testguard-cli 0.6.0 → 0.8.0

package/spec/schemas/evidence.schema.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "urn:guard-spec:v1:evidence",
-  "title": "Guard spec v1 \u2014 evidence file",
+  "$id": "urn:claimspec:v1:evidence",
+  "title": "claimspec v1 \u2014 evidence file",
   "description": "One run's findings, on disk, in a shape an auditor can read without the tool. Each record binds a claim to a subject (for TestGuard, an injected fault) and a verdict, with every run that produced the verdict.",
   "type": "object",
   "required": [
@@ -18,26 +18,24 @@
       "const": 1
     },
     "tool": {
-      "$ref": "urn:guard-spec:v1:common#/$defs/tool"
+      "$ref": "urn:claimspec:v1:common#/$defs/tool"
     },
     "run": {
       "type": "object",
       "required": [
         "id",
         "startedAt",
-        "repo",
-        "confirmRuns",
-        "mode"
+        "repo"
       ],
       "properties": {
         "id": {
-          "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+          "$ref": "urn:claimspec:v1:common#/$defs/identifier"
         },
         "startedAt": {
-          "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime"
+          "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime"
         },
         "finishedAt": {
-          "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime"
+          "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime"
         },
         "repo": {
           "type": "object",
@@ -47,21 +45,21 @@
           ],
           "properties": {
             "head": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/gitSha"
+              "$ref": "urn:claimspec:v1:common#/$defs/gitSha"
             },
             "dirty": {
               "type": "boolean"
             },
             "snapshot": {
               "description": "When the working tree was probed instead of `head`: the dangling commit that captured it. Not a ref; may be garbage-collected.",
-              "$ref": "urn:guard-spec:v1:common#/$defs/gitSha"
+              "$ref": "urn:claimspec:v1:common#/$defs/gitSha"
             },
             "ignoredDirty": {
               "description": "Defender/target files that had uncommitted changes when `head` was probed as committed (an explicit --ref, or --ignore-dirty). The working-tree versions of these files are NOT what the verdicts describe.",
               "type": "array",
               "minItems": 1,
               "items": {
-                "$ref": "urn:guard-spec:v1:common#/$defs/repoPath"
+                "$ref": "urn:claimspec:v1:common#/$defs/repoPath"
               }
             }
           },
@@ -74,7 +72,7 @@
           ],
           "properties": {
             "name": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+              "$ref": "urn:claimspec:v1:common#/$defs/identifier"
             },
             "version": {
               "type": "string",
@@ -97,18 +95,33 @@
         "contention": {
           "description": "Other test runners that were already running when this probe started. Best effort, never a verdict: it exists so a reader of a TIMEOUT or FLAKY-DEFENDER can tell the machine was loaded.",
           "type": "object",
-          "required": ["detected", "runners"],
+          "required": [
+            "detected",
+            "runners"
+          ],
           "properties": {
-            "detected": { "const": true },
+            "detected": {
+              "const": true
+            },
             "runners": {
               "type": "array",
               "minItems": 1,
               "items": {
                 "type": "object",
-                "required": ["pid", "command"],
+                "required": [
+                  "pid",
+                  "command"
+                ],
                 "properties": {
-                  "pid": { "type": "integer", "minimum": 1 },
-                  "command": { "type": "string", "minLength": 1, "maxLength": 200 }
+                  "pid": {
+                    "type": "integer",
+                    "minimum": 1
+                  },
+                  "command": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 200
+                  }
                 },
                 "additionalProperties": false
               }
@@ -143,7 +156,7 @@
             ],
             "properties": {
               "name": {
-                "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+                "$ref": "urn:claimspec:v1:common#/$defs/identifier"
               },
               "version": {
                 "type": "string",
