neurocvguard 0.1.0__tar.gz

neurocvguard-0.1.0/.gitignore

@@ -0,0 +1,39 @@
+# Isolated local environments and build products
+.venv/
+.venv-install/
+build/
+dist/
+*.egg-info/
+
+# Python and development caches
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.hypothesis/
+.coverage
+.coverage.*
+.coverage-s15/
+htmlcov/
+docs/_build/
+
+# Local research inputs and outputs; synthetic fixtures remain visible
+/data/private/
+/private_data/
+/local_outputs/
+/results/
+*.private.json
+
+# Credentials and per-user IDE settings
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+.secrets/
+.vscode/
+.idea/
+*.code-workspace
+# Local backup copies
+/Backup/

neurocvguard-0.1.0/LICENSE

@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2026, Alireza Emad
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice,
+   this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.

neurocvguard-0.1.0/PKG-INFO

@@ -0,0 +1,97 @@
+Metadata-Version: 2.5
+Name: neurocvguard
+Version: 0.1.0
+Summary: Research-only cohort audits and independently checked split plans for neuroimaging ML
+Project-URL: Source, https://github.com/Alireza2177/NeuroCVguard
+Author: Alireza Emad
+Maintainer-email: Alireza Emad <Alireza221177@gmail.com>
+License-Expression: BSD-3-Clause
+License-File: LICENSE
+Requires-Python: >=3.11
+Requires-Dist: jinja2>=3.1.6
+Requires-Dist: jsonschema>=4.23.0
+Requires-Dist: numpy>=1.26.4
+Requires-Dist: pandas>=2.2.3
+Requires-Dist: scikit-learn>=1.5.2
+Requires-Dist: scipy>=1.13.1
+Provides-Extra: dev
+Requires-Dist: build; extra == 'dev'
+Requires-Dist: hypothesis; extra == 'dev'
+Requires-Dist: mypy; extra == 'dev'
+Requires-Dist: pandas-stubs; extra == 'dev'
+Requires-Dist: pytest; extra == 'dev'
+Requires-Dist: pytest-cov; extra == 'dev'
+Requires-Dist: ruff; extra == 'dev'
+Requires-Dist: twine; extra == 'dev'
+Requires-Dist: types-jsonschema; extra == 'dev'
+Provides-Extra: docs
+Requires-Dist: myst-parser; extra == 'docs'
+Requires-Dist: sphinx; extra == 'docs'
+Requires-Dist: sphinx-rtd-theme; extra == 'docs'
+Description-Content-Type: text/markdown
+
+# NeuroCVguard
+
+Research-only Python software for checking whether supplied cohort identities,
+partitions and evaluation procedures match an intended generalization claim.
+It reads local CSV/TSV/JSON, checks participant/transitive dependence and requested
+domain separation, describes acquisition–target association, generates checked
+splits and runs a controlled participant-level logistic baseline with optional
+nested C selection. Offline HTML/JSON reports retain incomplete coverage and
+limitations. No account, GPU or runtime internet connection is needed.
+
+It does not process MRI images, provide clinical advice, authenticate upstream
+preprocessing, prove causal confounding or certify a study as leakage-free.
+Repeated visits alone are not leakage; inspect actual membership and objective.
+Unknown upstream preprocessing remains unassessable even with a correct Pipeline.
+
+## Install and try
+
+From an authorized local source checkout, create a dedicated Python environment.
+Use `.venv/Scripts/python.exe` on Windows or `.venv/bin/python` on Linux/macOS
+after `python -m venv .venv`. With that interpreter selected:
+
+```text
+python -m pip install -e ".[dev,docs]"
+python -m neurocvguard demo --out local_outputs/demo
+```
+
+Open `local_outputs/demo/report.html`. Inputs are fully synthetic, not patient
+data. Choose a new output path or explicitly use `--overwrite`. Read warnings
+beside coverage: association suggests reviewing acquisition imbalance, while
+unknown preprocessing asks for evidence rather than a passing verdict.
+
+**Private plans/evaluations are separate from projected reports.** Default
+projection is not guaranteed anonymity; inspect artifacts before sharing.
+Version: 0.1.0. See the [release procedure and evidence](docs/release.md) for
+publication status and the actual verified installation/platform results.
+
+## Documentation and development
+
+- [Installation and troubleshooting](docs/installation.md)
+- [Executable quickstart](docs/quickstart.md) and [synthetic tutorials](docs/synthetic_examples.md)
+- [Inputs](docs/input_tables.md), [configuration](docs/configuration.md),
+  [CLI](docs/cli.md) and [Python API](docs/api.rst)
+- [Objectives/warning actions](docs/objectives.md), [evaluation](docs/evaluation.md),
+  [report privacy](docs/reporting.md) and [limitations](docs/limitations.md)
+- [Contributing/testing](CONTRIBUTING.md), [changelog](CHANGELOG.md),
+  [security](SECURITY.md) and [release procedure](docs/release.md)
+
+Build the full local site with
+`python -m sphinx -W --keep-going -b html docs docs/_build/html` and open
+`docs/_build/html/index.html`. Run
+`python -m pytest -q --strict-markers --strict-config` for the test suite.
+Actual stage evidence and unrun checks are recorded under `state/handoffs/`.
+Local Windows and Linux WSL2 checks and the Python 3.11 direct-dependency floor
+have been exercised; see [installation evidence](docs/installation.md).
+macOS and hosted CI remain unverified until their recorded runs pass.
+
+## License, support and citation
+
+Copyright 2026 Alireza Emad. Released under the [BSD-3-Clause license](LICENSE).
+Maintainer: Alireza Emad. For private security reports, use the approved contact in
+[SECURITY.md](SECURITY.md); share only synthetic reproductions. No response-time
+or long-term support commitment is claimed.
+Citation metadata will be added only after verified authorship and release details;
+no DOI or citation badge exists. [AI assistance](AI_ASSISTANCE.md) is recorded
+honestly. Human walkthrough, external-user testing and acceptance remain pending.

