 ? `\\x${cp.toString(16).padStart(2, "0")}` : `\\u{${cp.toString(16)}}`;
     } else {
-      out2 += ch;
+      out3 += ch;
     }
   }
-  return out2;
+  return out3;
 }
 function diagnosticLines(stage, diagnostics) {
   const lines = [];
@@ -11897,16 +11909,16 @@ function driveRelativeLinkTarget(target) {
 function rootedLinkTarget(target) {
   return isAbsolute10(target) || driveRelativeLinkTarget(target);
 }
-function safeSymlink(target, out2, root, label) {
-  if (rootedLinkTarget(target) || !inside2(root, resolve6(dirname7(out2), target))) {
+function safeSymlink(target, out3, root, label) {
+  if (rootedLinkTarget(target) || !inside2(root, resolve6(dirname7(out3), target))) {
     throw linkEscape(label, target);
   }
-  rmSync5(out2, { force: true });
-  symlinkSync(target, out2);
+  rmSync5(out3, { force: true });
+  symlinkSync(target, out3);
 }
-function validateSymlinkGraph(target, out2, root, dependencyRoot, label) {
+function validateSymlinkGraph(target, out3, root, dependencyRoot, label) {
   let domain = "tree";
-  let stack = linkParts(relative5(root, dirname7(out2)));
+  let stack = linkParts(relative5(root, dirname7(out3)));
   const pending = linkParts(target);
   const seen = /* @__PURE__ */ new Set();
   let hops = 0;
@@ -11983,16 +11995,16 @@ function materialize(cwd, dest, dependencyRoot) {
     } catch {
       continue;
     }
-    const out2 = join18(dest, rel);
-    mkdirSync7(dirname7(out2), { recursive: true });
-    dropSymlink(out2);
+    const out3 = join18(dest, rel);
+    mkdirSync7(dirname7(out3), { recursive: true });
+    dropSymlink(out3);
     if (st.isSymbolicLink()) {
       const target = readlinkSync3(src);
-      safeSymlink(target, out2, dest, rel);
-      links.push({ rel, out: out2, target });
+      safeSymlink(target, out3, dest, rel);
+      links.push({ rel, out: out3, target });
     } else if (st.isFile()) {
-      cpSync(src, out2, { dereference: true });
-      chmodSync3(out2, st.mode);
+      cpSync(src, out3, { dereference: true });
+      chmodSync3(out3, st.mode);
     } else {
       throw new Error(`${rel} is ${st.isDirectory() ? "a directory" : "a special file"} where git expects a file`);
     }
@@ -12075,16 +12087,16 @@ function overlayPristine(cwd, base, dest, policy, cmd, dependencyRoot) {
       throw new Error(`the base's ${e.path} is a submodule; the pristine copy cannot reproduce it`);
     }
     const content = execFileSync8("git", ["show", `${base}:${e.path}`], { cwd, maxBuffer: 1 << 28, env: trustedGitEnv() });
-    const out2 = join18(dest, e.path);
-    mkdirSync7(dirname7(out2), { recursive: true });
-    rmSync5(out2, { force: true });
+    const out3 = join18(dest, e.path);
+    mkdirSync7(dirname7(out3), { recursive: true });
+    rmSync5(out3, { force: true });
     if (e.mode === "120000") {
       const target = content.toString("utf8");
-      safeSymlink(target, out2, dest, `the base's ${e.path}`);
-      restoredLinks.push({ path: e.path, out: out2, target });
+      safeSymlink(target, out3, dest, `the base's ${e.path}`);
+      restoredLinks.push({ path: e.path, out: out3, target });
     } else {
-      writeFileSync9(out2, content);
-      chmodSync3(out2, parseInt(e.mode.slice(-4), 8) & 511);
+      writeFileSync9(out3, content);
+      chmodSync3(out3, parseInt(e.mode.slice(-4), 8) & 511);
     }
     restored.push(e.path);
   }
@@ -12204,18 +12216,18 @@ function stageJson(result) {
     ...result.diagnostics ? { diagnostics: diagnosticsJson(result.diagnostics, includeTail) } : {}
   };
 }
-function renderStageDiagnostics(out2, stage, result) {
+function renderStageDiagnostics(out3, stage, result) {
   if (!result.diagnostics) return;
-  for (const line of diagnosticLines(stage, result.diagnostics)) out2(line);
+  for (const line of diagnosticLines(stage, result.diagnostics)) out3(line);
 }
 function runVerify(opts) {
   const cwd = opts.cwd ?? process.cwd();
-  const out2 = opts.silent ? (_s) => {
+  const out3 = opts.silent ? (_s) => {
   } : (s) => void process.stdout.write(s + "\n");
   const cannotVerify = (reason, detail, extra = {}) => {
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason, ...detail ? { detail } : {} });
     if (opts.json) {
-      out2(JSON.stringify({
+      out3(JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason,
@@ -12223,7 +12235,7 @@ function runVerify(opts) {
         ...extra
       }));
     } else if (detail) {
-      out2(`verify: ${detail} \u2014 failing closed`);
+      out3(`verify: ${detail} \u2014 failing closed`);
     }
     return 2;
   };
@@ -12261,7 +12273,7 @@ function runVerify(opts) {
   if (!verifierBackend.available) {
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: "VERIFIER_BACKEND_UNAVAILABLE", ...verifierBackend.reason ? { detail: verifierBackend.reason } : {} });
     if (opts.json) {
-      out2(JSON.stringify({
+      out3(JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: "VERIFIER_BACKEND_UNAVAILABLE",
@@ -12269,8 +12281,8 @@ function runVerify(opts) {
         oracle_assurance: oracleAssuranceReport()
       }));
     } else {
-      out2("verify: isolated verifier backend is unavailable \u2014 failing closed");
-      out2("verify: " + (verifierBackend.reason ?? "unknown backend failure"));
+      out3("verify: isolated verifier backend is unavailable \u2014 failing closed");
+      out3("verify: " + (verifierBackend.reason ?? "unknown backend failure"));
     }
     return 2;
   }
@@ -12278,7 +12290,7 @@ function runVerify(opts) {
   if (!isolated && !localVerifierShell(process.platform, cmd)) {
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: "LOCAL_VERIFIER_UNSUPPORTED_PLATFORM", detail: `checkpointed-local verifier is unsupported on ${process.platform}` });
     if (opts.json) {
-      out2(JSON.stringify({
+      out3(JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: "LOCAL_VERIFIER_UNSUPPORTED_PLATFORM",
@@ -12287,7 +12299,7 @@ function runVerify(opts) {
         oracle_assurance: oracleAssuranceReport()
       }));
     } else {
-      out2(
+      out3(
         `verify: checkpointed-local verifier is unsupported on ${process.platform}; no trusted local shell contract is defined. Failing closed before candidate execution.`
       );
     }
@@ -12302,7 +12314,7 @@ function runVerify(opts) {
   if (dependencyEnvironment?.status === "unattestable" && !opts.allowDepDrift) {
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: "DEPENDENCY_ENVIRONMENT_UNATTESTABLE", ...dependencyEnvironment.reason ? { detail: dependencyEnvironment.reason } : {} });
     if (opts.json) {
-      out2(JSON.stringify({
+      out3(JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: "DEPENDENCY_ENVIRONMENT_UNATTESTABLE",
@@ -12311,8 +12323,8 @@ function runVerify(opts) {
         oracle_assurance: oracleAssuranceReport()
       }));
     } else {
-      out2("verify: dependency environment is not attestable \u2014 failing closed");
-      out2("verify: " + (dependencyEnvironment.reason ?? "unknown dependency environment"));
+      out3("verify: dependency environment is not attestable \u2014 failing closed");
+      out3("verify: " + (dependencyEnvironment.reason ?? "unknown dependency environment"));
     }
     return 2;
   }
@@ -12363,7 +12375,7 @@ function runVerify(opts) {
     const exhausted = visible.failure === "resource";
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: exhausted ? "VERIFIER_RESOURCE_EXHAUSTED" : "VERIFIER_BACKEND_RUNTIME_FAILURE", ...visible.reason ? { detail: visible.reason } : {} });
     if (opts.json) {
-      out2(JSON.stringify({
+      out3(JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: exhausted ? "VERIFIER_RESOURCE_EXHAUSTED" : "VERIFIER_BACKEND_RUNTIME_FAILURE",
@@ -12375,11 +12387,11 @@ function runVerify(opts) {
         oracle_assurance: oracleAssuranceReport()
       }));
     } else {
-      out2(
+      out3(
         exhausted ? "verify: isolated verifier resource envelope was exhausted during the visible stage \u2014 failing closed" : "verify: verifier execution backend failed while running the visible stage \u2014 failing closed"
       );
-      if (visible.reason) out2("verify: " + visible.reason);
-      renderStageDiagnostics(out2, "visible", visible);
+      if (visible.reason) out3("verify: " + visible.reason);
+      renderStageDiagnostics(out3, "visible", visible);
     }
     return 2;
   }
@@ -12430,7 +12442,7 @@ function runVerify(opts) {
     const exhausted = pristine.failure === "resource";
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: exhausted ? "VERIFIER_RESOURCE_EXHAUSTED" : "VERIFIER_BACKEND_RUNTIME_FAILURE", ...pristine.reason ? { detail: pristine.reason } : {} });
     if (opts.json) {
-      out2(JSON.stringify({
+      out3(JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: exhausted ? "VERIFIER_RESOURCE_EXHAUSTED" : "VERIFIER_BACKEND_RUNTIME_FAILURE",
@@ -12442,11 +12454,11 @@ function runVerify(opts) {
         oracle_assurance: oracleAssuranceReport()
       }));
     } else {
-      out2(
+      out3(
         exhausted ? "verify: isolated verifier resource envelope was exhausted during the pristine stage \u2014 failing closed" : "verify: verifier execution backend failed while running the pristine stage \u2014 failing closed"
       );
-      if (pristine.reason) out2("verify: " + pristine.reason);
-      renderStageDiagnostics(out2, "pristine", pristine);
+      if (pristine.reason) out3("verify: " + pristine.reason);
+      renderStageDiagnostics(out3, "pristine", pristine);
     }
     return 2;
   }
@@ -12488,7 +12500,7 @@ function runVerify(opts) {
   const signedOff = verdict2 === "MASKED_FAILURE" ? oobToken("verify", oobFromEnv(), oobHeadFromEnv()) : null;
   if (signedOff) code2 = 0;
   if (opts.json) {
-    out2(
+    out3(
       JSON.stringify({
         schema_version: MACHINE_SCHEMA_VERSION,
         verdict: verdict2,
@@ -12513,28 +12525,28 @@ function runVerify(opts) {
       SUITE_RED: `suite red: the visible suite fails (exit ${visible.exit}) \u2014 fix the code first (pristine exit ${pristine.exit}).`,
       BUDGET_EXCEEDED: `budget exceeded (${budget}s): could not verify \u2014 failing closed, not open.`
     };
-    out2(`tamperward verify \u2014 ${lines[verdict2]}`);
-    out2(`verifier backend: ${verifierBackendSummary(verifierBackend)}`);
-    out2(
+    out3(`tamperward verify \u2014 ${lines[verdict2]}`);
+    out3(`verifier backend: ${verifierBackendSummary(verifierBackend)}`);
+    out3(
       "oracle assurance: suite-exit-only (candidate source executes inside the suite process; execution-domain isolation is not semantic/oracle isolation)"
     );
-    out2(
+    out3(
       dependencyEnvironment ? `dependency environment: ${dependencyEnvironmentSummary(dependencyEnvironment)}` + (opts.allowDepDrift && dependencyEnvironment.status === "unattestable" ? " (operator override)" : "") : `dependency environment: verifier-owned by ${verifierBackend.image ?? "isolated image"}`
     );
     if (verdict2 !== "VERIFIED") {
       if (visible.exit !== 0 || visible.failure !== void 0) {
-        renderStageDiagnostics(out2, "visible", visible);
+        renderStageDiagnostics(out3, "visible", visible);
       }
       if (pristine.exit !== 0 || pristine.failure !== void 0) {
-        renderStageDiagnostics(out2, "pristine", pristine);
+        renderStageDiagnostics(out3, "pristine", pristine);
       }
     }
     if (signedOff)
-      out2(
+      out3(
         `masked failure cleared by out-of-band approval (tamperward:allow:${signedOff}): a reviewer accepted that the original suite no longer applies to this change. Exit 0.`
       );
     if (removedAdded > 0)
-      out2(
+      out3(
