sourcecode 5.9.0__py3-none-any.whl → 5.9.2__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.9.0"
+__version__ = "5.9.2"

sourcecode/_build_commit.py

@@ -1,5 +1,5 @@
 """Generated at build time by hatch_build.py. Do not edit (AUD-592-D04)."""
 
-BUILD_COMMIT = 'b4c3691c4110d863fedcd54a61a08fd2997e400c'
+BUILD_COMMIT = 'cbecede0ebc0e7fe99d4c064d5fc052b1b37799e'
 CLOSURE_PROVENANCE = {'Window': {'commit': '', 'status': 'uncited'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}}
 CLOSURE_COVERAGE = {'closed_rows': 113, 'present': 88, 'absent': 0, 'unresolved': 0, 'uncited': 25, 'unknown': 0}

sourcecode/_docs/DEFECT-LEDGER.md

@@ -16,6 +16,23 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
+**External `5.9.0` audit received, 2026-08-26 - `AUD-608`; corrections shipped in `5.9.1`.** The audited
+revision is the released `5.9.0` commit. The three confirmed corrections are
+closed: `AUD-608-C01` (P1, `cve` now declares its static inventory scope,
+`fe1f624`), `AUD-608-P01` (P1, `pr-risk --since` returns structured base-ref
+errors, `b479465`), and `AUD-608-O01` (P2, `posture --diff --limit` bounds
+`permit_all` plus effective-access evidence maps, `5f8a50b`). `AUD-607-U01`
+is also closed (`19811ac`): the seven new command helps state budget-policy
+non-applicability. `AUD-607-U02` is
+withdrawn after controlled runs showed an external 120-second timeout;
+`AUD-608-C02` (reported UTF-8 mojibake in `chunk-file`) remains a platform
+reproduction follow-up because the released reader is explicitly UTF-8.
+
+The new effective-access evidence supersedes the prior `AUD-607-O01`
+non-reproduction: that check did not exercise the payload shape now identified.
+Historical records below remain snapshots. Full evidence is in
+[`AUDIT-2026-08-26-EXTERNAL-5.9.0.md`](AUDIT-2026-08-26-EXTERNAL-5.9.0.md).
+
 **External `5.8.32` audit received, 2026-08-26 — `AUD-607`.** Two independent
 reports ([`AUDIT-2026-08-26-EXTERNAL-5.8.32.md`](AUDIT-2026-08-26-EXTERNAL-5.8.32.md)):
 a reverification round (9.7/10) and a comparison round against `5.8.31` (8/10).

sourcecode/_docs/USER_GUIDE.md

@@ -46,13 +46,13 @@ CLI commands        — impact, endpoints, spring-audit, explain, … each a pro
 The key idea: the extraction is **content-addressed**. Commands reuse the parse cache and,
 where their analysed scope matches, the shared Canonical IR; `ask cache model` names what a
 warm buys for each command rather than implying that every projection costs the same. In
-5.9.0, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
+5.9.2, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
 model across all declared label seeds. (The extraction and consumption contract is fixed in
 the architecture ADRs 0001–0004 under `docs/architecture/`.)
 
 The current external pack audit intake is tracked in
 [`AUDIT-2026-08-26-EXTERNAL-5.8.28-PACK.md`](AUDIT-2026-08-26-EXTERNAL-5.8.28-PACK.md);
-the two pack fixes are included in release 5.9.0, with release-artifact verification
+the two pack fixes are included in release 5.9.2, with release-artifact verification
 remaining for detached execution and pack evidence.
 
 ---
@@ -171,6 +171,7 @@ human. They project the same semantic model into agent-ready context:
 |---------|---------|
 | `ask prepare-context <task>` | Task-shaped context bundle (`onboard`, `review-pr`, `fix-bug`, `refactor`, `generate-tests`) sized for an LLM prompt. |
 | `ask repo-ir` | The low-level symbol IR itself — the raw semantic representation, for tools that want the graph, not a report. |
+| `ask repo-ir --budget-tokens N` | Stateless context budget for the inline IR. Composes with `--since`; returns the full view when it fits, otherwise the summary and explicit `non_coverage` for omitted graph fields. |
 | `ask --agent` | Agent-optimized output envelope for any command. |
 | `ask --compact` | A bounded subset (status, stacks, entry points, key dependencies) for cheap orientation. See `ask --help` for the current output budget. |
 | `ask mcp` | Runs ASK as an MCP server so an agent (Claude Desktop / Cursor) calls it as a tool. |
@@ -179,6 +180,20 @@ Rule of thumb: **developer-facing** commands (`impact`, `spring-audit`, `endpoin
 `validation`) answer a question you read; **agent-facing** commands (`prepare-context`,
 `repo-ir`, `--agent`, `--compact`) assemble context another model will consume.
 