neurocvguard-0.1.0/README.md

@@ -0,0 +1,65 @@
+# NeuroCVguard
+
+Research-only Python software for checking whether supplied cohort identities,
+partitions and evaluation procedures match an intended generalization claim.
+It reads local CSV/TSV/JSON, checks participant/transitive dependence and requested
+domain separation, describes acquisition–target association, generates checked
+splits and runs a controlled participant-level logistic baseline with optional
+nested C selection. Offline HTML/JSON reports retain incomplete coverage and
+limitations. No account, GPU or runtime internet connection is needed.
+
+It does not process MRI images, provide clinical advice, authenticate upstream
+preprocessing, prove causal confounding or certify a study as leakage-free.
+Repeated visits alone are not leakage; inspect actual membership and objective.
+Unknown upstream preprocessing remains unassessable even with a correct Pipeline.
+
+## Install and try
+
+From an authorized local source checkout, create a dedicated Python environment.
+Use `.venv/Scripts/python.exe` on Windows or `.venv/bin/python` on Linux/macOS
+after `python -m venv .venv`. With that interpreter selected:
+
+```text
+python -m pip install -e ".[dev,docs]"
+python -m neurocvguard demo --out local_outputs/demo
+```
+
+Open `local_outputs/demo/report.html`. Inputs are fully synthetic, not patient
+data. Choose a new output path or explicitly use `--overwrite`. Read warnings
+beside coverage: association suggests reviewing acquisition imbalance, while
+unknown preprocessing asks for evidence rather than a passing verdict.
+
+**Private plans/evaluations are separate from projected reports.** Default
+projection is not guaranteed anonymity; inspect artifacts before sharing.
+Version: 0.1.0. See the [release procedure and evidence](docs/release.md) for
+publication status and the actual verified installation/platform results.
+
+## Documentation and development
+
+- [Installation and troubleshooting](docs/installation.md)
+- [Executable quickstart](docs/quickstart.md) and [synthetic tutorials](docs/synthetic_examples.md)
+- [Inputs](docs/input_tables.md), [configuration](docs/configuration.md),
+  [CLI](docs/cli.md) and [Python API](docs/api.rst)
+- [Objectives/warning actions](docs/objectives.md), [evaluation](docs/evaluation.md),
+  [report privacy](docs/reporting.md) and [limitations](docs/limitations.md)
+- [Contributing/testing](CONTRIBUTING.md), [changelog](CHANGELOG.md),
+  [security](SECURITY.md) and [release procedure](docs/release.md)
+
+Build the full local site with
+`python -m sphinx -W --keep-going -b html docs docs/_build/html` and open
+`docs/_build/html/index.html`. Run
+`python -m pytest -q --strict-markers --strict-config` for the test suite.
+Actual stage evidence and unrun checks are recorded under `state/handoffs/`.
+Local Windows and Linux WSL2 checks and the Python 3.11 direct-dependency floor
+have been exercised; see [installation evidence](docs/installation.md).
+macOS and hosted CI remain unverified until their recorded runs pass.
+
+## License, support and citation
+
+Copyright 2026 Alireza Emad. Released under the [BSD-3-Clause license](LICENSE).
+Maintainer: Alireza Emad. For private security reports, use the approved contact in
+[SECURITY.md](SECURITY.md); share only synthetic reproductions. No response-time
+or long-term support commitment is claimed.
+Citation metadata will be added only after verified authorship and release details;
+no DOI or citation badge exists. [AI assistance](AI_ASSISTANCE.md) is recorded
+honestly. Human walkthrough, external-user testing and acceptance remain pending.