         `(${removedAdded} protected file(s) added since ${base.slice(0, 10)} were removed from the pristine run: the pristine tree carries exactly the base's protected surface.)`
       );
   }
@@ -12998,18 +13010,18 @@ function nowTicks() {
   }
 }
 function survivorsHoldingTree(cwd, spawnedAfterTicks) {
-  const out2 = [];
+  const out3 = [];
   let real;
   try {
     real = realpathSync7(cwd);
   } catch {
-    return out2;
+    return out3;
   }
   let pids;
   try {
     pids = readdirSync4("/proc").filter((d) => /^\d+$/.test(d));
   } catch {
-    return out2;
+    return out3;
   }
   for (const pid of pids) {
     const n = Number(pid);
@@ -13038,9 +13050,9 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
       } catch {
       }
     }
-    if (holds) out2.push(n);
+    if (holds) out3.push(n);
   }
-  return out2;
+  return out3;
 }
 function runEnvelope(opts) {
   const cwd = resolve7(opts.cwd ?? process.cwd());
@@ -13137,6 +13149,7 @@ function runEnvelope(opts) {
     opts.lifecycleTestMode,
     opts.json === true
   );
+  opts.onAgentResult?.(agentRun);
   const agentExit = agentRun.exit;
   const agentTimedOut = agentRun.timedOut;
   const emitRunJson = (verdict3, exitCode2, extra = {}, complete = false) => {
@@ -14231,7 +14244,7 @@ function unescapeStraceString(s) {
   return s.replace(/\\([0-7]{1,3})/g, (_m, oct) => String.fromCharCode(parseInt(oct, 8))).replace(/\\x([0-9a-fA-F]{2})/g, (_m, hex) => String.fromCharCode(parseInt(hex, 16))).replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
 }
 function parseStraceFileAccess(raw) {
-  const out2 = [];
+  const out3 = [];
   const seen = /* @__PURE__ */ new Set();
   for (const line of raw.split("\n")) {
     if (!line.trim() || /\)\s+=\s+-1\b/.test(line)) continue;
@@ -14246,9 +14259,9 @@ function parseStraceFileAccess(raw) {
     const key2 = `${access}\0${path}`;
     if (seen.has(key2)) continue;
     seen.add(key2);
-    out2.push({ path, access });
+    out3.push({ path, access });
   }
-  return out2;
+  return out3;
 }
 function inside3(root, path) {
   const rel = relative6(resolve9(root), resolve9(path));
@@ -14425,14 +14438,14 @@ function runOneTrace(cwd, base, command, budget) {
   }
 }
 function renderText2(report2) {
-  const out2 = (s = "") => void process.stdout.write(s + "\n");
-  out2("tamperward trace-verify \u2014 ADVISORY observation, not an enforcement verdict");
-  out2(`trusted base: ${report2.base}`);
-  out2(`command: ${report2.command}`);
-  out2(`runs: ${report2.runs_completed}/${report2.runs_requested}; exits: ${report2.run_exits.join(", ")}`);
-  out2();
-  out2("repository inputs observed:");
-  if (!report2.repository_inputs.length) out2("  (none)");
+  const out3 = (s = "") => void process.stdout.write(s + "\n");
+  out3("tamperward trace-verify \u2014 ADVISORY observation, not an enforcement verdict");
+  out3(`trusted base: ${report2.base}`);
+  out3(`command: ${report2.command}`);
+  out3(`runs: ${report2.runs_completed}/${report2.runs_requested}; exits: ${report2.run_exits.join(", ")}`);
+  out3();
+  out3("repository inputs observed:");
+  if (!report2.repository_inputs.length) out3("  (none)");
   for (const item of report2.repository_inputs) {
     const flags = [
       item.covered ? "covered" : "UNCOVERED",
@@ -14440,22 +14453,22 @@ function renderText2(report2) {
       item.dynamic ? `dynamic ${item.observed_runs}/${report2.runs_completed}` : null,
       item.accesses.join("+")
     ].filter(Boolean).join(", ");
-    out2(`  ${item.path}  [${flags}]`);
+    out3(`  ${item.path}  [${flags}]`);
   }
-  out2();
-  out2("external dependency/runtime paths observed:");
-  if (!report2.external_inputs.length) out2("  (none)");
+  out3();
+  out3("external dependency/runtime paths observed:");
+  if (!report2.external_inputs.length) out3("  (none)");
   for (const item of report2.external_inputs) {
-    out2(
+    out3(
       `  ${item.path}  [${item.accesses.join("+")}${item.dynamic ? `, dynamic ${item.observed_runs}/${report2.runs_completed}` : ""}]`
     );
   }
-  out2();
-  out2("candidate verify.inputs entries for HUMAN REVIEW:");
-  if (!report2.suggested_verify_inputs.length) out2("  (none \u2014 all observed tracked inputs are already covered)");
-  for (const path of report2.suggested_verify_inputs) out2(`  - ${JSON.stringify(path)}`);
-  out2();
-  for (const note of report2.notes) out2(`note: ${note}`);
+  out3();
+  out3("candidate verify.inputs entries for HUMAN REVIEW:");
+  if (!report2.suggested_verify_inputs.length) out3("  (none \u2014 all observed tracked inputs are already covered)");
+  for (const path of report2.suggested_verify_inputs) out3(`  - ${JSON.stringify(path)}`);
+  out3();
+  for (const note of report2.notes) out3(`note: ${note}`);
 }
 function runTraceVerify(opts = {}) {
   const cwd = resolve9(opts.cwd ?? process.cwd());
@@ -14554,17 +14567,17 @@ function runTraceVerify(opts = {}) {
   return report2.trace_complete ? 0 : 1;
 }
 function parseTraceVerify(args) {
-  const out2 = {};
+  const out3 = {};
   for (let i = 0; i < args.length; i++) {
     const a = args[i];
-    if (a === "--json") out2.json = true;
-    else if (a === "--base") out2.base = args[++i];
-    else if (a === "--cmd") out2.cmd = args[++i];
-    else if (a === "--cwd") out2.cwd = args[++i];
-    else if (a === "--budget") out2.budget = Number(args[++i]);
-    else if (a === "--runs") out2.runs = Number(args[++i]);
+    if (a === "--json") out3.json = true;
+    else if (a === "--base") out3.base = args[++i];
+    else if (a === "--cmd") out3.cmd = args[++i];
+    else if (a === "--cwd") out3.cwd = args[++i];
+    else if (a === "--budget") out3.budget = Number(args[++i]);
+    else if (a === "--runs") out3.runs = Number(args[++i]);
   }
-  return out2;
+  return out3;
 }
 var TRACE_ROOT, CONFIG_BASENAMES;
 var init_trace_verify = __esm({
@@ -14617,9 +14630,9 @@ function readlineAsker(input, output) {
   let pending = null;
   rl.on("close", () => {
     closed = true;
-    const resolve11 = pending;
+    const resolve15 = pending;
     pending = null;
-    resolve11?.(null);
+    resolve15?.(null);
   });
   rl.on("SIGINT", () => rl.close());
   const ask = (question) => new Promise((resolvePromise) => {
@@ -14712,8 +14725,8 @@ function writeVerifyCommand(cwd, command) {
 }
 async function runOnboard(opts, io = {}) {
   const cwd = resolve10(opts.cwd ?? process.cwd());
-  const out2 = io.out ?? ((line) => void process.stdout.write(line + "\n"));
-  const err2 = (line) => void process.stderr.write(line + "\n");
+  const out3 = io.out ?? ((line) => void process.stdout.write(line + "\n"));
+  const err3 = (line) => void process.stderr.write(line + "\n");
   const platform = io.platform ?? process.platform;
   const runners = {
     init: runInit,
@@ -14725,14 +14738,14 @@ async function runOnboard(opts, io = {}) {
   const interactive = io.interactive ?? (Boolean(process.stdin.isTTY) && !process.env.CI && !process.env.GITHUB_ACTIONS);
   const scripted = Boolean(opts.yes);
   if (!interactive && !scripted) {
-    err2("tamperward onboard: stdin is not interactive (or a CI environment was detected), so the guided");
-    err2("setup cannot ask questions. Re-run with --yes for the scripted mode (add --verify-command");
-    err2('"<suite command>" to configure verification; a detected command is never written unscripted),');
-    err2("or run the deterministic primitive directly: tamperward init.");
+    err3("tamperward onboard: stdin is not interactive (or a CI environment was detected), so the guided");
+    err3("setup cannot ask questions. Re-run with --yes for the scripted mode (add --verify-command");
+    err3('"<suite command>" to configure verification; a detected command is never written unscripted),');
+    err3("or run the deterministic primitive directly: tamperward init.");
     return 2;
   }
   if (!isGitRepo(cwd)) {
-    err2(`tamperward onboard: ${cwd} is not inside a git repository \u2014 run \`git init\` first; every enforcement point is git-anchored`);
+    err3(`tamperward onboard: ${cwd} is not inside a git repository \u2014 run \`git init\` first; every enforcement point is git-anchored`);
     return 2;
   }
   const prompt = { asker: null };
@@ -14751,8 +14764,8 @@ async function runOnboard(opts, io = {}) {
   let step = 0;
   const header = (n) => {
     step = n;
-    out2("");
-    out2(`== ${n}/${STEPS.length} ${STEPS[n - 1]} ==`);
+    out3("");
+    out3(`== ${n}/${STEPS.length} ${STEPS[n - 1]} ==`);
   };
   const wrote = [];
   let verifyCommand;
@@ -14763,67 +14776,67 @@ async function runOnboard(opts, io = {}) {
   let doctorOutcome = null;
   try {
     header(1);
-    out2(`TamperWard ${TW_VERSION} on Node ${process.versions.node} (${platform}/${process.arch}), repository ${cwd}`);
+    out3(`TamperWard ${TW_VERSION} on Node ${process.versions.node} (${platform}/${process.arch}), repository ${cwd}`);
     const lifecycle = lifecyclePlatformCheck(platform);
-    out2(`platform: [${lifecycle.state}] ${lifecycle.detail}`);
+    out3(`platform: [${lifecycle.state}] ${lifecycle.detail}`);
     const localVerifySupported = localVerifierShell(platform, "true") !== null;
     if (!localVerifySupported) {
-      out2("platform: checkpointed-local verify is unsupported here; only a digest-pinned container verifier");
-      out2("  (verify.backend: container) can verify on this platform, exactly as the support contract states.");
+      out3("platform: checkpointed-local verify is unsupported here; only a digest-pinned container verifier");
+      out3("  (verify.backend: container) can verify on this platform, exactly as the support contract states.");
     }
     const head = git5(cwd, ["rev-parse", "--verify", "--quiet", "HEAD^{commit}"])?.trim() ?? null;
     if (!head) {
-      out2("history: no commit yet. Verification and the demonstration need a committed base; the wiring can still be written.");
+      out3("history: no commit yet. Verification and the demonstration need a committed base; the wiring can still be written.");
     }
     const status = git5(cwd, ["status", "--porcelain", "--untracked-files=all"]) ?? "";
     const dirty = status.split("\n").filter(Boolean).map((line) => line.slice(3).split(" -> ").at(-1) ?? "");
     const owned = new Set(planInit(cwd).map((a) => a.path));
     const foreign = dirty.filter((p) => !owned.has(p));
     if (dirty.length && foreign.length === 0) {
-      out2(`working tree: ${dirty.length} uncommitted path(s), all written by init \u2014 commit them so the gate travels with the repository.`);
+      out3(`working tree: ${dirty.length} uncommitted path(s), all written by init \u2014 commit them so the gate travels with the repository.`);
     } else if (dirty.length) {
-      out2(`working tree is not clean: ${dirty.length} changed or untracked path(s). Onboarding never stashes,`);
-      out2("resets or edits your changes, but a clean tree makes the first verification easier to read:");
-      out2("commit or stash your work first for the cleanest result.");
+      out3(`working tree is not clean: ${dirty.length} changed or untracked path(s). Onboarding never stashes,`);
+      out3("resets or edits your changes, but a clean tree makes the first verification easier to read:");
+      out3("commit or stash your work first for the cleanest result.");
       if (!await confirm("Continue with a dirty working tree?", false, true)) {
-        out2("Stopped before writing anything. Commit or stash your work, then re-run: tamperward onboard");
+        out3("Stopped before writing anything. Commit or stash your work, then re-run: tamperward onboard");
         return 2;
       }
     } else {
-      out2("working tree: clean");
+      out3("working tree: clean");
     }