@@ -152,9 +165,48 @@
             },
             "additionalProperties": false
           }
+        },
+        "method": {
+          "$ref": "urn:claimspec:v1:common#/$defs/method"
         }
       },
-      "additionalProperties": false
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "if": {
+            "anyOf": [
+              {
+                "properties": {
+                  "method": {
+                    "const": "fault-injection"
+                  }
+                },
+                "required": [
+                  "method"
+                ]
+              },
+              {
+                "not": {
+                  "required": [
+                    "method"
+                  ]
+                }
+              }
+            ]
+          },
+          "then": {
+            "$comment": "Absent `method` means fault-injection, so every evidence file written before the field existed is held to exactly the same requirements as before. `confirmRuns` and `mode` are what injection means by a confirmed run and by where the mutation happened; a method that mutates nothing has neither.",
+            "properties": {
+              "confirmRuns": true,
+              "mode": true
+            },
+            "required": [
+              "confirmRuns",
+              "mode"
+            ]
+          }
+        }
+      ]
     },
     "records": {
       "type": "array",
@@ -223,14 +275,12 @@
         "claim",
         "subject",
         "verdict",
-        "detail",
-        "defenders",
-        "inputs"
+        "detail"
       ],
       "properties": {
         "fingerprint": {
           "description": "sha256 of `<claim.id>\\n<subject.id>\\n<subject.file>\\n<verdict>`. Derived from identities and outcome, never from `find`/`replace`, so repairing a rotted anchor does not churn the baseline.",
-          "$ref": "urn:guard-spec:v1:common#/$defs/sha256"
+          "$ref": "urn:claimspec:v1:common#/$defs/sha256"
         },
         "claim": {
           "type": "object",
@@ -242,7 +292,7 @@
           ],
           "properties": {
             "id": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+              "$ref": "urn:claimspec:v1:common#/$defs/identifier"
             },
             "statement": {
               "type": "string",
@@ -250,7 +300,7 @@
               "maxLength": 2000
             },
             "severity": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/severity"
+              "$ref": "urn:claimspec:v1:common#/$defs/severity"
             },
             "source": {
               "type": "object",
@@ -275,7 +325,7 @@
               "additionalProperties": false
             },
             "producedBy": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/provenance"
+              "$ref": "urn:claimspec:v1:common#/$defs/provenance"
             }
           },
           "additionalProperties": false
@@ -289,40 +339,37 @@
           ],
           "properties": {
             "kind": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+              "$ref": "urn:claimspec:v1:common#/$defs/identifier"
             },
             "id": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+              "$ref": "urn:claimspec:v1:common#/$defs/identifier"
             },
             "description": {
               "type": "string",
               "maxLength": 2000
             },
             "file": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/repoPath"
+              "$ref": "urn:claimspec:v1:common#/$defs/repoPath"
             },
             "faultClass": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/faultClass"
+              "$ref": "urn:claimspec:v1:common#/$defs/faultClass"
             },
             "producedBy": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/provenance"
+              "$ref": "urn:claimspec:v1:common#/$defs/provenance"
             },
             "contentHash": {
               "description": "sha256 of the subject's content (for a fault: find + newline + replace). Excluded from the fingerprint on purpose, so repairing an anchor does not churn a baseline \u2014 and recorded here on purpose, so weakening a fault to make a finding disappear is visible.",
-              "$ref": "urn:guard-spec:v1:common#/$defs/sha256"
+              "$ref": "urn:claimspec:v1:common#/$defs/sha256"
             }
           },
           "additionalProperties": true
         },
         "verdict": {
-          "$ref": "urn:guard-spec:v1:common#/$defs/verdict"
+          "$ref": "urn:claimspec:v1:common#/$defs/verdict"
