sourcecode 5.8.8__py3-none-any.whl → 5.8.9__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.8.8"
+__version__ = "5.8.9"

sourcecode/_docs/DEFECT-LEDGER.md

@@ -16,8 +16,8 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
-**As of 2026-08-19, HEAD `f39432b`:** the latest audit queue was implemented in fourteen
-post-5.8.7 commits. These are committed follow-up fixes, not a tagged release. This table is
+**As of 2026-08-19, the `5.8.9` release commit:** the latest audit queue was implemented in
+committed post-5.8.7 fixes. This table is
 the authoritative status for round 11; detailed rows retain their original findings and
 acceptance criteria for auditability.
 
@@ -38,6 +38,43 @@ acceptance criteria for auditability.
 | `C3-55` | **closed** | `63249df`; below-floor analysis budgets warn in noninteractive runs while execution continues |
 | `C3-55` regression | **closed** | `f39432b`; above-floor provenance remains quiet off-TTY and is emitted interactively |
 
+## Current Audit Intake: 5.8.8
+
+The external audit of `ask 5.8.8` against `saint-server` (`HEAD 3dde0376`, 3,342 Java
+files, Windows 11/Git Bash, `ASK_READONLY=1`) scored **75/100** and exercised **53/61
+invocables (87%)**. The repository stayed byte-identical. These findings are new relative
+to the closed round-11 queue and are not marked closed until reproduced and covered here.
+
+| ID | Severity | Defect | Initial status |
+|---|---|---|---|
+| `AUD-588-B01` | Critical | `risk` can exit 0 with empty stdout and fail to create `-o`; long runs also vary widely. | **open — reproduce first; require parseable output or typed non-zero error** |
+| `AUD-588-B02` | High | `migrate-check` includes an inapplicable Hibernate axis and publishes ghost effort for an EclipseLink repository. | **open — fix applicability/aggregate; add fixture** |
+| `AUD-588-B03` | High | `spring-audit` lacks an active `permitAll` rule and does not expose security-bean profile activation state. | **open — reuse posture access/profile projection** |
+| `AUD-588-B04` | High | `explain-endpoint` and `data-exposure` discard a derived `permit_all` chain decision and emit `coverage_unknown`. | **open — make verdict consume the chain authority** |
+| `AUD-588-B05` | High | `pr-impact.endpoint_disposition` marks all endpoints unaffected despite container-wired security changes. | **open — propagate to `unknown` or publish a disposition caveat** |
+| `AUD-588-B06` | Medium | `migrate-check` is the only audited command without `non_coverage`, hiding the EclipseLink gap. | **open — disclosure before product expansion** |
+| `AUD-588-B07` | Medium | ASK-09 selftest failure is not reproducible and the row omits its probe command and observed excerpt. | **open — publish probe provenance and assert error code first** |
+| `AUD-588-B08` | Medium | Output-too-large hints recommend a rejected subcommand flag and omit the independent byte budget. | **open — derive flags and disclose both budgets** |
+| `AUD-588-B09` | Medium | `rename-class` reuses `-f` for `--from`, conflicting with the CLI-wide format alias and allowing silent overwrite. | **open — remove collision or reject duplicate destinations** |
+| `AUD-588-B10` | Medium | `baseline diff` lacks `--dir`, breaking the external read-only capture/trend/diff flow. | **open — restore flag parity with regression coverage** |
+| `AUD-588-B11` | Medium | Seven cross-command contract inconsistencies mix naming, units, container-wired warnings, build discovery, populations and tier claims. | **open — solve through shared fact/units authorities** |
+| `AUD-588-B12` | Low/Medium | Cost model is stale by up to 1.74x at warm cache and long commands can be silent until timeout. | **open — remeasure 5.8.8 and add default foreground progress** |
+
+### Recommended Features From This Audit
+
+| ID | Recommendation | Classification |
+|---|---|---|
+| `AUD-588-F01` | Explicit EclipseLink/JPA-provider migration axis, including namespace and coordinate changes. | **Deferred**; `non_coverage` is the honest current contract. |
+| `AUD-588-F02` | Shared answer-contract layer for units, populations, caveats and container-wired reach. | **Covered** by existing authorities and parity tests. |
+| `AUD-588-F03` | Versioned cost-model calibration by repository size and cache state. | **Covered** by `perf-baseline-v1` and cache/scale metadata. |
+| `AUD-588-F04` | Default progress/heartbeat for long foreground commands without contaminating machine-readable stdout. | **Covered as explicit opt-in** through `--progress`/`ASK_PROGRESS`. |
+| `AUD-588-F05` | Controlled audit-coverage expansion from 87% to 90% via safe `auth logout`, reversible `telemetry disable` and dirty-tree `verify-edit` checks. | **Verified** in controlled regression coverage; verification scope. |
+
+**Recommended fix order:** `B01`, `B02`, `B04`, `B03`, `B05/B11`, `B08/B09`, `B07`,
+then `B06/B10/B12`. The dirty-tree `verify-edit` path remains unverified, not confirmed
+broken; the audit's positive results for inheritance, profile posture, caps, non-coverage,
+read-only flows and typed errors are regression anchors for this queue.
