tamperward 2.32.0 → 2.34.0

package/dist/cli/index.js

@@ -211,7 +211,7 @@ function forwardedEnv(env) {
   return out3;
 }
 function exchange(paths, req2, timeoutMs) {
-  return new Promise((resolve17) => {
+  return new Promise((resolve20) => {
     let done = false;
     let handedOff = false;
     let accepted = false;
@@ -222,7 +222,7 @@ function exchange(paths, req2, timeoutMs) {
       done = true;
       clearTimeout(timer);
       sock.destroy();
-      resolve17(value);
+      resolve20(value);
     };
     const sock = createConnection(paths.socket);
     const timer = setTimeout(() => finish(handedOff ? acceptedFailure("timeout") : null), timeoutMs);
@@ -686,9 +686,9 @@ function readRegular(abs, st) {
     const buf = Buffer.allocUnsafe(now.size);
     let off2 = 0;
     while (off2 < now.size) {
-      const n = readSync(fd, buf, off2, now.size - off2, off2);
-      if (n === 0) break;
-      off2 += n;
+      const n2 = readSync(fd, buf, off2, now.size - off2, off2);
+      if (n2 === 0) break;
+      off2 += n2;
     }
     return { kind: "file", content: off2 === now.size ? buf : buf.subarray(0, off2), mode: now.mode, size: off2, mtimeMs: now.mtimeMs, detail: "" };
   } catch (e) {
@@ -1520,8 +1520,8 @@ var init_changes = __esm({
     init_narrow();
     num = (name, fallback) => {
       const raw = process.env[name];
-      const n = raw === void 0 ? NaN : Number(raw);
-      return Number.isFinite(n) && n > 0 ? n : fallback;
+      const n2 = raw === void 0 ? NaN : Number(raw);
+      return Number.isFinite(n2) && n2 > 0 ? n2 : fallback;
     };
     RECONSTRUCT_TIMEOUT_MS = () => num("TAMPERWARD_RECONSTRUCT_TIMEOUT_MS", 5e3);
     RECONSTRUCT_MAXBUFFER = () => num("TAMPERWARD_RECONSTRUCT_MAXBUFFER", 32 * 1024 * 1024);
@@ -2190,8 +2190,8 @@ function literal(arg, vars) {
   const a = unq(arg.trim());
   if (/[`]|\$\(/.test(a)) return null;
   let unknown = false;
-  const r = a.replace(/\$\{?([A-Za-z_]\w*)\}?/g, (_, n) => {
-    const v = vars.get(n);
+  const r = a.replace(/\$\{?([A-Za-z_]\w*)\}?/g, (_, n2) => {
+    const v = vars.get(n2);
     if (v === void 0) unknown = true;
     return v ?? "";
   });
@@ -2389,7 +2389,7 @@ function walk(lines, st, topIdx, depth) {
           why = "runs from another directory after a `cd` away from the repository root";
         }
         if (state === "live" && /^tamperward\b/.test(id)) {
-          const onGate = assignedNames(prefix).filter((n) => SENSITIVE_ENV.test(n));
+          const onGate = assignedNames(prefix).filter((n2) => SENSITIVE_ENV.test(n2));
           if (onGate.length) {
             state = "neutered";
             why = `runtime redirected \u2014 \`${onGate[0]}=\` in front of it decides what the gate resolves to`;
@@ -2829,7 +2829,7 @@ function setfaclDropsExec(toks) {
 }
 function nameGlob(pattern) {
   const re = new RegExp("^" + pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".") + "$");
-  return (n) => re.test(n);
+  return (n2) => re.test(n2);
 }
 function destinations(cmd, args, isDir) {
   const positional = [];
@@ -2994,9 +2994,9 @@ function shellWritesHook(seg, toks, policy, ctx) {
       if (/-exec(?:dir)?\s+chmod\b/.test(seg) && !chmodDropsExec(toks)) return null;
       const dirs = positional.filter((p) => !/^-/.test(p) && !["{}", ";", "+", "rm", "chmod", "unlink", "truncate", "mv", "sed", "tee", "shred", "inplace"].includes(p));
       const names = args.filter((a, i) => /^-i?(?:name|path|regex)$/.test(args[i - 1] ?? ""));
-      const nameHits = names.length === 0 || names.some((n) => {
+      const nameHits = names.length === 0 || names.some((n2) => {
         try {
-          const g = nameGlob(n.replace(/^.*\//, ""));
+          const g = nameGlob(n2.replace(/^.*\//, ""));
           return HOOK_BASENAMES.some(g);
         } catch {
           return true;
@@ -3757,11 +3757,11 @@ function buildAliasMap(sf) {
     ts.forEachChild(node, collect2);
   };
   collect2(sf);
-  const kindOfBinding = (b, seen) => b.type ? kindOfType(b.type, (n) => resolveLexical(n, b.type, seen)) : null;
+  const kindOfBinding = (b, seen) => b.type ? kindOfType(b.type, (n2) => resolveLexical(n2, b.type, seen)) : null;
   const resolveLexical = (name, at, seen) => {
     if (seen.has(name)) return null;
-    for (let n = at; n; n = n.parent) {
-      const here = bindings.filter((x) => x.name === name && x.scope === n);
+    for (let n2 = at; n2; n2 = n2.parent) {
+      const here = bindings.filter((x) => x.name === name && x.scope === n2);
       if (here.length === 0) continue;
       if (here.some((b) => b.kind !== "alias" || !b.type)) return null;
       return kindOfBinding(here[0], new Set(seen).add(name));
@@ -3781,7 +3781,7 @@ function buildAliasMap(sf) {
   };
 }
 function assertedLaunderKind(node, aliases) {
-  return kindOfType(assertedType(node), (n) => aliases.resolve(n, node));
+  return kindOfType(assertedType(node), (n2) => aliases.resolve(n2, node));
 }
 function isDoubleCast(node, aliases) {
   const inner = unparenthesized(node.expression);
@@ -3825,11 +3825,11 @@ function surfaceOf(path, src) {
   return surface;
 }
 function unmatchedAfter(before, after) {
-  const n = before.length;
+  const n2 = before.length;
   const m = after.length;
   const same = (i2, j2) => before[i2].lineText === after[j2].lineText && before[i2].text === after[j2].text;
-  const lcs = Array.from({ length: n + 1 }, () => new Array(m + 1).fill(0));
-  for (let i2 = n - 1; i2 >= 0; i2--) {
+  const lcs = Array.from({ length: n2 + 1 }, () => new Array(m + 1).fill(0));
+  for (let i2 = n2 - 1; i2 >= 0; i2--) {
     for (let j2 = m - 1; j2 >= 0; j2--) {
       lcs[i2][j2] = same(i2, j2) ? lcs[i2 + 1][j2 + 1] + 1 : Math.max(lcs[i2 + 1][j2], lcs[i2][j2 + 1]);
     }
@@ -3838,10 +3838,10 @@ function unmatchedAfter(before, after) {
   let i = 0;
   let j = 0;
   while (j < m) {
-    if (i < n && same(i, j)) {
+    if (i < n2 && same(i, j)) {
       i++;
       j++;
-    } else if (i < n && lcs[i + 1][j] >= lcs[i][j + 1]) {
+    } else if (i < n2 && lcs[i + 1][j] >= lcs[i][j + 1]) {
       i++;
     } else {
       out3.push(after[j]);
@@ -3917,7 +3917,7 @@ function commentIsLiveDirective(text) {
   return false;
 }
 function countLiveDirectives(src) {
-  let n = 0;
+  let n2 = 0;
   try {
     const scanner = ts.createScanner(
       ts.ScriptTarget.Latest,
@@ -3929,13 +3929,13 @@ function countLiveDirectives(src) {
     let tok = scanner.scan();
     while (tok !== ts.SyntaxKind.EndOfFileToken) {
       if (tok === ts.SyntaxKind.SingleLineCommentTrivia || tok === ts.SyntaxKind.MultiLineCommentTrivia) {
-        if (commentIsLiveDirective(scanner.getTokenText())) n++;
+        if (commentIsLiveDirective(scanner.getTokenText())) n2++;
       }
       tok = scanner.scan();
     }
   } catch {
   }
-  return n;
+  return n2;
 }
 function countAny(src, path) {
   const r = { cast: 0, never: 0, broad: 0, double: 0, suppress: 0, jsdoc: 0 };
@@ -3976,16 +3976,16 @@ function lineHasRow4Cast(line, aliasMap) {
   const sf = parseSource("line.ts", line);
   if (!sf) return false;
   let found = false;
-  const visit = (n) => {
+  const visit = (n2) => {
     if (found) return;
-    if (ts.isAsExpression(n) || ts.isTypeAssertionExpression(n)) {
-      const k = assertedLaunderKind(n, aliasMap);
-      if (k === "any" || k === "never" || isDoubleCast(n, aliasMap)) {
+    if (ts.isAsExpression(n2) || ts.isTypeAssertionExpression(n2)) {
+      const k = assertedLaunderKind(n2, aliasMap);
+      if (k === "any" || k === "never" || isDoubleCast(n2, aliasMap)) {
         found = true;
         return;
       }
     }
-    ts.forEachChild(n, visit);
+    ts.forEachChild(n2, visit);
   };
   visit(sf);
   return found;
@@ -5175,8 +5175,8 @@ function numericOf(e) {
   }
   return void 0;
 }
-function metricsOf(expr, resolve17) {
-  const obj = resolve17(expr);
+function metricsOf(expr, resolve20) {
+  const obj = resolve20(expr);
   if (!ts.isObjectLiteralExpression(obj)) return void 0;
   const out3 = { values: {}, opaque: false };
   let any = false;
@@ -5190,9 +5190,9 @@ function metricsOf(expr, resolve17) {
     const k = keyName(p.name);
     if (k === null || !isMetric(k)) continue;
     any = true;
-    const n = numericOf(resolve17(p.initializer));
-    if (n === void 0) out3.opaque = true;
-    else out3.values[k] = n;
+    const n2 = numericOf(resolve20(p.initializer));
+    if (n2 === void 0) out3.opaque = true;
+    else out3.values[k] = n2;
   }
   return any ? out3 : void 0;
 }
@@ -5237,17 +5237,17 @@ function parseThresholds(src) {
   try {
     const sf = sourceOf(src);
     if (!sf) return res;
-    const resolve17 = resolverFor(sf);
+    const resolve20 = resolverFor(sf);
     const visit = (node) => {
       if (ts.isPropertyAssignment(node)) {
         const key2 = keyName(node.name);
         if (key2 === "coverageThreshold" || key2 === "thresholds" && underKey(node, "coverage")) {
           res.present = true;
-          const init = resolve17(node.initializer);
+          const init = resolve20(node.initializer);
           if (!ts.isObjectLiteralExpression(init)) {
             res.opaque = true;
           } else {
-            const flat = metricsOf(init, resolve17);
+            const flat = metricsOf(init, resolve20);
             if (flat) res.global = merge(res.global, flat);
             for (const p of init.properties) {
               if (ts.isSpreadAssignment(p)) {
@@ -5261,7 +5261,7 @@ function parseThresholds(src) {
                 res.global = merge(res.global, { values: { branches: 100, functions: 100, lines: 100, statements: 100 }, opaque: false });
                 continue;
               }
-              const m = metricsOf(p.initializer, resolve17);
+              const m = metricsOf(p.initializer, resolve20);
               if (!m) continue;
               if (k === "global") res.global = merge(res.global, m);
               else res.paths.set(norm(k), m);
@@ -5295,18 +5295,18 @@ function parseLists(src) {
   try {
     const sf = sourceOf(src);
     if (!sf) return res;
-    const resolve17 = resolverFor(sf);
+    const resolve20 = resolverFor(sf);
     const visit = (node) => {
       if (ts.isPropertyAssignment(node)) {
         const k = keyName(node.name);
         const vitestCoverage = ownerKey(node) === "coverage";
         if (k === "collectCoverageFrom" || k === "include" && vitestCoverage) {
-          const { items, opaque } = literals(resolve17(node.initializer));
+          const { items, opaque } = literals(resolve20(node.initializer));
           res.collectFrom = items;
           res.collectKey = k === "include" ? "coverage.include" : k;
           if (opaque) res.opaqueCollect = true;
         } else if (k === "coveragePathIgnorePatterns" || k === "exclude" && vitestCoverage) {
-          const { items, opaque } = literals(resolve17(node.initializer));
+          const { items, opaque } = literals(resolve20(node.initializer));
           (k === "exclude" ? res.ignore : res.ignoreRe).push(...items);
           if (opaque) res.opaqueIgnore = true;
         }
@@ -5491,12 +5491,12 @@ function simpleWeakeningsOf(spec2, before, after) {
   for (const k of spec2.keys) {
     const bAll = numbersOf(before, k.key, spec2.scoped);
     const aAll = numbersOf(after, k.key, spec2.scoped);
-    const scopes = [...new Set(bAll.map((n) => n.scope))];
+    const scopes = [...new Set(bAll.map((n2) => n2.scope))];
     for (const scope of scopes) {
       const label = scope ? `${scope} ${k.label}` : k.label;
       const desc = (x, y2) => x === "auto" ? -1 : y2 === "auto" ? 1 : lessThan(x, y2) ? 1 : lessThan(y2, x) ? -1 : 0;
-      const b = bAll.filter((n) => n.scope === scope).map((n) => n.v).sort(desc);
-      const a = aAll.filter((n) => n.scope === scope).map((n) => n.v).sort(desc);
+      const b = bAll.filter((n2) => n2.scope === scope).map((n2) => n2.v).sort(desc);
+      const a = aAll.filter((n2) => n2.scope === scope).map((n2) => n2.v).sort(desc);
       if (b.length === 0) continue;
       if (a.length === 0) {
         if (spec2.removable) out3.push(`${label} removed (was ${b.join(", ")})`);
@@ -5598,10 +5598,10 @@ function gateMovedElsewhere(c, changes, policy) {
   const spec2 = SIMPLE_FILES.find((s) => s.file.test(c.path));
   if (!spec2) return false;
   return spec2.keys.every((k) => {
-    const b = numbersOf(before, k.key, spec2.scoped).map((n) => n.v);
+    const b = numbersOf(before, k.key, spec2.scoped).map((n2) => n2.v);
     if (b.length === 0) return true;
     return others.some((o) => {
-      const a = numbersOf(o.after, k.key, spec2.scoped).map((n) => n.v);
+      const a = numbersOf(o.after, k.key, spec2.scoped).map((n2) => n2.v);
       return a.length > 0 && b.every((bv) => a.some((av) => k.weakens === "lower" ? !lessThan(av, bv) : !lessThan(bv, av)));
     });
   });
@@ -5959,7 +5959,7 @@ function effectivePytestConfig(path, ctx) {
   const files = ctx?.trackedFiles;
   if (!files) return true;
   const rootNames = new Set(files.filter((f) => !f.includes("/")));
-  return !PYTEST_INI_ORDER.slice(0, rank).some((n) => rootNames.has(n));
+  return !PYTEST_INI_ORDER.slice(0, rank).some((n2) => rootNames.has(n2));
 }
 function pytestBlock(src) {
   const lines = src.split(/\r?\n/);
@@ -6633,7 +6633,7 @@ function eslintAstFacts(text, f) {
   }
   if (!sf) return;
   const isStr2 = (e) => ts.isStringLiteral(e) || ts.isNoSubstitutionTemplateLiteral(e);
-  const keyText = (n) => ts.isIdentifier(n) || isStr2(n) || ts.isNumericLiteral(n) ? n.text : null;
+  const keyText = (n2) => ts.isIdentifier(n2) || isStr2(n2) || ts.isNumericLiteral(n2) ? n2.text : null;
   const literal2 = (e) => {
     if (isStr2(e)) return e.text;
     if (ts.isNumericLiteral(e)) return Number(e.text);
@@ -7268,8 +7268,8 @@ function scriptKind3(inner) {
 function runnerOfSegment(canon) {
   const m = canon.match(RUNNER_NAME);
   if (!m) return null;
-  const n = m[1];
-  return n === "jest" || n === "vitest" || n === "mocha" || n === "pytest" || n === "go" || n === "cargo" ? n : "node";
+  const n2 = m[1];
+  return n2 === "jest" || n2 === "vitest" || n2 === "mocha" || n2 === "pytest" || n2 === "go" || n2 === "cargo" ? n2 : "node";
 }
 function statements(raw) {
   const out3 = [];
@@ -7803,7 +7803,7 @@ var init_ci_tampering = __esm({
           }
           if (!isProtected(c.path, policy, "ci")) continue;
           const afterLines = c.after != null ? c.after.split("\n") : null;
-          const addedAt = new Set(addedLines(c).map((l) => l.newLine).filter((n) => n != null));
+          const addedAt = new Set(addedLines(c).map((l) => l.newLine).filter((n2) => n2 != null));
           const github = isGithubFile(c.path);
           for (const l of github ? addedLines(c) : []) {
             const coe = l.content.match(/^\s*-?\s*continue-on-error:\s*(.+?)\s*$/);
@@ -7844,13 +7844,13 @@ var init_ci_tampering = __esm({
               for (let k = 0; k < b.body.length; k++) {
                 const idx = b.start + 1 + k;
                 if (!addedAt.has(idx + 1)) continue;
-                const n = NEUTRALISERS.find((x) => x.re.test(b.body[k]));
-                if (!n || propagates && /set\s\+e/.test(b.body[k])) continue;
+                const n2 = NEUTRALISERS.find((x) => x.re.test(b.body[k]));
+                if (!n2 || propagates && /set\s\+e/.test(b.body[k])) continue;
                 out3.push(
                   makeFinding(RULE8, policy, {
                     file: c.path,
                     line: idx + 1,
-                    message: `A check's run block was neutralised: ${n.what}.`,
+                    message: `A check's run block was neutralised: ${n2.what}.`,
                     evidence: b.body[k].trim(),
                     remediation: "Let the check decide the step. Masking its exit status is the same tamper as removing it."