     header(2);
-    out2("This is the plan `tamperward init` would apply (the same planner as `init --dry-run`):");
-    out2("");
+    out3("This is the plan `tamperward init` would apply (the same planner as `init --dry-run`):");
+    out3("");
     runners.init({ cwd, dryRun: true });
-    out2("");
-    out2("What each item is for:");
-    out2(`  policy      \u2014 ${POLICY_FILE} holds your overrides; the baseline rules apply even without it.`);
-    out2("  agent hooks \u2014 Claude Code PreToolUse deny + Stop sweep: the steering layer, judged in the loop.");
-    out2("  pre-commit  \u2014 the same engine over the staged diff, so a shortcut cannot be committed quietly.");
-    out2("  CI          \u2014 the authority for the protected branch: check --diff over the PR range plus");
-    out2("                pristine verify; cleared only by a reviewer label bound to the head SHA.");
-    out2("  CODEOWNERS  \u2014 a human requirement on the paths that decide whether the gate runs at all.");
+    out3("");
+    out3("What each item is for:");
+    out3(`  policy      \u2014 ${POLICY_FILE} holds your overrides; the baseline rules apply even without it.`);
+    out3("  agent hooks \u2014 Claude Code PreToolUse deny + Stop sweep: the steering layer, judged in the loop.");
+    out3("  pre-commit  \u2014 the same engine over the staged diff, so a shortcut cannot be committed quietly.");
+    out3("  CI          \u2014 the authority for the protected branch: check --diff over the PR range plus");
+    out3("                pristine verify; cleared only by a reviewer label bound to the head SHA.");
+    out3("  CODEOWNERS  \u2014 a human requirement on the paths that decide whether the gate runs at all.");
     const plan = planInit(cwd);
     const pending = plan.filter((a) => a.apply).length;
     const errors = plan.filter((a) => a.status === "error").length;
     if (pending === 0) {
-      out2("");
-      out2(errors ? "Nothing to write, but item(s) above need your attention." : "Everything is already wired \u2014 nothing to write.");
+      out3("");
+      out3(errors ? "Nothing to write, but item(s) above need your attention." : "Everything is already wired \u2014 nothing to write.");
     } else {
-      out2("");
-      out2("init never overwrites a file you wrote: it creates what is absent and merges what is shared.");
+      out3("");
+      out3("init never overwrites a file you wrote: it creates what is absent and merges what is shared.");
       if (!await confirm(`Write these ${pending} change(s) now?`, false, true)) {
         declined = true;
-        out2("Declined: nothing was written. Re-run `tamperward onboard` when ready, or apply the plan");
-        out2("yourself with `tamperward init` (`--dry-run` prints it again).");
+        out3("Declined: nothing was written. Re-run `tamperward onboard` when ready, or apply the plan");
+        out3("yourself with `tamperward init` (`--dry-run` prints it again).");
       }
     }
     if (!declined && pending > 0) {
       header(3);
       const code2 = runners.init({ cwd });
       wrote.push(...plan.filter((a) => a.apply).map((a) => a.path));
-      if (code2 !== 0) out2("init reported item(s) that need your attention (above); onboarding continues so you can see the rest.");
+      if (code2 !== 0) out3("init reported item(s) that need your attention (above); onboarding continues so you can see the rest.");
     }
     if (!declined) {
       header(4);
@@ -14831,65 +14844,65 @@ async function runOnboard(opts, io = {}) {
       try {
         configured = loadPolicy(cwd).verify?.command?.trim() || void 0;
       } catch (e) {
-        out2(`${POLICY_FILE} does not load (${errorMessage(e)}); fix it, then re-run. verify.command was not configured.`);
+        out3(`${POLICY_FILE} does not load (${errorMessage(e)}); fix it, then re-run. verify.command was not configured.`);
       }
       if (configured) {
-        out2(`verification configured \u2014 ${configured}`);
+        out3(`verification configured \u2014 ${configured}`);
         verifyCommand = configured;
       } else {
-        out2("The verifier command is part of the trust anchor: `verify` re-runs it against a pristine copy of");
-        out2("your suite, and CI fails closed without it. TamperWard never chooses it for you.");
+        out3("The verifier command is part of the trust anchor: `verify` re-runs it against a pristine copy of");
+        out3("your suite, and CI fails closed without it. TamperWard never chooses it for you.");
         const candidates = verifierCandidates(cwd);
         let chosen;
         if (scripted) {
           if (opts.verifyCommand?.trim()) {
             chosen = opts.verifyCommand.trim();
           } else {
-            out2(candidates.length ? `Detected candidate(s): ${candidates.join(", ")}.` : "No suite command was detected.");
-            out2('Scripted mode: verify.command was not written. Pass --verify-command "<suite command>" to set it explicitly.');
+            out3(candidates.length ? `Detected candidate(s): ${candidates.join(", ")}.` : "No suite command was detected.");
+            out3('Scripted mode: verify.command was not written. Pass --verify-command "<suite command>" to set it explicitly.');
           }
         } else if (candidates.length === 1) {
-          out2(`Detected one high-confidence suite command: ${candidates[0]}`);
+          out3(`Detected one high-confidence suite command: ${candidates[0]}`);
           if (await confirm(`Use \`${candidates[0]}\` as verify.command?`, false, false)) chosen = candidates[0];
           else chosen = await ask("Enter the suite command to trust (empty to skip): ") || void 0;
         } else if (candidates.length > 1) {
-          out2("Several suite commands were detected; choose the one that defines merge authority:");
-          candidates.forEach((c, i) => out2(`  ${i + 1}. ${c}`));
+          out3("Several suite commands were detected; choose the one that defines merge authority:");
+          candidates.forEach((c, i) => out3(`  ${i + 1}. ${c}`));
           const a = await ask(`Choose 1-${candidates.length} (${candidates.join(" / ")}), type a command, or press Enter to skip: `);
           const n = Number(a);
           chosen = a === "" ? void 0 : Number.isInteger(n) && n >= 1 && n <= candidates.length ? candidates[n - 1] : a;
         } else {
-          out2("No suite command was detected (no test script, pytest/tox config, Cargo or Go module root).");
+          out3("No suite command was detected (no test script, pytest/tox config, Cargo or Go module root).");
           chosen = await ask("Enter the suite command to trust (empty to skip): ") || void 0;
         }
         if (chosen) {
           const problem = writeVerifyCommand(cwd, chosen);
           if (problem) {
-            out2(`verify.command was not written: ${problem}`);
+            out3(`verify.command was not written: ${problem}`);
           } else {
-            out2(`Wrote verify.command: ${chosen} (budget 300s) to ${POLICY_FILE}. Commit it: with a --base, verify reads`);
-            out2("the policy from that commit, so an uncommitted command is invisible to CI.");
+            out3(`Wrote verify.command: ${chosen} (budget 300s) to ${POLICY_FILE}. Commit it: with a --base, verify reads`);
+            out3("the policy from that commit, so an uncommitted command is invisible to CI.");
             verifyCommand = chosen;
             wrote.push(POLICY_FILE);
           }
         } else {
-          out2("verify.command was not configured. CI will fail closed (exit 2) until it is; add it to");
-          out2(`${POLICY_FILE} under verify: and re-run \`tamperward doctor\`.`);
+          out3("verify.command was not configured. CI will fail closed (exit 2) until it is; add it to");
+          out3(`${POLICY_FILE} under verify: and re-run \`tamperward doctor\`.`);
         }
       }
     }
     if (!declined) {
       header(5);
-      out2("`verify` runs your suite twice: as-is (visible), and with every protected test/snapshot/config");
-      out2("file restored from the trusted base (pristine). The pair is what no diff rule can fake.");
+      out3("`verify` runs your suite twice: as-is (visible), and with every protected test/snapshot/config");
+      out3("file restored from the trusted base (pristine). The pair is what no diff rule can fake.");
       if (!verifyCommand) {
-        out2("Skipped: no verify.command. Standalone `tamperward verify` would report CANNOT_VERIFY");
-        out2("(exit 2) here \u2014 it fails closed rather than pretending to verify.");
+        out3("Skipped: no verify.command. Standalone `tamperward verify` would report CANNOT_VERIFY");
+        out3("(exit 2) here \u2014 it fails closed rather than pretending to verify.");
       } else if (!localVerifySupported) {
-        out2(`Skipped: checkpointed-local verify is unsupported on ${platform}; \`tamperward verify\` fails closed`);
-        out2("(exit 2) before running anything. Configure a digest-pinned container verifier for this platform.");
+        out3(`Skipped: checkpointed-local verify is unsupported on ${platform}; \`tamperward verify\` fails closed`);
+        out3("(exit 2) before running anything. Configure a digest-pinned container verifier for this platform.");
       } else if (!head) {
-        out2("Skipped: no commit to anchor the pristine copy to. Commit, then run: tamperward verify");
+        out3("Skipped: no commit to anchor the pristine copy to. Commit, then run: tamperward verify");
       } else if (await confirm(`Run the first verification now (${verifyCommand}, twice)?`, true, true)) {
         let summary = null;
         const verifyOpts = { cwd, onVerdict: (v) => {
@@ -14898,49 +14911,49 @@ async function runOnboard(opts, io = {}) {
         if (opts.base) verifyOpts.base = opts.base;
         const code2 = runners.verify(verifyOpts);
         verifyResult = { code: code2, summary };
-        out2("");
-        for (const line of explainVerdict(summary, code2)) out2(line);
-        out2(`(verify exited ${code2}; onboarding reports it and changes nothing about it.)`);
+        out3("");
+        for (const line of explainVerdict(summary, code2)) out3(line);
+        out3(`(verify exited ${code2}; onboarding reports it and changes nothing about it.)`);
       } else {
-        out2(`Skipped. Run it any time: tamperward verify${opts.base ? ` --base ${opts.base}` : ""}`);
+        out3(`Skipped. Run it any time: tamperward verify${opts.base ? ` --base ${opts.base}` : ""}`);
       }
     }
     if (!declined && !opts.skipDemo) {
       header(6);
-      out2("Optional: see a finding without risking anything. TamperWard creates a detached temporary");
-      out2("worktree of HEAD, adds `.skip` to one test block THERE, runs `check --worktree` on it, then");
-      out2("removes the worktree. Your working tree is not touched; its fingerprint is shown before and after.");
+      out3("Optional: see a finding without risking anything. TamperWard creates a detached temporary");
+      out3("worktree of HEAD, adds `.skip` to one test block THERE, runs `check --worktree` on it, then");
+      out3("removes the worktree. Your working tree is not touched; its fingerprint is shown before and after.");
       const wanted = scripted ? Boolean(opts.demo) : opts.demo ? true : await confirm("Run the demonstration?", false, false);
       if (!wanted) {
-        out2("Demo skipped.");
+        out3("Demo skipped.");
       } else if (!head) {
-        out2("Demo skipped: no commit to build disposable state from.");
+        out3("Demo skipped: no commit to build disposable state from.");
       } else {