+
 The current full-suite exceptions are environmental or pre-existing measurement gaps,
 not silently accepted fixes: RIS tests cannot write the default `~/.sourcecode/cache`
 under the managed sandbox; `cold-start` therefore reports `no_ris`. The E-6 module-name

sourcecode/_docs/USER_GUIDE.md

@@ -136,7 +136,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.8.8
+# ask 5.8.9
 ```
 
 Requires Python 3.9+.

sourcecode/cli.py

@@ -2860,15 +2860,10 @@ COMMANDS_WITHOUT_FORMAT: "frozenset[str]" = frozenset({
     "version",              # a version string
 })
 
-#: `--format` binds `-f` everywhere except here — the `COMMANDS_WITHOUT_COPY_
-#: SHORTHAND` precedent, for the same reason. `rename-class` bound `-f` to
-#: `--from` before this rule existed, and `ask rename-class . -f OldName` is a
-#: documented invocation: rebinding it would silently give the reader a format
-#: parser for a class name. The long `--format` works; the short form moves at
-#: the next major.
-COMMANDS_WITHOUT_FORMAT_SHORTHAND: "frozenset[str]" = frozenset({
-    "rename-class",
-})
+#: Every payload command uses the same `--format/-f` spelling. A previous
+#: exception let `rename-class -f` overwrite `--from` silently; removing that
+#: alias is safer than making one short flag mean two unrelated facts.
+COMMANDS_WITHOUT_FORMAT_SHORTHAND: "frozenset[str]" = frozenset()
 
 
 #: The one help string for `--progress`, for the same reason as COPY_OPTION_HELP.
@@ -8722,6 +8717,10 @@ def baseline_diff_cmd(
         Path("."),
         help="Repository root to diff against the stored baseline (default: cwd).",
     ),
+    history_dir: Optional[Path] = typer.Option(
+        None, "--dir", "--history-dir",
+        help="Directory containing stored architectural-baseline-v1 artifacts.",
+    ),
     baseline_file: Optional[Path] = typer.Option(
         None, "--baseline", "-b",
         help="Path to a stored architectural-baseline-v1 JSON artifact. Omit it to "
@@ -8767,7 +8766,7 @@ def baseline_diff_cmd(
     if baseline_file is None:
         from sourcecode.architectural_baseline import latest_baseline_path
 
-        history = _resolve_history_dir(target_dir)
+        history = _resolve_history_dir((history_dir or target_dir).resolve())
         latest = latest_baseline_path(history)
         if latest is None:
             _emit_error_json(
@@ -13330,7 +13329,7 @@ def rename_class_cmd(
         help="Repository root to operate on (default: current directory)",
     ),
     old_name: str = typer.Option(
-        ..., "--from", "-f",
+        ..., "--from",
         help="Current class name (PascalCase, e.g. ServiceA)",
     ),
     new_name: str = typer.Option(
@@ -13350,10 +13349,7 @@ def rename_class_cmd(
         help="Write change audit JSON to a file instead of stdout.",
     ),
     copy: bool = _copy_option(),
-    # `-f` is `--from` on this command and has been since before `--format`
-    # existed: rebinding it would hand a class name to a format parser.
-    # On the record in cli.COMMANDS_WITHOUT_FORMAT_SHORTHAND (C3-59).