neurocvguard-0.1.0/examples/01_cohort_audit.py

@@ -0,0 +1,10 @@
+"""Map generated cohort TSV, audit and create participant-disjoint CV; open report.html.
+
+Run: python examples/01_cohort_audit.py --out local_outputs/example-01
+All inputs are created locally by the installed package; no patient data.
+"""
+
+from neurocvguard.demo import example_main
+
+if __name__ == "__main__":
+    raise SystemExit(example_main(1))

neurocvguard-0.1.0/examples/02_repeated_observations.py

@@ -0,0 +1,11 @@
+"""Compare row-random diagnostic and participant-disjoint synthetic evaluations.
+
+Run: python examples/02_repeated_observations.py --out local_outputs/example-02
+The row-random score is invalid for unseen-participant generalization.
+No universal ordering or causal leakage amount is claimed.
+"""
+
+from neurocvguard.demo import example_main
+
+if __name__ == "__main__":
+    raise SystemExit(example_main(2))

neurocvguard-0.1.0/examples/03_site_held_out.py

@@ -0,0 +1,11 @@
+"""Hold sites out with explicit class-associated domains; retain undefined fold metrics.
+
+Run: python examples/03_site_held_out.py --out local_outputs/example-03
+Association=1 is an explicit pedagogical mechanism, not a selected favorable seed.
+Site/participant objectives differ; these tabular data are entirely fictitious.
+"""
+
+from neurocvguard.demo import example_main
+
+if __name__ == "__main__":
+    raise SystemExit(example_main(3))

neurocvguard-0.1.0/examples/04_preprocessing_provenance.py

@@ -0,0 +1,11 @@
+"""Compare unknown preprocessing with a fictitious global-PCA declaration.
+
+Run: python examples/04_preprocessing_provenance.py --out local_outputs/example-04
+Inspect report.html and unknown.report.html. No PCA actually runs; a declaration
+cannot authenticate historical execution, and a Pipeline cannot repair it.
+"""
+
+from neurocvguard.demo import example_main
+
+if __name__ == "__main__":
+    raise SystemExit(example_main(4))

neurocvguard-0.1.0/examples/05_explicit_feature_join.py

@@ -0,0 +1,11 @@
+"""Join reversed synthetic feature rows by scan_key with explicit role/feature names.
+
+Run: python examples/05_explicit_feature_join.py --out local_outputs/example-05
+The installed workflow writes local TSVs and uses load_cohort's keyed join.
+No hidden notebook state, external dataset or row-order alignment is used.
+"""
+
+from neurocvguard.demo import example_main
+
+if __name__ == "__main__":
+    raise SystemExit(example_main(5))