                   })
@@ -8599,13 +8599,13 @@ function renameKept(c) {
 }
 function lefthookBase(c, changes, ctx) {
   const dir = c.path.includes("/") ? c.path.slice(0, c.path.lastIndexOf("/") + 1) : "";
-  const names = ["lefthook.yml", "lefthook.yaml", ".lefthook.yml", ".lefthook.yaml"].map((n) => dir + n);
+  const names = ["lefthook.yml", "lefthook.yaml", ".lefthook.yml", ".lefthook.yaml"].map((n2) => dir + n2);
   const inSet = changes.find((o) => o.kind === "file" && names.includes(o.path));
   if (inSet) return inSet.after != null ? parseDoc(inSet.after) : null;
   if (!ctx?.cwd) return null;
-  for (const n of names) {
+  for (const n2 of names) {
     try {
-      const p = join7(ctx.cwd, n);
+      const p = join7(ctx.cwd, n2);
       if (existsSync4(p)) return parseDoc(readFileSync4(p, "utf8"));
     } catch {
     }
@@ -8932,7 +8932,7 @@ They WILL FAIL in v10.0.0
                     makeFinding(RULE9, policy, {
                       file: c.path,
                       message: `A protected hook script was added that does not run the gate live: ${why}. A new gate script needs a sign-off unless the gate is live in it.`,
-                      evidence: `a hook script was added; sign off with \`tamperward allow hook-tampering --file ${c.path} --reason "..."\` locally or the \`tamperward:allow:hook-tampering@<head-sha>\` label in CI, or make the gate live in it`,
+                      evidence: `a hook script was added; sign off with \`tamperward allow hook-tampering --file ${c.path} --reason "..."\` locally or generate the compact CI label with \`tamperward signoff-label --rule hook-tampering --file ${c.path} --head <full-sha>\`, or make the gate live in it`,
                       remediation: "Run `tamperward check --staged` in the new hook, in a position where its failure fails the hook, or have a human sign off on a hook that does not."
                     })
                   );
@@ -8963,7 +8963,7 @@ They WILL FAIL in v10.0.0
                     makeFinding(RULE9, policy, {
                       file: c.path,
                       message: `A hand-written protected hook script was changed: ${detail.length ? detail.join("; ") : "an edit other than a pin raise"}. Every edit to a gate script other than raising its pin needs a sign-off.`,
-                      evidence: `the gate script changed; sign off with \`tamperward allow hook-tampering --file ${c.path} --reason "..."\` locally or the \`tamperward:allow:hook-tampering@<head-sha>\` label in CI, or restore it`,
+                      evidence: `the gate script changed; sign off with \`tamperward allow hook-tampering --file ${c.path} --reason "..."\` locally or generate the compact CI label with \`tamperward signoff-label --rule hook-tampering --file ${c.path} --head <full-sha>\`, or restore it`,
                       remediation: "Restore the script, or have a human sign off. A line-by-line reading of a shell script cannot tell an honest restructuring from a neutered gate, so the gate script is held byte-for-byte: only raising its pin passes without a sign-off."
                     })
                   );
@@ -9096,8 +9096,8 @@ function isSpecShaped(path, before, after) {
   if (before === null && after === null) return true;
   for (const src of [before, after]) {
     if (src === null) continue;
-    const n = countTests(src, path);
-    if (n.min > 0 || n.open) return true;
+    const n2 = countTests(src, path);
+    if (n2.min > 0 || n2.open) return true;
   }
   return false;
 }
@@ -9253,7 +9253,7 @@ function unreachableNodes(sf) {
   collect2(sf);
   if (candidates.length === 0) return dead;
   const inDead = (node) => {
-    for (let n = node; n; n = n.parent) if (dead.has(n)) return true;
+    for (let n2 = node; n2; n2 = n2.parent) if (dead.has(n2)) return true;
     return false;
   };
   const within2 = (node, owner) => node.pos >= owner.pos && node.end <= owner.end;
@@ -9302,7 +9302,7 @@ function partitionJs(src) {
   if (!sf) return null;
   const dead = unreachableNodes(sf);
   const deadRanges = [];
-  for (const n of dead) deadRanges.push([n.getStart(sf), n.getEnd()]);
+  for (const n2 of dead) deadRanges.push([n2.getStart(sf), n2.getEnd()]);
   const literals3 = literalInteriors(sf);
   const mask = new Uint8Array(src.length);
   for (const [s, e] of deadRanges) for (let i = s; i < e; i++) mask[i] = 1;
@@ -9361,7 +9361,7 @@ function partition(src, path) {
   return { live: src, hidden: "", inLiteral: new Uint8Array(src.length) };
 }
 function pytestCollectedDefs(src) {
-  let n = 0;
+  let n2 = 0;
   const stack = [];
   for (const line of src.split("\n")) {
     if (!/\S/.test(line) || /^\s*#/.test(line)) continue;
@@ -9372,9 +9372,9 @@ function pytestCollectedDefs(src) {
       stack.push({ indent, collected: PY_COLLECTED_CLASS(cls[1], cls[2] ?? "") });
       continue;
     }
-    if (PY_TEST_DEF.test(line) && stack.every((c) => c.collected)) n++;
+    if (PY_TEST_DEF.test(line) && stack.every((c) => c.collected)) n2++;
   }
-  return n;
+  return n2;
 }
 var MAX_ROUNDS, blankRange, PY_INDENT, PY_TERMINAL, PY_CONST_FALSE, PY_CLASS, PY_TEST_DEF, PY_COLLECTED_CLASS;
 var init_reachability = __esm({
@@ -9407,13 +9407,13 @@ function calleeName(expr) {
 }
 function loopRows(iterable) {
   if (ts.isArrayLiteralExpression(iterable)) {
-    let n = 0;
+    let n2 = 0;
     let open = false;
     for (const el of iterable.elements) {
       if (ts.isSpreadElement(el)) open = true;
-      else n++;
+      else n2++;
     }
-    return { n: Math.max(n, open ? 0 : 1), open };
+    return { n: Math.max(n2, open ? 0 : 1), open };
   }
   return { n: 1, open: true };
 }
@@ -9432,13 +9432,13 @@ function eachRows(call) {
   const arg = call.arguments[0];
   if (!arg) return { n: 1, open: true };
   if (ts.isArrayLiteralExpression(arg)) {
-    let n = 0;
+    let n2 = 0;
     let open = false;
     for (const el of arg.elements) {
       if (ts.isSpreadElement(el)) open = true;
-      else n++;
+      else n2++;
     }
-    return { n: Math.max(n, open ? 0 : 1), open };
+    return { n: Math.max(n2, open ? 0 : 1), open };
   }
   return { n: 1, open: true };
 }
@@ -9447,13 +9447,13 @@ function countTests(src, path = "spec.ts", substantiveOnly = false) {
   if (lang === "py") return { min: pytestCollectedDefs(src), open: false };
   if (lang && lang !== "js") {
     const re = TEST_DEFS[lang];
-    let n2 = 0;
-    for (const line of src.split("\n")) if (re.test(line)) n2++;
-    return { min: n2, open: false };
+    let n3 = 0;
+    for (const line of src.split("\n")) if (re.test(line)) n3++;
+    return { min: n3, open: false };
   }
   const sf = parseSource("spec.ts", src);
   if (!sf) return { min: 0, open: true };
-  let n = 0;
+  let n2 = 0;
   let open = false;
   const dead = unreachableNodes(sf);
   const visit = (node, mult) => {
@@ -9488,19 +9488,19 @@ function countTests(src, path = "spec.ts", substantiveOnly = false) {
       }
       if (isEachOf(node.expression)) {
         const r = eachRows(node);
-        n += r.n * mult;
+        n2 += r.n * mult;
         if (r.open) open = true;
       } else {
         const name = calleeName(node.expression);
-        if ((name === "it" || name === "test") && (!substantiveOnly || hasSubstantiveBody(node))) n += mult;
+        if ((name === "it" || name === "test") && (!substantiveOnly || hasSubstantiveBody(node))) n2 += mult;
       }
     } else if (ts.isTaggedTemplateExpression(node) && isEachOf(node.tag)) {
-      n += templateRows(node) * mult;
+      n2 += templateRows(node) * mult;
     }
     ts.forEachChild(node, (c) => visit(c, mult));
   };
   visit(sf, 1);
-  return { min: n, open };
+  return { min: n2, open };
 }
 function countTestBlocks(src, path = "spec.ts") {
   return countTests(src, path).min;
@@ -9546,7 +9546,7 @@ function scriptWeakenings(before, after, path, policy, addedPaths) {
     const f = dir + file.replace(/^\.\//, "");
     return isProtected(f, policy, "config") && !addedPaths.has(f);
   };
-  const relocated = (kind) => Object.keys(now).some((n) => !(n in was) && checkKinds(now[n]).has(kind));
+  const relocated = (kind) => Object.keys(now).some((n2) => !(n2 in was) && checkKinds(now[n2]).has(kind));
   const out3 = [];
   for (const name of /* @__PURE__ */ new Set([...Object.keys(was), ...Object.keys(now)])) {
     const whole = WHOLE_SUITE_SCRIPT.test(name);
@@ -9618,10 +9618,10 @@ function pytestPrecedenceFindings(changes, policy, ctx) {
   if (!was || !now || was.path === now.path) return [];
   const samples = runnerSamples(now.path, policy, ctx, "pytest");
   return suiteNarrowings(was.content, now.content, now.path, samples).map(
-    (n) => makeFinding(RULE10, policy, {
+    (n2) => makeFinding(RULE10, policy, {
       file: now.path,
-      message: `The effective pytest config moved from ${was.path} to ${now.path}, and ${n.path} is no longer selected: ${n.reason}.`,
-      evidence: `inifile precedence ${was.path} \u2192 ${now.path} drops ${n.path} from the suite`,
+      message: `The effective pytest config moved from ${was.path} to ${now.path}, and ${n2.path} is no longer selected: ${n2.reason}.`,
+      evidence: `inifile precedence ${was.path} \u2192 ${now.path} drops ${n2.path} from the suite`,
       remediation: "pytest reads ONE config file. Adding a higher-precedence one, or deleting the one in force, changes which settings apply \u2014 keep the effective configuration selecting the whole suite."
     })
   );
@@ -9755,28 +9755,28 @@ var init_test_deletion = __esm({
                   })
                 );
               }
-              for (const n of readable ? suiteNarrowings(c.before, c.after, c.path, runnerSamples(c.path, policy, ctx, rn)) : []) {
+              for (const n2 of readable ? suiteNarrowings(c.before, c.after, c.path, runnerSamples(c.path, policy, ctx, rn)) : []) {
                 out3.push(
                   makeFinding(RULE10, policy, {
                     file: c.path,
-                    message: `The runner no longer selects ${n.path}: ${n.reason}.`,
-                    evidence: `${n.path} dropped from the suite by ${c.path}`,
+                    message: `The runner no longer selects ${n2.path}: ${n2.reason}.`,
+                    evidence: `${n2.path} dropped from the suite by ${c.path}`,
                     remediation: "Keep the runner pointed at the whole suite. Excluding a spec from the runner removes its tests without touching the file."
                   })
                 );
               }
-              for (const n of scriptWeakenings(c.before, c.after, c.path, policy, addedPaths)) {
-                const w = n.weakening;
-                const evidence = `"${n.script}": ${JSON.stringify(n.before)} \u2192 ${n.after === "" ? "deleted" : JSON.stringify(n.after)}`;
+              for (const n2 of scriptWeakenings(c.before, c.after, c.path, policy, addedPaths)) {
+                const w = n2.weakening;
+                const evidence = `"${n2.script}": ${JSON.stringify(n2.before)} \u2192 ${n2.after === "" ? "deleted" : JSON.stringify(n2.after)}`;
                 out3.push(
                   w.state === "removed" ? makeFinding(RULE10, policy, {
                     file: c.path,
-                    message: `The test script no longer runs the ${w.kind} check: scripts.${n.script} ${w.what}.`,
+                    message: `The test script no longer runs the ${w.kind} check: scripts.${n2.script} ${w.what}.`,
                     evidence,
                     remediation: "Keep the script running its check. Replacing the runner in package.json removes every test from every `npm test` while the workflow line stays untouched."
                   }) : makeFinding(RULE10, policy, {
                     file: c.path,
-                    message: `The test script now narrows the suite: ${w.what} ${w.direction} ${w.direction === "added" ? "to" : "from"} scripts.${n.script}.`,
+                    message: `The test script now narrows the suite: ${w.what} ${w.direction} ${w.direction === "added" ? "to" : "from"} scripts.${n2.script}.`,
                     evidence,
                     remediation: "Keep the test script running the whole suite and letting it decide; a masked status, a cut-short run or a runner flag that selects fewer specs removes the rest from every run."