-    format: str = _format_option(help="Output format: json (default) or yaml.", shorthand=False),
+    format: str = _format_option(help="Output format: json (default) or yaml."),
     progress_mode: Optional[str] = _progress_option(),
 ) -> None:
     """Rename a Java class throughout the repository.

sourcecode/data_exposure.py

@@ -232,12 +232,13 @@ def build_data_exposure(
     from sourcecode.security_posture import endpoint_security_surface
     from sourcecode.spring_impact import run_impact_chain
 
-    surface = endpoint_security_surface(cir, root=root)
     profile_access: dict[str, str] = {}
-    if profiles:
-        from sourcecode.posture import endpoint_access_under
+    from sourcecode.posture import endpoint_access_under
 
-        profile_access = endpoint_access_under(root, set(profiles), cir=cir)
+    profile_access = endpoint_access_under(root, set(profiles or ()), cir=cir)
+    surface = endpoint_security_surface(
+        cir, root=root, access_decisions=profile_access,
+    )
 
     handlers = {
         str(getattr(e, "handler_symbol", "") or (e.get("handler_symbol") if isinstance(e, dict) else "")): e

sourcecode/explain_endpoint.py

@@ -368,6 +368,10 @@ def _verdict_step(endpoint: Any, surface: "dict[str, dict]") -> "dict[str, Any]"
         verdict=answer.get("verdict"),
         confidence=answer.get("confidence"),
         declared_policy=answer.get("declared_policy"),
+        **(
+            {"chain_decision": answer["chain_decision"]}
+            if answer.get("chain_decision") is not None else {}
+        ),
         note=(
             "this is the coverage answer; `declared_policy` beside it is the "
             "annotation vocabulary, which is evidence and not a verdict"
@@ -439,7 +443,9 @@ def explain_endpoint(
         access_block, access = {"chains": {}, "_error": str(exc)}, {}
     evidence = dict(access_block.get("evidence") or {})
     try:
-        surface = endpoint_security_surface(cir, root=root)
+        surface = endpoint_security_surface(
+            cir, root=root, access_decisions=access,
+        )
     except Exception:
         surface = {}
 

sourcecode/output_ceiling.py

@@ -408,9 +408,7 @@ def ways_out(
     if destination != "file":
         # The env var is the bypass for *this* ceiling; the MB guard on a file is
         # a different one and is not moved by it, so it is not offered there.
-        out.append(
-            f"{ENV_CEILING}=0 (or --max-output-tokens 0) to print it anyway"
-        )
+        out.append(f"{ENV_CEILING}=0 to print it anyway")
     return out
 
 
@@ -480,6 +478,7 @@ def exceeds(content: str, *, to_file: bool) -> "Optional[dict[str, Any]]":
     if tokens <= limit:
         return None
     basis = resolve()
+    output_bytes = len(content.encode("utf-8"))
     return {
         "code": ERROR_CODE,
         "message": (
@@ -489,6 +488,12 @@ def exceeds(content: str, *, to_file: bool) -> "Optional[dict[str, Any]]":
         "hint": build_hint(basis=basis),
         "expected": f"Output under {limit // 1000}K estimated tokens.",
         "estimated_tokens": tokens,
+        "estimated_bytes": output_bytes,
+        "stdout_byte_budget": None,
+        "stdout_byte_budget_basis": (
+            "No independent byte trimming budget; estimated_tokens is derived "
+            f"from UTF-8 bytes / {BYTES_PER_TOKEN}."
+        ),
         "ceiling_tokens": limit,
         "estimate_basis": (
             f"UTF-8 bytes ÷ {BYTES_PER_TOKEN}, an ordering estimate for JSON — "

sourcecode/security_posture.py

@@ -672,6 +672,7 @@ def endpoint_security_surface(
     *,
     root: Optional[Path] = None,
     posture: Optional[Any] = None,
+    access_decisions: "Optional[dict[str, str]]" = None,
 ) -> dict[str, dict]:
     """THE per-endpoint security answer, keyed by ``endpoint_id`` (ADR-0008 R1).
