ucn 5.3.4 → 5.3.6

package/.claude/skills/ucn/SKILL.md

@@ -220,3 +220,25 @@ file set, the unit a refactor has to break.
 - Use `search` or ordinary repository search for text, filenames, configuration, and unsupported syntax.
 
 Read [references/commands.md](references/commands.md) for all public commands and flags. Read [references/trust-contract.md](references/trust-contract.md) before building automation that gates changes on UCN output.
+
+
+### Inspect confirmation provenance
+
+Caller and callee JSON carries compact `provenance`: `rule`, contributing `rules`
+when there is more than one, `validation`, and the receiver's source and origin
+line when recorded. Incomplete proofs include a `diagnostic`, also shown in text.
+Callees retain compact `siteProvenance` for each distinct occurrence; their summary
+uses the weakest confirmed site's rule. Exclusions expose counts by rule and
+validation under `account.excluded.evidenceSummary`. Full declaration, import,
+and member-lookup facts remain on engine results and in oracle reports.
+
+A lone project owner of a method name does not identify an untyped receiver.
+Such candidates stay unverified with `single-owner`; importing the class does not
+change that. `provenance-incomplete` means the available facts cannot establish
+this declaration. Inspect the site and diagnostic before editing it. Neither
+reason is permission to discard a possible caller. `validation: unsupported`
+means the witness collector does not yet cover that path (for example a wildcard
+re-export or an external inherited member). Its existing classification is kept
+in report-only mode; it is not a validated proof. Missing or inconsistent facts
+on a supported lookup still route unverified. Full rule migration is tracked as
+#356. Ordinal evidence weights are not probabilities.

package/core/account.js

@@ -463,7 +463,11 @@ function buildAccount(index, name, parts) {
         confirmed,
         unverified,
         nonCall,
-        excluded: { total: excludedTotal, byReason: excludedByReason },
+        excluded: { total: excludedTotal, byReason: excludedByReason,
+            ...(excludedEntries.some(e => e.provenance) && { evidence: excludedEntries
+                .filter(e => e.provenance).map(e => ({ file: relPath(index, e.file),
+                    line: e.line, reason: e.reason, provenance: e.provenance })) }),
+        },
         unparsed: groundSet.unparsed,
         unsupported,
         unreadableFiles: groundSet.unreadableFiles,

package/core/analysis.js

@@ -1158,6 +1158,8 @@ function impact(index, name, options = {}) {
                 evidenceScore: c.evidenceScore,
                 scoreKind: c.scoreKind,
                 resolution: c.resolution,
+                ...(c.provenance && { provenance: c.provenance }),
+                ...(c.siteProvenance && { siteProvenance: c.siteProvenance }),
                 ...(c.tier && { tier: c.tier }),
                 ...analysis
             });
@@ -1190,6 +1192,8 @@ function impact(index, name, options = {}) {
             evidenceScore: c.evidenceScore,
             scoreKind: c.scoreKind,
             resolution: c.resolution,
+            ...(c.provenance && { provenance: c.provenance }),
+            ...(c.siteProvenance && { siteProvenance: c.siteProvenance }),
             tier: c.tier,
         }));
         // findCallers already applied binding, receiver, module ownership, and
@@ -1241,6 +1245,8 @@ function impact(index, name, options = {}) {
                 evidenceScore: call.evidenceScore,
                 scoreKind: call.scoreKind,
                 resolution: call.resolution,
+                ...(call.provenance && { provenance: call.provenance }),
+                ...(call.siteProvenance && { siteProvenance: call.siteProvenance }),
                 ...(call.tier && { tier: call.tier }),
                 ...analysis
             });
@@ -1262,6 +1268,8 @@ function impact(index, name, options = {}) {
             evidenceScore: u.evidenceScore,
             scoreKind: u.scoreKind,
             resolution: u.resolution,
+            ...(u.provenance && { provenance: u.provenance }),
+            ...(u.siteProvenance && { siteProvenance: u.siteProvenance }),
             tier: 'unverified',
             ...(u.reason && { reason: u.reason }),
             ...(u.dispatchVia && { dispatchVia: u.dispatchVia }),
@@ -1711,6 +1719,8 @@ function about(index, name, options = {}) {
             evidenceScore: c.evidenceScore,
             scoreKind: c.scoreKind,
             resolution: c.resolution,
+            ...(c.provenance && { provenance: c.provenance }),
+            ...(c.siteProvenance && { siteProvenance: c.siteProvenance }),
             reachable: c.reachable,
         }));
 
@@ -1735,6 +1745,8 @@ function about(index, name, options = {}) {
                 evidenceScore: c.evidenceScore,
                 scoreKind: c.scoreKind,
                 resolution: c.resolution,
+                ...(c.provenance && { provenance: c.provenance }),
+                ...(c.siteProvenance && { siteProvenance: c.siteProvenance }),
                 ...(c.reason && { reason: c.reason }),
                 ...(c.dispatchVia && { dispatchVia: c.dispatchVia }),
                 ...(c.dispatchCandidates != null && { dispatchCandidates: c.dispatchCandidates }),
@@ -1786,6 +1798,8 @@ function about(index, name, options = {}) {
             evidenceScore: c.evidenceScore,
             scoreKind: c.scoreKind,
             resolution: c.resolution,
+            ...(c.provenance && { provenance: c.provenance }),
+            ...(c.siteProvenance && { siteProvenance: c.siteProvenance }),
             reachable: c.reachable,
             ...(c.returnType && { returnType: c.returnType }),
             ...(c.paramTypes && { paramTypes: c.paramTypes }),
@@ -2392,6 +2406,8 @@ function diffImpact(index, options = {}) {
                     evidenceScore: c.evidenceScore,
                     scoreKind: c.scoreKind,
                     resolution: c.resolution,
+                    ...(c.provenance && { provenance: c.provenance }),
+                    ...(c.siteProvenance && { siteProvenance: c.siteProvenance }),
                     ...(c.tier && { tier: c.tier }),
                 })),
                 unverifiedCallers: unverified.map(u => ({
@@ -2404,6 +2420,8 @@ function diffImpact(index, options = {}) {
                     evidenceScore: u.evidenceScore,
                     scoreKind: u.scoreKind,
                     resolution: u.resolution,
+                    ...(u.provenance && { provenance: u.provenance }),
+                    ...(u.siteProvenance && { siteProvenance: u.siteProvenance }),
                     tier: 'unverified',
                     ...(u.reason && { reason: u.reason }),
                     ...(u.dispatchVia && { dispatchVia: u.dispatchVia }),

package/core/cache.js

@@ -707,7 +707,11 @@ function clearAllCaches() {
 // v212 (fix #342): extendsGraph/extendedByGraph no longer persisted (rebuilt on load).
 // v213 (fix #348): Python from-import records carry per-name `renames` so
 // import bindings pair each alias with its own module.
-const CACHE_FORMAT_VERSION = 214;
+// v215: receiver-type provenance records the originating AST fact (#355).
+// v224 (#355 recovery): Go declaration origins; Rust aliases, wrapper patterns,
+// copied bindings and qualified macro receivers; TS indexed array evidence.
+// v225 (fix #357): Rust `use path::name as local` bindings record the original name with a paired `renames` alias.
+const CACHE_FORMAT_VERSION = 225;
 const USAGE_CACHE_FILE = 'usage-results.json';
 
 /**