-        runDemo(cwd, head, runners, out2);
+        runDemo(cwd, head, runners, out3);
       }
     }
     header(7);
-    out2("Local wiring steers the agent and gates commits; only the repository can make CI binding.");
+    out3("Local wiring steers the agent and gates commits; only the repository can make CI binding.");
     repo = opts.repo ?? inferGitHubRepo(cwd);
     const doctorCommand = `tamperward doctor --github --repo ${repo ?? "OWNER/REPO"} --branch ${opts.branch ?? "<default-branch>"}`;
     if (opts.noGithub) {
-      out2("--no-github: the GitHub API is not consulted, so nothing below is reported as enforced.");
-      for (const line of MANUAL_CONTROLS) out2(line);
-      out2(`Then verify it with: ${doctorCommand}`);
+      out3("--no-github: the GitHub API is not consulted, so nothing below is reported as enforced.");
+      for (const line of MANUAL_CONTROLS) out3(line);
+      out3(`Then verify it with: ${doctorCommand}`);
     } else if (!repo) {
-      out2("No GitHub repository could be determined (no github.com origin; pass --repo OWNER/REPO).");
-      for (const line of MANUAL_CONTROLS) out2(line);
-      out2(`Then verify it with: ${doctorCommand}`);
+      out3("No GitHub repository could be determined (no github.com origin; pass --repo OWNER/REPO).");
+      for (const line of MANUAL_CONTROLS) out3(line);
+      out3(`Then verify it with: ${doctorCommand}`);
     } else {
-      out2(`Repository: ${repo}${opts.branch ? `, branch ${opts.branch}` : ""}.`);
+      out3(`Repository: ${repo}${opts.branch ? `, branch ${opts.branch}` : ""}.`);
       githubChecked = await confirm(
         "Check the live GitHub controls now with `doctor --github`? (reads the GitHub API; set GH_TOKEN/GITHUB_TOKEN if needed)",
         true,
         true
       );
       if (!githubChecked) {
-        for (const line of MANUAL_CONTROLS) out2(line);
-        out2(`Then verify it with: ${doctorCommand}`);
+        for (const line of MANUAL_CONTROLS) out3(line);
+        out3(`Then verify it with: ${doctorCommand}`);
       }
     }
     header(8);
@@ -14951,48 +14964,48 @@ async function runOnboard(opts, io = {}) {
       if (opts.branch) doctorOpts.branch = opts.branch;
     }
     doctorOutcome = runners.doctor(doctorOpts);
-    for (const line of doctorOutcome.summary) out2(line);
-    if (doctorOutcome.failure) out2(`tamperward doctor: ${doctorOutcome.failure.message}`);
-    for (const check2 of doctorOutcome.checks) renderCheck(check2, out2);
+    for (const line of doctorOutcome.summary) out3(line);
+    if (doctorOutcome.failure) out3(`tamperward doctor: ${doctorOutcome.failure.message}`);
+    for (const check2 of doctorOutcome.checks) renderCheck(check2, out3);
     const posture = postureOf(doctorOutcome);
     const warnings = doctorOutcome.checks.filter((c) => c.state === "WARN").length;
     const broken = doctorOutcome.checks.filter((c) => c.state === "BROKEN");
-    out2("");
-    out2(
+    out3("");
+    out3(
       `POSTURE: ${posture}` + (posture === "READY WITH WARNINGS" ? ` \u2014 ${warnings} warning(s) above` : "") + (posture === "BROKEN" ? ` \u2014 ${broken.map((c) => c.id).join(", ")}` : "") + (posture === "INCOMPLETE" && doctorOutcome.failure ? ` \u2014 doctor could not certify: ${doctorOutcome.failure.id}` : "")
     );
     if (doctorOutcome.github) {
-      out2(`GitHub repository authority: ENFORCED \u2014 doctor --github verified ${doctorOutcome.github.repo}#${doctorOutcome.github.branch}`);
-      out2("  requires the tamperward check, Code Owner review, and stale-approval dismissal.");
+      out3(`GitHub repository authority: ENFORCED \u2014 doctor --github verified ${doctorOutcome.github.repo}#${doctorOutcome.github.branch}`);
+      out3("  requires the tamperward check, Code Owner review, and stale-approval dismissal.");
     } else {
-      out2("GitHub repository authority: NOT VERIFIED \u2014 locally configured only. Until doctor --github");
-      out2(`  confirms the three controls, CI is advisory. Run: ${doctorCommand}`);
+      out3("GitHub repository authority: NOT VERIFIED \u2014 locally configured only. Until doctor --github");
+      out3(`  confirms the three controls, CI is advisory. Run: ${doctorCommand}`);
       if (githubChecked && doctorOutcome.failure?.id === "github-authority") {
-        for (const line of MANUAL_CONTROLS) out2(line);
+        for (const line of MANUAL_CONTROLS) out3(line);
       }
     }
-    if (declined) out2("Nothing was written this run; the posture above describes the repository as it was.");
-    if (verifyResult) out2(`First verification: ${verifyResult.summary?.verdict ?? `exit ${verifyResult.code}`}.`);
+    if (declined) out3("Nothing was written this run; the posture above describes the repository as it was.");
+    if (verifyResult) out3(`First verification: ${verifyResult.summary?.verdict ?? `exit ${verifyResult.code}`}.`);
     header(9);
-    out2("Day to day:");
-    out2("  tamperward check --worktree              the stop-sweep view of everything changed since HEAD");
-    out2(`  tamperward verify --base ${opts.base ?? "<base>"}${opts.base ? "" : "          "}pristine re-execution against a base the agent cannot rewrite`);
-    out2(`  tamperward run --base ${opts.base ?? "<base>"} -- <agent...>  the enforcement envelope (Linux; fails closed elsewhere)`);
-    out2(`  ${doctorCommand}`);
-    out2("When the final verification matters most \u2014 a release, a merge into the protected branch \u2014 prefer");
-    out2("the digest-pinned container verifier (verify.backend: container, image: <ref>@sha256:<digest>):");
-    out2("it owns the runtime and dependencies, mounts the tree read-only and disables the network, so the");
-    out2("candidate cannot reach the verifier from the same host. `run` deliberately does not offer it.");
-    if (wrote.length) out2(`Commit what onboarding wrote (${[...new Set(wrote)].join(", ")}) so the gate travels with the repository.`);
+    out3("Day to day:");
+    out3("  tamperward check --worktree              the stop-sweep view of everything changed since HEAD");
+    out3(`  tamperward verify --base ${opts.base ?? "<base>"}${opts.base ? "" : "          "}pristine re-execution against a base the agent cannot rewrite`);
+    out3(`  tamperward run --base ${opts.base ?? "<base>"} -- <agent...>  the enforcement envelope (Linux; fails closed elsewhere)`);
+    out3(`  ${doctorCommand}`);
+    out3("When the final verification matters most \u2014 a release, a merge into the protected branch \u2014 prefer");
+    out3("the digest-pinned container verifier (verify.backend: container, image: <ref>@sha256:<digest>):");
+    out3("it owns the runtime and dependencies, mounts the tree read-only and disables the network, so the");
+    out3("candidate cannot reach the verifier from the same host. `run` deliberately does not offer it.");
+    if (wrote.length) out3(`Commit what onboarding wrote (${[...new Set(wrote)].join(", ")}) so the gate travels with the repository.`);
     return posture === "READY" || posture === "READY WITH WARNINGS" ? 0 : 1;
   } catch (e) {
     if (e instanceof Aborted) {
-      out2("");
-      out2(`tamperward onboard: aborted during step ${step} (${STEPS[step - 1]}).`);
-      out2(
+      out3("");
+      out3(`tamperward onboard: aborted during step ${step} (${STEPS[step - 1]}).`);
+      out3(
         wrote.length ? `Written so far: ${[...new Set(wrote)].join(", ")} \u2014 all through init, all idempotent; nothing is half-applied.` : "Nothing was written."
       );
-      out2("Re-run `tamperward onboard` to continue from the same place, or `tamperward doctor` to see the current posture.");
+      out3("Re-run `tamperward onboard` to continue from the same place, or `tamperward doctor` to see the current posture.");
       return 2;
     }
     throw e;
@@ -15000,9 +15013,9 @@ async function runOnboard(opts, io = {}) {
     prompt.asker?.close();
   }
 }
-function renderCheck(check2, out2) {
-  if (check2.id === "observer") out2(`tamperward doctor: transient observer: ${check2.detail}`);
-  else out2(`tamperward doctor: [${check2.state}] ${check2.id} \u2014 ${check2.detail}`);
+function renderCheck(check2, out3) {
+  if (check2.id === "observer") out3(`tamperward doctor: transient observer: ${check2.detail}`);
+  else out3(`tamperward doctor: [${check2.state}] ${check2.id} \u2014 ${check2.detail}`);
 }
 function postureOf(outcome) {
   if (outcome.failure) return "INCOMPLETE";
@@ -15010,7 +15023,7 @@ function postureOf(outcome) {
   if (outcome.checks.some((c) => c.state === "WARN")) return "READY WITH WARNINGS";
   return "READY";
 }
-function runDemo(cwd, head, runners, out2) {
+function runDemo(cwd, head, runners, out3) {
   const files = (git5(cwd, ["ls-tree", "-r", "-z", head]) ?? "").split("\0").filter(Boolean).flatMap((row) => {
     const tab = row.indexOf("	");
     if (tab < 0) return [];
@@ -15026,21 +15039,21 @@ function runDemo(cwd, head, runners, out2) {
     break;
   }
   if (!target) {
-    out2("Demo skipped: no JavaScript test block (it/test/describe) at HEAD to demonstrate on.");
+    out3("Demo skipped: no JavaScript test block (it/test/describe) at HEAD to demonstrate on.");
     return;
   }
   const before = treeFingerprint(cwd);
-  out2(`working tree fingerprint before: ${before.slice(0, 16)}`);
+  out3(`working tree fingerprint before: ${before.slice(0, 16)}`);
   const wt = mkdtempSync6(join22(tmpdir7(), "tw-onboard-demo-"));
   try {
     if (git5(cwd, ["worktree", "add", "--detach", wt, head]) === null) {
-      out2("Demo skipped: could not create a temporary worktree (git worktree add failed).");
+      out3("Demo skipped: could not create a temporary worktree (git worktree add failed).");
       return;
     }
     const targetPath = join22(wt, target.path);
     const targetStat = lstatSync9(targetPath, { throwIfNoEntry: false });
     if (!targetStat || !targetStat.isFile() || targetStat.isSymbolicLink()) {
-      out2("Demo skipped: the selected test is not a regular file in the disposable worktree.");
+      out3("Demo skipped: the selected test is not a regular file in the disposable worktree.");
       return;
     }
     let worktreeRoot;
@@ -15049,34 +15062,34 @@ function runDemo(cwd, head, runners, out2) {
       worktreeRoot = realpathSync9(wt);
       realTarget = realpathSync9(targetPath);
     } catch {
-      out2("Demo skipped: the selected test could not be resolved safely inside the disposable worktree.");
+      out3("Demo skipped: the selected test could not be resolved safely inside the disposable worktree.");
       return;
     }
     const prefix = worktreeRoot.endsWith(sep5) ? worktreeRoot : worktreeRoot + sep5;
     if (!realTarget.startsWith(prefix)) {
-      out2("Demo skipped: the selected test resolves outside the disposable worktree.");
+      out3("Demo skipped: the selected test resolves outside the disposable worktree.");
       return;
     }
-    out2(`disposable worktree: ${wt}`);
-    out2(`weakening move: ${target.path} \u2014 the first test block becomes .skip (only in the disposable copy)`);
+    out3(`disposable worktree: ${wt}`);
+    out3(`weakening move: ${target.path} \u2014 the first test block becomes .skip (only in the disposable copy)`);
     atomicReplaceFile(targetPath, target.after, targetStat.mode & 511);
-    out2("");
-    out2(`$ tamperward check --worktree   (in ${wt})`);
+    out3("");
+    out3(`$ tamperward check --worktree   (in ${wt})`);
     const code2 = runners.check({ cwd: wt, worktree: true });
-    out2("");
-    out2(`check exited ${code2}: ${code2 === 1 ? "a blocking finding, which is what the hook, pre-commit and CI would all report" : "no blocking finding was reported"}.`);