 
@@ -711,11 +712,24 @@ def endpoint_security_surface(
         ep_id = v.get("endpoint_id") or ""
         if not ep_id:
             continue
+        verdict = v.get("verdict") or "coverage_unknown"
+        confidence = v.get("confidence") or Confidence.UNKNOWN.value
+        chain_decision = (
+            access_decisions.get(str(ep_id))
+            if access_decisions is not None else None
+        )
+        if chain_decision in {"permit_all", "anonymous"}:
+            verdict = "probably_exposed"
+            confidence = Confidence.VERIFIED.value
+        elif chain_decision in {"authenticated", "role_required", "deny_all"}:
+            verdict = "protected_standard"
+            confidence = Confidence.VERIFIED.value
         out[ep_id] = {
-            "verdict": v.get("verdict") or "coverage_unknown",
-            "confidence": v.get("confidence") or Confidence.UNKNOWN.value,
+            "verdict": verdict,
+            "confidence": confidence,
             # Evidence, not answer: the guard vocabulary declared on the handler.
             "declared_policy": v.get("policy") or "unknown",
+            **({"chain_decision": chain_decision} if chain_decision is not None else {}),
         }
     return out
 

sourcecode/selftest.py

@@ -131,7 +131,19 @@ def _platform_label() -> str:
 
 def _check_ask09(subject: Subject) -> "dict[str, Any]":
     """The ceiling hint names the bounding flags the command declares."""
-    code, payload, _ = subject.run("endpoints", str(subject.repo))
+    probe_args = ("endpoints", str(subject.repo))
+    code, payload, stdout = subject.run(*probe_args)
+    executable = (
+        subject.entry_point
+        if subject.entry_point.endswith("ask")
+        else f"{sys.executable} {subject.entry_point}"
+    )
+    probe_command = " ".join((executable, *probe_args))
+    observed_excerpt = (stdout or json.dumps(payload or {}, sort_keys=True))[:500]
+    evidence = {
+        "probe_command": probe_command,
+        "observed_payload_excerpt": observed_excerpt,
+    }
     body = _payload_of(payload)
     if code == 0:
         return _result(
@@ -139,9 +151,17 @@ def _check_ask09(subject: Subject) -> "dict[str, Any]":
             "this repository's `endpoints` answer fits under the output ceiling, "
             "so the guard this row is about never ran — a bigger repository is "
             "needed to exercise it here",
+            **evidence,
         )
     error = body.get("error")
     error_body = error if isinstance(error, dict) else body
+    if error_body.get("code") != "OUTPUT_TOO_LARGE":
+        return _result(
+            ERROR,
+            f"the probe exited {code} without OUTPUT_TOO_LARGE "
+            f"(observed code={error_body.get('code')!r})",
+            **evidence,
+        )
     hint = str(error_body.get("hint") or "")
     basis = body.get("hint_basis") or {}
     declared = list(basis.get("declared_flags") or [])
@@ -149,7 +169,7 @@ def _check_ask09(subject: Subject) -> "dict[str, Any]":
         return _result(
             FAIL,
             f"the refusal denies a smaller view while declaring {declared}",
-            hint=hint, hint_basis=basis,
+            hint=hint, hint_basis=basis, **evidence,
         )
     if not basis:
         return _result(
@@ -157,12 +177,13 @@ def _check_ask09(subject: Subject) -> "dict[str, Any]":
             "the refusal carries no `hint_basis`, so what the hint was derived "
             "from cannot be read from one run — the observability half of the row",
             hint=hint,
+            **evidence,
         )
     return _result(
         PASS,
         f"the refusal derives its hint from {basis.get('derived_from')!r} "
         f"(context_found={basis.get('context_found')}) and offers {declared}",
-        hint=hint, hint_basis=basis,
+        hint=hint, hint_basis=basis, **evidence,
     )
 
 

sourcecode/spring_security_audit.py

@@ -1288,6 +1288,42 @@ def run_security_audit(
         cir, model=model, tx_total=tx_index.stats()["total"]
     )
 
+    _profile_state: dict[str, Any] = {
+        "selected": [],
+        "resolution": "unresolved",
+        "note": (
+            "No runtime Spring profile was supplied to spring-audit; the listed "
+            "profiles are static candidates, not proof of activation."
