tamperward 2.41.0 → 2.43.0

package/dist/cli/index.js

@@ -11328,7 +11328,7 @@ var init_signoff = __esm({
 function machineOutput(payload) {
   return { ...payload, schema_version: MACHINE_SCHEMA_VERSION };
 }
-var MACHINE_SCHEMA_VERSION, VERIFY_VERDICTS, RUN_VERDICTS;
+var MACHINE_SCHEMA_VERSION, VERIFY_VERDICTS, VERIFY_CANNOT_VERIFY_REASONS, RUN_VERDICTS;
 var init_machine_output = __esm({
   "src/machine-output.ts"() {
     "use strict";
@@ -11340,6 +11340,23 @@ var init_machine_output = __esm({
       "BUDGET_EXCEEDED",
       "CANNOT_VERIFY"
     ];
+    VERIFY_CANNOT_VERIFY_REASONS = [
+      "INVALID_ARGUMENTS",
+      "POLICY_ERROR",
+      "BASE_NOT_ANCESTOR",
+      "NO_SUITE_COMMAND",
+      "VERIFIER_BACKEND_UNAVAILABLE",
+      "LOCAL_VERIFIER_UNSUPPORTED_PLATFORM",
+      "DEPENDENCY_ENVIRONMENT_UNATTESTABLE",
+      "BASE_UNRESOLVABLE",
+      "DEPENDENCY_DRIFT",
+      "MATERIALIZATION_FAILED",
+      "VERIFIER_BACKEND_RUNTIME_FAILURE",
+      "VERIFIER_RESOURCE_EXHAUSTED",
+      "WORKTREE_CHANGED",
+      "PRISTINE_INTEGRITY_CHANGED",
+      "PATH_CASE_COLLISION"
+    ];
     RUN_VERDICTS = [
       "VERIFIED",
       "AGENT_TIMEOUT",
@@ -15746,7 +15763,9 @@ function runCapturedProcessSync(executable, args, opts) {
         detached: Boolean(opts.detached),
         killGroupOnFinish: Boolean(opts.killGroupOnFinish),
         drainMs: opts.drainMs ?? 1e3,
-        captureBytes: DIAGNOSTIC_TAIL_BYTES
+        captureBytes: DIAGNOSTIC_TAIL_BYTES,
+        progressStage: opts.progressStage,
+        progressIntervalMs: opts.progressIntervalMs
       }),
       { mode: 384 }
     );
@@ -15757,7 +15776,7 @@ function runCapturedProcessSync(executable, args, opts) {
         cwd: opts.cwd,
         env: opts.env,
         encoding: "utf8",
-        stdio: ["ignore", "pipe", "ignore"],
+        stdio: ["ignore", "pipe", opts.progressStage ? "inherit" : "ignore"],
         // The trusted result is at most two 16 KiB tails plus small metadata.
         // A candidate that somehow writes into the supervisor's stdout through
         // same-UID /proc can only overflow/corrupt this bounded channel and make
@@ -15911,6 +15930,16 @@ let timedOut = false;
 let exitInfo = { exit: null, signal: null };
 let descendantTracker = null;
 let drainTimer = null;
+let progressTimer = null;
+const started = Date.now();
+function progress() {
+  if (cfg.progressStage !== 'visible' && cfg.progressStage !== 'pristine') return;
+  try {
+    fs.writeSync(2, 'verify: ' + cfg.progressStage + ' suite running (' +
+      Math.floor((Date.now() - started) / 1000) + 's; ' +
+      (stdout.total + stderr.total) + ' output bytes captured)\n');
+  } catch {}
+}
 
 function killOwned() {
   if (!child || !child.pid) return;
@@ -15933,6 +15962,7 @@ function finish(extra) {
   done = true;
   if (descendantTracker) clearInterval(descendantTracker);
   if (drainTimer) clearTimeout(drainTimer);
+  if (progressTimer) clearInterval(progressTimer);
   // fd 1 is the reserved result channel (suite streams are separate pipes).