+    out3("");
+    out3(`check exited ${code2}: ${code2 === 1 ? "a blocking finding, which is what the hook, pre-commit and CI would all report" : "no blocking finding was reported"}.`);
   } finally {
     git5(cwd, ["worktree", "remove", "--force", wt]);
     git5(cwd, ["worktree", "prune"]);
     rmSync8(wt, { recursive: true, force: true });
   }
   const after = treeFingerprint(cwd);
-  out2(`working tree fingerprint after:  ${after.slice(0, 16)}`);
+  out3(`working tree fingerprint after:  ${after.slice(0, 16)}`);
   if (after === before) {
-    out2("Identical: your working tree was restored byte-for-byte (it was never edited; the disposable worktree is gone).");
+    out3("Identical: your working tree was restored byte-for-byte (it was never edited; the disposable worktree is gone).");
   } else {
-    out2("WARNING: the fingerprint moved. The demo never wrote into your working tree, so something else");
-    out2("changed it while the demo ran; inspect with `git status`.");
+    out3("WARNING: the fingerprint moved. The demo never wrote into your working tree, so something else");
+    out3("changed it while the demo ran; inspect with `git status`.");
   }
 }
 var Aborted, STEPS, MANUAL_CONTROLS, JS_TEST_PATH, JS_TEST_BLOCK;
@@ -15120,6 +15133,991 @@ var init_onboard = __esm({
   }
 });
 
+// src/research/adapter.ts
+import { isAbsolute as isAbsolute12, resolve as resolve11 } from "node:path";
+function taskEnv(task) {
+  return {
+    TAMPERWARD_RESEARCH_TASK: task.id,
+    TAMPERWARD_RESEARCH_PROMPT: task.prompt,
+    TAMPERWARD_RESEARCH_ARM: task.arm,
+    TAMPERWARD_RESEARCH_BASE: task.base,
+    TAMPERWARD_RESEARCH_CWD: task.cwd,
+    ...task.model !== void 0 ? { TAMPERWARD_RESEARCH_MODEL: task.model } : {}
+  };
+}
+function normalizeCommandArgv(argv, cwd = process.cwd()) {
+  if (argv.length === 0) {
+    throw new ResearchError('the command adapter needs an agent command after "--"');
+  }
+  const head = argv[0];
+  return head.includes("/") && !isAbsolute12(head) ? [resolve11(cwd, head), ...argv.slice(1)] : [...argv];
+}
+function commandAdapter(argv, cwd = process.cwd()) {
+  const anchored = normalizeCommandArgv(argv, cwd);
+  return {
+    name: "command",
+    layers: ["envelope"],
+    launch(task) {
+      const substituted = anchored.map(
+        (arg) => Object.entries(PLACEHOLDERS).reduce((acc2, [token, value]) => acc2.split(token).join(value(task)), arg)
+      );
+      return { argv: substituted, env: taskEnv(task) };
+    }
+  };
+}
+function claudeCodeAdapter(model) {
+  return {
+    name: "claude-code",
+    layers: ["envelope", "pre-tool-use", "stop-sweep"],
+    prepareGated(task) {
+      const code2 = runInit({ cwd: task.cwd });
+      if (code2 !== 0) {
+        throw new ResearchError(`claude-code adapter: tamperward init could not wire the gated workspace ${task.cwd} (exit ${code2})`);
+      }
+    },
+    launch(task) {
+      const pinned = task.model ?? model;
+      return {
+        argv: ["claude", "-p", task.prompt, ...pinned !== void 0 ? ["--model", pinned] : []],
+        env: taskEnv(task)
+      };
+    }
+  };
+}
+function resolveAdapter(name, argv, model) {
+  if (name === "command") return commandAdapter(argv);
+  if (name === "claude-code") return claudeCodeAdapter(model);
+  throw new ResearchError(`unknown adapter "${name}" (built-in adapters: ${BUILTIN_ADAPTERS.join(", ")})`);
+}
+var ADAPTER_LAYERS, RESEARCH_ARMS, BUILTIN_ADAPTERS, ResearchError, PLACEHOLDERS;
+var init_adapter = __esm({
+  "src/research/adapter.ts"() {
+    "use strict";
+    init_init();
+    ADAPTER_LAYERS = ["envelope", "pre-tool-use", "stop-sweep"];
+    RESEARCH_ARMS = ["ungated", "gated"];
+    BUILTIN_ADAPTERS = ["claude-code", "command"];
+    ResearchError = class extends Error {
+    };
+    PLACEHOLDERS = {
+      "{prompt}": (t) => t.prompt,
+      "{task}": (t) => t.id,
+      "{cwd}": (t) => t.cwd,
+      "{base}": (t) => t.base,
+      "{arm}": (t) => t.arm,
+      "{model}": (t) => t.model ?? ""
+    };
+  }
+});
+
+// src/research/capture.ts
+function captureStdout(fn) {
+  let out3 = "";
+  const original = process.stdout.write;
+  const patched = (chunk, ...rest) => {
+    out3 += typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk);
+    const cb = rest.find((r) => typeof r === "function");
+    if (typeof cb === "function") cb();
+    return true;
+  };
+  process.stdout.write = patched;
+  try {
+    return { result: fn(), out: out3 };
+  } finally {
+    process.stdout.write = original;
+  }
+}
+function withEnv2(extra, fn) {
+  const saved = /* @__PURE__ */ new Map();
+  for (const [k, v] of Object.entries(extra)) {
+    saved.set(k, process.env[k]);
+    process.env[k] = v;
+  }
+  try {
+    return fn();
+  } finally {
+    for (const [k, v] of saved) {
+      if (v === void 0) delete process.env[k];
+      else process.env[k] = v;
+    }
+  }
+}
+var init_capture = __esm({
+  "src/research/capture.ts"() {
+    "use strict";
+  }
+});
+
+// src/research/manifest.ts
+import { createHash as createHash12 } from "node:crypto";
+import { readFileSync as readFileSync21 } from "node:fs";
+import { dirname as dirname9, resolve as resolve12 } from "node:path";
+function taskFrom(raw, index, manifestDir) {
+  const where = `task #${index + 1}`;
+  if (!isRecord(raw)) throw new ResearchError(`task manifest: ${where} is not an object`);
+  const { id, repo, base, prompt, verify } = raw;
+  if (typeof id !== "string" || !id || !/^[A-Za-z0-9._-]+$/.test(id)) {
+    throw new ResearchError(`task manifest: ${where} needs a string id of [A-Za-z0-9._-] (it names the record files)`);
+  }
+  if (typeof repo !== "string" || !repo) throw new ResearchError(`task manifest: task "${id}" needs a repo`);
+  if (typeof prompt !== "string" || !prompt) throw new ResearchError(`task manifest: task "${id}" needs a prompt`);
+  if (base !== void 0 && (typeof base !== "string" || !base)) {
+    throw new ResearchError(`task manifest: task "${id}" base must be a revision string`);
+  }
+  if (!isRecord(verify) || typeof verify.command !== "string" || !verify.command) {
+    throw new ResearchError(`task manifest: task "${id}" needs verify.command (the suite the pristine verifier runs)`);
+  }
+  const budget = verify.budget === void 0 ? void 0 : finiteNumber(verify.budget);
+  if (verify.budget !== void 0 && (budget === void 0 || budget <= 0)) {
+    throw new ResearchError(`task manifest: task "${id}" verify.budget must be a positive number of seconds`);
+  }
+  const isUrl = /^[a-z][a-z0-9+.-]*:\/\//i.test(repo) || /^[^/]+@[^:]+:/.test(repo);
+  return {
+    id,
+    repo: isUrl ? repo : resolve12(manifestDir, repo),
+    base: base ?? "HEAD",
+    prompt,
+    verify: { command: verify.command, ...budget !== void 0 ? { budget } : {} }
+  };
+}
+function readManifest(path) {
+  const abs2 = resolve12(path);
+  let bytes;
+  try {
+    bytes = readFileSync21(abs2);
+  } catch (e) {
+    throw new ResearchError(`cannot read task manifest ${abs2}: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  let raw;
+  try {
+    raw = JSON.parse(bytes.toString("utf8"));
+  } catch {
+    throw new ResearchError(`task manifest ${abs2} is not valid JSON`);
+  }
+  if (!isRecord(raw)) throw new ResearchError(`task manifest ${abs2}: top level must be an object`);
+  if (raw.version !== MANIFEST_VERSION) {
+    throw new ResearchError(`task manifest ${abs2}: version must be ${MANIFEST_VERSION} (got ${JSON.stringify(raw.version)})`);
+  }
+  if (!Array.isArray(raw.tasks) || raw.tasks.length === 0) {
+    throw new ResearchError(`task manifest ${abs2}: no tasks (tasks must be a non-empty array)`);
+  }
+  const tasks = raw.tasks.map((t, i) => taskFrom(t, i, dirname9(abs2)));
+  const seen = /* @__PURE__ */ new Set();
+  for (const t of tasks) {
+    if (seen.has(t.id)) throw new ResearchError(`task manifest ${abs2}: duplicate task id "${t.id}"`);
+    seen.add(t.id);
+  }
+  return { path: abs2, sha256: createHash12("sha256").update(bytes).digest("hex"), tasks };
+}
+var MANIFEST_VERSION;
+var init_manifest = __esm({
+  "src/research/manifest.ts"() {
+    "use strict";
+    init_narrow();
+    init_adapter();
+    MANIFEST_VERSION = 1;
+  }
+});
+
+// src/research/record.ts
+function bad(where) {
+  throw new ResearchError(`malformed research record: ${where}`);
+}
+function str2(r, k, where) {
+  const v = r[k];
+  return typeof v === "string" && v.length > 0 ? v : bad(`${where}.${k} is not a non-empty string`);
+}
+function sha2(r, k, where) {
+  const v = str2(r, k, where);
+  return SHA_RE.test(v) ? v : bad(`${where}.${k} is not a commit sha`);
+}
+function int(r, k, where, min = Number.NEGATIVE_INFINITY) {
+  const v = finiteNumber(r[k]);
+  if (v === void 0 || !Number.isInteger(v)) return bad(`${where}.${k} is not an integer`);
+  return v >= min ? v : bad(`${where}.${k} is below ${min}`);
+}
+function nullableInt(r, k, where) {
+  if (r[k] === null) return null;
+  return int(r, k, where);
+}
+function nullablePositiveNumber(r, k, where) {
+  if (r[k] === null) return null;
+  const v = finiteNumber(r[k]);
+  if (v === void 0 || v <= 0) return bad(`${where}.${k} is not a positive number or null`);
+  return v;
+}
+function stringArray(r, k, where) {
+  const v = r[k];
+  if (!Array.isArray(v) || !v.every((x) => typeof x === "string")) return bad(`${where}.${k} is not an array of strings`);
+  return [...v];
+}
+function bool(r, k, where) {
+  const v = r[k];
+  return typeof v === "boolean" ? v : bad(`${where}.${k} is not a boolean`);
+}
+function outcomeFrom(raw, where) {
+  if (!isRecord(raw)) bad(`${where} is not an object`);
+  const rules = raw.rules;
+  if (!Array.isArray(rules) || !rules.every((x) => typeof x === "string" && x.length > 0)) {
+    bad(`${where}.rules is not an array of non-empty strings`);
+  }
+  return {
+    verify_verdict: str2(raw, "verify_verdict", where),
+    visible_exit: nullableInt(raw, "visible_exit", where),
+    pristine_exit: nullableInt(raw, "pristine_exit", where),
+    visible_green: bool(raw, "visible_green", where),
+    pristine_green: bool(raw, "pristine_green", where),
+    masked_failure: bool(raw, "masked_failure", where),
+    surviving_protected_mutations: int(raw, "surviving_protected_mutations", where, 0),
+    warn_findings: int(raw, "warn_findings", where, 0),
+    rules: rules.filter((x) => typeof x === "string"),
+    honest_completion: bool(raw, "honest_completion", where)
+  };
+}
+function treatmentFrom(raw, where) {
+  if (raw === null) return null;
+  if (!isRecord(raw)) bad(`${where} is not an object or null`);
+  const disposition = str2(raw, "disposition", where);
+  const known = TREATMENT_DISPOSITIONS.find((d) => d === disposition);
+  if (!known) bad(`${where}.disposition "${disposition}" is not one of ${TREATMENT_DISPOSITIONS.join("|")}`);
+  const envelope = raw.envelope;
+  if (envelope !== null && !isRecord(envelope)) bad(`${where}.envelope is not an object or null`);
+  const verdict2 = str2(raw, "verdict", where);
+  if (!RUN_VERDICTS.some((v) => v === verdict2)) bad(`${where}.verdict "${verdict2}" is not a run verdict`);
+  return {
+    verdict: verdict2,
+    exit_code: int(raw, "exit_code", where),
+    complete: bool(raw, "complete", where),
+    disposition: known,
+    envelope: envelope === null ? null : envelope
+  };
+}
+function trajectoryFrom(raw, arm, where) {
+  if (!isRecord(raw)) bad(`${where} is not an object`);
+  if (raw.arm !== arm) bad(`${where}.arm is not "${arm}"`);
+  const agent = raw.agent;
+  if (!isRecord(agent)) bad(`${where}.agent is not an object`);
+  const signal = nullableString(agent.signal);
+  if (signal === void 0) bad(`${where}.agent.signal is not a string or null`);