+`repo-ir --budget-tokens N` is intentionally stateless: `--since <ref>` narrows the
+semantic change set and `--budget-tokens N` bounds the serialized inline answer. If
+the graph does not fit, ASK returns the existing summary view and publishes
+`token_budget.coverage: non_coverage` with the omitted fields. A budget that cannot
+fit even that summary is refused rather than silently truncating JSON. The budget
+applies to stdout; use `--output FILE` for an unbounded artifact.
+
+For a rerunnable context-cost comparison, use
+`python3 scripts/context_cost_harness.py` with `--with-ask` and `--without-ask`
+command templates. Templates are executed without a shell and may use `{repo}`
+and `{since}`. The report records both outputs, but only computes a token delta
+when both commands exit successfully and `--comparable` is explicit; otherwise
+the result is `not_comparable` and the process exits non-zero.
+
 **Honest state of `prepare-context` (measured in the field, 3 300-file repo):**
 
 | Task | State |
@@ -206,7 +221,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.9.0
+# ask 5.9.2
 ```
 
 Requires Python 3.9+.
@@ -251,7 +266,7 @@ estimate scaled by file count would be wrong in the direction that costs you a s
 and an anchor printed without its release goes on recommending a nightly job for a command
 that has come to finish in seconds (C3-97).
 
-48 commands and seven command groups exist. Four of them carry most of the measured
+50 commands and seven command groups exist. Four of them carry most of the measured
 value in field use, and they are the ones to learn first:
 
 | Start with | Because |
@@ -605,6 +620,25 @@ ask audit-report . --profile prod --format markdown
 ask audit-report . --sign-key audit.key -o audit-report.json
 ```
 