   // Write synchronously: process.stdout.write is async on a POSIX pipe, so an
   // immediate process.exit(0) can truncate the result before it flushes.
@@ -15971,6 +16001,11 @@ try {
 }
 
 if (child) {
+  if (cfg.progressStage === 'visible' || cfg.progressStage === 'pristine') {
+    progress();
+    progressTimer = setInterval(progress, Number(cfg.progressIntervalMs) || 30000);
+    progressTimer.unref();
+  }
   if (process.platform === 'linux') {
     trackDescendants();
     descendantTracker = setInterval(trackDescendants, 5);
@@ -16375,7 +16410,7 @@ function containerStateResult(state, secs) {
   }
   return { exit: state.ExitCode, secs };
 }
-function runContainerStage(backend, dir, command, budgetSecs) {
+function runContainerStage(backend, dir, command, budgetSecs, progressStage) {
   const t0 = Date.now();
   if (backend.kind !== "container" || !backend.available || !backend.image || !backend.enginePath || !backend.engineSha256 || !backend.daemonHost || !engineStable(backend)) {
     return {
@@ -16405,7 +16440,8 @@ function runContainerStage(backend, dir, command, budgetSecs) {
         cwd: dirname7(backend.enginePath),
         env: engineClientEnv(),
         timeoutMs: budgetSecs * 1e3,
-        backstopMs: 3e4
+        backstopMs: 3e4,
+        progressStage
       }
     );
     const secs = Math.round((Date.now() - t0) / 1e3);
@@ -17148,7 +17184,7 @@ var init_verification_receipt = __esm({
 // src/cli/verify.ts
 import { execFileSync as execFileSync9, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash14 } from "node:crypto";
-import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync10, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync3, readFileSync as readFileSync13, readlinkSync as readlinkSync3, rmSync as rmSync9, symlinkSync, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "node:fs";
+import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync10, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync3, readFileSync as readFileSync13, readlinkSync as readlinkSync3, realpathSync as realpathSync8, rmSync as rmSync9, symlinkSync, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname10, isAbsolute as isAbsolute11, join as join22, relative as relative6, resolve as resolve9, sep as sep4 } from "node:path";
 function oracleAssuranceReport() {
@@ -17491,7 +17527,28 @@ function localVerifierShell(platform = process.platform, command) {
       return null;
   }
 }
-function runLocalSuite(dir, cmd, budgetSecs) {
+function cargoStageTargets(root, cwd) {
+  const absolute = resolve9(cwd, root);
+  mkdirSync10(absolute, { recursive: true });
+  const canonical2 = realpathSync8(absolute);
+  const checkout = realpathSync8(cwd);
+  const contains = (parent, child) => {
+    const rel = relative6(parent, child);
+    return rel === "" || !rel.startsWith(".." + sep4) && rel !== ".." && !isAbsolute11(rel);
+  };
+  if (contains(checkout, canonical2) || contains(canonical2, checkout)) {
+    throw new Error("Cargo target root must be outside the checkout and cannot contain it");
+  }
+  const targets = { visible: join22(canonical2, "visible"), pristine: join22(canonical2, "pristine") };
+  for (const target of Object.values(targets)) {
+    mkdirSync10(target, { recursive: true });
+    if (lstatSync10(target).isSymbolicLink() || realpathSync8(target) !== target) {
+      throw new Error("Cargo stage targets must be distinct real directories, not links");
+    }
+  }
+  return targets;
+}
+function runLocalSuite(dir, cmd, budgetSecs, stage, target, progress) {
   const t0 = Date.now();
   const shell = localVerifierShell(process.platform, cmd);