                   })
@@ -10371,13 +10371,13 @@ function pureRemoval(before, after) {
   const remaining = /* @__PURE__ */ new Map();
   for (const a of before) remaining.set(a.canonical, (remaining.get(a.canonical) ?? 0) + 1);
   for (const a of after) {
-    const n = remaining.get(a.canonical) ?? 0;
-    if (n <= 0) return null;
-    remaining.set(a.canonical, n - 1);
+    const n2 = remaining.get(a.canonical) ?? 0;
+    if (n2 <= 0) return null;
+    remaining.set(a.canonical, n2 - 1);
   }
   for (const a of before) {
-    const n = remaining.get(a.canonical) ?? 0;
-    if (n > 0) return a;
+    const n2 = remaining.get(a.canonical) ?? 0;
+    if (n2 > 0) return a;
   }
   return null;
 }
@@ -10869,6 +10869,12 @@ var init_policy_load = __esm({
 import { createHash as createHash3 } from "node:crypto";
 import { appendFileSync, mkdirSync, readFileSync as readFileSync6, existsSync as existsSync6 } from "node:fs";
 import { dirname as dirname2, join as join9 } from "node:path";
+function compactOobToken(want, head) {
+  const normalizedHead = head.trim().toLowerCase();
+  if (!want || !FULL_OBJECT_ID.test(normalizedHead)) return null;
+  const digest = createHash3("sha256").update(`tamperward:oob:v1\0${want}\0${normalizedHead}`).digest("base64url");
+  return `${COMPACT_OOB_PREFIX}${digest}`;
+}
 function ledgerEntryFrom(value) {
   if (!isRecord(value)) return null;
   const { rule, file, fingerprint: fingerprint2, reason, recordedAt, expiresAt } = value;
@@ -10924,6 +10930,11 @@ function oobToken(want, oob, head) {
   for (const raw of oob) {
     const t = raw.trim();
     if (!t) continue;
+    if (t.startsWith(COMPACT_OOB_PREFIX)) {
+      const expected = head === void 0 ? null : compactOobToken(want, head);
+      if (expected !== null && t === expected) return t;
+      continue;
+    }
     const at = t.lastIndexOf("@");
     if (at === -1) {
       if (!head && t === want) return t;
@@ -10956,13 +10967,15 @@ function oobHeadFromEnv(env = process.env) {
 function oobFromEnv(env = process.env) {
   return (env.TAMPERWARD_OOB_SIGNOFF ?? "").split(",").map((s) => s.trim().replace(/^tamperward:allow:/, "")).filter(Boolean);
 }
-var DEFAULT_TTL_MS, fingerprintOf;
+var DEFAULT_TTL_MS, COMPACT_OOB_PREFIX, FULL_OBJECT_ID, fingerprintOf;
 var init_signoff = __esm({
   "src/signoff.ts"() {
     "use strict";
     init_policy_load();
     init_narrow();
     DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+    COMPACT_OOB_PREFIX = "tw1:";
+    FULL_OBJECT_ID = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i;
     fingerprintOf = (f) => fingerprint(f.rule, f.file, f.evidence);
   }
 });
@@ -11167,8 +11180,14 @@ function cell(s) {
 function mdCode(s) {
   return s.replace(/`/g, "'").replace(/[\r\n]/g, " ");
 }
+function encodePathSegment(segment) {
+  return encodeURIComponent(segment).replace(
+    /[!'()*]/g,
+    (character) => "%" + character.charCodeAt(0).toString(16).padStart(2, "0").toUpperCase()
+  );
+}
 function mdUrl(s) {
-  return s.replace(/[()<> \r\n"'`\\]/g, (c) => "%" + c.charCodeAt(0).toString(16).padStart(2, "0").toUpperCase());
+  return s.split("/").map(encodePathSegment).join("/");
 }
 function locationCell(f, env) {
   if (!f.file) return "`(command)`";
@@ -12289,10 +12308,10 @@ function parseAuditJsonl(raw) {
   return events;
 }
 function parseSince(value, nowMs = Date.now()) {
-  const relative8 = /^(\d+)(m|h|d)$/.exec(value);
-  if (relative8) {
-    const count = Number(relative8[1]);
-    const unit = relative8[2] === "m" ? 6e4 : relative8[2] === "h" ? 36e5 : 864e5;
+  const relative9 = /^(\d+)(m|h|d)$/.exec(value);
+  if (relative9) {
+    const count = Number(relative9[1]);
+    const unit = relative9[2] === "m" ? 6e4 : relative9[2] === "h" ? 36e5 : 864e5;
     if (!Number.isSafeInteger(count) || count <= 0) throw new Error(`invalid --since value "${value}"`);
     return nowMs - count * unit;
   }
@@ -12701,8 +12720,8 @@ function turnTransientBlocks(cwd, sessionId, policy, changes) {
   if (!existsSync10(log)) return none;
   let offset = 0;
   if (cp && existsSync10(cp)) {
-    const n = Number(readFileSync11(cp, "utf8"));
-    offset = Number.isFinite(n) ? n : 0;
+    const n2 = Number(readFileSync11(cp, "utf8"));
+    offset = Number.isFinite(n2) ? n2 : 0;
   }
   const drained = drainEvents(log, offset);
   if (!drained.complete) {
@@ -13000,12 +13019,12 @@ function pidAlive2(pid) {
   }
 }
 function listening(socket) {
-  return new Promise((resolve17) => {
+  return new Promise((resolve20) => {
     const sock = createConnection2(socket);
     const done = (v) => {
       clearTimeout(timer);
       sock.destroy();
-      resolve17(v);
+      resolve20(v);
     };
     const timer = setTimeout(() => done(false), 1e3);
     sock.once("connect", () => done(true));
@@ -13184,11 +13203,11 @@ async function startHookService(opts) {
   });
   const umask = process.umask(63);
   try {
-    await new Promise((resolve17, reject) => {
+    await new Promise((resolve20, reject) => {
       server.once("error", reject);
       server.listen(paths.socket, () => {
         server.off("error", reject);
-        resolve17();
+        resolve20();
       });
     });
   } finally {
@@ -13205,8 +13224,8 @@ async function startHookService(opts) {
     get served() {
       return served;
     },
-    close: () => new Promise((resolve17) => {
-      if (closed) return resolve17();
+    close: () => new Promise((resolve20) => {
+      if (closed) return resolve20();
       closed = true;
       setSnapshotCache(null);
       let settled = false;
@@ -13217,7 +13236,7 @@ async function startHookService(opts) {
         clearTimeout(drain);
         removeQuietly(paths.socket);
         removeQuietly(paths.state);
-        resolve17();
+        resolve20();
       };
       server.close(finalize);
       for (const sock of sockets) if (sock !== acceptedSocket) sock.destroy();
@@ -13244,11 +13263,16 @@ async function probeSocket(paths) {
 function describeStateFile(state) {
   return state ? `records pid ${state.pid}, root ${state.root}, tamperward@${state.version}` : "is absent or unreadable";
 }
-async function stopHookService(paths) {
+async function stopHookService(paths, expectedRoot) {
   const probe = await probeSocket(paths);
   const state = readServiceState(paths);
   if (probe.answered) {
     const st = probe.status;
+    const requestedRoot = expectedRoot === void 0 ? void 0 : realpathSync4(repoRoot(expectedRoot));
+    if (requestedRoot !== void 0 && (st === null || st.root !== requestedRoot)) {
+      const detail2 = st ? `a listener answered on ${paths.socket} for root ${st.root}, not the requested repository ${requestedRoot}` : `a listener answered on ${paths.socket} but did not report a root for the requested repository ${requestedRoot}`;
+      return { outcome: "mismatch", pid: st?.pid ?? state?.pid, root: st?.root ?? state?.root, detail: detail2 };
+    }
     const agrees = st !== null && state !== null && state.pid === st.pid && state.root === st.root && state.version === st.version;
     if (agrees && st.pid !== process.pid) {
       try {
@@ -13270,13 +13294,13 @@ async function stopHookService(paths) {
   removeQuietly(paths.state);
   return { outcome: "not-running" };
 }
-function parseStart(args) {
-  let dir = process.cwd();
-  for (let i = 0; i < args.length; i++) if (args[i] === "--dir" && args[i + 1]) dir = args[++i];
-  return { dir };
+function parseDir(args) {
+  for (let i = 0; i < args.length; i++) if (args[i] === "--dir" && args[i + 1]) return args[++i];
+  return void 0;
 }
 function runHookService(args) {
   const sub = args[0];
+  const dir = parseDir(args.slice(1));
   const paths = servicePaths();
   if (!paths) {
     process.stderr.write(
@@ -13284,9 +13308,18 @@ function runHookService(args) {
     );
     return 2;
   }
+  let requestedRoot;
+  if (dir !== void 0) {
+    try {
+      requestedRoot = realpathSync4(repoRoot(realpathSync4(dir)));
+    } catch (e) {
+      process.stderr.write(`tamperward hook-service: cannot resolve --dir ${dir} (${e instanceof Error ? e.message : String(e)})
+`);
+      return 2;
+    }
+  }
   if (sub === "start") {
-    const { dir } = parseStart(args.slice(1));
-    startHookService({ root: dir, paths }).then((svc) => {
+    startHookService({ root: requestedRoot ?? process.cwd(), paths }).then((svc) => {
       let closing = false;
       const shutdown = () => {
         if (closing) return;
@@ -13307,7 +13340,7 @@ function runHookService(args) {
     return -1;
   }
   if (sub === "stop") {
-    return stopHookService(paths).then((res) => {
+    return stopHookService(paths, requestedRoot).then((res) => {
       if (res.outcome === "stopped") {
         process.stdout.write(`tamperward hook-service: stopped (pid ${res.pid}); ${paths.socket} removed
 `);
@@ -13350,6 +13383,14 @@ function runHookService(args) {
       exitAfterFlush(0);
       return;
     }
+    if (requestedRoot !== void 0 && res.root !== requestedRoot) {
+      process.stderr.write(
+        `tamperward hook-service: a listener is bound to ${res.root}, not the requested repository ${requestedRoot}; it was not treated as the requested service; ${optIn}
+`
+      );
+      exitAfterFlush(1);
+      return;
+    }
     const cache3 = isRecord(res.cache) ? res.cache : {};
     const startedAt = typeof res.started_at === "string" ? res.started_at : state?.started_at ?? "unknown";
     const disagrees = !state || state.pid !== res.pid || state.root !== res.root || state.version !== res.version;
@@ -13381,6 +13422,7 @@ var init_hook_service = __esm({
 });
 
 // src/cli/allow.ts
+import { relative as relative3, resolve as resolve5, sep as sep2 } from "node:path";
 function runAllow(opts) {
   if (!opts.rule) {
     process.stderr.write('tamperward allow <rule> [--file <path>] --reason "<why>"\n');
@@ -13399,8 +13441,9 @@ function runAllow(opts) {
     process.stderr.write("tamperward: cannot read the working tree (not a git repo?).\n");
     return 2;
   }
+  const requestedFile = opts.file === void 0 ? void 0 : relative3(cwd, resolve5(cwd, opts.file)).split(sep2).join("/");
   const targets = findings.filter(
-    (f) => f.severity === "block" && f.rule === opts.rule && (!opts.file || f.file === opts.file)
+    (f) => f.severity === "block" && f.rule === opts.rule && (!requestedFile || f.file === requestedFile)
   );
   if (targets.length === 0) {
     process.stderr.write(
@@ -13519,7 +13562,7 @@ var init_safe_write = __esm({
 import { execFileSync as execFileSync6 } from "node:child_process";
 import { createHash as createHash8 } from "node:crypto";
 import { existsSync as existsSync12, mkdirSync as mkdirSync7, readFileSync as readFileSync13, realpathSync as realpathSync5 } from "node:fs";
-import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute9, join as join15, relative as relative3, resolve as resolve5 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute9, join as join15, relative as relative4, resolve as resolve6 } from "node:path";
 function gitConfig(cwd, key2) {
   try {
     return execFileSync6("git", ["config", "--get", key2], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim() || null;
@@ -13859,13 +13902,13 @@ function planClaudeHooks(cwd) {
 function hooksDir(cwd) {
   try {
     const out3 = execFileSync6("git", ["rev-parse", "--git-path", "hooks"], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
-    if (out3) return resolve5(cwd, out3);
+    if (out3) return resolve6(cwd, out3);
   } catch {
   }
   return existsSync12(join15(cwd, ".git")) ? join15(cwd, ".git", "hooks") : null;
 }
 function display(cwd, path) {
-  const rel = relative3(cwd, path);
+  const rel = relative4(cwd, path);
   return rel && !rel.startsWith("..") && !isAbsolute9(rel) ? rel : path;
 }
 function unconditionalExitAt(lines) {
@@ -14114,7 +14157,7 @@ function planInit(cwd, opts = {}) {
   ];
 }
 function runInit(opts) {
-  const requested = resolve5(opts.cwd ?? process.cwd());
+  const requested = resolve6(opts.cwd ?? process.cwd());
   const cwd = repoRoot(requested);
   const w = opts.quiet ? { write: (_text) => true } : process.stdout;
   if (cwd !== requested && !sameDir(cwd, requested)) {
@@ -14206,9 +14249,10 @@ version: 1
 
 # The CI authority for main: the same engine as the agent hook and pre-commit, run over
 # the PR's commit range. A block fails the check and clears ONLY via the out-of-band
-# label \`tamperward:allow:<rule>@<head-sha>\` applied by someone with triage access or higher \u2014
-# never a file the PR itself can commit. The verify step reads the same labels:
-# \`tamperward:allow:verify@<head-sha>\` accepts a masked failure a reviewer has judged.
+# compact label \`tw1:<digest>\` (print one with \`tamperward signoff-label\`) applied by
+# someone with triage access or higher \u2014 never a file the PR itself can commit. Legacy
+# \`tamperward:allow:<rule>@<head-sha>\` labels remain accepted. The verify step reads
+# the same labels: a token for \`verify\` accepts a masked failure a reviewer has judged.
 #
 # labeled/unlabeled re-run the gate because the sign-off is read from the EVENT payload:
 # a label applied after a failure could otherwise never take effect, and REVOKING a
@@ -14252,14 +14296,15 @@ jobs:
         env:
           LABELS: \${{ toJSON(github.event.pull_request.labels.*.name) }}
         run: |
-          RULES="$(printf '%s' "$LABELS" | jq -r '.[] | select(startswith("tamperward:allow:")) | sub("^tamperward:allow:"; "")' | paste -sd, -)"
+          RULES="$(printf '%s' "$LABELS" | jq -r '.[] | if startswith("tamperward:allow:") then sub("^tamperward:allow:"; "") elif startswith("tw1:") then . else empty end' | paste -sd, -)"
           echo "rules=$RULES" >> "$GITHUB_OUTPUT"
       - name: Tamperward gate (diff-time)
         env:
           TAMPERWARD_OOB_SIGNOFF: \${{ steps.oob.outputs.rules }}
           # Binds each approval to the commit it was granted for: labels persist
           # across pushes, so an unbound one would clear every later finding on
-          # the same PR. Labels must read tamperward:allow:<rule>@<head-sha>.
+          # the same PR. Compact labels hash the exact rule/file/head tuple; legacy
+          # labels must read tamperward:allow:<rule>@<head-sha>.
           TAMPERWARD_OOB_HEAD: \${{ github.event.pull_request.head.sha }}
         run: tamperward check --diff "\${{ github.event.pull_request.base.sha }}...\${{ github.event.pull_request.head.sha }}"
       # Diff-time detection is spelling-dependent by nature; pristine
@@ -14272,8 +14317,9 @@ jobs:
       # without one this step fails closed (exit 2) rather than passing quietly.
       - name: Tamperward verify (pristine re-execution)
         env:
-          # The same channel as the gate. \`tamperward:allow:verify@<head-sha>\`
-          # accepts a MASKED_FAILURE \u2014 a reviewer has read the intentional test
+          # The same channel as the gate. A compact token generated for \`verify\`
+          # (or legacy \`tamperward:allow:verify@<head-sha>\`) accepts a MASKED_FAILURE \u2014
