sourcecode 5.9.0__tar.gz → 5.9.2__tar.gz

{sourcecode-5.9.0 → sourcecode-5.9.2}/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog
 
+## [5.9.2] — 2026-08-27
+
+*Commercial positioning increment: bounded agent context, reproducible cost
+measurement, source-level SARIF delivery and workspace entitlement pilot.*
+
+**Added**
+
+- `repo-ir --budget-tokens N` composes with `--since` and declares graph
+  non-coverage instead of truncating an answer.
+- `scripts/context_cost_harness.py` compares two declared task commands without
+  a shell and publishes no delta unless both sides resolve comparably.
+- `migrate-check --format sarif` emits ASK-owned migration findings with source
+  locations, provenance and non-coverage.
+- `auth workspace --enforce` provides an opt-in named-buyer pilot using the
+  existing Pro gate; advisory mode remains the default.
+
+**Documentation and validation**
+
+- README, user guide, roadmap and CLI help describe the new commercial surfaces.
+- The changes were verified against the four repositories in
+  `Documents/workspace/testing` and the focused regression batteries.
+
+## [5.9.1] — 2026-08-26
+
+*Audit correction and stress-validation patch release. The `AUD-608` fixes
+from the `5.9.0` audit are shipped and documented; command contracts now
+disclose their limits and failure boundaries.*
+
+**Fixed**
+
+- `cve` publishes that its dependency inventory comes from static manifests and
+  supported lockfiles, without implying Maven or Gradle graph resolution.
+- `pr-risk --since` reports unreadable base refs as structured execution errors
+  instead of misleading `non_coverage`.
+- `posture --diff --limit` bounds `permit_all` and effective-access evidence
+  maps while preserving unrelated `evidence` payloads.
+- Seven new command helps state their command-level analysis and memory budget
+  applicability.
+
+**Documentation and validation**
+
+- README, roadmaps and defect ledger identify `5.9.1` as the current release;
+  the `5.9.0` audit remains historical evidence.
+- Focused regression batteries pass for all four corrections. A representative
+  stress smoke test passed on seven repositories under
+  `Documents/workspace/testing` with isolated caches and clean stderr.
+
 ## [5.9.0] — 2026-08-26
 
 *The `AUD-607` external round, closed: three defects fixed and the whole feature

{sourcecode-5.9.0 → sourcecode-5.9.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.9.0
+Version: 5.9.2
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -59,7 +59,7 @@ Description-Content-Type: text/markdown
 > question. All analysis is local and deterministic; see [Privacy](#configuration--privacy)
 > before inspecting a repository whose telemetry policy you need to control.
 
-![Version](https://img.shields.io/badge/version-5.9.0-blue)
+![Version](https://img.shields.io/badge/version-5.9.2-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -122,6 +122,14 @@ the CI signal; `--allow-unverified` can change only that exit code, never the
 reported verdict. Every pack carries a manifest with component invocations,
 source evidence and content fingerprints.
 
+For agent integrations, `ask repo-ir --since <ref> --budget-tokens N` bounds the
+serialized inline answer. If the full graph does not fit, ASK returns its summary
+view and declares `token_budget.coverage: non_coverage`; it never silently truncates
+JSON. For a rerunnable cost comparison, use `scripts/context_cost_harness.py` with
+explicit `--with-ask` and `--without-ask` command templates. It executes without a
+shell and publishes a token delta only when both commands resolve and `--comparable`
+is declared.
+
 The [Product Route](docs/PRODUCT-ROUTE.md) is normative: ASK focuses on
 deterministic evidence for Java/Spring modernization and safe change. Packs
 compose existing commands; they do not hide or replace them.
@@ -188,15 +196,22 @@ set `ASK_MAX_RSS_MB=<megabytes>`; if the process exceeds it, ASK refuses the
 answer with `MEMORY_TOO_LARGE`, including the observed peak and limit. Leave it
 unset, or set it to `0`, to disable the ceiling explicitly.
 
-**Current performance status.** Release 5.9.0 retains the shared Canonical IR
+**Current performance status.** Release 5.9.2 retains the shared Canonical IR
 path used by `validation` and now passes that same CIR into labelled `data-exposure`
 runs; the no-label path remains parse-free. These are implementation properties,
 not duration promises. A controlled external warm-path audit has opened performance
 and bounded-output regressions for this release; use `ask cache model <repo>` and
 `--progress stderr` for supervised runs, and consult the
-[latest external audit intake](docs/AUDIT-2026-08-26-EXTERNAL-5.8.31.md) before
+[latest external audit intake](docs/AUDIT-2026-08-26-EXTERNAL-5.9.0.md) before
 treating a historical timing or bounded flag as a current guarantee.
 