         },
         "detail": {
           "type": "object",
-          "required": [
-            "baselineRuns",
-            "probeRuns"
-          ],
+          "required": [],
           "properties": {
             "reason": {
               "description": "Machine-readable qualifier, e.g. `anchor-missing`, `anchor-ambiguous`, `defenders-not-green`, `replacement-does-not-compile`.",
@@ -349,7 +396,9 @@
             },
             "escalationStoppedEarly": {
               "description": "Why the escalation loop ran fewer than N times. `no-common-failure`: no test failed in every run so far, so no further run could name an undeclared killer. Stopping can only fail to NAME a killer, never upgrade a verdict.",
-              "enum": ["no-common-failure"]
+              "enum": [
+                "no-common-failure"
+              ]
             },
             "escalationRuns": {
               "type": "array",
@@ -368,28 +417,73 @@
               }
             },
             "flakeRate": {
-          "description": "Observed instability of the defenders on UNMODIFIED source: `failures` of `runs` baseline runs failed with the source untouched. Only runs that actually ran are counted (`pass`/`fail`); a load error or a timeout measures nothing about stability and is excluded from both numbers. `failures > 0` means the verdict is `flaky-defender`; the degree is for whoever fixes the defender, and it is the first input to calibration.",
-          "type": "object",
-          "required": ["runs", "failures"],
-          "properties": {
-            "runs": { "type": "integer", "minimum": 1 },
-            "failures": { "type": "integer", "minimum": 0 }
-          },
-          "additionalProperties": false
-        },
-        "independence": {
-          "description": "L3 signal, on `killed` records only: was the killing defender last touched by the same change (or the same author) as the fault's target? A signal for ranking and reporting; it never changes a verdict.",
-          "type": "object",
-          "required": ["class"],
-          "properties": {
-            "class": { "enum": ["co-authored", "separate-change", "unknown"] },
-            "defenderCommit": { "$ref": "urn:guard-spec:v1:common#/$defs/gitSha" },
-            "targetCommit": { "$ref": "urn:guard-spec:v1:common#/$defs/gitSha" },
-            "sameAuthor": { "type": "boolean" }
-          },
-          "additionalProperties": false
-        },
-        "anchor": {
+              "description": "Observed instability of the defenders on UNMODIFIED source: `failures` of `runs` baseline runs failed with the source untouched. Only runs that actually ran are counted (`pass`/`fail`); a load error or a timeout measures nothing about stability and is excluded from both numbers. `failures > 0` means the verdict is `flaky-defender`; the degree is for whoever fixes the defender, and it is the first input to calibration.",
+              "type": "object",
+              "required": [
+                "runs",
+                "failures"
+              ],
+              "properties": {
+                "runs": {
+                  "type": "integer",
+                  "minimum": 1
+                },
+                "failures": {
+                  "type": "integer",
+                  "minimum": 0
+                }
+              },
+              "additionalProperties": false
+            },
+            "independence": {
+              "description": "L3 signal, on `killed` records only: was the killing defender last touched by the same change (or the same author) as the fault's target? A signal for ranking and reporting; it never changes a verdict.",
+              "type": "object",
+              "required": [
+                "class"
+              ],
+              "properties": {
+                "class": {
+                  "enum": [
+                    "co-authored",
+                    "separate-change",
+                    "unknown"
+                  ]
+                },
+                "defenderCommit": {
+                  "$ref": "urn:claimspec:v1:common#/$defs/gitSha"
+                },
+                "targetCommit": {
+                  "$ref": "urn:claimspec:v1:common#/$defs/gitSha"
+                },
+                "sameAuthor": {
+                  "type": "boolean"
+                }
+              },
+              "additionalProperties": false
+            },
+            "negativeControl": {