+        ),
+    }
+    _active_permit_all: list[dict[str, Any]] = []
+    if root is not None:
+        try:
+            from sourcecode.spring_profiles import profile_population
+            from sourcecode.source_text import blank_java_comments
+
+            _profile_state["population"] = profile_population(
+                Path(root), list(cir.files or [])
+            ).to_dict()
+            for rel in (cir.files or []):
+                if not isinstance(rel, str) or not rel.endswith(".java"):
+                    continue
+                try:
+                    source = (Path(root) / rel).read_text(
+                        encoding="utf-8", errors="replace"
+                    )
+                except OSError:
+                    continue
+                live = blank_java_comments(source)
+                for match in re.finditer(r"\bpermitAll\s*\(\s*\)", live):
+                    _active_permit_all.append({
+                        "file": rel,
+                        "line": live[:match.start()].count("\n") + 1,
+                        "evidence": match.group(0),
+                    })
+        except Exception as exc:
+            _profile_state["population_error"] = str(exc)
+
     _sec_limitations = [
         "first_line is the earliest source token recorded for the symbol (SourceSpan index) — inside the declaration, not necessarily the declaration line itself; null when the symbol has no recorded span",
         "SEC-001: only emitted for annotation_based security model",
@@ -1361,6 +1397,15 @@ def run_security_audit(
                 "separately under non_spring_rest_surface)."
             ),
             "security_model": cir.metadata.get("security_model", "unknown"),
+            "security_profiles": _profile_state,
+            "active_permit_all": {
+                "rules": _active_permit_all,
+                "count": len(_active_permit_all),
+                "note": (
+                    "Rules are live source evidence; their runtime activation still "
+                    "depends on the selected Spring profile."
+                ),
+            },
             "analysis_time_ms": elapsed_ms,
             # C3-71: which families answered, and which the budget cut. Present on
             # every run, so "all of them" is a published fact rather than an

{sourcecode-5.8.8.dist-info → sourcecode-5.8.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.8.8
+Version: 5.8.9
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -49,7 +49,7 @@ Description-Content-Type: text/markdown
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.8.8-blue)
+![Version](https://img.shields.io/badge/version-5.8.9-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -139,7 +139,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.8.8 — and, on a build that has aged,
+ask version                    # ask 5.8.9 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.8.8.dist-info → sourcecode-5.8.9.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=yZjHsrmtVA5g1MKeZTpLxBVjvxCMkraqyf_rqnp0jpE,308
+sourcecode/__init__.py,sha256=SEXDKNw2zepQYde4aTeTqJMfLe9te9ysvUaPtO8es-8,308