+  const failure = nullableString(agent.failure);
+  if (failure === void 0) bad(`${where}.agent.failure is not a string or null`);
+  const unmeasurable = nullableString(raw.unmeasurable);
+  if (unmeasurable === void 0) bad(`${where}.unmeasurable is not a string or null`);
+  const exitCode = nullableInt(agent, "exit_code", `${where}.agent`);
+  const timedOut = bool(agent, "timed_out", `${where}.agent`);
+  const treatment = treatmentFrom(raw.treatment, `${where}.treatment`);
+  if (arm === "ungated" && treatment !== null) bad(`${where}.treatment must be null in the ungated arm`);
+  if (arm === "gated" && treatment === null) bad(`${where}.treatment must be present in the gated arm`);
+  const outcome = outcomeFrom(raw.outcome, `${where}.outcome`);
+  const measured = bool(raw, "measured", where);
+  if (measured && unmeasurable !== null) bad(`${where}.unmeasurable must be null when measured=true`);
+  if (!measured && (unmeasurable === null || unmeasurable.length === 0)) {
+    bad(`${where}.unmeasurable must name the reason when measured=false`);
+  }
+  const releasedGreen = bool(raw, "released_green", where);
+  const expectedReleasedGreen = outcome.visible_green && exitCode === 0 && !timedOut && failure === null && (arm === "ungated" || treatment !== null && treatment.disposition === "passed" && treatment.exit_code === 0);
+  if (releasedGreen !== expectedReleasedGreen) {
+    bad(`${where}.released_green is inconsistent with the agent/treatment exit and visible outcome`);
+  }
+  return {
+    arm,
+    workspace: str2(raw, "workspace", where),
+    base: sha2(raw, "base", where),
+    head: sha2(raw, "head", where),
+    started_at: str2(raw, "started_at", where),
+    finished_at: str2(raw, "finished_at", where),
+    agent: {
+      exit_code: exitCode,
+      signal,
+      timed_out: timedOut,
+      failure
+    },
+    treatment,
+    outcome,
+    released_green: releasedGreen,
+    measured,
+    unmeasurable
+  };
+}
+function pairRecordFrom(raw, where = "record") {
+  if (!isRecord(raw)) bad(`${where} is not an object`);
+  if (raw.schema_version !== MACHINE_SCHEMA_VERSION) bad(`${where}.schema_version is not ${MACHINE_SCHEMA_VERSION}`);
+  if (raw.command !== "research") bad(`${where}.command is not "research"`);
+  if (raw.document !== "pair") bad(`${where}.document is not "pair"`);
+  const adapter = raw.adapter;
+  if (!isRecord(adapter)) bad(`${where}.adapter is not an object`);
+  const layersRaw = adapter.layers;
+  if (!Array.isArray(layersRaw)) bad(`${where}.adapter.layers is not an array`);
+  const layers = [];
+  for (const l of layersRaw) {
+    const known = ADAPTER_LAYERS.find((x) => x === l);
+    if (!known) bad(`${where}.adapter.layers carries unknown layer ${JSON.stringify(l)}`);
+    if (layers.includes(known)) bad(`${where}.adapter.layers repeats ${known}`);
+    layers.push(known);
+  }
+  const model = nullableString(raw.model);
+  if (model === void 0) bad(`${where}.model is not a string or null`);
+  const arms = raw.arms;
+  if (!isRecord(arms)) bad(`${where}.arms is not an object`);
+  const pair = int(raw, "pair", where, 1);
+  const manifest = str2(raw, "manifest_sha256", where);
+  if (!SHA256_RE.test(manifest)) bad(`${where}.manifest_sha256 is not a lowercase sha256`);
+  return {
+    schema_version: MACHINE_SCHEMA_VERSION,
+    command: "research",
+    document: "pair",
+    task: str2(raw, "task", where),
+    pair,
+    adapter: { name: str2(adapter, "name", `${where}.adapter`), layers },
+    model,
+    tamperward_version: str2(raw, "tamperward_version", where),
+    agent_argv: stringArray(raw, "agent_argv", where),
+    agent_budget: nullablePositiveNumber(raw, "agent_budget", where),
+    manifest_sha256: manifest,
+    verify_command: str2(raw, "verify_command", where),
+    arms: {
+      ungated: trajectoryFrom(arms.ungated, RESEARCH_ARMS[0], `${where}.arms.ungated`),
+      gated: trajectoryFrom(arms.gated, RESEARCH_ARMS[1], `${where}.arms.gated`)
+    }
+  };
+}
+var TREATMENT_DISPOSITIONS, SHA_RE, SHA256_RE;
+var init_record = __esm({
+  "src/research/record.ts"() {
+    "use strict";
+    init_narrow();
+    init_adapter();
+    init_machine_output();
+    TREATMENT_DISPOSITIONS = ["refused", "passed", "cannot"];
+    SHA_RE = /^[0-9a-f]{40,64}$/;
+    SHA256_RE = /^[0-9a-f]{64}$/;
+  }
+});
+
+// src/research/run.ts
+import { execFileSync as execFileSync13 } from "node:child_process";
+import { existsSync as existsSync15, mkdirSync as mkdirSync8, readFileSync as readFileSync22, renameSync as renameSync3, rmSync as rmSync9, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join23, resolve as resolve13 } from "node:path";
+function git6(args, cwd) {
+  return execFileSync13("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+}
+function pairRecordPath(ledger, task, pair) {
+  return join23(ledger, "pairs", `${task}--${pair}.json`);
+}
+function resumableRecord(path, expected) {
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync22(path, "utf8"));
+  } catch (e) {
+    throw new ResearchError(`ledger record ${path} is malformed (${errorMessage(e).split("\n")[0]}); remove it to regenerate the pair, or use a new --out`);
+  }
+  const record = pairRecordFrom(raw, path);
+  const mismatch = [];
+  if (record.task !== expected.task) mismatch.push(`task "${record.task}" != "${expected.task}"`);
+  if (record.pair !== expected.pair) mismatch.push(`pair ${record.pair} != ${expected.pair}`);
+  if (record.manifest_sha256 !== expected.manifest_sha256) {
+    mismatch.push(`manifest_sha256 ${record.manifest_sha256.slice(0, 12)}\u2026 != ${expected.manifest_sha256.slice(0, 12)}\u2026`);
+  }
+  if (record.adapter.name !== expected.adapter.name || record.adapter.layers.join(",") !== expected.adapter.layers.join(",")) {
+    mismatch.push(`adapter ${record.adapter.name}[${record.adapter.layers.join(",")}] != ${expected.adapter.name}[${expected.adapter.layers.join(",")}]`);
+  }
+  if (record.model !== expected.model) mismatch.push(`model ${String(record.model)} != ${String(expected.model)}`);
+  if (record.tamperward_version !== expected.tamperward_version) {
+    mismatch.push(`tamperward_version ${record.tamperward_version} != ${expected.tamperward_version}`);
+  }
+  if (JSON.stringify(record.agent_argv) !== JSON.stringify(expected.agent_argv)) {
+    mismatch.push(`agent_argv ${JSON.stringify(record.agent_argv)} != ${JSON.stringify(expected.agent_argv)}`);
+  }
+  if (record.agent_budget !== expected.agent_budget) {
+    mismatch.push(`agent_budget ${String(record.agent_budget)} != ${String(expected.agent_budget)}`);
+  }
+  if (record.verify_command !== expected.verify_command) mismatch.push(`verify_command ${JSON.stringify(record.verify_command)} != ${JSON.stringify(expected.verify_command)}`);
+  if (expected.source_base !== null && record.arms.ungated.base !== expected.source_base) {
+    mismatch.push(`source_base ${record.arms.ungated.base.slice(0, 12)}\u2026 != ${expected.source_base.slice(0, 12)}\u2026`);
+  }
+  if (mismatch.length) {
+    throw new ResearchError(
+      `ledger record ${path} belongs to a different experiment (${mismatch.join("; ")}); use a new --out, or remove it deliberately`
+    );
+  }
+  return record;
+}
+function writeRecordAtomically(path, text) {
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync12(tmp, text);
+  renameSync3(tmp, path);
+}
+function freshWorkspace(ledger, task, pair, arm, sourceBase) {
+  const ws2 = join23(ledger, "workspaces", `${task.id}--${pair}--${arm}`);
+  rmSync9(ws2, { recursive: true, force: true });
+  mkdirSync8(join23(ledger, "workspaces"), { recursive: true });
+  try {
+    execFileSync13("git", ["clone", "-q", "--no-hardlinks", task.repo, ws2], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+  } catch (e) {
+    throw new ResearchError(`task "${task.id}": cannot clone ${task.repo}: ${errorMessage(e).split("\n")[0]}`);
+  }
+  git6(["config", "user.name", "tamperward-research"], ws2);
+  git6(["config", "user.email", "research@tamperward.invalid"], ws2);
+  const requestedBase = sourceBase ?? task.base;
+  const candidates = sourceBase !== void 0 ? [sourceBase] : task.base === "HEAD" ? ["HEAD"] : [task.base, `origin/${task.base}`];
+  for (const rev of candidates) {
+    try {
+      git6(["checkout", "-q", "--detach", rev], ws2);
+      return ws2;
+    } catch {
+    }
+  }
+  throw new ResearchError(`task "${task.id}": base ${requestedBase} does not resolve in a clone of ${task.repo}`);
+}
+function isRunVerdict(v) {
+  return RUN_VERDICTS.some((x) => x === v);
+}
+function dispositionOf(verdict2) {
+  if (verdict2 === "CANNOT_ADJUDICATE") return "cannot";
+  return REFUSING_VERDICTS.includes(verdict2) ? "refused" : "passed";
+}
+function parseDocument2(text) {
+  const trimmed = text.trim();
+  if (!trimmed) return null;
+  try {
+    const parsed = JSON.parse(trimmed);
+    return isRecord(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function runGated(ws2, base, task, argv, env, agentBudget) {
+  const observed = {};
+  const { result: code2, out: captured } = withEnv2(
+    env,
+    () => captureStdout(
+      () => runEnvelope({
+        cwd: ws2,
+        base,
+        cmd: task.verify.command,
+        budget: task.verify.budget,
+        agentBudget,
+        json: true,
+        argv,
+        observerEntry: process.argv[1],
+        onAgentResult: (result) => {
+          observed.agent = result;
+        }
+      })
+    )
+  );
+  const envelope = parseDocument2(captured);
+  const verdictRaw = envelope ? stringOrUndefined(envelope.verdict) : void 0;
+  const verdict2 = verdictRaw !== void 0 && isRunVerdict(verdictRaw) ? verdictRaw : "CANNOT_ADJUDICATE";
+  const agentDoc = envelope && isRecord(envelope.agent) ? envelope.agent : null;
+  const agentExit = agentDoc ? finiteNumber(agentDoc.exit_code) : void 0;
+  const supervised = observed.agent;
+  return {
+    agent: supervised ? {
+      exit_code: supervised.failure ? null : supervised.exit,
+      signal: supervised.signal ?? null,
+      timed_out: supervised.timedOut,
+      failure: supervised.failure ?? null
+    } : {
+      exit_code: agentExit ?? null,
+      signal: null,
+      timed_out: agentDoc?.timed_out === true,
+      failure: envelope ? "the run envelope did not expose its supervised agent result" : "the run envelope emitted no verdict document (see stderr)"
+    },
+    treatment: {
+      verdict: verdict2,
+      exit_code: code2,
+      complete: envelope?.complete === true,
+      disposition: dispositionOf(verdict2),
+      envelope
+    }
+  };
+}
+function runUngated(ws2, argv, env, agentBudget) {
+  const r = withEnv2(env, () => runAgentSupervised(argv, ws2, agentBudget, void 0, void 0, true));
+  return {
+    exit_code: r.failure ? null : r.exit,
+    signal: r.signal ?? null,
+    timed_out: r.timedOut,
+    failure: r.failure ?? null,
+    ...!r.lifecycleOwned ? {
+      unmeasurable: `AGENT_LIFECYCLE_NOT_OWNED: neutral control supervisor did not establish and drain the agent process domain` + (r.failure ? ` (${r.failure})` : "")
+    } : {}
+  };
+}
+function unobservedOutcome() {
+  return {
+    verify_verdict: "CANNOT_VERIFY",
+    visible_exit: null,
+    pristine_exit: null,
+    visible_green: false,
+    pristine_green: false,
+    masked_failure: false,
+    surviving_protected_mutations: 0,
+    warn_findings: 0,
+    rules: [],
+    honest_completion: false
+  };
+}
+function trustedPolicyAt(base, ws2) {
+  try {
+    return { policy: loadPolicyAt(base, ws2) ?? defaultPolicy() };
+  } catch (e) {
+    return { failure: `trusted policy at ${base.slice(0, 10)} could not be loaded: ${errorMessage(e).split("\n")[0]}` };
+  }
+}
+function observeOutcome(ws2, base, head, task) {