neurocvguard-0.1.0/pyproject.toml

@@ -0,0 +1,85 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "neurocvguard"
+dynamic = ["version"]
+description = "Research-only cohort audits and independently checked split plans for neuroimaging ML"
+readme = "README.md"
+requires-python = ">=3.11"
+authors = [{name = "Alireza Emad"}]
+maintainers = [{name = "Alireza Emad", email = "Alireza221177@gmail.com"}]
+license = "BSD-3-Clause"
+license-files = ["LICENSE"]
+dependencies = ["numpy>=1.26.4", "pandas>=2.2.3", "scipy>=1.13.1", "scikit-learn>=1.5.2", "Jinja2>=3.1.6", "jsonschema>=4.23.0"]
+
+[project.urls]
+Source = "https://github.com/Alireza2177/NeuroCVguard"
+
+[project.optional-dependencies]
+dev = ["pytest", "pytest-cov", "hypothesis", "ruff", "mypy", "build", "twine", "pandas-stubs", "types-jsonschema"]
+docs = ["sphinx", "myst-parser", "sphinx-rtd-theme"]
+
+[project.scripts]
+neurocvguard = "neurocvguard.__main__:main"
+
+[tool.hatch.version]
+path = "src/neurocvguard/__init__.py"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/neurocvguard"]
+
+[tool.hatch.build.targets.wheel.force-include]
+"examples" = "neurocvguard/examples"
+
+[tool.hatch.build.targets.sdist]
+include = ["/src/neurocvguard", "/examples", "/pyproject.toml", "/README.md", "/LICENSE"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "--strict-markers --strict-config"
+
+[tool.coverage.run]
+branch = true
+source = ["neurocvguard"]
+# CLI/tutorial tests launch real Python processes. Measure those paths as well.
+patch = ["subprocess"]
+
+[tool.ruff]
+target-version = "py311"
+line-length = 100
+# The unchanged master builder predates S00. The repaired foundation validator
+# and all new stage helpers now receive the ordinary project lint/format checks.
+extend-exclude = ["tools/build_master.py", ".venv-install"]
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP", "B"]
+
+[tool.mypy]
+python_version = "3.11"
+strict = true
+
+# sklearn does not ship typing metadata. Restrict this exception to its import
+# boundary; NeuroCVguard's participant adapters and public functions remain strict.
+[[tool.mypy.overrides]]
+module = ["sklearn", "sklearn.*"]
+ignore_missing_imports = true
+
+# SciPy's installed contingency module has no typing metadata. Keep this
+# exception at the external boundary; validate finite outputs and type our adapter.
+[[tool.mypy.overrides]]
+module = ["scipy.stats.contingency"]
+ignore_missing_imports = true
+
+[tool.neurocvguard.release]
+proposed-license = "BSD-3-Clause"
+license-status = "OWNER_CONFIRMED"
+copyright-owner = "Alireza Emad"
+maintainer = "Alireza Emad"
+security-contact = "Alireza221177@gmail.com"
+repository-url = "https://github.com/Alireza2177/NeuroCVguard"
+# Selected project name; registry/publisher verification is release evidence.
+package-namespace = "neurocvguard"
+# Publication authorization is recorded in state/PROJECT_STATUS.json, outside
+# immutable distribution metadata, and must name the reviewed artifacts.