+Add a technical ENS evidence mapping to the signed bundle. The mapping is not
+a certification: controls that ASK cannot observe are explicitly marked
+`missing_evidence`. Owners, expiry dates and exceptions can be supplied in a
+JSON metadata file.
+
+```bash
+ask audit-report . --pack ens --sign-key audit.key --pack-metadata controls.json -o ens-report.json
+```
+
+### `ask audit-verify` *(supported)*
+
+Verify a signed `audit-report` locally without re-running the analysis. The
+command recomputes the canonical JSON payload and HMAC-SHA256, returning
+`valid: true` with exit code 0 or `valid: false` with exit code 1.
+
+```bash
+ask audit-verify audit-report.json --sign-key audit.key
+```
+
 `--sign-key` signs the canonical JSON payload with HMAC-SHA256 using a local key file and
 publishes `payload_sha256`, `key_id` and `signature`. This is integrity evidence for the
 bundle, not a public PKI or compliance certification.
@@ -1114,6 +1148,7 @@ ask baseline capture . --ref v1.4.0     # freeze the measured fingerprint
 ask baseline capture . --auto           # the same, safe to run on every push
 ask trend .                             # read the series (same as `baseline trend`)
 ask baseline diff .                     # the tree against the newest captured point
+ask baseline attest .                   # emit a bounded evidence attestation
 ```
 
 Both readers take **either** a repository path or a directory of baselines: `ask trend .`
@@ -1140,6 +1175,19 @@ passes `--dir` and writes them elsewhere.
 `trend` reports movement — totals over time and per-hotspot fan-in tracks. It labels nothing
 "improving" or "degrading"; that reading is yours.
 
+`baseline attest` is the read-only packaging seam for an auditor or CI artifact. It reads
+the stored architecture or findings series (`--kind findings`) and publishes its capture
+boundaries, latest commit, comparability and explicit limits as `baseline-attestation-v1`.
+It is evidence continuity, not a legal or regulatory compliance verdict, and it returns
+`status: no_history` instead of manufacturing a clean zero when no capture exists.
+
+For a multi-repository buyer, `ask auth workspace <repo>...` previews the aggregate Java
+population that a workspace-sized entitlement would see. The preview is advisory only: it
+does not change the current per-repository gate or charge the workspace.
+For a named-buyer pilot, add `--enforce`: crossing the aggregate threshold then requires
+the existing Pro entitlement and exits with the standard license-required contract; below
+the threshold it passes. This flag is opt-in and does not change per-repository gates.
+
 ---
 
 ## The gate commands
@@ -1297,15 +1345,15 @@ explaining. The rest do one thing; `ask <command> --help` is the whole story.
 
 | Command | Tier | What it does |
 |---|---|---|
-| `ask migrate-check` | core | Spring Boot 2→3 readiness plus Java LTS/licensing inventory: blockers, effort range, target JDK evidence and explicit licensing-review signals. Full reference: [migrate-check.md](migrate-check.md) |
+| `ask migrate-check` | core | Spring Boot 2→3 readiness plus Java LTS/licensing inventory: blockers, effort range, target JDK evidence and explicit licensing-review signals. Supports `--format sarif` for located ASK-owned findings. Full reference: [migrate-check.md](migrate-check.md) |
 | `ask drift` | supported | What changed in the effective access — since the last capture (`--capture` records; the default compares) or between two profile sets (`--against`). One arithmetic for both axes. Separates `newly_unmatched` from `newly_matched`, and a `removed` route is NOT reported as having become safe. |
 | `ask watch` | supported | Warm the index once, then answer what each save affected — one JSON line per tick. `--once` is the pre-commit shape; `--ticks`/`--for` bound the loop. A file added since the warm is reported `unresolved`, never `unreachable`, and a failed analysis is an `error` tick rather than an empty change list. |
 | `ask pr-risk` | supported | One verdict for one diff — does this change make things worse? Joins `pr-impact` reach, endpoint access, the shared risk model and CODEOWNERS. `--since` differences route inventories so `new_endpoints` is a fact rather than a guess. An unresolved changed file caps the verdict at `UNKNOWN`, which fails every gate. |
 | `ask remediate` | supported | One loop from finding to verified change: audit → recipe → apply in a dedicated worktree → `verify-edit`. Dry by default; `--write` applies. Publishes `mechanisable` against `manual_remainder` with the reason each family cannot be rewritten, and reports `unverified` — never `applied` — when the result could not be checked. |