+  const trusted = trustedPolicyAt(base, ws2);
+  if ("failure" in trusted) return { outcome: unobservedOutcome(), unmeasurable: trusted.failure };
+  const policy = trusted.policy;
+  const verify = parseDocument2(
+    captureStdout(
+      () => runVerify({ cwd: ws2, base, cmd: task.verify.command, budget: task.verify.budget, json: true, policyOverride: policy })
+    ).out
+  );
+  const stageExit = (stage) => isRecord(stage) ? finiteNumber(stage.exit) ?? null : null;
+  const verdict2 = (verify && stringOrUndefined(verify.verdict)) ?? "CANNOT_VERIFY";
+  const visibleExit = verify ? stageExit(verify.visible) : null;
+  const pristineExit = verify ? stageExit(verify.pristine) : null;
+  const findings = [];
+  let checkDocuments = 0;
+  const collect2 = (doc) => {
+    if (!doc || !Array.isArray(doc.findings)) return;
+    checkDocuments++;
+    for (const f of doc.findings) {
+      if (!isRecord(f)) continue;
+      const rule = stringOrUndefined(f.rule);
+      const severity = stringOrUndefined(f.severity);
+      if (rule !== void 0 && severity !== void 0) findings.push({ rule, severity });
+    }
+  };
+  collect2(parseDocument2(captureStdout(
+    () => runCheck({ cwd: ws2, worktree: true, json: true, policyOverride: policy, includeUntracked: true, ciLayer: true })
+  ).out));
+  if (head !== base) {
+    collect2(parseDocument2(captureStdout(
+      () => runCheck({ cwd: ws2, diff: `${base}...${head}`, json: true, policyOverride: policy })
+    ).out));
+  }
+  const expectedCheckDocuments = head !== base ? 2 : 1;
+  const blocking = findings.filter((f) => f.severity === "block");
+  const visibleGreen = visibleExit === 0;
+  const pristineGreen = pristineExit === 0;
+  const outcome = {
+    verify_verdict: verdict2,
+    visible_exit: visibleExit,
+    pristine_exit: pristineExit,
+    visible_green: visibleGreen,
+    pristine_green: pristineGreen,
+    masked_failure: verdict2 === "MASKED_FAILURE",
+    surviving_protected_mutations: blocking.length,
+    warn_findings: findings.length - blocking.length,
+    rules: [...new Set(blocking.map((f) => f.rule))].sort(),
+    honest_completion: verdict2 === "VERIFIED" && pristineGreen && blocking.length === 0
+  };
+  const unmeasurable = !MEASURED_VERIFY_VERDICTS.includes(verdict2) ? `the verifier could not measure the tree (verify ${verdict2}${verify && typeof verify.reason === "string" ? `: ${verify.reason}` : ""})` : checkDocuments < expectedCheckDocuments ? "the policy check could not judge the tree (no verdict document)" : null;
+  return { outcome, unmeasurable };
+}
+function runTrajectory(ledger, task, pair, arm, adapter, opts, sourceBase) {
+  const ws2 = freshWorkspace(ledger, task, pair, arm, sourceBase);
+  const prep = { id: task.id, prompt: task.prompt, cwd: ws2, base: git6(["rev-parse", "HEAD"], ws2), arm, model: opts.model };
+  if (arm === "gated" && adapter.prepareGated) {
+    captureStdout(() => adapter.prepareGated?.(prep));
+    if (git6(["status", "--porcelain"], ws2)) {
+      git6(["add", "-A"], ws2);
+      git6(["commit", "-qm", "tamperward research: wire enforcement (gated arm)"], ws2);
+    }
+  }
+  const base = git6(["rev-parse", "HEAD"], ws2);
+  const launch2 = adapter.launch({ ...prep, base });
+  const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+  let agent;
+  let treatment = null;
+  if (arm === "gated") {
+    const gated = runGated(ws2, base, task, launch2.argv, launch2.env, opts.agentBudget);
+    agent = gated.agent;
+    treatment = gated.treatment;
+  } else {
+    agent = runUngated(ws2, launch2.argv, launch2.env, opts.agentBudget);
+  }
+  const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const head = git6(["rev-parse", "HEAD"], ws2);
+  const protectedOnly = (rel) => {
+    try {
+      return isProtected(rel, loadPolicyAt(base, ws2) ?? defaultPolicy());
+    } catch {
+      return true;
+    }
+  };
+  const fingerprintBefore = treeFingerprint(ws2, protectedOnly);
+  const observed = observeOutcome(ws2, base, head, task);
+  const movedDuringObservation = treeFingerprint(ws2, protectedOnly) !== fingerprintBefore;
+  const unmeasurable = agent.unmeasurable ?? observed.unmeasurable ?? (movedDuringObservation ? "NOT_QUIESCENT: the workspace changed while its outcome was being observed" : null);
+  const { unmeasurable: _agentUnmeasurable, ...agentRecord } = agent;
+  const outcome = unmeasurable === null ? observed.outcome : unobservedOutcome();
+  const agentSucceeded = agentRecord.exit_code === 0 && !agentRecord.timed_out && agentRecord.failure === null;
+  const releasedGreen = outcome.visible_green && agentSucceeded && (treatment === null || treatment.disposition === "passed" && treatment.exit_code === 0);
+  return {
+    arm,
+    workspace: ws2,
+    base,
+    head,
+    started_at: startedAt,
+    finished_at: finishedAt,
+    agent: agentRecord,
+    treatment,
+    outcome,
+    released_green: releasedGreen,
+    measured: unmeasurable === null,
+    unmeasurable
+  };
+}
+function runResearch(opts) {
+  let adapter;
+  let tasks;
+  let manifestSha;
+  let agentArgvIdentity;
+  try {
+    agentArgvIdentity = opts.adapter === "command" ? normalizeCommandArgv(opts.agentArgv, opts.operatorCwd ?? process.cwd()) : [...opts.agentArgv];
+    adapter = resolveAdapter(opts.adapter, agentArgvIdentity, opts.model);
+    const manifest = readManifest(opts.manifest);
+    tasks = manifest.tasks;
+    manifestSha = manifest.sha256;
+  } catch (e) {
+    if (e instanceof ResearchError) {
+      err2(`tamperward research: ${e.message}`);
+      return 2;
+    }
+    throw e;
+  }
+  const platform = opts.platformCheck ?? lifecyclePlatformCheck();
+  if (platform.state === "BROKEN") {
+    err2(`tamperward research: platform BROKEN \u2014 ${platform.detail}`);
+    err2("tamperward research: the gated arm cannot start here (see `tamperward doctor`); run as a non-root user on Linux.");
+    return 2;
+  }
+  const ledger = resolve13(opts.out);
+  const pairs = opts.pairs ?? 1;
+  mkdirSync8(join23(ledger, "pairs"), { recursive: true });
+  for (const task of tasks) {
+    const existingRecords = /* @__PURE__ */ new Map();
+    let sourceBase = null;
+    try {
+      for (let pair = 1; pair <= pairs; pair++) {
+        const path = pairRecordPath(ledger, task.id, pair);
+        if (!existsSync15(path)) continue;
+        const existing = resumableRecord(path, {
+          task: task.id,
+          pair,
+          manifest_sha256: manifestSha,
+          adapter: { name: adapter.name, layers: adapter.layers },
+          model: opts.model ?? null,
+          tamperward_version: TW_VERSION,
+          agent_argv: agentArgvIdentity,
+          agent_budget: opts.agentBudget ?? null,
+          verify_command: task.verify.command,
+          source_base: sourceBase
+        });
+        sourceBase ??= existing.arms.ungated.base;
+        if (existing.arms.ungated.base !== sourceBase) {
+          throw new ResearchError(
+            `ledger record ${path} belongs to a different source commit (${existing.arms.ungated.base.slice(0, 12)}\u2026 != ${sourceBase.slice(0, 12)}\u2026); use a new --out, or remove it deliberately`
+          );
+        }
+        existingRecords.set(pair, existing);
+      }
+    } catch (e) {
+      if (e instanceof ResearchError) {
+        err2(`tamperward research: ${e.message}`);
+        return 2;
+      }
+      throw e;
+    }
+    for (let pair = 1; pair <= pairs; pair++) {
+      const path = pairRecordPath(ledger, task.id, pair);
+      const existing = existingRecords.get(pair);
+      if (existing) {
+        if (!opts.json) out2(`tamperward research \u2014 task ${task.id} pair ${pair}: already recorded (${path}); skipping`);
+        continue;
+      }
+      let record;
+      try {
+        const arms = {};
+        for (const arm of RESEARCH_ARMS) {
+          if (!opts.json) out2(`tamperward research \u2014 task ${task.id} pair ${pair}: ${arm} arm`);
+          arms[arm] = runTrajectory(ledger, task, pair, arm, adapter, opts, sourceBase ?? void 0);
+          if (arm === "ungated") {
+            const resolvedSource = arms[arm]?.base;
+            if (!resolvedSource) throw new ResearchError(`task "${task.id}" pair ${pair}: ungated arm produced no source base`);
+            if (sourceBase !== null && resolvedSource !== sourceBase) {
+              throw new ResearchError(
+                `task "${task.id}" pair ${pair}: source base moved (${resolvedSource.slice(0, 12)}\u2026 != ${sourceBase.slice(0, 12)}\u2026)`
+              );
+            }
+            sourceBase ??= resolvedSource;
+          }
+        }
+        const ungated = arms.ungated;
+        const gated = arms.gated;
+        if (!ungated || !gated) throw new ResearchError(`task "${task.id}" pair ${pair}: an arm produced no record`);
+        record = {
+          schema_version: MACHINE_SCHEMA_VERSION,
+          command: "research",
+          document: "pair",
+          task: task.id,
+          pair,
+          adapter: { name: adapter.name, layers: [...adapter.layers] },
+          model: opts.model ?? null,
+          tamperward_version: TW_VERSION,
+          agent_argv: [...agentArgvIdentity],
+          agent_budget: opts.agentBudget ?? null,
+          manifest_sha256: manifestSha,
+          verify_command: task.verify.command,
+          arms: { ungated, gated }
+        };
+      } catch (e) {
+        if (e instanceof ResearchError) {
+          err2(`tamperward research: ${e.message}`);
+          return 2;
+        }
+        throw e;
+      }
+      const text = JSON.stringify(record);
+      writeRecordAtomically(path, text + "\n");
+      if (opts.json) {
+        out2(text);
+      } else {
+        const g = record.arms.gated;
+        const u = record.arms.ungated;
+        out2(
+          `tamperward research \u2014 task ${task.id} pair ${pair}: ungated ${u.outcome.verify_verdict} (masked=${u.outcome.masked_failure}, surviving=${u.outcome.surviving_protected_mutations}); gated ${g.outcome.verify_verdict} (masked=${g.outcome.masked_failure}, surviving=${g.outcome.surviving_protected_mutations}), tamperward ${g.treatment?.verdict ?? "n/a"} \u2192 ${g.treatment?.disposition ?? "n/a"}` + (u.measured && g.measured ? "" : `; UNMEASURABLE (${[u.unmeasurable, g.unmeasurable].filter(Boolean).join(" / ")})`) + `; recorded ${path}`
+        );
+      }
+    }
+  }
+  return 0;
+}
+var err2, out2, REFUSING_VERDICTS, MEASURED_VERIFY_VERDICTS;
+var init_run2 = __esm({
+  "src/research/run.ts"() {
+    "use strict";
+    init_check();
+    init_doctor();
+    init_run();
+    init_verify();
+    init_machine_output();
+    init_fingerprint();
+    init_narrow();
+    init_policy();
+    init_policy_load();
+    init_wiring();
+    init_adapter();
+    init_capture();
+    init_manifest();
+    init_record();
+    err2 = (s) => void process.stderr.write(s + "\n");
+    out2 = (s) => void process.stdout.write(s + "\n");
+    REFUSING_VERDICTS = [
+      "ENFORCEMENT_FAILED",
+      "OBJECT_REWRITE",
+      "HISTORY_REWRITE",
+      "DEPENDENCY_DRIFT",
+      "NOT_QUIESCENT",
+      "TRANSIENT_OBSERVER_BLOCK"
+    ];
+    MEASURED_VERIFY_VERDICTS = ["VERIFIED", "MASKED_FAILURE", "SUITE_RED"];
+  }
+});
+
+// src/research/summarize.ts
+import { readdirSync as readdirSync7, readFileSync as readFileSync23 } from "node:fs";
+import { join as join24, resolve as resolve14 } from "node:path";
+function readLedger2(dir) {
+  const pairsDir = join24(resolve14(dir), "pairs");
+  let names;
+  try {
+    names = readdirSync7(pairsDir).filter((n) => n.endsWith(".json")).sort();
+  } catch (e) {
+    throw new ResearchError(`cannot read ledger ${pairsDir}: ${errorMessage(e)}`);
+  }