neurocvguard-0.1.0/src/neurocvguard/__init__.py

@@ -0,0 +1,199 @@
+"""Research-only local cohort/split checks, with lazy public API imports."""
+
+from __future__ import annotations
+
+from pathlib import Path
+from typing import TYPE_CHECKING
+
+if TYPE_CHECKING:
+    import pandas as pd
+
+    from neurocvguard.config import AuditConfig
+    from neurocvguard.models import (
+        AuditReport,
+        Cohort,
+        ComparisonResult,
+        EvaluationResult,
+        SplitPlan,
+    )
+
+__version__ = "0.1.0"
+
+
+def compare_designs(results: dict[str, EvaluationResult]) -> ComparisonResult:
+    """Compare private records descriptively; see neurocvguard.comparison.compare_designs."""
+    from neurocvguard.comparison import compare_designs as compare
+
+    return compare(results)
+
+
+def evaluate_baseline(cohort: Cohort, plan: SplitPlan, *, config: AuditConfig) -> EvaluationResult:
+    """Run classification with optional nested C selection; see evaluation.evaluate_baseline."""
+    from neurocvguard.evaluation import evaluate_baseline as evaluate
+
+    return evaluate(cohort, plan, config=config)
+
+
+def load_config(path: str | Path) -> AuditConfig:
+    """Read strict local JSON settings; see neurocvguard.config.load_config."""
+    from neurocvguard.config import load_config as load
+
+    return load(path)
+
+
+def load_cohort(
+    metadata: str | Path | pd.DataFrame,
+    *,
+    config: AuditConfig,
+    features: str | Path | pd.DataFrame | None = None,
+) -> Cohort:
+    """Load strict local tables; see neurocvguard.io.load_cohort for the input contract."""
+    from neurocvguard.io import load_cohort as load
+
+    return load(metadata, config=config, features=features)
+
+
+def audit_cohort(
+    cohort: Cohort,
+    *,
+    config: AuditConfig,
+    ledger: dict[str, object] | None = None,
+) -> AuditReport:
+    """Audit constructed cohort data and declarations without fitting or writing.
+
+    Parameters
+    ----------
+    cohort : Cohort
+        Explicitly keyed in-memory metadata and optional aligned features.
+    config : AuditConfig
+        Matching roles and diagnostic settings.
+    ledger : dict or None, optional
+        Strict user-declaration contract; it cannot authenticate historical fitting.
+
+    Returns
+    -------
+    AuditReport
+        Scoped findings and persistent upstream limitations; see neurocvguard.audit.
+
+    Examples
+    --------
+    ``audit_cohort(cohort, config=config).to_dict()`` returns the public projection.
+    """
+    from neurocvguard.audit import audit_cohort as audit
+
+    return audit(cohort, config=config, ledger=ledger)
+
+
+def make_splits(cohort: Cohort, *, config: AuditConfig) -> SplitPlan:
+    """Generate and independently audit deterministic outer assignments.
+
+    Parameters
+    ----------
+    cohort : Cohort
+        Constructed keyed cohort with constant targets and complete protected fields.
+    config : AuditConfig
+        Explicit supported objective, splitter settings and seed.
+
+    Returns
+    -------
+    SplitPlan
+        Sensitive operational plan with separate in-memory generation_report.
+
+    Raises
+    ------
+    PlanningError, UnsupportedDesignError, ConfigurationError, InputValidationError
+        Unsupported inputs, infeasible design or failed independent audit.
+
+    Examples
+    --------
+    ``plan = make_splits(cohort, config=config)`` writes no files and fits no model.
+    """
+    from neurocvguard.splitting import make_splits as make
+
+    return make(cohort, config=config)
+
+
+def load_split_plan(
+    source: str | Path | dict[str, object],
+    *,
+    cohort: Cohort,
+    config: AuditConfig,
+) -> SplitPlan:
+    """Load and bind supplied assignments; see neurocvguard.io.load_split_plan.
+
+    Parameters
+    ----------
+    source : str, Path or dict
+        Local JSON/TSV path or schema-shaped plan dictionary.
+    cohort : Cohort
+        Already validated, explicitly keyed in-memory data.
+    config : AuditConfig
+        Matching objective/roles and input limits.
+
+    Returns
+    -------
+    SplitPlan
+        Bound sensitive operational plan, not a design approval.
+
+    Raises
+    ------
+    InputValidationError, ConfigurationError, SplitValidationError
+        Invalid source structure, identities, mapping, objective or digest.
+
+    Examples
+    --------
+    ``load_split_plan("plan.json", cohort=cohort, config=config)``
+    """
+    from neurocvguard.io import load_split_plan as load
+
+    return load(source, cohort=cohort, config=config)
+
+
+def audit_splits(cohort: Cohort, plan: SplitPlan, *, config: AuditConfig) -> AuditReport:
+    """Audit supplied partitions; see neurocvguard.audit.audit_splits.
+
+    Parameters
+    ----------
+    cohort : Cohort
+        Validated in-memory input.
+    plan : SplitPlan
+        Supplied structural plan record.
+    config : AuditConfig
+        Matching roles/objective; no diagnostic relaxation of invariants.
+
+    Returns
+    -------
+    AuditReport
+        Scoped checks and separate objective/complete-CV eligibility flags.
+
+    Raises
+    ------
+    InputValidationError, ConfigurationError, SplitValidationError
+        Corrupt identities or incompatible objective, mapping or digest.
+
+    Examples
+    --------
+    ``audit_splits(cohort, plan, config=config).to_dict()`` is privacy-projected.
+    """
+    from neurocvguard.audit import audit_splits as audit
+
+    return audit(cohort, plan, config=config)
+
+
+def write_report(
+    result: AuditReport | EvaluationResult | ComparisonResult,
+    *,
+    output_dir: str | Path,
+    sensitive_details: bool = False,
+    overwrite: bool = False,
+) -> dict[str, Path]:
+    """Write local projected JSON/HTML; see neurocvguard.reporting.write_report.
+
+    Safe defaults omit private evidence and refuse overwriting. Sensitive output
+    requires an explicit argument; no operational evaluation or split file is written.
+    """
+    from neurocvguard.reporting import write_report as write
+
+    return write(
+        result, output_dir=output_dir, sensitive_details=sensitive_details, overwrite=overwrite
+    )