-| `ask cve` | supported | Cross the dependency inventory against a **local** OSV advisory feed (`--feed`; no network is taken), then report whether a route can reach the vulnerable package: `reachable`, `imported_not_exposed`, `not_observed` or `unknown`. `not_observed` is not a statement of safety, and nothing here answers "not reachable". |
+| `ask cve` | supported | Cross the dependency inventory against a **local** OSV advisory feed (`--feed`; no network is taken), then report whether a route can reach the vulnerable package: `reachable`, `imported_not_exposed`, `not_observed` or `unknown`. `--vex` imports exact local decisions as `accepted_by_vex` without changing reachability. `not_observed` is not a statement of safety, and nothing here answers "not reachable". |
 | `ask explain <Class>` | supported | Human-readable architectural summary for one class (text by design, not JSON) |
 | `ask export` | supported | Tool-agnostic views for downstream tooling: `--c4`, `--module-graph`, `--by-directory`, `--integrations`. `--c4 --render mermaid\|svg` draws the same model instead of emitting it — presentation over the existing payload, with the node cap written on the diagram. |
-| `ask repo-ir` | supported | Deterministic symbol-level IR for the whole repository |
+| `ask repo-ir` | supported | Deterministic symbol-level IR for the whole repository; `--since REF --budget-tokens N` bounds the inline agent context without silently truncating JSON |
 | `ask cold-start` | supported | Repository Intelligence Snapshot bootstrap context, returned from the persisted RIS |
 | `ask baseline … --kind findings` | supported | The defect population as a persisted series, in the same store as the architectural baseline: `capture` records it, `diff` reports new/resolved/persisting against the last capture, and `trend` says how long each still-open defect has been open. `first_seen` is the earliest STORED capture — not the day it was introduced. |
 | `ask prepare-context <task>` | supported | Task-shaped context: `onboard`, `delta`, `fix-bug`, `generate-tests`. See [Typical workflows](#typical-workflows) |
@@ -1314,9 +1362,11 @@ explaining. The rest do one thing; `ask <command> --help` is the whole story.
 | `ask rename-class` | supported | Word-boundary Java rename across the repository |
 | `ask schema <name>` | supported | Print a published JSON Schema for this tool's output |
 | `ask self-audit` | supported | Check the SHIPPED build's own coherence — cache model, format contract, schema registry and output affordances. Declares explicitly that the semantic engine does not apply to this product's own source (ASK analyses Java; this build is Python), rather than reporting zeros. `ask selftest` is the different question: the defect ledger run against a real repository. |
+| `ask auth workspace <repo>...` | supported | Aggregate workspace entitlement preview. `--enforce` opts into the named-buyer pilot that reuses the existing Pro gate when the organization-sized threshold is crossed; advisory mode remains the default and the CLI does not bill. |
+| `ask remediation-report` | supported | Redacted public projection of the shipped remediation ledger: unique row counts, status/severity distribution, build provenance and closure coverage; omits private narrative and paths. It is a trust artifact, not an SLA or security verdict. |
 | `ask archetype` | experimental | Evidence-based architectural archetype across four dimensions |
 | `ask retrieve` | parked | Typed knowledge queries over the model — kept working, no longer developed. Symbol-oriented queries accept `--target/-t`; `--module/-m`, `--subsystem/-s` and `--endpoint/-e` remain compatible domain aliases. |
-| `ask baseline capture\|diff\|trend` | supported | Versioned architectural metrics over time; see [`ask trend`](#ask-trend-dir--how-the-architecture-moved) |
+| `ask baseline capture\|diff\|trend\|attest` | supported | Versioned architectural metrics over time plus a bounded read-only evidence attestation; see [`ask trend`](#ask-trend-dir--how-the-architecture-moved) |
 | `ask cache status\|warm\|model\|clear\|freshness` | supported | Cache inspection; `ask cache model` states what a warm buys each command |
 | `ask config` · `ask version` · `ask activate` · `ask auth` · `ask telemetry` · `ask mcp` | supported | Configuration, version, licence, authentication, telemetry (on by default), MCP integration |
 
@@ -1770,7 +1820,7 @@ Allowed formats per command (the first is the default):
 | `impact-chain` | `json`, `yaml` | `json` |
 | `spring-audit` | `json`, `yaml`, `github-comment`, `github-actions` | `json` |
 | `prepare-context` | `json`, `github-comment` | `json` |
-| `migrate-check` | `json`, `text`, `github-actions` | `json` |
+| `migrate-check` | `json`, `text`, `github-actions`, `sarif` | `json` |
 | `explain` | `text`, `json` | `text` |
 | `pr-impact` | `json`, `text`, `github-actions` | `json` |
 | `verify` | `json`, `yaml`, `github-actions` | `json` |

