vigiles 14.8.0 → 14.9.0

package/dist/audit-score.js

@@ -186,7 +186,7 @@ function safety(r) {
         {
             n: hard.length,
             weight: score_core_js_1.W_TRIFECTA,
-            label: "unit(s) holding all three lethal-trifecta legs (prompt-injection exfil path)",
+            label: score_core_js_1.TRIFECTA_LABEL,
         },
     ]);
     // inherits-all trifecta findings are ADVISORY: surfaced as a maximal-blast-radius

package/dist/score-core.d.ts

@@ -36,6 +36,16 @@ export declare const W_DANGLING_REF = 8;
 export declare const W_OVERLAP = 8;
 export declare const W_NO_CONTRACT = 5;
 export declare const W_TRIFECTA = 10;
+/**
+ * The one canonical, jargon-free finding string for a HARD lethal-trifecta unit —
+ * shared by the Safety category card (audit-score) AND the verdict sentence / overall
+ * deduction (reportDeductions here), so the plain-language copy can't drift between
+ * surfaces (one-detector-no-drift). It NAMES the three legs and the consequence in
+ * plain words instead of the old "holding all three lethal-trifecta legs
+ * (prompt-injection exfil path)" shorthand a first-time reader can't parse. The
+ * `(s)` placeholder is resolved by the caller's pluralizer against the count.
+ */
+export declare const TRIFECTA_LABEL = "unit(s) can read data, reach the web, and run commands \u2014 the \"lethal trifecta\", so a prompt injection could exfiltrate secrets";
 /** Map a 0–100 structural-health score to its letter grade (A ≥90 … F <60). */
 export declare function gradeFor(score: number): PluginScore["grade"];
 /** One deduction: a count, its per-item weight, and the label if non-zero. */

package/dist/score-core.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.W_TRIFECTA = exports.W_NO_CONTRACT = exports.W_OVERLAP = exports.W_DANGLING_REF = exports.W_NO_DESCRIPTION = exports.W_MISSING_HOOK = void 0;
+exports.TRIFECTA_LABEL = exports.W_TRIFECTA = exports.W_NO_CONTRACT = exports.W_OVERLAP = exports.W_DANGLING_REF = exports.W_NO_DESCRIPTION = exports.W_MISSING_HOOK = void 0;
 exports.gradeFor = gradeFor;
 exports.reportDeductions = reportDeductions;
 exports.isEmptyMachine = isEmptyMachine;
@@ -15,6 +15,16 @@ exports.W_DANGLING_REF = 8; // a referenced intra-plugin file that's missing →
 exports.W_OVERLAP = 8; // a description collision → the wrong skill fires
 exports.W_NO_CONTRACT = 5; // generic small-footgun weight (disallowedTools typo, invalid model/color)
 exports.W_TRIFECTA = 10; // a HARD lethal-trifecta contract (all three legs, explicit) → a prompt-injection exfil path. HALF the old 20: a DING, not a fail — a trifecta is a real risk worth surfacing in the grade, but official plugins ship the pattern by design, so it dents the score (e.g. feature-dev's 3 hard units → −30 → C) without a catastrophic F.
+/**
+ * The one canonical, jargon-free finding string for a HARD lethal-trifecta unit —
+ * shared by the Safety category card (audit-score) AND the verdict sentence / overall
+ * deduction (reportDeductions here), so the plain-language copy can't drift between
+ * surfaces (one-detector-no-drift). It NAMES the three legs and the consequence in
+ * plain words instead of the old "holding all three lethal-trifecta legs
+ * (prompt-injection exfil path)" shorthand a first-time reader can't parse. The
+ * `(s)` placeholder is resolved by the caller's pluralizer against the count.
+ */
+exports.TRIFECTA_LABEL = 'unit(s) can read data, reach the web, and run commands — the "lethal trifecta", so a prompt injection could exfiltrate secrets';
 // Two things are advisory, NOT graded penalties (shown, never scored — see scoreReport):
 //   - untested surfaces — a hardening gap, not breakage.
 //   - an agent that inherits all tools (no `tools:` line) — see reportDeductions for why.
@@ -56,7 +66,7 @@ function reportDeductions(r) {
         {
             n: hardTrifecta,
             weight: exports.W_TRIFECTA,
-            label: "unit(s) holding all three lethal-trifecta legs (prompt-injection exfil path)",
+            label: exports.TRIFECTA_LABEL,
         },
         {
             n: missingHooks,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigiles",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "description": "Lint & test the harness your AI agent runs on — verify the references in your CLAUDE.md / AGENTS.md and test that your hooks and skills actually work.",
   "keywords": [
     "claude-code",