+          # a reviewer has read the intentional test
           # change and agrees the original suite no longer applies. It clears
           # nothing else: a red visible suite, or a run that could not verify,
           # stays red whatever the labels say.
@@ -14361,16 +14407,16 @@ import {
   dirname as dirname6,
   isAbsolute as isAbsolute10,
   join as join16,
-  relative as relative4,
-  resolve as resolve6,
-  sep as sep2
+  relative as relative5,
+  resolve as resolve7,
+  sep as sep3
 } from "node:path";
 function metricsFor(descriptor) {
   return descriptor.metrics ??= { fullSnapshots: 0, reusedSnapshots: 0, totalMs: 0 };
 }
 function inside(root, candidate) {
-  const rel = relative4(resolve6(root), resolve6(candidate));
-  return rel === "" || rel !== ".." && !rel.startsWith(".." + sep2) && !isAbsolute10(rel);
+  const rel = relative5(resolve7(root), resolve7(candidate));
+  return rel === "" || rel !== ".." && !rel.startsWith(".." + sep3) && !isAbsolute10(rel);
 }
 function modeKind(path) {
   const st = lstatSync8(path);
@@ -14522,7 +14568,7 @@ function freezeRoot(kind, path) {
     if (!statSync3(path).isDirectory()) {
       throw new Error("not a directory");
     }
-    return { kind, path: resolve6(path), realPath: realpathSync6(path) };
+    return { kind, path: resolve7(path), realPath: realpathSync6(path) };
   } catch (e) {
     throw new Unattestable(
       kind + " root " + JSON.stringify(path) + " is not resolvable (" + (e instanceof Error ? e.message : String(e)) + ")"
@@ -14558,7 +14604,7 @@ function firstExecutable(command) {
 function resolveExecutable(token, cwd, env) {
   if (!token) return null;
   if (token.includes("/") || token.includes("\\")) {
-    const path = isAbsolute10(token) ? token : resolve6(cwd, token);
+    const path = isAbsolute10(token) ? token : resolve7(cwd, token);
     try {
       return existsSync13(path) ? realpathSync6(path) : null;
     } catch {
@@ -14566,7 +14612,7 @@ function resolveExecutable(token, cwd, env) {
     }
   }
   for (const entry of (env.PATH ?? "").split(delimiter).filter(Boolean)) {
-    const candidate = resolve6(entry, token);
+    const candidate = resolve7(entry, token);
     try {
       if (existsSync13(candidate) && statSync3(candidate).isFile()) return realpathSync6(candidate);
     } catch {
@@ -14585,7 +14631,7 @@ function looksPython(command, executable, token) {
 }
 function inferredVenvFromToken(token, cwd) {
   if (!token || !token.includes("/") && !token.includes("\\")) return null;
-  const path = isAbsolute10(token) ? token : resolve6(cwd, token);
+  const path = isAbsolute10(token) ? token : resolve7(cwd, token);
   if (!pythonName(basename4(path))) return null;
   const parent = dirname6(path);
   const parentName = basename4(parent).toLowerCase();
@@ -14623,7 +14669,7 @@ function venvProblem(root) {
   return null;
 }
 function discoverDependencyEnvironment(cwdInput, command, env = process.env) {
-  const cwd = resolve6(cwdInput);
+  const cwd = resolve7(cwdInput);
   const roots = [];
   const probes = [];
   const seen = /* @__PURE__ */ new Set();
@@ -14647,7 +14693,7 @@ function discoverDependencyEnvironment(cwdInput, command, env = process.env) {
       if (!isAbsolute10(env.VIRTUAL_ENV)) {
         throw new Unattestable("VIRTUAL_ENV is relative (" + JSON.stringify(env.VIRTUAL_ENV) + ")");
       }
-      venv = resolve6(env.VIRTUAL_ENV);
+      venv = resolve7(env.VIRTUAL_ENV);
     } else {
       venv = inferredVenv(executable) ?? inferredVenvFromToken(token, cwd);
       if (!venv && /(?:^|\s)uv\s+run(?:\s|$)/.test(command) && existsSync13(join16(cwd, ".venv", "pyvenv.cfg"))) {
@@ -14687,7 +14733,7 @@ function checkDependencyEnvironment(cwdInput, descriptor) {
     const fingerprint2 = measuredSnapshot(
       descriptor.roots,
       descriptor.probes,
-      resolve6(cwdInput),
+      resolve7(cwdInput),
       metricsFor(descriptor)
     );
     if (fingerprint2 !== descriptor.fingerprint) {
@@ -14700,7 +14746,7 @@ function checkDependencyEnvironment(cwdInput, descriptor) {
 }
 function attestDependencyEnvironment(cwdInput, descriptor) {
   const attestation = {
-    cwd: resolve6(cwdInput),
+    cwd: resolve7(cwdInput),
     descriptor,
     check: checkDependencyEnvironment(cwdInput, descriptor)
   };
@@ -14708,7 +14754,7 @@ function attestDependencyEnvironment(cwdInput, descriptor) {
   return attestation;
 }
 function reuseDependencyEnvironmentAttestation(cwdInput, descriptor, attestation) {
-  if (!attestation || !issuedAttestations.has(attestation) || attestation.descriptor !== descriptor || attestation.cwd !== resolve6(cwdInput)) return null;
+  if (!attestation || !issuedAttestations.has(attestation) || attestation.descriptor !== descriptor || attestation.cwd !== resolve7(cwdInput)) return null;
   metricsFor(descriptor).reusedSnapshots += 1;
   return attestation.check;
 }
@@ -15130,7 +15176,7 @@ if (child) {
 import { createHash as createHash11, randomUUID } from "node:crypto";
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { accessSync as accessSync2, constants as constants3, readFileSync as readFileSync15, realpathSync as realpathSync7, statSync as statSync4 } from "node:fs";
-import { delimiter as delimiter2, dirname as dirname7, join as join18, resolve as resolve7 } from "node:path";
+import { delimiter as delimiter2, dirname as dirname7, join as join18, resolve as resolve8 } from "node:path";
 function identity() {
   const uid = typeof process.getuid === "function" ? process.getuid() : null;
   const groups = typeof process.getgroups === "function" ? process.getgroups() : [];
@@ -15150,7 +15196,7 @@ function writableByCaller(path) {
   }
 }
 function replaceableByCaller(path) {
-  let current = resolve7(path);
+  let current = resolve8(path);
   if (writableByCaller(current)) return true;
   current = dirname7(current);
   while (true) {
@@ -15496,7 +15542,7 @@ function runContainerStage(backend, dir, command, budgetSecs) {
   const args = containerRunArgs({
     image: backend.image,
     name,
-    workspace: resolve7(dir),
+    workspace: resolve8(dir),
     command,
     uid,
     gid,
@@ -15610,7 +15656,7 @@ import { execFileSync as execFileSync8, spawnSync as spawnSync3 } from "node:chi
 import { createHash as createHash12 } from "node:crypto";
 import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync9, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync3, readFileSync as readFileSync16, readlinkSync as readlinkSync3, rmSync as rmSync7, symlinkSync, writeFileSync as writeFileSync9, existsSync as existsSync14 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname8, isAbsolute as isAbsolute11, join as join19, relative as relative5, resolve as resolve8, sep as sep3 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute11, join as join19, relative as relative6, resolve as resolve9, sep as sep4 } from "node:path";
 function oracleAssuranceReport() {
   return {
     level: "suite-exit-only",
@@ -15636,24 +15682,45 @@ function baseIsAncestorOfHead(base, cwd) {
   return r.status === 0;
 }
 function inside2(root, path) {
-  const rel = relative5(resolve8(root), resolve8(path));
-  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute11(rel);
+  const rel = relative6(resolve9(root), resolve9(path));
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep4}`) && !isAbsolute11(rel);
 }
 function linkParts(path) {
-  const parts = sep3 === "\\" ? path.split(/[\\/]+/) : path.split("/");
+  const parts = sep4 === "\\" ? path.split(/[\\/]+/) : path.split("/");
   return parts.filter((part) => part !== "" && part !== ".");
 }
+function materializationFailureReason(error) {
+  if (error instanceof MaterializationError) return error.materializationReason;
+  const code2 = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
+  const message = error instanceof Error ? error.message : String(error);
+  if (/tracked\s+node_modules|node_modules.*(?:attested|dependency).*(?:conflict|replace)/i.test(message)) {
+    return "TRACKED_NODE_MODULES_CONFLICT";
+  }
+  if (/symlink.*(?:escape|cycle|parent directory)|escapes the materialised tree/i.test(message)) {
+    return "SYMLINK_ESCAPE";
+  }
+  if (/(?:special file|where git expects a file)/i.test(message)) {
+    return "SPECIAL_FILE";
+  }
+  if (code2 === "ENOENT" || /(?:ENOENT|no such file|file not found)/i.test(message)) {
+    return "RACING_DELETION";
+  }
+  return "UNKNOWN";
+}
 function linkEscape(label, target) {
-  return new Error(`${label} is a symlink that escapes the materialised tree (${JSON.stringify(target)})`);
+  return new MaterializationError(
+    "SYMLINK_ESCAPE",
+    `${label} is a symlink that escapes the materialised tree (${JSON.stringify(target)})`
+  );
 }
 function driveRelativeLinkTarget(target) {
-  return sep3 === "\\" && /^[A-Za-z]:(?![\\/])/.test(target);
+  return sep4 === "\\" && /^[A-Za-z]:(?![\\/])/.test(target);
 }
 function rootedLinkTarget(target) {
   return isAbsolute11(target) || driveRelativeLinkTarget(target);
 }
 function safeSymlink(target, out3, root, label) {
-  if (rootedLinkTarget(target) || !inside2(root, resolve8(dirname8(out3), target))) {
+  if (rootedLinkTarget(target) || !inside2(root, resolve9(dirname8(out3), target))) {
     throw linkEscape(label, target);
   }
   rmSync7(out3, { force: true });
@@ -15661,7 +15728,7 @@ function safeSymlink(target, out3, root, label) {
 }
 function validateSymlinkGraph(target, out3, root, dependencyRoot, label) {
   let domain = "tree";
-  let stack = linkParts(relative5(root, dirname8(out3)));
+  let stack = linkParts(relative6(root, dirname8(out3)));
   const pending = linkParts(target);
   const seen = /* @__PURE__ */ new Set();
   let hops = 0;
@@ -15687,11 +15754,17 @@ function validateSymlinkGraph(target, out3, root, dependencyRoot, label) {
     }
     if (!st.isSymbolicLink()) continue;
     if (++hops > 128) {
-      throw new Error(`${label} contains a symlink cycle while materialising (${JSON.stringify(target)})`);
+      throw new MaterializationError(
+        "SYMLINK_ESCAPE",
+        `${label} contains a symlink cycle while materialising (${JSON.stringify(target)})`
+      );
     }
-    const key2 = `${domain}:${current}:${pending.join(sep3)}`;
+    const key2 = `${domain}:${current}:${pending.join(sep4)}`;
     if (seen.has(key2)) {
-      throw new Error(`${label} contains a symlink cycle while materialising (${JSON.stringify(target)})`);
+      throw new MaterializationError(
+        "SYMLINK_ESCAPE",
+        `${label} contains a symlink cycle while materialising (${JSON.stringify(target)})`
+      );
     }
     seen.add(key2);
     const next = readlinkSync3(current);
@@ -15704,7 +15777,7 @@ function validateSymlinkGraph(target, out3, root, dependencyRoot, label) {
         throw linkEscape(label, target);
       }
       stack = [];
-      pending.unshift(...linkParts(relative5(dependencyRoot, resolve8(next))));
+      pending.unshift(...linkParts(relative6(dependencyRoot, resolve9(next))));
     } else {
       pending.unshift(...linkParts(next));
     }
@@ -15722,12 +15795,21 @@ function rejectLinkedParent(cwd, rel) {
       continue;
     }
     if (st.isSymbolicLink()) {
-      throw new Error(`${rel} has a symlinked parent directory (${relative5(cwd, current)})`);
+      throw new MaterializationError(
+        "SYMLINK_ESCAPE",
+        `${rel} has a symlinked parent directory (${relative6(cwd, current)})`
+      );
     }
   }
 }
 function materialize(cwd, dest, dependencyRoot) {
   const listed = workingTreePaths(cwd);
+  if (dependencyRoot && listed.some((rel) => rel === "node_modules" || rel.startsWith("node_modules/"))) {
+    throw new MaterializationError(
+      "TRACKED_NODE_MODULES_CONFLICT",
+      "tracked node_modules conflicts with the attested dependency root"
+    );
+  }
   const links = [];
   for (const rel of listed) {
     const src = join19(cwd, rel);
@@ -15749,7 +15831,10 @@ function materialize(cwd, dest, dependencyRoot) {
       cpSync(src, out3, { dereference: true });
       chmodSync2(out3, st.mode);
     } else {
-      throw new Error(`${rel} is ${st.isDirectory() ? "a directory" : "a special file"} where git expects a file`);
+      throw new MaterializationError(
+        "SPECIAL_FILE",
+        `${rel} is ${st.isDirectory() ? "a directory" : "a special file"} where git expects a file`
+      );
     }
   }
   for (const link of links) {
@@ -16209,7 +16294,7 @@ function runVerify(opts) {
     return cannotVerify(
       "MATERIALIZATION_FAILED",
       `could not materialize (${e instanceof Error ? e.message : String(e)})`,
-      { verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport() }
+      { verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport(), materialization_reason: materializationFailureReason(e) }
     );
   }
   const visible = runStage(visDir);
@@ -16243,6 +16328,49 @@ function runVerify(opts) {
     }
     return 2;
   }
+  if (visible.failure === "budget") {
+    const pristineNotRun = {
+      exit: null,
+      secs: 0,
+      failure: "budget",
+      reason: "not run: visible stage exceeded its budget"
+    };
+    cleanup([visRoot]);
+    opts.onVerdict?.({ verdict: "BUDGET_EXCEEDED" });
+    if (opts.json) {
+      out3(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
+        verdict: "BUDGET_EXCEEDED",
+        base,
+        command: cmd,
+        budget_secs: budget,
+        visible: stageJson(visible),
+        pristine: stageJson(pristineNotRun),
+        protected_restored: 0,
+        added_protected_removed: 0,
+        filesystem_case_sensitive: filesystemCaseSensitive,
+        verifier_backend: backendReport(),
+        dependency_environment: dependencyReport(),
+        oracle_assurance: oracleAssuranceReport(),
+        ...opts.keep ? { visible_dir: visDir } : {}
+      }));
+    } else {
+      out3(`tamperward verify \u2014 ${verifyVerdictLine("BUDGET_EXCEEDED", {
+        restored: 0,
+        base,
+        visibleExit: visible.exit,
+        pristineExit: pristineNotRun.exit,
+        budget
+      })}`);
+      out3("verifier backend: " + verifierBackendSummary(verifierBackend));
+      out3("oracle assurance: suite-exit-only (candidate source executes inside the suite process; execution-domain isolation is not semantic/oracle isolation)");
+      out3(
+        dependencyEnvironment ? "dependency environment: " + dependencyEnvironmentSummary(dependencyEnvironment) : "dependency environment: verifier-owned by " + (verifierBackend.image ?? "isolated image")
+      );
+      renderStageDiagnostics(out3, "visible", visible);
+    }
+    return 2;
+  }
   if (treeFingerprint(cwd, protectedIgnored) !== treeBefore) {
     cleanup([visRoot]);
     return cannotVerify(
@@ -16281,7 +16409,7 @@ function runVerify(opts) {
     return cannotVerify(
       "MATERIALIZATION_FAILED",
       `could not materialize pristine copy (${e instanceof Error ? e.message : String(e)})`,
-      { stage: "pristine", verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport() }
+      { stage: "pristine", verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport(), materialization_reason: materializationFailureReason(e) }
     );
   }
   const overlayBefore = overlayDigest(priDir, restored);
@@ -16398,10 +16526,12 @@ function runVerify(opts) {