+              "description": "The result of replacing the subject with content its loader cannot parse, and running the defenders once. `reached`: they went red, so they do execute this file and a `survived` verdict is about their assertions. `not-reached`: they stayed green, so they never execute it and the verdict becomes `unverifiable` with reason `subject-not-executed`. Charged only where a false answer is expensive \u2014 on a would-be survivor \u2014 because a kill already proves the defenders reached the code. Absent when the control was not run or the runner cannot say what \"cannot compile\" means for its language.",
+              "enum": [
+                "reached",
+                "not-reached"
+              ]
+            },
+            "targetNotImported": {
+              "description": "True when, with the fault applied, no defender caused the subject's module to be imported at all. Reported by runners that can tell (Python), never inferred. It does not change the verdict, and it is the one thing that makes a `survived` unreadable: the tests were not blind to the fault, they never reached it. A module imported from OUTSIDE the tree being probed is not recorded here \u2014 that run is refused outright, because every verdict in it would be false.",
+              "const": true
+            },
+            "message": {
+              "description": "Human-readable detail for a reason that carries one \u2014 today `probe-error`, whose first line names what threw. Never parsed; a reader should not have to reproduce the run to learn what happened.",
+              "type": "string",
+              "maxLength": 1024
+            },
+            "restoreSkipped": {
+              "description": "The fault was applied but the restore found nothing to put back: the target file no longer existed. In worktree mode that is a disturbed run rather than a failed one \u2014 the mutation only ever existed inside a scratch worktree, and something outside the process deleted it \u2014 but the verdicts in that run were measured against a tree that was being removed underneath them, and a reader has to be able to see that. In `--in-place` mode it never appears: there a missing target is the user's own file gone, and the restore throws.",
+              "enum": [
+                "target-missing"
+              ]
+            },
+            "anchor": {
               "description": "With an anchor-related reason: how many times `find` occurred versus how many were expected.",
               "type": "object",
               "required": [
@@ -407,9 +501,16 @@
                 }
               },
               "additionalProperties": false
+            },
+            "methodDetail": {
+              "description": "Data belonging to a method the spec has not specified yet. `assertion` and `scan` are reserved names with no required fields, so a tool adopting one needs somewhere to put the rule it checked and the place it checked \u2014 without which it can declare that a probe exists and nothing about it. Deliberately unconstrained, deliberately namespaced, and **forbidden under `fault-injection`**, whose shape IS specified and must not acquire a junk drawer. What the first real consumer puts here is the evidence for what the specified shape should become; it is a staging area, not a permanent home.",
+              "type": "object",
+              "minProperties": 1,
+              "additionalProperties": true
             }
           },
-          "additionalProperties": false
+          "additionalProperties": false,
+          "description": "Everything behind the verdict. Under `fault-injection` the runs are mandatory and the validator enforces them; a method that runs no tests carries whatever its own evidence is."
         },
         "defenders": {
           "type": "object",
@@ -428,7 +529,7 @@
             "resolved": {
               "type": "array",
               "items": {
-                "$ref": "urn:guard-spec:v1:common#/$defs/repoPath"
+                "$ref": "urn:claimspec:v1:common#/$defs/repoPath"
               }
             },
             "nocover": {
@@ -442,11 +543,11 @@
               "description": "Candidate test files that import the subject's file but mock it (`vi.mock`/`jest.mock`). Discovered candidates that mock are excluded from `resolved`; a declared defender that mocks stays in `resolved` and is listed here, because a declared defender that mocks the subject is a broken evidence chain.",
               "type": "array",
               "items": {
-                "$ref": "urn:guard-spec:v1:common#/$defs/repoPath"
+                "$ref": "urn:claimspec:v1:common#/$defs/repoPath"