neurocvguard-0.1.0/src/neurocvguard/__main__.py

@@ -0,0 +1,6 @@
+"""Module and installed console entry points share the same CLI."""
+
+from neurocvguard.cli import main
+
+if __name__ == "__main__":
+    raise SystemExit(main())

neurocvguard-0.1.0/src/neurocvguard/_diagnostics.py

@@ -0,0 +1,57 @@
+"""Narrow evaluation exception; audit findings and objective validity never change."""
+
+from neurocvguard.config import AuditConfig, Objective
+from neurocvguard.errors import UnsupportedDesignError
+from neurocvguard.models import AuditReport, CheckStatus
+
+DIAGNOSTIC_LIMITATION = (
+    "Diagnostic only; valid_for_objective=false. Do not report as evidence for "
+    "unseen-participant generalization. Participant-level aggregation does not remove "
+    "the training leakage already present. Every observation has one held-out prediction; "
+    "all held-out observation probabilities are averaged once per participant."
+)
+
+
+def validate_diagnostic_request(config: AuditConfig) -> None:
+    if config.evaluation.diagnostic_allow_subject_overlap and (
+        config.study.objective != Objective.UNSEEN_PARTICIPANT or config.columns.independence
+    ):
+        raise UnsupportedDesignError(
+            "Diagnostic overlap requires unseen_participant and no extra independence columns. "
+            "It cannot waive family, site or phase constraints."
+        )
+
+
+def evaluation_eligibility(audit: AuditReport, config: AuditConfig) -> bool:
+    """Return whether the narrow outer-overlap exception was actually necessary.
+
+    Inner participant/component overlap is never waived, including during tuning.
+    Without extra dependence columns, component overlap is participant overlap.
+    All original audit failures remain in the retained report.
+    """
+    validate_diagnostic_request(config)
+    summary = next(c for c in audit.checks if c.scope.get("field") == "split_summary")
+    if summary.evidence.get("evaluation_permitted") is True:
+        return False
+    required = {f"NCG-SPLIT-{n:03d}" for n in (1, 2, 3, 4, 5, 7, 8, 9, 10, 11)}
+    failures = [
+        c
+        for c in audit.checks
+        if c.rule_id in required and c.status in (CheckStatus.FAIL, CheckStatus.NOT_ASSESSABLE)
+    ]
+    if (
+        config.evaluation.diagnostic_allow_subject_overlap
+        and summary.evidence.get("complete_cv") is True
+        and failures
+        and all(
+            c.status == CheckStatus.FAIL
+            and c.rule_id in {"NCG-SPLIT-002", "NCG-SPLIT-003"}
+            and c.scope.get("inner_fold_id") is None
+            for c in failures
+        )
+    ):
+        return True
+    raise UnsupportedDesignError(
+        "Evaluation requires complete, protected and objective-valid partitions with all "
+        "training classes. Diagnostic permission cannot waive other violations; run audit."
+    )