sourcecode/audit_report.py

@@ -78,6 +78,7 @@ def build_audit_report(
     partial_status: "Optional[Callable[..., dict]]" = None,
     ci: bool = False,
     allow_partial: bool = False,
+    regulatory_pack: Optional[dict[str, Any]] = None,
 ) -> dict[str, Any]:
     """Build the buyer-readable audit bundle from existing command payloads.
 
@@ -151,6 +152,14 @@ def build_audit_report(
             "non_coverage": (risk.get("non_coverage") or {}).get("items", []),
         },
     }
+    if regulatory_pack is not None:
+        if regulatory_pack.get("framework") == "ENS":
+            from sourcecode.regulatory_pack import build_ens_pack
+            unsigned["regulatory_pack"] = build_ens_pack(
+                unsigned, regulatory_pack.get("metadata")
+            )
+        else:
+            unsigned["regulatory_pack"] = regulatory_pack
     unsigned["evidence_bounds"] = _evidence_bounds(
         root=root, profiles=profiles, risk=risk, posture=posture
     )
@@ -307,6 +316,17 @@ def render_markdown(report: dict[str, Any]) -> str:
         "",
         str((report.get("evidence_bounds") or {}).get("claim_rule", "")),
     ])
+    regulatory = report.get("regulatory_pack")
+    if isinstance(regulatory, dict):
+        lines.extend(["", "## Regulatory Evidence Mapping", "",
+                      str(regulatory.get("statement", "")), "",
+                      "| Control | Status | Owner | Expiry |", "|---|---|---|---|"])
+        for control in regulatory.get("controls") or []:
+            lines.append("| " + " | ".join([
+                str(control.get("control_id", "")), str(control.get("status", "")),
+                str(control.get("owner", "not declared")),
+                str(control.get("expiry", "not declared")),
+            ]) + " |")
     signature = report.get("signature")
     if isinstance(signature, dict):
         lines.extend([

sourcecode/audit_verify.py

@@ -0,0 +1,76 @@
+"""Offline verification for ASK's signed audit-report bundles."""
+
+from __future__ import annotations
+
+import hashlib
+import hmac
+import json
+from pathlib import Path
+from typing import Any
+
+from sourcecode.audit_report import AUDIT_REPORT_SCHEMA, _canonical_json
+
+VERIFICATION_SCHEMA = "audit-verification-v1"
+
+
+def verify_audit_report(report: dict[str, Any], key: bytes) -> dict[str, Any]:
+    """Return a deterministic verification verdict without inspecting a repo."""
+    signature = report.get("signature")
+    if not isinstance(signature, dict):
+        return {
+            "schema_version": VERIFICATION_SCHEMA,
+            "valid": False,
+            "reason": "missing_signature",
+        }
+
+    payload = dict(report)
+    payload.pop("signature", None)
+    canonical = _canonical_json(payload)
+    expected_hash = hashlib.sha256(canonical).hexdigest()
+    expected_signature = hmac.new(key, canonical, hashlib.sha256).hexdigest()
+    hash_matches = hmac.compare_digest(str(signature.get("payload_sha256", "")), expected_hash)
+    signature_matches = hmac.compare_digest(
+        str(signature.get("signature", "")), expected_signature
+    )
+    algorithm_matches = signature.get("algorithm") == "hmac-sha256"
+    schema_matches = payload.get("schema_version") == AUDIT_REPORT_SCHEMA
+    valid = schema_matches and algorithm_matches and hash_matches and signature_matches
+
+    result: dict[str, Any] = {
+        "schema_version": VERIFICATION_SCHEMA,
+        "valid": valid,
+        "algorithm": signature.get("algorithm"),
+        "payload_sha256": expected_hash,
+        "key_id": hashlib.sha256(key).hexdigest()[:12],
+        "checks": {
+            "schema": schema_matches,
+            "algorithm": algorithm_matches,
+            "payload_sha256": hash_matches,
+            "signature": signature_matches,
+        },
+    }
+    if isinstance(payload.get("repository"), dict):
+        result["repository"] = payload["repository"]
+    if not valid:
+        result["reason"] = "signature_mismatch"
+    return result
+
+
+def load_audit_report(path: Path) -> dict[str, Any]:
+    """Load and validate the outer JSON shape before cryptographic checks."""
+    if path.is_dir():
+        raise ValueError(f"report path is a directory: {path}")
+    try:
+        value = json.loads(path.read_text(encoding="utf-8"))
+    except OSError as exc:
+        raise ValueError(f"could not read report: {exc}") from exc
+    except json.JSONDecodeError as exc:
+        raise ValueError(f"report is not valid JSON: {exc}") from exc
+    if not isinstance(value, dict):
+        raise ValueError("report must be a JSON object")
+    if value.get("schema_version") != AUDIT_REPORT_SCHEMA:
+        raise ValueError(
+            f"unsupported report schema: {value.get('schema_version')!r}; "
+            f"expected {AUDIT_REPORT_SCHEMA!r}"