               }
             },
             "signals": {
-              "description": "Static, annotation-grade signals about the defenders. They never change a verdict. `mocked-never-asserted`: the file mocks the subject and never asserts on anything imported from it. `unasserted-annotated`: the same, but the author annotated the mock with a reason (`// unasserted: <why>`), recorded here \u2014 silenced, never hidden.",
+              "description": "Static, annotation-grade signals about the defenders. They never change a verdict. `mocked-never-asserted`: the file mocks the subject and never asserts on anything imported from it. `unasserted-annotated`: the same, but the author annotated the mock with a reason (`// unasserted: <why>`), recorded here \u2014 silenced, never hidden. `target-attribute-patched`: a Python defender that patches individual attributes of the subject (`patch(\"pkg.mod.fn\")`) rather than the module. Unlike a JavaScript module mock it does NOT disqualify the file \u2014 a fault anywhere else in the module is still detectable \u2014 so the file stays in `resolved`; `reason` names the patched attributes, which are where that test is least likely to notice anything.",
               "type": "array",
               "items": {
                 "type": "object",
@@ -456,12 +557,13 @@
                 ],
                 "properties": {
                   "file": {
-                    "$ref": "urn:guard-spec:v1:common#/$defs/repoPath"
+                    "$ref": "urn:claimspec:v1:common#/$defs/repoPath"
                   },
                   "signal": {
                     "enum": [
                       "mocked-never-asserted",
-                      "unasserted-annotated"
+                      "unasserted-annotated",
+                      "target-attribute-patched"
                     ]
                   },
                   "reason": {
@@ -477,13 +579,13 @@
               "description": "When the resolved defenders ran under more than one runner: runner name \u2192 the files it ran. Every file appears in `resolved`. Absent when the project runner ran them all.",
               "type": "object",
               "propertyNames": {
-                "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+                "$ref": "urn:claimspec:v1:common#/$defs/identifier"
               },
               "additionalProperties": {
                 "type": "array",
                 "minItems": 1,
                 "items": {
-                  "$ref": "urn:guard-spec:v1:common#/$defs/repoPath"
+                  "$ref": "urn:claimspec:v1:common#/$defs/repoPath"
                 }
               }
             }
@@ -499,12 +601,12 @@
           ],
           "properties": {
             "targetHash": {
-              "$ref": "urn:guard-spec:v1:common#/$defs/sha256"
+              "$ref": "urn:claimspec:v1:common#/$defs/sha256"
             },
             "defenderHashes": {
               "type": "object",
               "additionalProperties": {
-                "$ref": "urn:guard-spec:v1:common#/$defs/sha256"
+                "$ref": "urn:claimspec:v1:common#/$defs/sha256"
               }
             }
           },
@@ -512,7 +614,7 @@
         },
         "reusedFrom": {
           "description": "Run id whose verdict was reused because `inputs` were unchanged.",
-          "$ref": "urn:guard-spec:v1:common#/$defs/identifier"
+          "$ref": "urn:claimspec:v1:common#/$defs/identifier"
         },
         "rank": {
           "description": "Additive ordering signal. Never alters `verdict`.",
@@ -539,7 +641,7 @@
         "annotations": {
           "type": "array",
           "items": {
-            "$ref": "urn:guard-spec:v1:common#/$defs/annotation"
+            "$ref": "urn:claimspec:v1:common#/$defs/annotation"
           }
         }
       },

package/spec/schemas/gate.schema.json

@@ -1,18 +1,18 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "urn:guard-spec:v1:gate",
-  "title": "Guard spec v1 — change gate",
+  "$id": "urn:claimspec:v1:gate",
+  "title": "claimspec v1 — change gate",
   "description": "Claim coverage of one change. `probe` asks whether the tests defend the claims that exist; `gate` asks whether the files a change touched carry any claim at all. Measured per file against the merge-base of a reference and HEAD (or the working tree). A file is covered when a fault anchors to it, when it is a test file that defends a claim, or when an unexpired ignore entry excuses it — and every reliance on an ignore entry is listed, so a reviewer sees why the gate passed.",