   if (!shell) {
@@ -17504,13 +17561,26 @@ function runLocalSuite(dir, cmd, budgetSecs) {
   }
   const scratch = mkdtempSync3(join22(tmpdir4(), "tw-verify-run-"));
   try {
+    const env = suiteEnv(scratch);
+    if (target) {
+      let valid = false;
+      try {
+        valid = realpathSync8(target) === target && !lstatSync10(target).isSymbolicLink();
+      } catch {
+      }
+      if (!valid) {
+        return { exit: null, secs: 0, failure: "backend", reason: "Cargo stage target changed before execution" };
+      }
+      env.CARGO_TARGET_DIR = target;
+    }
     const r = runCapturedProcessSync(shell.executable, shell.args, {
       cwd: dir,
-      env: suiteEnv(scratch),
+      env,
       timeoutMs: budgetSecs * 1e3,
       detached: true,
       killGroupOnFinish: true,
-      backstopMs: 3e4
+      backstopMs: 3e4,
+      progressStage: progress ? stage : void 0
     });
     const secs = Math.round((Date.now() - t0) / 1e3);
     if (r.timedOut) {
@@ -17676,6 +17746,15 @@ function runVerifyImpl(opts) {
     return 2;
   }
   const isolated = verifierBackend.kind === "container";
+  let cargoTargets;
+  if (opts.cargoTargetRoot !== void 0) {
+    if (isolated) return cannotVerify("INVALID_ARGUMENTS", "--cargo-target-root is supported only by the checkpointed-local backend");
+    try {
+      cargoTargets = cargoStageTargets(opts.cargoTargetRoot, cwd);
+    } catch (e) {
+      return cannotVerify("INVALID_ARGUMENTS", `cannot configure Cargo stage targets (${e instanceof Error ? e.message : String(e)})`);
+    }
+  }
   if (!isolated && !localVerifierShell(process.platform, cmd)) {
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: "LOCAL_VERIFIER_UNSUPPORTED_PLATFORM", detail: `checkpointed-local verifier is unsupported on ${process.platform}` });
     if (opts.json) {
@@ -17719,7 +17798,7 @@ function runVerifyImpl(opts) {
   }
   const frozenNodeModules = dependencyEnvironment ? dependencyEnvironment.roots.find((root) => root.kind === "node_modules")?.realPath ?? null : null;
   const checkDeps = () => dependencyEnvironment ? checkDependencyEnvironment(cwd, dependencyEnvironment) : { ok: true };
-  const runStage = opts.runStage ?? ((dir) => isolated ? runContainerStage(verifierBackend, dir, cmd, budget) : runLocalSuite(dir, cmd, budget));
+  const runStage = (dir, stage) => opts.runStage ? opts.runStage(dir) : isolated ? runContainerStage(verifierBackend, dir, cmd, budget, opts.silent ? void 0 : stage) : runLocalSuite(dir, cmd, budget, stage, cargoTargets?.[stage], !opts.silent);
   const notQuiescent = (stage, r) => {
     const detail = `the ${stage} suite exited (code ${r.exit ?? "unknown"}) but left a process holding stdout open after termination was attempted; the stage is not quiescent, so the run cannot be certified`;
     opts.onVerdict?.({ verdict: "CANNOT_VERIFY", reason: "VERIFIER_BACKEND_RUNTIME_FAILURE", detail });
@@ -17800,7 +17879,7 @@ function runVerifyImpl(opts) {
       { verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport(), materialization_reason: materializationFailureReason(e) }
     );
   }
-  const visible = runStage(visDir);
+  const visible = runStage(visDir, "visible");
   if (visible.pipeHeldOpen) {
     cleanup([visRoot]);
     return notQuiescent("visible", visible);
@@ -17916,7 +17995,7 @@ function runVerifyImpl(opts) {
     );
   }
   const overlayBefore = overlayDigest(priDir, restored);
-  const pristine = runStage(priDir);
+  const pristine = runStage(priDir, "pristine");
   if (pristine.pipeHeldOpen) {
     cleanup([visRoot, priRoot]);
     return notQuiescent("pristine", pristine);