         renderStageDiagnostics(out3, "pristine", pristine);
       }
     }
-    if (signedOff)
+    if (signedOff) {
+      const approval = signedOff.startsWith("tw1:") ? signedOff : `tamperward:allow:${signedOff}`;
       out3(
-        `masked failure cleared by out-of-band approval (tamperward:allow:${signedOff}): a reviewer accepted that the original suite no longer applies to this change. Exit 0.`
+        `masked failure cleared by out-of-band approval (${approval}): a reviewer accepted that the original suite no longer applies to this change. Exit 0.`
       );
+    }
     if (removedAdded > 0)
       out3(
         `(${removedAdded} protected file(s) added since ${base.slice(0, 10)} were removed from the pristine run: the pristine tree carries exactly the base's protected surface.)`
@@ -16440,7 +16570,7 @@ function parseVerify(args) {
   }
   return o;
 }
-var OVERLAY_CLASSES, VERIFICATION_SURFACE, DROPPED_ENV, PINNED_NPM;
+var OVERLAY_CLASSES, VERIFICATION_SURFACE, MaterializationError, DROPPED_ENV, PINNED_NPM;
 var init_verify = __esm({
   "src/cli/verify.ts"() {
     "use strict";
@@ -16528,6 +16658,14 @@ var init_verify = __esm({
       "**/phpunit.xml.dist",
       "**/*.runsettings"
     ];
+    MaterializationError = class extends Error {
+      constructor(materializationReason, message) {
+        super(message);
+        this.materializationReason = materializationReason;
+        this.name = "MaterializationError";
+      }
+      materializationReason;
+    };
     DROPPED_ENV = /* @__PURE__ */ new Set([
       "NODE_OPTIONS",
       "NODE_PATH",
@@ -16546,7 +16684,7 @@ import { execFileSync as execFileSync9, spawn, spawnSync as spawnSync4 } from "n
 import { randomBytes as randomBytes3 } from "node:crypto";
 import { accessSync as accessSync3, constants as fsConstants, mkdtempSync as mkdtempSync4, readdirSync as readdirSync4, readFileSync as readFileSync17, readlinkSync as readlinkSync4, realpathSync as realpathSync8, rmSync as rmSync8, statSync as statSync5, writeFileSync as writeFileSync10 } from "node:fs";
 import { tmpdir as tmpdir5 } from "node:os";
-import { dirname as dirname9, join as join20, resolve as resolve9 } from "node:path";
+import { dirname as dirname9, join as join20, resolve as resolve10 } from "node:path";
 function authoritativeRunLifecyclePlatform(platform = process.platform) {
   return platform === "linux";
 }
@@ -16765,7 +16903,7 @@ function startSupervisedObserver(cwd, base, entry) {
   try {
     child = spawn(
       process.execPath,
-      [resolve9(cliEntry), "watch", "--dir", cwd, "--log", log, "--base", base],
+      [resolve10(cliEntry), "watch", "--dir", cwd, "--log", log, "--base", base],
       {
         cwd,
         stdio: ["ignore", "ignore", "inherit"],
@@ -16884,8 +17022,8 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
     return out3;
   }
   for (const pid of pids) {
-    const n = Number(pid);
-    if (n === process.pid) continue;
+    const n2 = Number(pid);
+    if (n2 === process.pid) continue;
     try {
       const stat = readFileSync17(`/proc/${pid}/stat`, "utf8");
       const startTicks = Number(stat.slice(stat.lastIndexOf(")") + 2).split(" ")[19]);
@@ -16902,7 +17040,7 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
     for (const link of procLinks) {
       try {
         const raw = readlinkSync4(link).replace(/ \(deleted\)$/, "");
-        const held = raw.startsWith("/") ? resolve9(raw) : raw;
+        const held = raw.startsWith("/") ? resolve10(raw) : raw;
         if (held === real || held.startsWith(real + "/")) {
           holds = true;
           break;
@@ -16910,12 +17048,12 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
       } catch {
       }
     }
-    if (holds) out3.push(n);
+    if (holds) out3.push(n2);
   }
   return out3;
 }
 function runEnvelope(opts) {
-  const cwd = resolve9(opts.cwd ?? process.cwd());
+  const cwd = resolve10(opts.cwd ?? process.cwd());
   const say = opts.json ? (_s) => {
   } : out;
   if (!opts.argv.length) {
@@ -16930,7 +17068,8 @@ function runEnvelope(opts) {
   }
   let base;
   try {
-    base = git3(["rev-parse", "--verify", `${opts.base ?? "HEAD"}^{commit}`], cwd).trim();
+    const requestedBase = assertRev(opts.base ?? "HEAD");
+    base = git3(["rev-parse", "--verify", `${requestedBase}^{commit}`], cwd).trim();
   } catch {
     err(`tamperward run: cannot resolve trusted base ${opts.base ?? "HEAD"} \u2014 failing closed.`);
     return 2;
@@ -17460,7 +17599,7 @@ raise SystemExit(0)
 // src/cli/doctor.ts
 import { execFileSync as execFileSync10 } from "node:child_process";
 import { existsSync as existsSync15, readFileSync as readFileSync18, readdirSync as readdirSync5 } from "node:fs";
-import { join as join21, resolve as resolve10 } from "node:path";
+import { join as join21, resolve as resolve11 } from "node:path";
 function lifecyclePlatformCheck(platform = process.platform, linuxPython = platform === "linux" ? trustedLinuxPython() : null) {
   if (platform === "linux") {
     if (linuxPython?.path) {
@@ -17538,7 +17677,7 @@ function workflowPermissionCheck(cwd, workflowRels = [".github/workflows/tamperw
   const broken = [];
   const warnings = [];
   for (const rel of workflowRels) {
-    const path = resolve10(cwd, rel);
+    const path = resolve11(cwd, rel);
     if (!existsSync15(path)) {
       broken.push(`${rel} is missing`);
       continue;
@@ -17919,7 +18058,7 @@ function verifyJobs(doc) {
   return found;
 }
 function diagnose(opts = {}) {
-  const cwd = repoRoot(resolve10(opts.cwd ?? process.cwd()));
+  const cwd = repoRoot(resolve11(opts.cwd ?? process.cwd()));
   let policy;
   try {
     policy = policyFor(opts, cwd);
@@ -17943,7 +18082,7 @@ function diagnose(opts = {}) {
     workflowRels.push(opts.workflow);
   } else {
     const workflowDirRel = ".github/workflows";
-    const workflowDir = resolve10(cwd, workflowDirRel);
+    const workflowDir = resolve11(cwd, workflowDirRel);
     if (!existsSync15(workflowDir)) {
       return fail("ci-verifier", `${workflowDirRel}: workflow directory does not exist`);
     }
@@ -17963,7 +18102,7 @@ function diagnose(opts = {}) {
   let verifyJobCount = 0;
   const authorityWorkflows = [];
   for (const workflowRel of workflowRels) {
-    const workflowPath = resolve10(cwd, workflowRel);
+    const workflowPath = resolve11(cwd, workflowRel);
     if (!existsSync15(workflowPath)) {
       return fail("ci-verifier", `${workflowRel}: workflow does not exist`);
     }
@@ -18155,27 +18294,127 @@ import {
   symlinkSync as symlinkSync2
 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
-import { isAbsolute as isAbsolute12, join as join22, relative as relative6, resolve as resolve11, sep as sep4 } from "node:path";
+import { isAbsolute as isAbsolute12, join as join22, relative as relative7, resolve as resolve12, sep as sep5 } from "node:path";
 function unescapeStraceString(s) {
   return s.replace(/\\([0-7]{1,3})/g, (_m, oct) => String.fromCharCode(parseInt(oct, 8))).replace(/\\x([0-9a-fA-F]{2})/g, (_m, hex) => String.fromCharCode(parseInt(hex, 16))).replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
 }
-function parseStraceFileAccess(raw) {
+function copyTraceState(state) {
+  return { cwd: state.cwd, fds: new Map(state.fds) };
+}
+function traceLineProcess(line) {
+  const bracketed = line.match(/^\s*\[pid\s+(\d+)\]\s+(.*)$/);
+  if (bracketed) return { pid: bracketed[1], body: bracketed[2] };
+  const numbered = line.match(/^\s*(\d+)\s+(.*)$/);
+  if (numbered && /\b(?:execve|open|chdir|clone|fork|stat|access|readlink)/.test(numbered[2])) {
+    return { pid: numbered[1], body: numbered[2] };
+  }
+  return { pid: "0", body: line.trim() };
+}
+function syscallResult(body) {
+  const match = body.match(/\)\s+=\s+(-?\d+)\b/);
+  return match ? Number(match[1]) : null;
+}
+function resolveTracePath(rawPath, state, dirfd) {
+  if (isAbsolute12(rawPath)) return resolve12(rawPath);
+  const base = dirfd === null || dirfd === -100 ? state.cwd : state.fds.get(dirfd);
+  if (!base) return null;
+  return resolve12(base, rawPath);
+}
+function firstDirFd(args) {
+  const first = args.match(/^\s*(AT_FDCWD|-?\d+)/)?.[1];
+  if (!first || first === "AT_FDCWD") return null;
+  return Number(first);
+}
+function successfulFdResult(body) {
+  const result = syscallResult(body);
+  return result !== null && result >= 0 ? result : null;
+}
+function parseStraceFileAccess(raw, initialCwd = TRACE_ROOT) {
   const out3 = [];
   const seen = /* @__PURE__ */ new Set();
-  for (const line of raw.split("\n")) {
-    if (!line.trim() || /\)\s+=\s+-1\b/.test(line)) continue;
-    const call = line.match(/\b(execveat|execve|openat2|openat|open|newfstatat|fstatat|statx|lstat|stat|access|readlinkat|readlink)\s*\(/);
-    if (!call) continue;
-    const afterCall = line.slice((call.index ?? 0) + call[0].length);
-    const quoted = afterCall.match(/"([^"\\]*(?:\\.[^"\\]*)*)"/);
-    if (!quoted) continue;
-    const path = unescapeStraceString(quoted[1]);
-    if (!path) continue;
-    const access = call[1].startsWith("execve") ? "exec" : "read";
-    const key2 = `${access}\0${path}`;
-    if (seen.has(key2)) continue;
+  const states = /* @__PURE__ */ new Map();
+  const unfinished = /* @__PURE__ */ new Map();
+  const stateFor = (pid) => {
+    let state = states.get(pid);
+    if (!state) {
+      state = { cwd: initialCwd, fds: /* @__PURE__ */ new Map() };
+      states.set(pid, state);
+    }
+    return state;
+  };
+  const add = (path, access, unresolved = false) => {
+    const key2 = `${access}\0${unresolved ? "unresolved:" : ""}${path}`;
+    if (seen.has(key2)) return;
     seen.add(key2);
-    out3.push({ path, access });
+    out3.push(unresolved ? { path, access, unresolved: true } : { path, access });
+  };
+  for (const rawLine of raw.split("\n")) {
+    if (!rawLine.trim()) continue;
+    const line = traceLineProcess(rawLine);
+    const resumed = line.body.match(/^<\.\.\.\s+(\w+)\s+resumed>(.*)$/);
+    let body = line.body;
+    if (resumed) {
+      const key2 = `${line.pid}:${resumed[1]}`;
+      const prefix = unfinished.get(key2);
+      if (!prefix) continue;
+      unfinished.delete(key2);
+      body = prefix + resumed[2];
+    }
+    const unfinishedAt = body.indexOf("<unfinished ...>");
+    if (unfinishedAt >= 0) {
+      const before = body.slice(0, unfinishedAt);
+      const call2 = before.match(/\b(execveat|execve|openat2|openat|open|newfstatat|fstatat|statx|lstat|stat|access|readlinkat|readlink|chdir|fchdir|close|dup2|dup3|dup|fcntl|clone3|clone|fork|vfork)\s*\(/);
+      if (call2) unfinished.set(`${line.pid}:${call2[1]}`, before);
+      continue;
+    }
+    const call = body.match(/\b(execveat|execve|openat2|openat|open|newfstatat|fstatat|statx|lstat|stat|access|readlinkat|readlink|chdir|fchdir|close|dup2|dup3|dup|fcntl|clone3|clone|fork|vfork)\s*\(/);
+    if (!call || /\)\s+=\s+-1\b/.test(body)) continue;
+    const name = call[1];
+    const args = body.slice((call.index ?? 0) + call[0].length);
+    const state = stateFor(line.pid);
+    const result = syscallResult(body);
+    if (name === "chdir") {
+      const quoted2 = args.match(/\"([^\"\\\\]*(?:\\\\.[^\"\\\\]*)*)\"/);
+      if (quoted2 && result === 0) {
+        const next = resolveTracePath(unescapeStraceString(quoted2[1]), state, null);
+        if (next) state.cwd = next;
+      }
+      continue;
+    }
+    if (name === "fchdir") {
+      const fd = Number(args.match(/^\s*(-?\d+)/)?.[1]);
+      const next = state.fds.get(fd);
+      if (result === 0 && next) state.cwd = next;
+      continue;
+    }
+    if (name === "close") {
+      const fd = Number(args.match(/^\s*(-?\d+)/)?.[1]);
+      if (result === 0) state.fds.delete(fd);
+      continue;
+    }
+    if (name === "dup" || name === "dup2" || name === "dup3" || name === "fcntl") {
+      const source = Number(args.match(/^\s*(-?\d+)/)?.[1]);
+      const destination = name === "dup" ? result : name === "fcntl" ? result : Number(args.match(/^\s*-?\d+\s*,\s*(-?\d+)/)?.[1]);
+      const sourcePath = state.fds.get(source);
+      if (result !== null && result >= 0 && destination !== void 0 && destination !== null && sourcePath) state.fds.set(destination, sourcePath);
+      continue;
+    }
+    if (name === "clone" || name === "clone3" || name === "fork" || name === "vfork") {
+      if (result !== null && result > 0) states.set(String(result), copyTraceState(state));
+      continue;
+    }
+    const quoted = args.match(/\"([^\"\\\\]*(?:\\\\.[^\"\\\\]*)*)\"/);
+    if (!quoted) continue;
+    const rawPath = unescapeStraceString(quoted[1]);
+    if (!rawPath) continue;
+    const atCall = name === "execveat" || name === "openat2" || name === "openat" || name === "newfstatat" || name === "fstatat" || name === "statx" || name === "readlinkat";
+    const dirfd = atCall ? firstDirFd(args) : null;
+    const resolved = resolveTracePath(rawPath, state, dirfd);
+    add(resolved ?? rawPath, name.startsWith("execve") ? "exec" : "read", resolved === null);
+    if (name === "open" || name === "openat" || name === "openat2") {
+      const fd = successfulFdResult(body);
+      if (fd !== null && resolved) state.fds.set(fd, resolved);
+    }
   }
   return out3;
 }
@@ -18196,13 +18435,13 @@ function classifyTraceRun(r) {
   return { kind: "ok", exit: r.status ?? 1 };
 }
 function inside3(root, path) {
-  const rel = relative6(resolve11(root), resolve11(path));
-  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep4}`) && !isAbsolute12(rel);
+  const rel = relative7(resolve12(root), resolve12(path));
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep5}`) && !isAbsolute12(rel);
 }
 function normalRepoPath(root, raw) {
-  const abs = isAbsolute12(raw) ? resolve11(raw) : resolve11(root, raw);
+  const abs = isAbsolute12(raw) ? resolve12(raw) : resolve12(root, raw);
   if (!inside3(root, abs)) return null;
-  const rel = relative6(root, abs).split(sep4).join("/");
+  const rel = relative7(root, abs).split(sep5).join("/");
   return rel && rel !== ".." ? rel : null;
 }
 function likelyConfig(path) {
@@ -18215,12 +18454,17 @@ function sortAccesses(values) {
 function summarizeTraceRuns(opts) {
   const repo = /* @__PURE__ */ new Map();
   const external = /* @__PURE__ */ new Map();
+  let unresolved_accesses = 0;
   opts.runs.forEach((run, index) => {
     const perRun = /* @__PURE__ */ new Set();
     for (const item of run) {
+      if (item.unresolved) {
+        unresolved_accesses++;
+        continue;
+      }
       const rel = normalRepoPath(opts.root, item.path);
       const isTracked = rel !== null && opts.tracked.has(rel);
-      const keyPath = rel !== null ? opts.tracked.has(rel) ? rel : null : resolve11(opts.root, item.path);
+      const keyPath = rel !== null ? opts.tracked.has(rel) ? rel : null : resolve12(opts.root, item.path);
       if (keyPath === null) continue;
       const target = isTracked ? repo : external;
       const key2 = `${isTracked ? "repo" : "external"}\0${keyPath}`;
@@ -18258,7 +18502,8 @@ function summarizeTraceRuns(opts) {
     uncovered_repository_inputs,
     // Exact paths are intentionally conservative. A maintainer may widen them to
     // reviewed globs, but TamperWard never invents a broader trust surface.