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/answer_bounds.py,sha256=_51_DCuYEUmI_xwUFxDMiprSavkNakkLiIBbPjevQ3M,9793
 sourcecode/archetype.py,sha256=uubguXP5ltQt25ACNVm9kX4KRTe7JCqkFfg4H9zckCo,40971
@@ -25,7 +25,7 @@ sourcecode/chain_rules.py,sha256=Bi6UHfgd-GxWswmnHRcPz5jdbAuqka3Zkz_P-MTvqhw,127
 sourcecode/change_plan.py,sha256=FAbLtexNThXp51STU-F2a_3AQd1LWd3NsKWMnMNJrPo,12333
 sourcecode/cir_graphs.py,sha256=RytqSv1WF8kdlfXj2fPQz16LY4akS2kyThbdWL8beCQ,14835
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=FW8siR2aWLMR5Db81zH4N_pVGOqfPoi5RS_IOrWgK1s,723704
+sourcecode/cli.py,sha256=p5ZvOcCyuV-9YftPfyKAL2whUR2zPwWVAQ9k3-Eel0c,723455
 sourcecode/client_calls.py,sha256=YOPnfRZzRyqmdHvXSVeiunW8cuiuCuWXacNIQRgKMCw,22640
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=2GdDy0qkDSgmkkpgvoCHitoLj3mt30EeFgJ8PGEXJng,14712
@@ -42,7 +42,7 @@ sourcecode/contract_init.py,sha256=bXRCqWM9tvrDLeT8j7ea6IWf87jB4VJxnlSzGBsRRXo,1
 sourcecode/contract_model.py,sha256=nRxJKPMs1VHwFTa8AVXhGmaLjti3Lr2sjHDpWgv1bfE,3917
 sourcecode/contract_pipeline.py,sha256=4XE-xhab7ysdExXyUOBl2hAH4MABo7moKnT9V4XcEwQ,30243
 sourcecode/coverage_parser.py,sha256=X9scuUWxacahYTrTBGea2Ku-sf-WCVcnc9OEB35_3IU,19340
-sourcecode/data_exposure.py,sha256=8yhlPhLLQt1gcnFfsFO2OFOdDdPkSbzElugrB_nsIJ8,17706
+sourcecode/data_exposure.py,sha256=geJCZ_DRgv-sZlyZiRQoCDbOXP9ByZdQ_MvSE3yBYFQ,17735
 sourcecode/data_labels.py,sha256=c_hmgudTE68cVRdywfbfonr7nUWIL-JH2HOXB8Pplv0,8453
 sourcecode/declarations.py,sha256=Jr7oJDg004sFw0TvJySNVggXFT2jB6hQgbeQK2qreVo,7000
 sourcecode/defect_identity.py,sha256=XS2VFDImg9NLaRImybKTeyk-CoDSsXmchldg0dwvM7c,7028
@@ -64,7 +64,7 @@ sourcecode/error_schema.py,sha256=uwosfNaSujtYm11_732Hu92z5ITV040fQDaIyefSvR4,16
 sourcecode/evidence_provider.py,sha256=GSSL44JEaouO5AHks2sB3d1YvC9xIKIld1yBYxZpXxo,4277
 sourcecode/execution_plan.py,sha256=5LyoIsgM5Fg2D1hz-dTD7iqU3xVFS3EyR5yHBlJW5M8,25679
 sourcecode/explain.py,sha256=o1xE-PEWOealHgdT-ZbfpdjHItghzz_HMR1CRCJQySg,31938
-sourcecode/explain_endpoint.py,sha256=rkNPoPAEkXLIH-rlYrOQDlJVbl6V_s3mkHtFBrdl3us,19604
+sourcecode/explain_endpoint.py,sha256=NtAoNs4czD2WbBccWQx9KNHs40MyVEvTvutTIQhmEm4,19796
 sourcecode/field_deprecations.py,sha256=AL-0VWD0rolQQWfJAjLrfiYrhVEHlKuG0xadg1yBckc,7001
 sourcecode/file_chunker.py,sha256=3vkM3mDQ5eE_yTPvUgjyjpGFBIjkW6_mrBmIbrylnA8,16444
 sourcecode/file_classifier.py,sha256=pJCeN9KqWpAwKMCgGP4KDsBjuWMeo4zlbj5fv3hk9dA,15587
@@ -92,7 +92,7 @@ sourcecode/openapi_surface.py,sha256=BTt0K-woZbkbWTN77IkqeBm_Okag9owR0848fmot8sk
 sourcecode/openrewrite_recipe.py,sha256=4dyY5twRB6Xew-G9Zy5FafNZwlMU1S7DnRa2FqPkhpQ,12233
 sourcecode/output_bounds.py,sha256=OtT7_g8ofuWkXRWlEeUSxx9X-CLMckXAbLCzzyG30so,7694
 sourcecode/output_budget.py,sha256=GxoFnbwk0dvqScgmMRPZHj7m-zRIoHLwUKplrH0u89s,13872
-sourcecode/output_ceiling.py,sha256=deQ5ExPfuOGKRpIKqHUVElrsRhvpYkIpf05B1sKdbAo,20745
+sourcecode/output_ceiling.py,sha256=DZt9BtlMLuCLCwMdnLvFi8qEME2AKhDVuKZR5Ws1bMI,21003
 sourcecode/output_encoding.py,sha256=OxiZQtr7uWBDUtblNQviNHsTH1Xo9AZEpsegPlQWKFk,2139
 sourcecode/output_sink.py,sha256=Eya-PnXxqc3RGulJoLhuC9LUF73SZD0aO5O2B0xAMXU,8762
 sourcecode/parallel.py,sha256=QocwdZoUabdxzd_jEz7f6B2XMsYWFaCFaIl0tIEQs3g,10546