   "type": "object",
   "required": ["schemaVersion", "tool", "generatedAt", "ref", "base", "head", "includeDirty", "strict", "changed", "evaluated", "excluded", "covered", "uncovered", "reliedOn", "expired", "exitCode"],
   "properties": {
     "$schema": { "type": "string" },
     "schemaVersion": { "const": 1 },
-    "tool": { "$ref": "urn:guard-spec:v1:common#/$defs/tool" },
-    "generatedAt": { "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime" },
+    "tool": { "$ref": "urn:claimspec:v1:common#/$defs/tool" },
+    "generatedAt": { "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime" },
     "ref": { "description": "The reference the change was measured against, as given (a branch, a tag, a sha).", "type": "string", "minLength": 1, "maxLength": 256 },
-    "base": { "description": "merge-base(ref, HEAD): the commit the change is relative to.", "$ref": "urn:guard-spec:v1:common#/$defs/gitSha" },
-    "head": { "$ref": "urn:guard-spec:v1:common#/$defs/gitSha" },
+    "base": { "description": "merge-base(ref, HEAD): the commit the change is relative to.", "$ref": "urn:claimspec:v1:common#/$defs/gitSha" },
+    "head": { "$ref": "urn:claimspec:v1:common#/$defs/gitSha" },
     "includeDirty": { "description": "True when the working tree was compared instead of HEAD.", "type": "boolean" },
     "strict": { "description": "True when a non-empty change with zero evaluated files fails instead of passing with a note.", "type": "boolean" },
     "changed": { "description": "Files changed inside the project directory, deletions excluded.", "type": "integer", "minimum": 0 },
@@ -23,7 +23,7 @@
         "type": "object",
         "required": ["file", "by"],
         "properties": {
-          "file": { "$ref": "urn:guard-spec:v1:common#/$defs/repoPath" },
+          "file": { "$ref": "urn:claimspec:v1:common#/$defs/repoPath" },
           "by": { "description": "`non-source`, `default:<glob>` or `exclude:<glob>`.", "type": "string", "minLength": 1, "maxLength": 600 }
         },
         "additionalProperties": false
@@ -35,17 +35,17 @@
         "type": "object",
         "required": ["file", "by"],
         "properties": {
-          "file": { "$ref": "urn:guard-spec:v1:common#/$defs/repoPath" },
+          "file": { "$ref": "urn:claimspec:v1:common#/$defs/repoPath" },
           "by": { "enum": ["fault", "defender", "ignore"] },
-          "claimIds": { "type": "array", "minItems": 1, "items": { "$ref": "urn:guard-spec:v1:common#/$defs/identifier" } },
+          "claimIds": { "type": "array", "minItems": 1, "items": { "$ref": "urn:claimspec:v1:common#/$defs/identifier" } },
           "pattern": { "type": "string", "minLength": 1, "maxLength": 512 }
         },
         "additionalProperties": false
       }
     },
-    "uncovered": { "type": "array", "items": { "$ref": "urn:guard-spec:v1:common#/$defs/uncoveredFile" } },
-    "reliedOn": { "description": "Unexpired ignore entries that excused at least one changed file. The gate passed *because of* these; a reviewer reads them.", "type": "array", "items": { "$ref": "urn:guard-spec:v1:common#/$defs/ignoreReliance" } },
-    "expired": { "description": "Expired ignore entries that would have matched a changed file. They excuse nothing; the files are reported as uncovered.", "type": "array", "items": { "$ref": "urn:guard-spec:v1:common#/$defs/ignoreReliance" } },
+    "uncovered": { "type": "array", "items": { "$ref": "urn:claimspec:v1:common#/$defs/uncoveredFile" } },
+    "reliedOn": { "description": "Unexpired ignore entries that excused at least one changed file. The gate passed *because of* these; a reviewer reads them.", "type": "array", "items": { "$ref": "urn:claimspec:v1:common#/$defs/ignoreReliance" } },
+    "expired": { "description": "Expired ignore entries that would have matched a changed file. They excuse nothing; the files are reported as uncovered.", "type": "array", "items": { "$ref": "urn:claimspec:v1:common#/$defs/ignoreReliance" } },
     "exitCode": { "enum": [0, 1] }
   },
   "additionalProperties": false

package/spec/schemas/ignore.schema.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "urn:guard-spec:v1:ignore",
-  "title": "Guard spec v1 — structured ignore",
+  "$id": "urn:claimspec:v1:ignore",
+  "title": "claimspec v1 — structured ignore",
   "description": "Reviewable scoping. Every entry carries a reason. Tools may also accept a plain gitignore-syntax text file as shorthand for path entries without reasons; this structured form is what an auditor reads.",
   "type": "object",
   "required": ["schemaVersion", "entries"],