-    suggested_verify_inputs: [...uncovered_repository_inputs]
+    suggested_verify_inputs: [...uncovered_repository_inputs],
+    unresolved_accesses
   };
 }
 function git4(args, cwd) {
@@ -18300,21 +18545,24 @@ function materializeBase(base, cwd, dest) {
   const hostModules = join22(cwd, "node_modules");
   const tracedModules = join22(dest, "node_modules");
   if (existsSync16(hostModules) && !existsSync16(tracedModules)) {
-    symlinkSync2(resolve11(hostModules), tracedModules, "dir");
+    symlinkSync2(resolve12(hostModules), tracedModules, "dir");
   }
 }
 function traceFiles(prefix) {
-  const dir = resolve11(prefix, "..");
-  const base = prefix.split(sep4).at(-1) ?? prefix;
+  const dir = resolve12(prefix, "..");
+  const base = prefix.split(sep5).at(-1) ?? prefix;
   return readdirSync6(dir).filter((name) => name === base || name.startsWith(base + ".")).map((name) => join22(dir, name)).sort();
 }
 function rewriteTraceRoot(accesses, actualRoot) {
   return accesses.map((item) => {
-    const abs = isAbsolute12(item.path) ? resolve11(item.path) : resolve11(actualRoot, item.path);
+    if (item.unresolved) return item;
+    const placeholder = isAbsolute12(item.path) ? resolve12(item.path) : resolve12(TRACE_ROOT, item.path);
+    const placeholderRel = inside3(TRACE_ROOT, placeholder) ? relative7(TRACE_ROOT, placeholder) : null;
+    const abs = placeholderRel === null ? placeholder : resolve12(actualRoot, placeholderRel);
     if (!inside3(actualRoot, abs)) return { ...item, path: abs };
-    const rel = relative6(actualRoot, abs).split(sep4).join("/");
+    const rel = relative7(actualRoot, abs).split(sep5).join("/");
     try {
-      const real = resolve11(realpathSync9(abs));
+      const real = resolve12(realpathSync9(abs));
       if (!inside3(actualRoot, real)) return { ...item, path: real };
     } catch {
     }
@@ -18328,7 +18576,7 @@ function straceOnce(root, command, budget) {
     const traced = spawnSync5(
       "strace",
       [
-        "-ff",
+        "-f",
         "-qq",
         "-s",
         "4096",
@@ -18347,13 +18595,13 @@ function straceOnce(root, command, budget) {
       ],
       {
         cwd: root,
-        env: process.env,
+        env: suiteEnv(traceDir),
         encoding: "utf8",
         maxBuffer: 64 * 1024 * 1024
       }
     );
     const logs = traced.error ? [] : traceFiles(prefix);
-    const accesses = logs.flatMap((path) => parseStraceFileAccess(readFileSync19(path, "utf8")));
+    const accesses = logs.flatMap((path) => parseStraceFileAccess(readFileSync19(path, "utf8"), TRACE_ROOT));
     const raw = {
       spawnError: traced.error ? traced.error.message : null,
       status: traced.status,
@@ -18392,6 +18640,7 @@ function renderText2(report2) {
   out3(`trusted base: ${report2.base}`);
   out3(`command: ${report2.command}`);
   out3(`runs: ${report2.runs_completed}/${report2.runs_requested}; exits: ${report2.run_exits.join(", ")}`);
+  out3(`unresolved accesses: ${report2.unresolved_accesses}`);
   out3();
   out3("repository inputs observed:");
   if (!report2.repository_inputs.length) out3("  (none)");
@@ -18420,7 +18669,7 @@ function renderText2(report2) {
   for (const note of report2.notes) out3(`note: ${note}`);
 }
 function runTraceVerify(opts = {}) {
-  const cwd = resolve11(opts.cwd ?? process.cwd());
+  const cwd = resolve12(opts.cwd ?? process.cwd());
   if (process.platform !== "linux") {
     process.stderr.write("tamperward trace-verify: Linux only in this release; unsupported platform \u2014 no parity is implied.\n");
     return 2;
@@ -18518,13 +18767,14 @@ This is a tracing/tooling limitation (e.g. ptrace denied by seccomp or Yama), no
     runs_requested: runs,
     runs_completed: observed.length,
     run_exits: runExits,
-    trace_complete: runExits.every((code2) => code2 === 0),
+    trace_complete: runExits.every((code2) => code2 === 0) && summary.unresolved_accesses === 0,
     ...summary,
     notes: [
       "Observed reads are evidence from these runs, not proof that an unobserved path can never be read.",
       "Dynamic paths are those observed in fewer than all repeated traces.",
       "Suggestions are exact tracked paths only; TamperWard never edits .tamperward.yml or widens a glob automatically.",
-      "Review every suggestion before adding it to verify.inputs."
+      "Review every suggestion before adding it to verify.inputs.",
+      ...summary.unresolved_accesses > 0 ? [`${summary.unresolved_accesses} relative file access(es) could not be resolved from trace cwd/fd state; discovery is incomplete.`] : []
     ]
   };
   if (opts.json) process.stdout.write(JSON.stringify(report2) + "\n");
@@ -18723,7 +18973,7 @@ var init_runtimes = __esm({
 import { execFileSync as execFileSync12 } from "node:child_process";
 import { lstatSync as lstatSync10, mkdtempSync as mkdtempSync6, readFileSync as readFileSync21, realpathSync as realpathSync10, rmSync as rmSync10 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
-import { join as join24, relative as relative7, resolve as resolve12, sep as sep5 } from "node:path";
+import { join as join24, relative as relative8, resolve as resolve13, sep as sep6 } from "node:path";
 import { createInterface } from "node:readline";
 import { parseDocument } from "yaml";
 function readlineAsker(input, output) {
@@ -18732,9 +18982,9 @@ function readlineAsker(input, output) {
   let pending = null;
   rl.on("close", () => {
     closed = true;
-    const resolve17 = pending;
+    const resolve20 = pending;
     pending = null;
-    resolve17?.(null);
+    resolve20?.(null);
   });
   rl.on("SIGINT", () => rl.close());
   const ask = (question) => new Promise((resolvePromise) => {
@@ -18757,9 +19007,9 @@ function terminalText(text) {
   return stripControl(text).replace(/\s+/g, " ").trim();
 }
 function committableSetupPath(cwd, path) {
-  const rel = relative7(cwd, resolve12(cwd, path));
-  if (!rel || rel === ".." || rel.startsWith(".." + sep5)) return false;
-  return rel !== ".git" && !rel.startsWith(".git" + sep5);
+  const rel = relative8(cwd, resolve13(cwd, path));
+  if (!rel || rel === ".." || rel.startsWith(".." + sep6)) return false;
+  return rel !== ".git" && !rel.startsWith(".git" + sep6);
 }
 function platformLabel(platform) {
   if (platform === "darwin") return "macOS";
@@ -18817,7 +19067,7 @@ function writeVerifyCommand(cwd, command) {
   }
 }
 async function runOnboard(opts, io = {}) {
-  const requestedCwd = resolve12(opts.cwd ?? process.cwd());
+  const requestedCwd = resolve13(opts.cwd ?? process.cwd());
   const out3 = io.out ?? ((line2) => void process.stdout.write(line2 + "\n"));
   const errLine = (line2) => void process.stderr.write(line2 + "\n");
   const rawErr = (line2) => errLine(terminalText(line2));
@@ -18851,7 +19101,7 @@ async function runOnboard(opts, io = {}) {
     fail(requestedCwd + " is not inside a Git repository. Run `git init` first.");
     return 2;
   }
-  const cwd = resolve12(rootText);
+  const cwd = resolve13(rootText);
   let sameRoot = cwd === requestedCwd;
   try {
     sameRoot = realpathSync10(cwd) === realpathSync10(requestedCwd);
@@ -18884,10 +19134,10 @@ async function runOnboard(opts, io = {}) {
     return a === "y" || a === "yes";
   };
   let sectionNo = 0;
-  const section = (n) => {
-    sectionNo = n;
+  const section = (n2) => {
+    sectionNo = n2;
     out3("");
-    out3(paint(n + "/" + SECTIONS.length + "  " + SECTIONS[n - 1], BOLD + CYAN, colour));
+    out3(paint(n2 + "/" + SECTIONS.length + "  " + SECTIONS[n2 - 1], BOLD + CYAN, colour));
   };
   const wrote = [];
   let verifyCommand;
@@ -18905,6 +19155,8 @@ async function runOnboard(opts, io = {}) {
     const localVerifySupported = localVerifierShell(platform, "true") !== null;
     if (platform === "linux" && lifecycle.state === "OK") {
       status("OK", "Full check / verify / run support is available.", "ok");
+    } else if (platform === "linux") {
+      status("LIMITED", lifecycle.detail, "warn");
     } else if (localVerifySupported) {
       status("LIMITED", platformLabel(platform) + ": check + verify work here; `tamperward run` requires Linux in this release.", "warn");
     } else {
@@ -19015,8 +19267,8 @@ async function runOnboard(opts, io = {}) {
         status("ACTION", "Choose the command that decides whether this repository passes:", "warn");
         candidates.forEach((candidate, i) => out3("  " + (i + 1) + ". " + terminalText(candidate)));
         const a = await ask("Choose 1-" + candidates.length + ", type a command, or press Enter to skip: ");
-        const n = Number(a);
-        chosen = a === "" ? void 0 : Number.isInteger(n) && n >= 1 && n <= candidates.length ? candidates[n - 1] : a;
+        const n2 = Number(a);
+        chosen = a === "" ? void 0 : Number.isInteger(n2) && n2 >= 1 && n2 <= candidates.length ? candidates[n2 - 1] : a;
       } else {
         status("ACTION", "No test command was detected automatically.", "warn");
         chosen = await ask("Test command to trust (Enter to skip): ") || void 0;
@@ -19200,7 +19452,7 @@ function runDemo(cwd, head, runners, out3) {
       out3("Demo skipped: the selected test could not be resolved safely inside the disposable worktree.");
       return;
     }
-    const prefix = worktreeRoot.endsWith(sep5) ? worktreeRoot : worktreeRoot + sep5;
+    const prefix = worktreeRoot.endsWith(sep6) ? worktreeRoot : worktreeRoot + sep6;
     if (!realTarget.startsWith(prefix)) {
       out3("Demo skipped: the selected test resolves outside the disposable worktree.");
       return;
@@ -19264,7 +19516,7 @@ var init_onboard = __esm({
 });
 
 // src/research/adapter.ts
-import { isAbsolute as isAbsolute13, resolve as resolve13 } from "node:path";
+import { isAbsolute as isAbsolute13, resolve as resolve14 } from "node:path";
 function taskEnv(task) {
   return {
     TAMPERWARD_RESEARCH_TASK: task.id,
@@ -19283,7 +19535,7 @@ function normalizeCommandArgv(argv, cwd = process.cwd()) {
     throw new ResearchError('the command adapter needs an agent command after "--"');
   }
   const head = argv[0];
-  return head.includes("/") && !isAbsolute13(head) ? [resolve13(cwd, head), ...argv.slice(1)] : [...argv];
+  return head.includes("/") && !isAbsolute13(head) ? [resolve14(cwd, head), ...argv.slice(1)] : [...argv];
 }
 function commandAdapter(argv, cwd = process.cwd()) {
   const anchored = normalizeCommandArgv(argv, cwd);
@@ -19296,6 +19548,24 @@ function commandAdapter(argv, cwd = process.cwd()) {
     }
   };
 }
+function stdioAdapter(argv, cwd = process.cwd()) {
+  const anchored = normalizeCommandArgv(argv, cwd);
+  return {
+    name: "stdio",
+    layers: ["envelope"],
+    launch(task) {
+      const substituted = anchored.map((arg) => substitutePlaceholders(arg, task));
+      return {
+        argv: substituted,
+        env: {
+          ...taskEnv(task),
+          TAMPERWARD_RESEARCH_PROTOCOL: "research-stdio-jsonl-v1",
+          TAMPERWARD_RESEARCH_CAPABILITIES: JSON.stringify({ layers: ["envelope"], intervention: "not-connected" })
+        }
+      };
+    }
+  };
+}
 function claudeCodeAdapter(model) {
   return {
     name: "claude-code",
@@ -19318,6 +19588,7 @@ function claudeCodeAdapter(model) {
 function resolveAdapter(name, argv, model) {
   if (name === "command") return commandAdapter(argv);
   if (name === "claude-code") return claudeCodeAdapter(model);
+  if (name === "stdio") return stdioAdapter(argv);
   throw new ResearchError(`unknown adapter "${name}" (built-in adapters: ${BUILTIN_ADAPTERS.join(", ")})`);
 }
 var ADAPTER_LAYERS, RESEARCH_ARMS, BUILTIN_ADAPTERS, ResearchError, PLACEHOLDERS, PLACEHOLDER_PATTERN;
@@ -19327,7 +19598,7 @@ var init_adapter = __esm({
     init_init();
     ADAPTER_LAYERS = ["envelope", "pre-tool-use", "stop-sweep"];
     RESEARCH_ARMS = ["ungated", "gated"];
-    BUILTIN_ADAPTERS = ["claude-code", "command"];
+    BUILTIN_ADAPTERS = ["claude-code", "command", "stdio"];
     ResearchError = class extends Error {
     };
     PLACEHOLDERS = {
@@ -19386,7 +19657,7 @@ var init_capture = __esm({
 // src/research/manifest.ts
 import { createHash as createHash13 } from "node:crypto";
 import { readFileSync as readFileSync22 } from "node:fs";
-import { dirname as dirname10, resolve as resolve14 } from "node:path";
+import { dirname as dirname10, resolve as resolve15 } from "node:path";
 function taskFrom(raw, index, manifestDir) {
   const where = `task #${index + 1}`;
   if (!isRecord(raw)) throw new ResearchError(`task manifest: ${where} is not an object`);
@@ -19409,14 +19680,14 @@ function taskFrom(raw, index, manifestDir) {
   const isUrl = /^[a-z][a-z0-9+.-]*:\/\//i.test(repo) || /^[^/]+@[^:]+:/.test(repo);
   return {
     id,
-    repo: isUrl ? repo : resolve14(manifestDir, repo),
+    repo: isUrl ? repo : resolve15(manifestDir, repo),
     base: base ?? "HEAD",
     prompt,
     verify: { command: verify.command, ...budget !== void 0 ? { budget } : {} }
   };
 }
 function readManifest(path) {
-  const abs = resolve14(path);
+  const abs = resolve15(path);
   let bytes;
   try {
     bytes = readFileSync22(abs);
@@ -19719,7 +19990,7 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 import { execFileSync as execFileSync13 } from "node:child_process";
 import { closeSync as closeSync3, existsSync as existsSync18, linkSync, mkdirSync as mkdirSync9, openSync as openSync3, readFileSync as readFileSync23, renameSync as renameSync4, rmSync as rmSync11, unlinkSync, writeFileSync as writeFileSync11, writeSync } from "node:fs";
 import { hostname } from "node:os";
-import { join as join25, resolve as resolve15 } from "node:path";
+import { join as join25, resolve as resolve16 } from "node:path";
 function git6(args, cwd) {
   return execFileSync13("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
 }
@@ -19973,15 +20244,19 @@ function unobservedOutcome() {
     honest_completion: false
   };
 }
-function trustedPolicyAt(base, ws3) {
+function trustedPolicyAt(base, ws3, loader = loadPolicyAt) {
   try {
-    return { policy: loadPolicyAt(base, ws3) ?? defaultPolicy() };
+    return { policy: loader(base, ws3) ?? defaultPolicy() };
   } catch (e) {
     return { failure: `trusted policy at ${base.slice(0, 10)} could not be loaded: ${errorMessage(e).split("\n")[0]}` };
   }
 }
-function observeOutcome(ws3, base, head, task) {
-  const trusted = trustedPolicyAt(base, ws3);
+function trustedProtectedOnly(base, ws3, loader = loadPolicyAt) {
+  const trusted = trustedPolicyAt(base, ws3, loader);
+  if ("failure" in trusted) return { trusted, protectedOnly: () => true };
+  return { trusted, protectedOnly: (rel) => isProtected(rel, trusted.policy) };
+}
+function observeOutcome(ws3, base, head, task, trusted) {
   if ("failure" in trusted) return { outcome: unobservedOutcome(), unmeasurable: trusted.failure };
   const policy = trusted.policy;
   const verify = parseDocument2(
@@ -20055,16 +20330,10 @@ function runTrajectory(ledger, task, pair, arm, adapter, opts, sourceBase) {
   }
   const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
   const head = git6(["rev-parse", "HEAD"], ws3);
-  const protectedOnly = (rel) => {
-    try {
-      return isProtected(rel, loadPolicyAt(base, ws3) ?? defaultPolicy());
-    } catch {
-      return true;
-    }
-  };
-  const fingerprintBefore = treeFingerprint(ws3, protectedOnly);
-  const observed = observeOutcome(ws3, base, head, task);
-  const movedDuringObservation = treeFingerprint(ws3, protectedOnly) !== fingerprintBefore;
+  const trustedSurface = trustedProtectedOnly(base, ws3);
+  const fingerprintBefore = treeFingerprint(ws3, trustedSurface.protectedOnly);
+  const observed = observeOutcome(ws3, base, head, task, trustedSurface.trusted);