+        )
+    return value

sourcecode/baseline_attestation.py

@@ -0,0 +1,77 @@
+"""baseline_attestation.py - a bounded, read-only view of persisted history."""
+
+from __future__ import annotations
+
+from typing import Any
+
+
+SCHEMA_VERSION = "baseline-attestation-v1"
+
+
+def build_attestation(
+    trend_payload: dict[str, Any], *, kind: str, history_dir: str
+) -> dict[str, Any]:
+    """Project an existing trend into an evidence-bounded statement."""
+    status = trend_payload.get("status", "ok")
+    if status == "no_history":
+        return {
+            "schema_version": SCHEMA_VERSION,
+            "status": "no_history",
+            "kind": kind,
+            "history_dir": history_dir,
+            "claims": [],
+            "non_coverage": [
+                "No persisted captures exist; no change, duration, or trend can be asserted."
+            ],
+            "source_trend": trend_payload,
+        }
+
+    points = trend_payload.get("points") or []
+    first = points[0] if points else {}
+    last = points[-1] if points else {}
+    claims = [{
+        "claim": "persisted_history",
+        "value": True,
+        "basis": f"{trend_payload.get('schema', kind + '-trend-v1')} points",
+    }]
+    non_coverage = [
+        "This is evidence continuity, not a security or regulatory compliance verdict.",
+    ]
+    if kind == "architecture":
+        comparability = trend_payload.get("comparability") or {}
+        claims.append({
+            "claim": "series_comparable",
+            "value": comparability.get("status") == "comparable",
+            "basis": "point-to-point comparability boundaries",
+        })
+        non_coverage.append("A metric movement is not labelled improving or degrading.")
+        if comparability.get("status") != "comparable":
+            non_coverage.append(
+                "At least one transition crosses a tool or schema boundary; attribute metric movement with care."
+            )
+    else:
+        non_coverage.append(
+            "first_seen is the earliest stored capture, not the introduction date."
+        )
+
+    return {
+        "schema_version": SCHEMA_VERSION,
+        "status": "ok",
+        "kind": kind,
+        "history_dir": history_dir,
+        "captures": trend_payload.get(
+            "baseline_count", trend_payload.get("captures", len(points))
+        ),
+        "series_starts_at": {
+            "captured_at": first.get("captured_at"),
+            "commit": first.get("commit"),
+        },
+        "latest_capture": {
+            "captured_at": last.get("captured_at"),
+            "commit": last.get("commit"),
+            "tool_version": last.get("tool_version"),
+        },
+        "claims": claims,
+        "non_coverage": non_coverage,
+        "source_trend": trend_payload,
+    }

sourcecode/cache_model.py

@@ -561,6 +561,10 @@ COMMANDS: tuple[CommandCache, ...] = (
                  "Reads this build's own registries and manifest; it never "
                  "analyses a repository, so there is nothing to cache.",
                  analysis_class="core"),
+    CommandCache("remediation-report", (), "none", False,
+                 "Reads the bundled remediation ledger and build provenance; it "
+                 "analyses no repository and uses no cache layer.",
+                 analysis_class="none"),
     CommandCache("drift", ("parse", "cir"), "shared", False,
                  "Resolves the posture through the shared CIR; --against resolves "
                  "a second profile set over the same parse.",
@@ -595,6 +599,7 @@ COMMANDS: tuple[CommandCache, ...] = (
                  "repository", analysis_class="repo-wide"),
     CommandCache("selftest", ("cir", "parse"), "shared", False, "Runs the ledger's acceptance criteria by invoking other commands against this repository, so it inherits their layers — a warm makes those runs warm. It holds no cache of its own and stores nothing.", analysis_class="ir"),
     CommandCache("regress", (), "none", False, "Diffs two payload files this CLI already wrote; analyses no source, so no cache layer applies. What it reads about caching is the `cache_layers` field inside those payloads — to refuse a comparison taken under different cache states, not to use one.", analysis_class="none"),
+    CommandCache("audit-verify", (), "none", False, "Verifies one local report and key; it does not inspect a repository or use ASK analysis caches.", analysis_class="none"),
     CommandCache("trend", (), "none", False, "Reads stored baseline artifacts from disk; analyses no source, so no cache layer applies. Same command as `baseline trend`.", analysis_class="none"),
     CommandCache("baseline", ("parse",), "shared", False,
                  "`capture`/`diff`/`trend` over architectural metrics. The field figure is `capture`, "