@@ -21,10 +21,10 @@
           "pattern": { "type": "string", "minLength": 1, "maxLength": 512 },
           "reason": { "type": "string", "minLength": 8, "maxLength": 2000 },
           "by": { "type": "string", "maxLength": 256 },
-          "at": { "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime" },
+          "at": { "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime" },
           "expires": {
             "description": "After this instant the entry no longer applies. Tools warn on expired entries.",
-            "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime"
+            "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime"
           }
         },
         "additionalProperties": false

package/spec/schemas/replay.schema.json

@@ -1,21 +1,21 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "urn:guard-spec:v1:replay",
-  "title": "Guard spec v1 — bug replay",
+  "$id": "urn:claimspec:v1:replay",
+  "title": "claimspec v1 — bug replay",
   "description": "Would this suite have caught the bugs that actually escaped? For each fix commit in a range: revert only the source to its parent, remove the test the fix shipped, run what remains. `blind` means the suite was blind to a bug that really shipped. Unlike an injected fault, a replayed bug is ground truth — a human already confirmed it was a defect — which is what makes this the oracle a fault model is calibrated against.",
   "type": "object",
   "required": ["schemaVersion", "tool", "run", "records"],
   "properties": {
     "$schema": { "type": "string" },
     "schemaVersion": { "const": 1 },
-    "tool": { "$ref": "urn:guard-spec:v1:common#/$defs/tool" },
+    "tool": { "$ref": "urn:claimspec:v1:common#/$defs/tool" },
     "run": {
       "type": "object",
       "required": ["id", "startedAt", "range", "confirmRuns"],
       "properties": {
         "id": { "type": "string", "minLength": 1, "maxLength": 128 },
-        "startedAt": { "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime" },
-        "finishedAt": { "$ref": "urn:guard-spec:v1:common#/$defs/isoDateTime" },
+        "startedAt": { "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime" },
+        "finishedAt": { "$ref": "urn:claimspec:v1:common#/$defs/isoDateTime" },
         "range": {
           "description": "The commit range searched for fix commits, as given.",
           "type": "string",
@@ -43,7 +43,7 @@
         "type": "object",
         "required": ["commit", "patchId", "verdict", "source", "removedTests", "runs"],
         "properties": {
-          "commit": { "$ref": "urn:guard-spec:v1:common#/$defs/gitSha" },
+          "commit": { "$ref": "urn:claimspec:v1:common#/$defs/gitSha" },
           "patchId": {
             "description": "`git patch-id --stable` of the fix: the identity of the CHANGE rather than of the commit. A dual-branch topology carries the same fix under several shas, and counting it twice corrupts the corpus. Hex, 40 characters for a SHA-1 repository and 64 for a SHA-256 one; the commit sha when git could not compute one.",
             "type": "string",
@@ -59,22 +59,22 @@
             "description": "Source files reverted to the fix's parent.",
             "type": "array",
             "minItems": 1,
-            "items": { "$ref": "urn:guard-spec:v1:common#/$defs/repoPath" }
+            "items": { "$ref": "urn:claimspec:v1:common#/$defs/repoPath" }
           },
           "removedTests": {
             "description": "Test files the fix shipped, removed before the run: the fix's own test proves nothing about what the suite knew before it.",
             "type": "array",
-            "items": { "$ref": "urn:guard-spec:v1:common#/$defs/repoPath" }
+            "items": { "$ref": "urn:claimspec:v1:common#/$defs/repoPath" }
           },
           "ranTests": { "type": "integer", "minimum": 0 },
           "faultClass": {
             "description": "The injected-fault class this real diff most resembles, derived mechanically from the diff shape. This is the join key between ground truth and a fault model: it is what lets P(this fault class is a real bug) be computed.",
-            "$ref": "urn:guard-spec:v1:common#/$defs/faultClass"
+            "$ref": "urn:claimspec:v1:common#/$defs/faultClass"
           },
           "runs": {
             "type": "array",
             "minItems": 1,
-            "items": { "$ref": "urn:guard-spec:v1:evidence#/$defs/testRun" }
+            "items": { "$ref": "urn:claimspec:v1:evidence#/$defs/testRun" }
           }
         },
         "additionalProperties": false