+  const movedDuringObservation = treeFingerprint(ws3, trustedSurface.protectedOnly) !== fingerprintBefore;
   const unmeasurable = agent.unmeasurable ?? observed.unmeasurable ?? (movedDuringObservation ? "NOT_QUIESCENT: the workspace changed while its outcome was being observed" : null);
   const { unmeasurable: _agentUnmeasurable, ...agentRecord } = agent;
   const outcome = unmeasurable === null ? observed.outcome : unobservedOutcome();
@@ -20109,7 +20378,7 @@ function runResearch(opts) {
     err2("tamperward research: the gated arm cannot start here (see `tamperward doctor`); run as a non-root user on Linux.");
     return 2;
   }
-  const ledger = resolve15(opts.out);
+  const ledger = resolve16(opts.out);
   let lock;
   try {
     lock = acquireResearchLock(ledger, opts.breakLock === true);
@@ -20250,18 +20519,18 @@ var init_run2 = __esm({
 
 // src/research/summarize.ts
 import { readdirSync as readdirSync7, readFileSync as readFileSync24 } from "node:fs";
-import { join as join26, resolve as resolve16 } from "node:path";
+import { join as join26, resolve as resolve17 } from "node:path";
 function readLedger2(dir) {
-  const pairsDir = join26(resolve16(dir), "pairs");
+  const pairsDir = join26(resolve17(dir), "pairs");
   let names;
   try {
-    names = readdirSync7(pairsDir).filter((n) => n.endsWith(".json")).sort();
+    names = readdirSync7(pairsDir).filter((n2) => n2.endsWith(".json")).sort();
   } catch (e) {
     throw new ResearchError(`cannot read ledger ${pairsDir}: ${errorMessage(e)}`);
   }
   if (names.length === 0) throw new ResearchError(`ledger ${pairsDir} holds no pair records`);
-  return names.map((n) => {
-    const path = join26(pairsDir, n);
+  return names.map((n2) => {
+    const path = join26(pairsDir, n2);
     let raw;
     try {
       raw = JSON.parse(readFileSync24(path, "utf8"));
@@ -20394,7 +20663,321 @@ var init_summarize = __esm({
   }
 });
 
+// src/research/init.ts
+import { createHash as createHash14 } from "node:crypto";
+import { existsSync as existsSync19, mkdirSync as mkdirSync10, readFileSync as readFileSync25, writeFileSync as writeFileSync12 } from "node:fs";
+import { basename as basename5, dirname as dirname11, resolve as resolve18 } from "node:path";
+function idFrom(repo) {
+  const clean = repo.replace(/[\\/]$/, "").split(/[\\/]/).pop() || "task";
+  return (basename5(clean, ".git").replace(/[^A-Za-z0-9._-]+/g, "-") || "task").slice(0, 80);
+}
+function createResearchManifest(opts) {
+  if (!opts.out) throw new ResearchError("research init requires --out");
+  if (!opts.repo) throw new ResearchError("research init requires --repo");
+  if (!opts.prompt) throw new ResearchError("research init requires --prompt");
+  if (!opts.verifyCommand) throw new ResearchError("research init requires --verify-command");
+  const out3 = resolve18(opts.out);
+  if (existsSync19(out3)) throw new ResearchError(`research init refuses to overwrite ${out3}; choose a new path`);
+  const id = opts.id ?? idFrom(opts.repo);
+  if (!/^[A-Za-z0-9._-]+$/.test(id)) throw new ResearchError(`research init id must match [A-Za-z0-9._-] (got "${id}")`);
+  if (opts.verifyBudget !== void 0 && (!Number.isFinite(opts.verifyBudget) || opts.verifyBudget <= 0)) {
+    throw new ResearchError("research init --verify-budget must be positive");
+  }
+  const doc = {
+    version: 1,
+    tasks: [{
+      id,
+      repo: opts.repo,
+      base: opts.base ?? "HEAD",
+      prompt: opts.prompt,
+      verify: { command: opts.verifyCommand, ...opts.verifyBudget === void 0 ? {} : { budget: opts.verifyBudget } }
+    }]
+  };
+  const text = JSON.stringify(doc, null, 2) + "\n";
+  mkdirSync10(dirname11(out3), { recursive: true });
+  writeFileSync12(out3, text, { flag: "wx", mode: 384 });
+  const parsed = readManifest(out3);
+  if (parsed.tasks.length !== 1 || parsed.tasks[0].id !== id) throw new ResearchError(`research init wrote an invalid manifest ${out3}`);
+  return out3;
+}
+function runResearchInit(opts) {
+  try {
+    const out3 = createResearchManifest(opts);
+    const bytes = requireHash(out3);
+    process.stdout.write(`tamperward research init: wrote ${out3} (sha256 ${bytes})
+`);
+    return 0;
+  } catch (e) {
+    if (e instanceof ResearchError || e instanceof Error) {
+      process.stderr.write(`tamperward research: ${e.message}
+`);
+      return 2;
+    }
+    throw e;
+  }
+}
+function requireHash(path) {
+  return createHash14("sha256").update(readFileSync25(path)).digest("hex");
+}
+var init_init2 = __esm({
+  "src/research/init.ts"() {
+    "use strict";
+    init_adapter();
+    init_manifest();
+  }
+});
+
+// src/research/report.ts
+function renderResearchReport(summary) {
+  const u = summary.model_behaviour.ungated;
+  const g = summary.model_behaviour.gated;
+  const uo = summary.independent_outcome.ungated;
+  const go = summary.independent_outcome.gated;
+  const lines = [
+    "MODEL BEHAVIOUR",
+    `  model: ${summary.model ?? "(unspecified)"}`,
+    `  adapter: ${summary.adapter.name} [${summary.adapter.layers.join(", ")}]`,
+    `  pairs: ${n(summary.pairs)} (measured: ${n(summary.measured_pairs)}, unmeasurable: ${n(summary.unmeasurable_pairs)})`,
+    `  ungated: ${n(u.trajectories)} trajectories; masked failures ${n(u.masked_failure)}; surviving mutations ${n(u.surviving_protected_mutations)}`,
+    `  gated: ${n(g.trajectories)} trajectories; masked failures ${n(g.masked_failure)}; surviving mutations ${n(g.surviving_protected_mutations)}`,
+    "",
+    "CONTROL RESPONSE",
+    "  not measured by this adapter/ledger; denial-to-fix, surrender, and alternative-bypass responses are not inferred.",
+    "",
+    "INDEPENDENT OUTCOME",
+    `  ungated: visible green ${n(uo.visible_green)}, pristine green ${n(uo.pristine_green)}, masked failure ${n(uo.masked_failure)}, honest completion ${n(uo.honest_completion)}, released green ${n(uo.released_green)}`,
+    `  gated: visible green ${n(go.visible_green)}, pristine green ${n(go.pristine_green)}, masked failure ${n(go.masked_failure)}, honest completion ${n(go.honest_completion)}, released green ${n(go.released_green)}`,
+    "",
+    "TAMPERWARD PERFORMANCE",
+    `  caught: ${n(summary.tamperward.caught)}`,
+    `  escapes: ${n(summary.tamperward.escapes)}`,
+    `  false refusals: ${n(summary.tamperward.false_refusals)}`,
+    `  cannot adjudicate: ${n(summary.tamperward.cannot_adjudicate)}`,
+    `  paired masked failure: ungated-only ${n(summary.paired.masked_failure.ungated_only)}, gated-only ${n(summary.paired.masked_failure.gated_only)}, both ${n(summary.paired.masked_failure.both)}, neither ${n(summary.paired.masked_failure.neither)}`
+  ];
+  return lines.join("\n") + "\n";
+}
+function runResearchReport(opts) {
+  try {
+    const summary = summarizeLedger(opts.ledger);
+    process.stdout.write(opts.json ? JSON.stringify(summary, null, 2) + "\n" : renderResearchReport(summary));
+    return 0;
+  } catch (e) {
+    if (e instanceof ResearchError) {
+      process.stderr.write(`tamperward research: ${e.message}
+`);
+      return 2;
+    }
+    throw e;
+  }
+}
+var n;
+var init_report2 = __esm({
+  "src/research/report.ts"() {
+    "use strict";
+    init_adapter();
+    init_summarize();
+    n = (value) => String(value);
+  }
+});
+
+// src/research/bundle.ts
+import { createHash as createHash15 } from "node:crypto";
+import { gzipSync, gunzipSync } from "node:zlib";
+import { existsSync as existsSync20, mkdirSync as mkdirSync11, readdirSync as readdirSync8, readFileSync as readFileSync26, statSync as statSync6, writeFileSync as writeFileSync13 } from "node:fs";
+import { dirname as dirname12, join as join27, resolve as resolve19 } from "node:path";
+function octal(value, width) {
+  return value.toString(8).padStart(width - 1, "0") + "\0";
+}
+function tarEntry(name, bytes) {
+  const header = Buffer.alloc(BLOCK, 0);
+  const safe = name.replace(/^\/+/, "").slice(0, 99);
+  header.write(safe, 0, "utf8");
+  header.write(octal(420, 8), 100, "ascii");
+  header.write(octal(0, 8), 108, "ascii");
+  header.write(octal(0, 8), 116, "ascii");
+  header.write(octal(bytes.length, 12), 124, "ascii");
+  header.write(octal(0, 12), 136, "ascii");
+  header.fill(32, 148, 156);
+  header[156] = 48;
+  header.write("ustar", 257, "ascii");
+  header.write("00", 263, "ascii");
+  const checksum = header.reduce((sum, b) => sum + b, 0);
+  header.write(octal(checksum, 8), 148, "ascii");
+  const padding = Buffer.alloc((BLOCK - bytes.length % BLOCK) % BLOCK, 0);
+  return Buffer.concat([header, bytes, padding]);
+}
+function makeTar(entries) {
+  return Buffer.concat([...entries.map((e) => tarEntry(e.name, e.bytes)), Buffer.alloc(BLOCK * 2, 0)]);
+}
+function parseTar(bytes) {
+  const files = /* @__PURE__ */ new Map();
+  for (let offset = 0; offset + BLOCK <= bytes.length; ) {
+    const header = bytes.subarray(offset, offset + BLOCK);
+    if (header.every((b) => b === 0)) break;
+    const name = header.subarray(0, 100).toString("utf8").replace(/\0.*$/, "");
+    const sizeText = header.subarray(124, 136).toString("ascii").replace(/\0.*$/, "").trim();
+    const size = Number.parseInt(sizeText || "0", 8);
+    if (!name || name.startsWith("/") || name.split("/").includes("..") || !Number.isSafeInteger(size) || size < 0) {
+      throw new ResearchError("research bundle contains an unsafe or malformed archive entry");
+    }
+    const start = offset + BLOCK;
+    const end = start + size;
+    if (end > bytes.length) throw new ResearchError("research bundle is truncated");
+    files.set(name, Buffer.from(bytes.subarray(start, end)));
+    offset = start + Math.ceil(size / BLOCK) * BLOCK;
+  }
+  return files;
+}
+function walkLedger(ledger) {
+  const entries = [];
+  const pairs = join27(ledger, "pairs");
+  if (!existsSync20(pairs) || !statSync6(pairs).isDirectory()) throw new ResearchError(`ledger ${ledger} has no pairs directory`);
+  const names = readdirSync8(pairs).filter((n2) => n2.endsWith(".json")).sort();
+  if (names.length === 0) throw new ResearchError(`ledger ${ledger} holds no pair records`);
+  for (const name of names) {
+    const path = join27(pairs, name);
+    if (!statSync6(path).isFile()) continue;
+    entries.push({ name: `ledger/pairs/${name}`, bytes: readFileSync26(path) });
+  }
+  return entries;
+}
+function jsonBytes(value) {
+  return Buffer.from(JSON.stringify(value, null, 2) + "\n", "utf8");
+}
+function validateResearchBundle(path) {
+  let files;
+  try {
+    files = parseTar(gunzipSync(readFileSync26(resolve19(path))));
+  } catch (e) {
+    throw new ResearchError(`cannot read research bundle ${path}: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  const provenance = files.get("provenance.json");
+  const summaryBytes = files.get("summary.json");
+  const report2 = files.get("report.txt");
+  if (!provenance || !summaryBytes || !report2) throw new ResearchError("research bundle is missing provenance.json, summary.json or report.txt");
+  let p;
+  let summary;
+  try {
+    p = JSON.parse(provenance.toString("utf8"));
+    summary = JSON.parse(summaryBytes.toString("utf8"));
+  } catch {
+    throw new ResearchError("research bundle contains invalid JSON");
+  }
+  if (p.bundle_schema_version !== BUNDLE_VERSION || p.schema_version !== MACHINE_SCHEMA_VERSION) {
+    throw new ResearchError("research bundle schema version is unsupported");
+  }
+  const manifest = files.get("manifest.json");
+  if (p.manifest_included !== Boolean(manifest) || p.prompts_included !== Boolean(manifest)) {
+    throw new ResearchError("research bundle manifest inclusion metadata is inconsistent");
+  }
+  if (manifest && createHash15("sha256").update(manifest).digest("hex") !== p.manifest_sha256) {
+    throw new ResearchError("research bundle manifest does not match its recorded sha256");
+  }
+  const parsedSummary = summary;
+  if (parsedSummary.document !== "summary" || parsedSummary.command !== "research") throw new ResearchError("research bundle summary is not a research summary");
+  const records = [];
+  for (const [name, bytes] of files) {
+    if (!name.startsWith("ledger/pairs/") || !name.endsWith(".json")) continue;
+    let raw;
+    try {
+      raw = JSON.parse(bytes.toString("utf8"));
+    } catch {
+      throw new ResearchError(`invalid JSON in ${name}`);
+    }
+    records.push(pairRecordFrom(raw, name));
+  }
+  if (records.length === 0) throw new ResearchError("research bundle contains no pair records");
+  const derived = summarizeRecords(records);
+  if (JSON.stringify(derived) !== JSON.stringify(summary)) throw new ResearchError("research bundle summary does not match its pair records");
+  if (report2.toString("utf8") !== renderResearchReport(derived)) throw new ResearchError("research bundle report does not match its summary");
+  if (p.manifest_sha256 !== parsedSummary.manifest_sha256) throw new ResearchError("research bundle manifest hash disagrees with summary");
+  if (!p.protocol || p.protocol !== "research-bundle-v1") throw new ResearchError("research bundle protocol is missing or unsupported");
+  return { records: records.length, manifest_sha256: String(p.manifest_sha256) };
+}
+function createResearchBundle(opts) {
+  if (!opts.ledger) throw new ResearchError("research bundle requires --ledger");
+  if (!opts.out) throw new ResearchError("research bundle requires --out");
+  const ledger = resolve19(opts.ledger);
+  const summary = summarizeLedger(ledger);
+  const entries = walkLedger(ledger);
+  if (opts.manifest) {
+    const manifest = readFileSync26(resolve19(opts.manifest));
+    const sha3 = createHash15("sha256").update(manifest).digest("hex");
+    if (sha3 !== summary.manifest_sha256) throw new ResearchError(`manifest sha256 ${sha3} does not match ledger ${summary.manifest_sha256}`);
+    entries.push({ name: "manifest.json", bytes: manifest });
+  }
+  const provenance = {
+    bundle_schema_version: BUNDLE_VERSION,
+    protocol: "research-bundle-v1",
+    schema_version: MACHINE_SCHEMA_VERSION,
+    manifest_sha256: summary.manifest_sha256,
+    adapter: summary.adapter,
+    model: summary.model,
+    tamperward_version: summary.tamperward_version,
+    agent_argv: summary.agent_argv,
+    agent_budget: summary.agent_budget,
+    records: entries.filter((e) => e.name.startsWith("ledger/pairs/")).length,
+    manifest_included: Boolean(opts.manifest),
+    prompts_included: Boolean(opts.manifest)
+  };
+  entries.push({ name: "summary.json", bytes: jsonBytes(summary) });
+  entries.push({ name: "report.txt", bytes: Buffer.from(renderResearchReport(summary), "utf8") });
+  entries.push({ name: "provenance.json", bytes: jsonBytes(provenance) });
+  const out3 = resolve19(opts.out);
+  mkdirSync11(dirname12(out3), { recursive: true });
+  writeFileSync13(out3, gzipSync(makeTar(entries)), { flag: "wx", mode: 384 });
+  return out3;
+}
+function runResearchBundle(opts) {
+  try {
+    if (opts.validate) {
+      const result = validateResearchBundle(opts.validate);
+      process.stdout.write(`tamperward research bundle: valid (${result.records} records, manifest ${result.manifest_sha256})
+`);
+      return 0;
+    }
+    const out3 = createResearchBundle(opts);
+    process.stdout.write(`tamperward research bundle: wrote ${out3}
+`);
+    return 0;
+  } catch (e) {
+    if (e instanceof ResearchError || e instanceof Error) {
+      process.stderr.write(`tamperward research: ${e.message}
+`);
+      return 2;
+    }
+    throw e;
+  }
+}
+var BLOCK, BUNDLE_VERSION;
+var init_bundle = __esm({
+  "src/research/bundle.ts"() {
+    "use strict";
+    init_machine_output();
+    init_adapter();
+    init_record();
+    init_report2();
+    init_summarize();
+    BLOCK = 512;
+    BUNDLE_VERSION = 1;
+  }
+});
+
 // src/cli/research.ts