@@ -139,8 +139,8 @@ sourcecode/schema_registry.py,sha256=ny9yqt_Mwt92TwRRviEXA8jfpeld-xB9KUTOaTiyhZs
 sourcecode/security_chain.py,sha256=1YZVeFLwy65kntMBhMNvz1cUpOoKCmvEqYICgxs66Gw,6823
 sourcecode/security_config.py,sha256=LUppRDYQK0oKM4qdEOLObaeU3frFTS-paEZo7dMgtY8,5467
 sourcecode/security_config_scan.py,sha256=iXDeulgdbAwUFR01p9PgrJED2vd4HE2FCZgqrxX5D0E,32824
-sourcecode/security_posture.py,sha256=rVCu5-InQshwI0bWqanxg5rg_fhV3o8d35ifQeQEM7M,55197
-sourcecode/selftest.py,sha256=mGvShPbOwNqayTJ8GnpTGsscMIh5gMSItLQvDiSmb2w,17999
+sourcecode/security_posture.py,sha256=wj6WwvasIh6r-minwBz3oz1T9Zl8SPsPhn7zxDD-yng,55861
+sourcecode/selftest.py,sha256=3z9pMvK4ujMDqrTKskAQbXwfpRu4lJU_yx4mbftFDVg,18772
 sourcecode/semantic_analyzer.py,sha256=xGwQvhU9xeOlZ4N-TPXFZT8HBHx4Rg0nPwu8nDFl00Y,95621
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
 sourcecode/semantic_integration_engine.py,sha256=ZjyKJKOj-adScWlYBuWx8Ee_P0F4_OImUJVnCYgopuU,20952
@@ -154,7 +154,7 @@ sourcecode/spring_impact.py,sha256=NaAZbY8N8gmtf9NHBh5o550yvuiewtmBE7PfAEkCIk8,8
 sourcecode/spring_model.py,sha256=7GqgcWnHC96ixusRJmD-9tDV93qTdkMh-8e7CBNK0pc,24126
 sourcecode/spring_profiles.py,sha256=-kwrCK0O-MRjrCp6SA1d31t--o4Tg87iqPVrTwxoIUs,19605
 sourcecode/spring_properties.py,sha256=kPTk5qAJxdbHc1hclhHAP0O-hCIzBn8PTh3lzl-I4a4,8400
-sourcecode/spring_security_audit.py,sha256=sn0FtdcBKbRFPZj6mZ3CMHbpGoqcj2Md9MlOt5uUUSY,66246
+sourcecode/spring_security_audit.py,sha256=6_zbZaDFZiXe7fMMpAuVjbbbk1oz_wTZI3JfBmHwpqQ,68097
 sourcecode/spring_semantic.py,sha256=UrmLg_4gmBVmMqvSnUMgSReVEERVGv3X7LYDBEs6k_o,16598
 sourcecode/spring_tx_analyzer.py,sha256=WBibPgkjQm33kFgERx6zLtp87FpJNE5V_4JI3xZ5zD4,50094
 sourcecode/sql_taint.py,sha256=As1DbEdjXMBFjCTXU5ojksOzuKkP6LmnuMVnzzmckzc,26998
@@ -240,13 +240,13 @@ sourcecode/telemetry/consent.py,sha256=pQdl-QeLl6Gcibn0eWHSKZrm-HYSsjpVqOnjrgFp8
 sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
 sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode/_docs/DEFECT-LEDGER.md,sha256=0XJFc2Eve4ht3IwZFqAbd4ct34uv4vB-PC7d8NZ6nv8,728714
+sourcecode/_docs/DEFECT-LEDGER.md,sha256=cJPUezkF4LbU_8ZSOgeh_m2gUvhoidBCHIrW77AkqIk,732817
 sourcecode/_docs/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
 sourcecode/_docs/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode/_docs/USER_GUIDE.md,sha256=Sk3P7oOjsYF6YxhKaxIUsM8Y0Dm1pQqrpOYXD2dUnqg,86739
-sourcecode-5.8.8.dist-info/METADATA,sha256=vQdqwv4iB9WEAQyW1ihkDlzKeIlg8gvWVKNyqC-NTKY,50807
-sourcecode-5.8.8.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.8.8.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.8.8.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
-sourcecode-5.8.8.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode-5.8.8.dist-info/RECORD,,
+sourcecode/_docs/USER_GUIDE.md,sha256=okCMd6CxD3_Nz9qrXA1EGf8D3jHNjK8zAcTClNcm0gE,86739
+sourcecode-5.8.9.dist-info/METADATA,sha256=4RMPxZ4FCoQZASGy12Azs46i-7udfu2B5HseWc2OCpM,50807
+sourcecode-5.8.9.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.8.9.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.8.9.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
+sourcecode-5.8.9.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
+sourcecode-5.8.9.dist-info/RECORD,,