@@ -18092,13 +18171,14 @@ function parseVerify(args) {
     if (a === "--json") o.json = true;
     else if (a === "--keep") o.keep = true;
     else if (a === "--require-ancestor") o.requireAncestor = true;
-    else if (a === "--base" || a === "--cmd" || a === "--cwd" || a === "--budget") {
+    else if (a === "--base" || a === "--cmd" || a === "--cwd" || a === "--budget" || a === "--cargo-target-root") {
       const v = value(i, a);
       if (v === void 0) continue;
       i++;
       if (a === "--base") o.base = v;
       else if (a === "--cmd") o.cmd = v;
       else if (a === "--cwd") o.cwd = v;
+      else if (a === "--cargo-target-root") o.cargoTargetRoot = v;
       else {
         o.budget = Number(v);
         if (!Number.isFinite(o.budget) || o.budget <= 0)
@@ -18222,7 +18302,7 @@ var init_verify = __esm({
 // src/cli/run.ts
 import { execFileSync as execFileSync10, spawn, spawnSync as spawnSync4 } from "node:child_process";
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { accessSync as accessSync3, constants as fsConstants, mkdtempSync as mkdtempSync4, readdirSync as readdirSync5, readFileSync as readFileSync14, readlinkSync as readlinkSync4, realpathSync as realpathSync8, rmSync as rmSync10, statSync as statSync6, writeFileSync as writeFileSync9 } from "node:fs";
+import { accessSync as accessSync3, constants as fsConstants, mkdtempSync as mkdtempSync4, readdirSync as readdirSync5, readFileSync as readFileSync14, readlinkSync as readlinkSync4, realpathSync as realpathSync9, rmSync as rmSync10, statSync as statSync6, writeFileSync as writeFileSync9 } from "node:fs";
 import { tmpdir as tmpdir5 } from "node:os";
 import { dirname as dirname11, join as join23, resolve as resolve10 } from "node:path";
 function authoritativeRunLifecyclePlatform(platform = process.platform) {
@@ -18277,7 +18357,7 @@ function trustedLinuxPython(candidates = DEFAULT_TRUSTED_PYTHON_CANDIDATES) {
   }
   for (const candidate of candidates) {
     try {
-      const real = realpathSync8(candidate);
+      const real = realpathSync9(candidate);
       const st = statSync6(real);
       if (!st.isFile() || writableByCaller2(real)) continue;
       const probe = spawnSync4(
@@ -18550,7 +18630,7 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
   const out3 = [];
   let real;
   try {
-    real = realpathSync8(cwd);
+    real = realpathSync9(cwd);
   } catch {
     return out3;
   }
@@ -19965,7 +20045,7 @@ import {
   mkdtempSync as mkdtempSync5,
   readFileSync as readFileSync16,
   readdirSync as readdirSync7,
-  realpathSync as realpathSync9,
+  realpathSync as realpathSync10,
   rmSync as rmSync11,
   symlinkSync as symlinkSync2
 } from "node:fs";
@@ -20238,7 +20318,7 @@ function rewriteTraceRoot(accesses, actualRoot) {
     if (!inside3(actualRoot, abs)) return { ...item, path: abs };
     const rel = relative7(actualRoot, abs).split(sep5).join("/");
     try {
-      const real = resolve12(realpathSync9(abs));
+      const real = resolve12(realpathSync10(abs));
       if (!inside3(actualRoot, real)) return { ...item, path: real };
     } catch {
     }
@@ -21475,7 +21555,7 @@ var init_adapter3 = __esm({
 
 // src/adapters/copilot-sdk/changes.ts
 import { execFileSync as execFileSync13 } from "node:child_process";
-import { mkdtempSync as mkdtempSync6, writeFileSync as writeFileSync10, readFileSync as readFileSync17, rmSync as rmSync12, existsSync as existsSync13, realpathSync as realpathSync10 } from "node:fs";
+import { mkdtempSync as mkdtempSync6, writeFileSync as writeFileSync10, readFileSync as readFileSync17, rmSync as rmSync12, existsSync as existsSync13, realpathSync as realpathSync11 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