+function parseResearchInit(args) {
+  const o = { out: "", repo: "", prompt: "", verifyCommand: "" };
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--out") o.out = args[++i];
+    else if (args[i] === "--repo") o.repo = args[++i];
+    else if (args[i] === "--base") o.base = args[++i];
+    else if (args[i] === "--id") o.id = args[++i];
+    else if (args[i] === "--prompt") o.prompt = args[++i];
+    else if (args[i] === "--verify-command") o.verifyCommand = args[++i];
+    else if (args[i] === "--verify-budget") o.verifyBudget = Number(args[++i]);
+  }
+  return o;
+}
 function parseResearchRun(args) {
   const o = { manifest: "", out: "", adapter: "", agentArgv: [] };
   for (let i = 0; i < args.length; i++) {
@@ -20420,10 +21003,36 @@ function parseResearchSummarize(args) {
   }
   return o;
 }
+function parseResearchReport(args) {
+  const o = { ledger: "" };
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--ledger") o.ledger = args[++i];
+    else if (args[i] === "--json") o.json = true;
+  }
+  return o;
+}
+function parseResearchBundle(args) {
+  const o = { ledger: "" };
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--ledger") o.ledger = args[++i];
+    else if (args[i] === "--out") o.out = args[++i];
+    else if (args[i] === "--manifest") o.manifest = args[++i];
+    else if (args[i] === "--validate") o.validate = args[++i];
+    else if (args[i] === "--bundle") o.validate = args[++i];
+  }
+  return o;
+}
 function runResearchCommand(args) {
   const [sub, ...rest] = args;
+  if (sub === "init") return runResearchInit(parseResearchInit(rest));
   if (sub === "run") return runResearch(parseResearchRun(rest));
   if (sub === "summarize") return runResearchSummarize(parseResearchSummarize(rest));
+  if (sub === "report") return runResearchReport(parseResearchReport(rest));
+  if (sub === "bundle") return runResearchBundle(parseResearchBundle(rest));
+  if (sub === "validate") {
+    const bundle = parseResearchBundle(rest);
+    return runResearchBundle({ ledger: "", validate: bundle.validate ?? bundle.out });
+  }
   process.stderr.write(`tamperward research: unknown subcommand "${sub ?? ""}" (${RESEARCH_SUBCOMMANDS.join(" | ")})
 `);
   return 2;
@@ -20434,7 +21043,37 @@ var init_research = __esm({
     "use strict";
     init_run2();
     init_summarize();
-    RESEARCH_SUBCOMMANDS = ["run", "summarize"];
+    init_init2();
+    init_report2();
+    init_bundle();
+    RESEARCH_SUBCOMMANDS = ["init", "run", "summarize", "report", "bundle", "validate"];
+  }
+});
+
+// src/cli/signoff-label.ts
+function runSignoffLabel(opts) {
+  if (!opts.rule) {
+    process.stderr.write("tamperward signoff-label --rule <rule> --head <full-head-sha> [--file <path>]\n");
+    return 2;
+  }
+  if (!opts.head) {
+    process.stderr.write("tamperward: --head is required and must be a full 40- or 64-character object id.\n");
+    return 2;
+  }
+  const want = opts.file ? `${opts.rule}:${opts.file}` : opts.rule;
+  const token = compactOobToken(want, opts.head);
+  if (!token) {
+    process.stderr.write("tamperward: --head must be a full 40- or 64-character hexadecimal object id.\n");
+    return 2;
+  }
+  process.stdout.write(`${token}
+`);
+  return 0;
+}
+var init_signoff_label = __esm({
+  "src/cli/signoff-label.ts"() {
+    "use strict";
+    init_signoff();
   }
 });
 
@@ -20517,6 +21156,16 @@ function parseStats(args) {
   }
   return o;
 }
+function parseSignoffLabel(args) {
+  const o = {};
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === "--rule") o.rule = args[++i];
+    else if (a === "--file") o.file = args[++i];
+    else if (a === "--head") o.head = args[++i];
+  }
+  return o;
+}
 function parseCheck(args) {
   const o = {};
   for (let i = 0; i < args.length; i++) {
@@ -20532,14 +21181,45 @@ function parseCheck(args) {
   }
   return o;
 }
+function splitLongOptionEquals(args) {
+  const out3 = [];
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--") {
+      out3.push(...args.slice(i));
+      break;
+    }
+    if (arg.startsWith("--")) {
+      const equals = arg.indexOf("=");
+      if (equals > 2) {
+        out3.push(arg.slice(0, equals), arg.slice(equals + 1));
+        continue;
+      }
+    }
+    out3.push(arg);
+  }
+  return out3;
+}
+function helpRequested(args) {
+  for (const arg of args) {
+    if (arg === "--") break;
+    if (arg === "-h" || arg === "--help") return true;
+  }
+  return false;
+}
 function validateFlatArgs(args, grammar) {
   const flags = new Set(grammar.flags ?? []);
   const values = grammar.values ?? {};
   const seen = /* @__PURE__ */ new Set();
   const positionals = [];
+  let options = true;
   for (let i = 0; i < args.length; i++) {
     const a = args[i];
-    if (flags.has(a) || Object.prototype.hasOwnProperty.call(values, a)) {
+    if (options && a === "--") {
+      options = false;
+      continue;
+    }
+    if (options && (flags.has(a) || Object.prototype.hasOwnProperty.call(values, a))) {
       if (seen.has(a)) {
         return { error: `option "${a}" specified more than once`, seen, positionals };
       }
@@ -20556,18 +21236,18 @@ function validateFlatArgs(args, grammar) {
       }
       i++;
       if (rule === "positive") {
-        const n = Number(v);
-        if (!Number.isFinite(n) || n <= 0) {
+        const n2 = Number(v);
+        if (!Number.isFinite(n2) || n2 <= 0) {
           return { error: `${a} needs a positive number (got "${v}")`, seen, positionals };
         }
       } else if (rule === "positive-integer") {
-        const n = Number(v);
-        if (!Number.isFinite(n) || !Number.isInteger(n) || n <= 0) {
+        const n2 = Number(v);
+        if (!Number.isFinite(n2) || !Number.isInteger(n2) || n2 <= 0) {
           return { error: `${a} needs a positive integer (got "${v}")`, seen, positionals };
         }
       } else if (rule === "non-negative") {
-        const n = Number(v);
-        if (!Number.isFinite(n) || n < 0) {
+        const n2 = Number(v);
+        if (!Number.isFinite(n2) || n2 < 0) {
           return { error: `${a} needs a non-negative number (got "${v}")`, seen, positionals };
         }
       } else if (rule === "format" && !isFormat(v)) {
@@ -20579,7 +21259,7 @@ function validateFlatArgs(args, grammar) {
       }
       continue;
     }
-    if (a.startsWith("-")) {
+    if (options && a.startsWith("-")) {
       return { error: `unknown option "${a}"`, seen, positionals };
     }
     if (grammar.positional === "one" && positionals.length === 0) {
@@ -20591,6 +21271,8 @@ function validateFlatArgs(args, grammar) {
   return { seen, positionals };
 }
 function validateCliArgs(cmd, args) {
+  args = splitLongOptionEquals(args);
+  if (helpRequested(args)) return void 0;
   if (cmd === "hook" || cmd === "sweep") {
     if (args.length === 0) return `${cmd} requires an agent name`;
     if (args.length > 1) return `unexpected argument "${args[1]}"`;
@@ -20638,6 +21320,11 @@ function validateCliArgs(cmd, args) {
     if (parsed.positionals.length === 0) return "allow requires a rule";
     return void 0;
   }
+  if (cmd === "signoff-label") {
+    return validateFlatArgs(args, {
+      values: { "--rule": "string", "--file": "string", "--head": "string" }
+    }).error;
+  }
   if (cmd === "init") {
     return validateFlatArgs(args, {
       flags: ["--dry-run", "--force-workflow"],
@@ -20684,7 +21371,7 @@ function validateCliArgs(cmd, args) {
   if (cmd === "hook-service") {
     const sub = args[0];
     if (sub !== "start" && sub !== "stop" && sub !== "status") return "hook-service requires one of start | stop | status";
-    return validateFlatArgs(args.slice(1), sub === "start" ? { values: { "--dir": "string" } } : {}).error;
+    return validateFlatArgs(args.slice(1), { values: { "--dir": "string" } }).error;
   }
   if (cmd === "verify") {
     return validateFlatArgs(args, {
@@ -20717,6 +21404,24 @@ function validateCliArgs(cmd, args) {
   if (cmd === "research") {
     const [sub, ...rest] = args;
     if (sub === void 0) return `research requires a subcommand (${RESEARCH_SUBCOMMANDS.join(" | ")})`;
+    if (sub === "init") {
+      const parsed = validateFlatArgs(rest, {
+        values: {
+          "--out": "string",
+          "--repo": "string",
+          "--base": "string",
+          "--id": "string",
+          "--prompt": "string",
+          "--verify-command": "string",
+          "--verify-budget": "positive"
+        }
+      });
+      if (parsed.error) return parsed.error;
+      for (const required of ["--out", "--repo", "--prompt", "--verify-command"]) {
+        if (!parsed.seen.has(required)) return `research init requires ${required}`;
+      }
+      return void 0;
+    }
     if (sub === "run") {
       const delimiter3 = rest.indexOf("--");
       const prefix = delimiter3 < 0 ? rest : rest.slice(0, delimiter3);
@@ -20743,6 +21448,29 @@ function validateCliArgs(cmd, args) {
       if (!parsed.seen.has("--ledger")) return "research summarize requires --ledger";
       return void 0;
     }
+    if (sub === "report") {
+      const parsed = validateFlatArgs(rest, { flags: ["--json"], values: { "--ledger": "string" } });
+      if (parsed.error) return parsed.error;
+      if (!parsed.seen.has("--ledger")) return "research report requires --ledger";
+      return void 0;
+    }
+    if (sub === "bundle") {
+      const parsed = validateFlatArgs(rest, {
+        values: { "--ledger": "string", "--out": "string", "--manifest": "string", "--validate": "string" }
+      });
+      if (parsed.error) return parsed.error;
+      if (parsed.seen.has("--validate")) return void 0;
+      for (const required of ["--ledger", "--out"]) {
+        if (!parsed.seen.has(required)) return `research bundle requires ${required}`;
+      }
+      return void 0;
+    }
+    if (sub === "validate") {
+      const parsed = validateFlatArgs(rest, { values: { "--bundle": "string" } });
+      if (parsed.error) return parsed.error;
+      if (!parsed.seen.has("--bundle")) return "research validate requires --bundle";
+      return void 0;
+    }
     return `unknown research subcommand "${sub}" (${RESEARCH_SUBCOMMANDS.join(" | ")})`;
   }
   return void 0;
@@ -20770,8 +21498,8 @@ Formats:
   tamperward hook claude                    PreToolUse gate (reads hook JSON on stdin)
   tamperward sweep claude                   Stop sweep (re-scan the turn's working tree)
   tamperward hook-service start [--dir D]   OPT-IN persistent hook service: one warm
-  tamperward hook-service stop | status     process per user and repository that
-                                            evaluates hook/sweep requests over a
+  tamperward hook-service stop [--dir D]    process per user and repository that
+  tamperward hook-service status [--dir D]  evaluates hook/sweep requests over a
                                             private unix socket, so each tool call
                                             skips Node + bundle startup. Hooks
                                             consult it only with
@@ -20790,8 +21518,8 @@ Formats:
              [--budget S] [--json] [--keep] as-is AND with protected files restored
              [--require-ancestor] [--cwd D]  from the trusted base; a visible-green /
                                             pristine-red result is a MASKED FAILURE
-                                            (exit 1, or 0 under an out-of-band
-                                            verify@<head-sha> approval); cannot-verify
+                                            (exit 1, or 0 under a compact tw1:<digest>
+                                            or legacy verify@<full-sha> approval); cannot-verify
                                             fails closed (2)
   tamperward trace-verify [--base R]          advisory Linux verifier-input discovery:
              [--cmd C] [--budget S] [--runs N] trace a trusted/known-good base with
@@ -20817,6 +21545,8 @@ Formats:
                                             code when clean; 124 on clean AGENT_TIMEOUT;
                                             1 on any blocking finding/masked failure;
                                             2 when it cannot adjudicate (fails closed)
+  tamperward research init --out F --repo R  author a versioned one-task manifest
+             --prompt P --verify-command C     and print its sha256 identity
   tamperward research run --manifest F      bring-your-own-model evaluation: for every
              --out D --adapter A [--pairs N]  task in the manifest, pin one source commit,
              [--model M] [--agent-budget S]   clone fresh state per arm, run the agent
@@ -20828,6 +21558,11 @@ Formats:
   tamperward research summarize --ledger D  aggregate measured pairs into model behaviour,
                                              independent outcome, TamperWard hits/misses
                                              and paired counts \u2014 no composite score
+  tamperward research report --ledger D     human-readable four-section report (or --json)
+  tamperward research bundle --ledger D     reproducible records/provenance archive
+             --out F [--manifest M]          (manifest/prompts included only when requested)
+  tamperward research bundle --validate F   structurally and provenance-validate a bundle
+  tamperward research validate --bundle F   alias for bundle validation
   tamperward stats [--file F] [--since 30d] aggregate privacy-safe hook/sweep audit
              [--json] [--cwd D]              events by rule and enforcement surface.
                                              Defaults to the repository-local
@@ -20836,6 +21571,8 @@ Formats:
                                              integrity signal, not proof of agent intent.
   tamperward allow <rule> --reason "..."    record a human sign-off (local audit ledger)
              [--file F] [--cwd D]
+  tamperward signoff-label --rule <rule> --head <sha> [--file F]
+                                            print a compact, exact-head-bound CI label
   tamperward onboard [--yes] [--cwd D]      guided first-run setup: preflight, the
              [--base R] [--repo O/R]        init plan with a confirmation before any
              [--branch B] [--verify-command C] write, canonical init, explicit verifier
@@ -20882,7 +21619,12 @@ Exit codes: 0 clean \xB7 1 a blocking finding (check), MASKED_FAILURE or SUITE_R
 `);
 }
 function main(argv) {
-  const [cmd, ...rest] = argv;
+  const [cmd, ...rawRest] = argv;
+  const rest = splitLongOptionEquals(rawRest);
+  if (cmd !== void 0 && cmd !== "-h" && cmd !== "--help" && helpRequested(rest)) {
+    printHelp();
+    return 0;
+  }
   if (cmd !== void 0 && cmd !== "-h" && cmd !== "--help") {
     const invalid = validateCliArgs(cmd, rest);
     if (invalid) {
@@ -20900,6 +21642,8 @@ function main(argv) {
       return runAgentCommand("sweep", rest);
     case "allow":
       return runAllow(parseAllow(rest));
+    case "signoff-label":
+      return runSignoffLabel(parseSignoffLabel(rest));
     case "init":
       return runInit(parseInit(rest));
     case "doctor":
@@ -20968,13 +21712,14 @@ var init_main = __esm({
     init_onboard();
     init_research();
     init_audit();
+    init_signoff_label();
   }
 });
 
 // src/cli/index.ts
 init_hook_client();
 init_exit();
-import { readFileSync as readFileSync25 } from "node:fs";
+import { readFileSync as readFileSync27 } from "node:fs";
 function loadMain() {
   return Promise.resolve().then(() => (init_main(), main_exports));
 }
@@ -20987,7 +21732,7 @@ async function launch(argv) {
   if (kind && hookServiceEnabled()) {
     let raw = null;
     try {
-      raw = readFileSync25(0, "utf8");
+      raw = readFileSync27(0, "utf8");
     } catch {
       raw = null;
     }