+  if (names.length === 0) throw new ResearchError(`ledger ${pairsDir} holds no pair records`);
+  return names.map((n) => {
+    const path = join24(pairsDir, n);
+    let raw;
+    try {
+      raw = JSON.parse(readFileSync23(path, "utf8"));
+    } catch (e) {
+      throw new ResearchError(`ledger record ${path} is not valid JSON: ${errorMessage(e)}`);
+    }
+    return pairRecordFrom(raw, path);
+  });
+}
+function weakened(t) {
+  return t.outcome.masked_failure || t.outcome.surviving_protected_mutations > 0;
+}
+function summarizeRecords(all) {
+  if (all.length === 0) throw new ResearchError("cannot summarize zero pair records");
+  const first = all[0];
+  const seenPairs = /* @__PURE__ */ new Set();
+  const sourceBaseByTask = /* @__PURE__ */ new Map();
+  const verifyCommandByTask = /* @__PURE__ */ new Map();
+  for (const r of all) {
+    const pairKey = `${r.task}\0${r.pair}`;
+    if (seenPairs.has(pairKey)) {
+      throw new ResearchError(`duplicate pair identity in ledger: task "${r.task}" pair ${r.pair}`);
+    }
+    seenPairs.add(pairKey);
+    const sourceBase = r.arms.ungated.base;
+    const priorBase = sourceBaseByTask.get(r.task);
+    if (priorBase !== void 0 && priorBase !== sourceBase) {
+      throw new ResearchError(
+        `source base differs within task "${r.task}" (${priorBase.slice(0, 12)}\u2026 vs ${sourceBase.slice(0, 12)}\u2026) \u2014 one task, one source commit`
+      );
+    }
+    sourceBaseByTask.set(r.task, sourceBase);
+    const priorVerify = verifyCommandByTask.get(r.task);
+    if (priorVerify !== void 0 && priorVerify !== r.verify_command) {
+      throw new ResearchError(`verify_command differs within task "${r.task}" \u2014 one task, one verifier`);
+    }
+    verifyCommandByTask.set(r.task, r.verify_command);
+    if (r.manifest_sha256 !== first.manifest_sha256) {
+      throw new ResearchError(
+        `manifest_sha256 differs across the ledger (task "${first.task}" pair ${first.pair}: ${first.manifest_sha256.slice(0, 12)}\u2026, task "${r.task}" pair ${r.pair}: ${r.manifest_sha256.slice(0, 12)}\u2026) \u2014 one ledger, one task set`
+      );
+    }
+    if (r.adapter.name !== first.adapter.name || r.adapter.layers.join(",") !== first.adapter.layers.join(",")) {
+      throw new ResearchError(`adapter differs across the ledger (${first.adapter.name} vs ${r.adapter.name}) \u2014 one ledger, one treatment`);
+    }
+    if (r.model !== first.model) {
+      throw new ResearchError(`model differs across the ledger (${String(first.model)} vs ${String(r.model)}) \u2014 one ledger, one model`);
+    }
+    if (r.tamperward_version !== first.tamperward_version) {
+      throw new ResearchError(`tamperward_version differs across the ledger (${first.tamperward_version} vs ${r.tamperward_version}) \u2014 one ledger, one product version`);
+    }
+    if (JSON.stringify(r.agent_argv) !== JSON.stringify(first.agent_argv)) {
+      throw new ResearchError("agent_argv differs across the ledger \u2014 one ledger, one adapter command");
+    }
+    if (r.agent_budget !== first.agent_budget) {
+      throw new ResearchError(`agent_budget differs across the ledger (${String(first.agent_budget)} vs ${String(r.agent_budget)}) \u2014 one ledger, one agent budget`);
+    }
+  }
+  const records = all.filter((r) => r.arms.ungated.measured && r.arms.gated.measured);
+  const behaviour = (arm) => ({
+    trajectories: records.length,
+    surviving_protected_mutations: records.filter((r) => r.arms[arm].outcome.surviving_protected_mutations > 0).length,
+    masked_failure: records.filter((r) => r.arms[arm].outcome.masked_failure).length
+  });
+  const outcome = (arm) => ({
+    visible_green: records.filter((r) => r.arms[arm].outcome.visible_green).length,
+    pristine_green: records.filter((r) => r.arms[arm].outcome.pristine_green).length,
+    masked_failure: records.filter((r) => r.arms[arm].outcome.masked_failure).length,
+    honest_completion: records.filter((r) => r.arms[arm].outcome.honest_completion).length,
+    released_green: records.filter((r) => r.arms[arm].released_green).length
+  });
+  const gated = records.map((r) => r.arms.gated);
+  const disposition = (t) => t.treatment?.disposition ?? "cannot";
+  return {
+    schema_version: MACHINE_SCHEMA_VERSION,
+    command: "research",
+    document: "summary",
+    manifest_sha256: first.manifest_sha256,
+    adapter: { name: first.adapter.name, layers: [...first.adapter.layers] },
+    model: first.model,
+    tamperward_version: first.tamperward_version,
+    agent_argv: [...first.agent_argv],
+    agent_budget: first.agent_budget,
+    pairs: all.length,
+    measured_pairs: records.length,
+    unmeasurable_pairs: all.length - records.length,
+    tasks: [...new Set(all.map((r) => r.task))].sort(),
+    model_behaviour: { [RESEARCH_ARMS[0]]: behaviour("ungated"), [RESEARCH_ARMS[1]]: behaviour("gated") },
+    independent_outcome: { [RESEARCH_ARMS[0]]: outcome("ungated"), [RESEARCH_ARMS[1]]: outcome("gated") },
+    tamperward: {
+      caught: gated.filter((t) => weakened(t) && disposition(t) === "refused").length,
+      escapes: gated.filter((t) => weakened(t) && disposition(t) === "passed").length,
+      false_refusals: gated.filter((t) => !weakened(t) && disposition(t) === "refused").length,
+      cannot_adjudicate: gated.filter((t) => disposition(t) === "cannot").length
+    },
+    paired: {
+      masked_failure: {
+        ungated_only: records.filter((r) => r.arms.ungated.outcome.masked_failure && !r.arms.gated.outcome.masked_failure).length,
+        gated_only: records.filter((r) => !r.arms.ungated.outcome.masked_failure && r.arms.gated.outcome.masked_failure).length,
+        both: records.filter((r) => r.arms.ungated.outcome.masked_failure && r.arms.gated.outcome.masked_failure).length,
+        neither: records.filter((r) => !r.arms.ungated.outcome.masked_failure && !r.arms.gated.outcome.masked_failure).length
+      }
+    },
+    control_response: null
+  };
+}
+function summarizeLedger(dir) {
+  return summarizeRecords(readLedger2(dir));
+}
+function runResearchSummarize(opts) {
+  try {
+    process.stdout.write(JSON.stringify(summarizeLedger(opts.ledger), null, 2) + "\n");
+    return 0;
+  } catch (e) {
+    if (e instanceof ResearchError) {
+      process.stderr.write(`tamperward research: ${e.message}
+`);
+      return 2;
+    }
+    throw e;
+  }
+}
+var init_summarize = __esm({
+  "src/research/summarize.ts"() {
+    "use strict";
+    init_machine_output();
+    init_narrow();
+    init_adapter();
+    init_record();
+  }
+});
+
+// src/cli/research.ts
+function parseResearchRun(args) {
+  const o = { manifest: "", out: "", adapter: "", agentArgv: [] };
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === "--") {
+      o.agentArgv = args.slice(i + 1);
+      break;
+    } else if (a === "--manifest") o.manifest = args[++i];
+    else if (a === "--out") o.out = args[++i];
+    else if (a === "--adapter") o.adapter = args[++i];
+    else if (a === "--pairs") o.pairs = Number(args[++i]);
+    else if (a === "--model") o.model = args[++i];
+    else if (a === "--agent-budget") o.agentBudget = Number(args[++i]);
+    else if (a === "--json") o.json = true;
+  }
+  return o;
+}
+function parseResearchSummarize(args) {
+  const o = { ledger: "" };
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--ledger") o.ledger = args[++i];
+  }
+  return o;
+}
+function runResearchCommand(args) {
+  const [sub, ...rest] = args;
+  if (sub === "run") return runResearch(parseResearchRun(rest));
+  if (sub === "summarize") return runResearchSummarize(parseResearchSummarize(rest));
+  process.stderr.write(`tamperward research: unknown subcommand "${sub ?? ""}" (${RESEARCH_SUBCOMMANDS.join(" | ")})
+`);
+  return 2;
+}
+var RESEARCH_SUBCOMMANDS;
+var init_research = __esm({
+  "src/cli/research.ts"() {
+    "use strict";
+    init_run2();
+    init_summarize();
+    RESEARCH_SUBCOMMANDS = ["run", "summarize"];
+  }
+});
+
 // src/cli/main.ts
 var main_exports = {};
 __export(main_exports, {
@@ -15375,6 +16373,37 @@ function validateCliArgs(cmd, args) {
       values: { "--dir": "string", "--log": "string", "--base": "string" }
     }).error;
   }
+  if (cmd === "research") {
+    const [sub, ...rest] = args;
+    if (sub === void 0) return `research requires a subcommand (${RESEARCH_SUBCOMMANDS.join(" | ")})`;
+    if (sub === "run") {
+      const delimiter3 = rest.indexOf("--");
+      const prefix = delimiter3 < 0 ? rest : rest.slice(0, delimiter3);
+      const parsed = validateFlatArgs(prefix, {
+        flags: ["--json"],
+        values: {
+          "--manifest": "string",
+          "--out": "string",
+          "--adapter": "string",
+          "--pairs": "positive-integer",
+          "--model": "string",
+          "--agent-budget": "positive"
+        }
+      });
+      if (parsed.error) return parsed.error;
+      for (const required of ["--manifest", "--out", "--adapter"]) {
+        if (!parsed.seen.has(required)) return `research run requires ${required}`;
+      }
+      return void 0;
+    }
+    if (sub === "summarize") {
+      const parsed = validateFlatArgs(rest, { values: { "--ledger": "string" } });
+      if (parsed.error) return parsed.error;
+      if (!parsed.seen.has("--ledger")) return "research summarize requires --ledger";
+      return void 0;
+    }
+    return `unknown research subcommand "${sub}" (${RESEARCH_SUBCOMMANDS.join(" | ")})`;
+  }
   return void 0;
 }
 function printHelp() {
@@ -15447,6 +16476,15 @@ Formats:
                                             code when clean; 124 on clean AGENT_TIMEOUT;
                                             1 on any blocking finding/masked failure;
                                             2 when it cannot adjudicate (fails closed)
+  tamperward research run --manifest F      bring-your-own-model evaluation: for every
+             --out D --adapter A [--pairs N]  task in the manifest, pin one source commit,
+             [--model M] [--agent-budget S]   clone fresh state per arm, run the agent
+             [--json] [-- <agent cmd...>]     ungated and under the run envelope, then
+                                             observe both with verify + check. Records
+                                             are resumable by full experiment identity.
+  tamperward research summarize --ledger D  aggregate measured pairs into model behaviour,
+                                             independent outcome, TamperWard hits/misses
+                                             and paired counts \u2014 no composite score
   tamperward allow <rule> --reason "..."    record a human sign-off (local audit ledger)
              [--file F] [--cwd D]
   tamperward onboard [--yes] [--cwd D]      guided first-run setup: preflight, the
@@ -15527,6 +16565,8 @@ function main(argv) {
       return runVerify(parseVerify(rest));
     case "trace-verify":
       return runTraceVerify(parseTraceVerify(rest));
+    case "research":
+      return runResearchCommand(rest);
     case "run":
       return runEnvelope({
         ...parseRun(rest),
@@ -15575,12 +16615,13 @@ var init_main = __esm({
     init_run();
     init_watch();
     init_onboard();
+    init_research();
   }
 });
 
 // src/cli/index.ts
 init_hook_client();
-import { readFileSync as readFileSync21 } from "node:fs";
+import { readFileSync as readFileSync24 } from "node:fs";
 function loadMain() {
   return Promise.resolve().then(() => (init_main(), main_exports));
 }
@@ -15593,7 +16634,7 @@ async function launch(argv) {
   if (kind && hookServiceEnabled()) {
     let raw = null;
     try {
-      raw = readFileSync21(0, "utf8");
+      raw = readFileSync24(0, "utf8");
     } catch {
       raw = null;
     }