 import { basename as basename5, dirname as dirname12, isAbsolute as isAbsolute16, relative as relative11, resolve as resolve15, join as join26 } from "node:path";
 function asStr4(v) {
@@ -21488,7 +21568,7 @@ function relForDisplay5(path, cwd) {
 function canonicalContainedTarget(abs, root) {
   let realRoot;
   try {
-    realRoot = realpathSync10(root);
+    realRoot = realpathSync11(root);
   } catch (e) {
     throw new Error(`trusted repository root ${root} cannot be resolved: ${e instanceof Error ? e.message : String(e)}`);
   }
@@ -21502,7 +21582,7 @@ function canonicalContainedTarget(abs, root) {
   }
   let realDir;
   try {
-    realDir = realpathSync10(dir);
+    realDir = realpathSync11(dir);
   } catch (e) {
     throw new Error(`write target ${abs} cannot be resolved: ${e instanceof Error ? e.message : String(e)}`);
   }
@@ -22832,7 +22912,7 @@ var init_runtime = __esm({
 
 // src/cli/onboard.ts
 import { execFileSync as execFileSync15 } from "node:child_process";
-import { lstatSync as lstatSync11, mkdtempSync as mkdtempSync7, readFileSync as readFileSync19, realpathSync as realpathSync11, rmSync as rmSync13 } from "node:fs";
+import { lstatSync as lstatSync11, mkdtempSync as mkdtempSync7, readFileSync as readFileSync19, realpathSync as realpathSync12, rmSync as rmSync13 } from "node:fs";
 import { tmpdir as tmpdir8 } from "node:os";
 import { join as join28, relative as relative12, resolve as resolve16, sep as sep6 } from "node:path";
 import { createInterface } from "node:readline";
@@ -22965,7 +23045,7 @@ async function runOnboard(opts, io = {}) {
   const cwd = resolve16(rootText);
   let sameRoot = cwd === requestedCwd;
   try {
-    sameRoot = realpathSync11(cwd) === realpathSync11(requestedCwd);
+    sameRoot = realpathSync12(cwd) === realpathSync12(requestedCwd);
   } catch {
   }
   if (!sameRoot) {
@@ -23348,8 +23428,8 @@ function runDemo(cwd, head, runners, out3) {
     let worktreeRoot;
     let realTarget;
     try {
-      worktreeRoot = realpathSync11(wt);
-      realTarget = realpathSync11(targetPath);
+      worktreeRoot = realpathSync12(wt);
+      realTarget = realpathSync12(targetPath);
     } catch {
       out3("Demo skipped: the selected test could not be resolved safely inside the disposable worktree.");
       return;
@@ -24599,7 +24679,7 @@ var init_run2 = __esm({
 });
 
 // src/research/ledger-files.ts
-import { closeSync as closeSync6, constants as constants5, fstatSync as fstatSync3, lstatSync as lstatSync12, openSync as openSync5, readFileSync as readFileSync23, readdirSync as readdirSync8, realpathSync as realpathSync12 } from "node:fs";
+import { closeSync as closeSync6, constants as constants5, fstatSync as fstatSync3, lstatSync as lstatSync12, openSync as openSync5, readFileSync as readFileSync23, readdirSync as readdirSync8, realpathSync as realpathSync13 } from "node:fs";
 import { join as join30, resolve as resolve20 } from "node:path";
 function lstatOrNull(path) {
   try {
@@ -24625,7 +24705,7 @@ function readRegularFile(path, realPairsDir, name) {
   if (listed.nlink !== 1) {
     throw new ResearchError(`ledger record ${path} has ${listed.nlink} links; a hard link can name a file outside pairs/, so only a singly linked regular file is read`);
   }
-  const real = realpathSync12.native(path);
+  const real = realpathSync13.native(path);
   if (real !== join30(realPairsDir, name)) {
     throw new ResearchError(`ledger record ${path} resolves outside the pairs directory (${real}); refusing to read it`);
   }
@@ -24655,7 +24735,7 @@ function readPairFiles(ledger) {
     throw new ResearchError(`ledger pairs directory ${pairsDir} is a symlink; only a real directory is read`);
   }
   if (dirStat === null || !dirStat.isDirectory()) throw new ResearchError(`ledger ${root} has no pairs directory`);
-  const realPairsDir = realpathSync12.native(pairsDir);
+  const realPairsDir = realpathSync13.native(pairsDir);
   let names;
   try {
     names = readdirSync8(pairsDir).filter((n2) => n2.endsWith(".json")).sort();
@@ -25281,6 +25361,41 @@ var init_research = __esm({
   }
 });
 
+// src/cli/render/verify-github.ts
+function safeDetail(value) {
+  const normalized = value.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").replace(/\s+/g, " ").trim();
+  if (normalized.length <= DETAIL_LIMIT) return normalized;
+  return normalized.slice(0, DETAIL_LIMIT - 1).trimEnd() + "\u2026";
+}
+function workflowData(value) {
+  return value.replace(/%/g, "%25").replace(/\r/g, "%0D").replace(/\n/g, "%0A");
+}
+function verifyWorkflowCommand(verdict2, exitCode, details = {}, env = process.env) {
+  if (env.GITHUB_ACTIONS !== "true" || verdict2 === "VERIFIED") return void 0;
+  if (verdict2 === "MASKED_FAILURE" && exitCode === 0) {
+    return "::warning title=TamperWard verify::MASKED_FAILURE: a trusted out-of-band sign-off was accepted; this is not a VERIFIED result. Review the verification summary.";
+  }
+  const parts = [ERROR_MESSAGES[verdict2]];
+  if (verdict2 === "CANNOT_VERIFY") {
+    if (details.reason) parts.push(`Reason: ${details.reason}`);
+    if (details.detail) parts.push(`Detail: ${safeDetail(details.detail)}`);
+  }
+  return `::error title=TamperWard verify::${workflowData(parts.join("\n"))}`;
+}
+var ERROR_MESSAGES, DETAIL_LIMIT;
+var init_verify_github = __esm({
+  "src/cli/render/verify-github.ts"() {
+    "use strict";
+    ERROR_MESSAGES = {
+      MASKED_FAILURE: "MASKED_FAILURE: the visible suite passed, but the suite restored from the trusted base failed. Review the test changes and verification summary.",
+      SUITE_RED: "SUITE_RED: the visible suite failed. Fix the failing change before merging.",
+      BUDGET_EXCEEDED: "BUDGET_EXCEEDED: verification exceeded its configured budget; CI could not establish a clean result.",
+      CANNOT_VERIFY: "CANNOT_VERIFY: CI could not establish a trusted verification result."
+    };
+    DETAIL_LIMIT = 320;
+  }
+});
+
 // src/cli/receipt.ts
 import { appendFileSync as appendFileSync3, readFileSync as readFileSync26, writeFileSync as writeFileSync14 } from "node:fs";
 function parseReceipt(args) {
@@ -25413,12 +25528,17 @@ function ciAdjudicate(cwd, opts) {
     } catch (e) {
       return {
         ci: { verdict: "CANNOT_VERIFY", binding, binding_error: `unreadable CI verify result: ${e instanceof Error ? e.message : String(e)}` },
-        exit: 2
+        exit: 2,
+        annotation: { detail: "The CI verify result could not be read. Check the verify step output and artifact path." }
       };
     }
     const check2 = readCiVerify(doc, binding, cwd, opts);
     if (check2.reason !== void 0) {
-      return { ci: { verdict: "CANNOT_VERIFY", binding, binding_error: check2.reason }, exit: 2 };
+      return {
+        ci: { verdict: "CANNOT_VERIFY", binding, binding_error: check2.reason },
+        exit: 2,
+        annotation: { detail: check2.reason }
+      };
     }
     const oob = oobFromEnv();
     const oobHead = oobHeadFromEnv();
@@ -25433,7 +25553,8 @@ function ciAdjudicate(cwd, opts) {
         ...check2.adjudicated_tree !== void 0 ? { adjudicated_tree: check2.adjudicated_tree } : {},
         ...bindingError ? { binding_error: bindingError } : {}
       },
-      exit: verdictExit(check2.verdict, signedOff)
+      exit: verdictExit(check2.verdict, signedOff),
+      annotation: { reason: check2.verifierReason, detail: check2.detail }
     };
   }
   const impl = opts.runVerifyImpl ?? runVerify;
@@ -25458,7 +25579,8 @@ function ciAdjudicate(cwd, opts) {
       ...binding ? { adjudicated_tree: binding.tree } : {},
       ...bindingError ? { binding_error: bindingError } : {}
     },
-    exit
+    exit,
+    annotation: { reason: summary?.reason, detail: summary?.detail }
   };
 }
 function isCommitId(v) {
@@ -25492,7 +25614,9 @@ function readCiVerify(doc, binding, cwd, opts) {
     }
   }
   const adjudicated_tree = typeof d.adjudicated_tree === "string" && d.adjudicated_tree.length > 0 ? d.adjudicated_tree : void 0;
-  return { verdict: d.verdict, adjudicated_tree };
+  const verifierReason = isOneOf(VERIFY_CANNOT_VERIFY_REASONS, d.reason) ? d.reason : void 0;
+  const detail = typeof d.detail === "string" ? d.detail : void 0;
+  return { verdict: d.verdict, verifierReason, detail, adjudicated_tree };
 }
 function isRecordObject(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
@@ -25571,7 +25695,7 @@ function runReceiptReconcile(opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
   const guard = needRepo(cwd, "reconcile");
   if (guard !== null) return guard;
-  const { ci, exit } = ciAdjudicate(cwd, opts);
+  const { ci, exit, annotation: annotationDetails } = ciAdjudicate(cwd, opts);
   const claimed = loadClaimedReceipt(opts.receipt);
   const r = reconcile(ci, claimed);
   const claimedReceipt = claimed.disposition === "PRESENT" ? claimed.receipt : null;
@@ -25581,6 +25705,16 @@ function runReceiptReconcile(opts = {}) {
     process.stdout.write(renderReconcile(r, claimedReceipt, ci.binding, ci.adjudicated_tree, colourEnabled(process.env, process.stdout)));
   }
   writeJobSummary(r, claimedReceipt, ci.binding, ci.adjudicated_tree);
+  if (!opts.json) {
+    const annotation = verifyWorkflowCommand(ci.verdict, exit, annotationDetails);
+    if (annotation) process.stdout.write(`${annotation}
+`);
+  }
+  if (!opts.json) {
+    const annotation = verifyWorkflowCommand(ci.verdict, exit);
+    if (annotation) process.stdout.write(`${annotation}
+`);
+  }
   return exit;
 }
 function writeJobSummary(r, receipt, ciBinding, adjudicatedTree) {
@@ -25621,6 +25755,7 @@ var init_receipt = __esm({
     init_verify();
     init_signoff();
     init_text();
+    init_verify_github();
     init_status();
     RECEIPT_SUBCOMMANDS = ["export", "reconcile"];
     AGREEMENT_SEVERITY = {
@@ -25979,6 +26114,7 @@ function validateCliArgs(cmd, args) {
         "--base": "string",
         "--cmd": "string",
         "--cwd": "string",
+        "--cargo-target-root": "string",
         "--budget": "positive"
       }
     }).error;
@@ -26156,6 +26292,8 @@ Formats:
                                             (exit 1, or 0 under a compact tw1:<digest>
                                             or legacy verify@<full-sha> approval); cannot-verify
                                             fails closed (2)
+             [--cargo-target-root D]        separate local Cargo targets D/visible
+                                            and D/pristine (operator-owned cache)
   tamperward trace-verify [--base R]          advisory Linux verifier-input discovery:
              [--cmd C] [--budget S] [--runs N] trace a trusted/known-good base with
              [--json] [--cwd D]                strace, union repeated observations,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.41.0",
+  "version": "2.43.0",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",