+**CI delivery and workspace licensing.** `migrate-check --format sarif` emits
+ASK-owned migration findings with source locations and provenance; it does not
+re-emit imported scanner findings. `ask auth workspace <repo>...` previews the
+aggregate Java entitlement. `--enforce` is an opt-in named-buyer pilot that reuses
+the existing Pro gate; advisory mode remains the default and no billing is
+performed by the CLI.
+
 **What a warm actually covers.** `ask cache warm` rebuilds the declared root views and their
 shared structural layers (L1/L2 + the Repository Intelligence Snapshot + the shared Canonical
 IR). Pass `--views compact` or `--views compact,agent` to warm only selected views; without
@@ -222,7 +237,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.9.0 — and, on a build that has aged,
+ask version                    # ask 5.9.2 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 
@@ -506,27 +521,28 @@ from it.
 | `posture` | supported | which beans a profile set wires, and how effective endpoint access differs between two sets | the most differentiated capability here. `--resolve-environments` says which set the repository decides; `--profile-from <file>` reads the artefact that actually decides it (Kubernetes manifest, compose file, deployment plan, `Dockerfile`, dotenv) and answers under that set, with the `file:line` — deciding nothing leaves the verdict untouched |
 | `risk` | supported | what each defect actually costs, once reach, access, write effect and the shape of the input path are in it | `defect_severity × reachability × auth_verdict × write_effect × query_construction × input_constraints`; every factor names its authority; the `query_construction` factor covers MyBatis `${}` splicing with a three-state verdict (`reaches` / `does_not_reach` / `undecidable`) and publishes the census; `--table --rule SEC-008 --band high --top-n 20` gives audit triage without `jq` |
 | `enrich` | experimental | another scanner's SARIF findings, ranked by what this repository does with them | `--sarif <log>`; same composition as `risk`, with `--table --rule <id> --band high --top-n 20` for triage |
-| `audit-report` | supported | human audit bundle over existing `risk` + `posture` evidence, optionally signed | includes `evidence_manifest` claim provenance; `--format markdown`; `--sign-key <file>` signs canonical JSON with HMAC-SHA256 |
+| `audit-report` | supported | human audit bundle over existing `risk` + `posture` evidence, optionally signed | includes `evidence_manifest` claim provenance; `--format markdown`; `--sign-key <file>` signs canonical JSON with HMAC-SHA256; `--pack ens` adds a technical ENS control matrix |
+| `audit-verify` | supported | offline verification of a signed `audit-report` bundle | recomputes the canonical payload and HMAC-SHA256; returns `valid: true/false` and a CI-friendly exit code without re-running the audit |
 | `migrate-recipe` | supported | the migration report as the OpenRewrite recipe that applies it | only recipes a finding named; the manual remainder published beside them; writes nothing without `--write`, and never a runnable command for an empty recipe list |
 | `migrate-apply` | supported | apply a measured recipe without touching the main tree | Maven and Gradle executors; plan by default; `--write` requires clean Git, pinned version and isolated worktree; no automatic commit or merge |
 | `data-exposure` | supported | which routes can carry the data you labelled, and who reaches them | labels declared in `sourcecode.config.json` — never inferred from a name; `signature` and `call_reach` evidence published apart, field-level flow out of scope (NC-008). With nothing declared, `ask data-exposure /path/to/repo` answers `answered: false` and hands back the file, the key and an example to declare — it never reports zero exposed routes |
 | `data-exposure --init` | supported | generate review-only label candidates | writes only `.ask/data-label-candidates-v1.json` with `status: proposed_only`; it never activates labels |
 | `endpoints` | core | every REST endpoint, effective path, security policy, confidence | Spring MVC + JAX-RS (~65 % recall on JAX-RS sub-resource locators). `--compact` answers the exposure census without the rows; `--servlets` lists the servlet-mounted surface as its own population; `--client-usage` says which routes the TS/JS client in this repository actually calls; `--consumer <repo>` (repeatable) joins the routes against consumers in **other** repositories — TypeScript/JS and Java — and turns the census into a surface-reduction plan: open and called (fix now), open and called by nobody (delete rather than guard), and calls this server serves no route for |
 | `spring-audit` | core | transactional anomalies + security configuration/exposure + validation gaps | `--ci`, `-f github-comment`, or `-f github-actions` for native CI annotations; `--table --rule SEC-008 --top-n 20` for human-scale review. Every run inventories its own rules — `rules_run`, `rules_not_run`, `rules_partially_run`, `rules_run_count`/`rules_total` — so "all of them" is a fact, not an assumption |
-| `migrate-check` | core | Boot 2→3 readiness + Java LTS/licensing inventory: located blockers, per-dimension score, effort, detected Java 8/11/17/21/25 evidence and explicit licensing-review signals | `--target-jdk 25` sets the target LTS route; `--blast-radius` orders the re-test plan; `--format github-actions` emits a stable CI annotation; `--table --rule MIG-001 --band critical --top-n 20` for blocker triage |
+| `migrate-check` | core | Boot 2→3 readiness + Java LTS/licensing inventory: located blockers, per-dimension score, effort, detected Java 8/11/17/21/25 evidence and explicit licensing-review signals | `--target-jdk 25` sets the target LTS route; `--blast-radius` orders the re-test plan; `--format github-actions` emits a stable CI annotation; `--format sarif` emits located ASK-owned findings; `--table --rule MIG-001 --band critical --top-n 20` for blocker triage |
 | `impact` / `impact-chain` | core | blast radius of a change, to the endpoints it reaches | target the **interface**, not the `Impl` |
 | `pr-impact` | core | the same, scoped to a PR diff | local `git diff HEAD`, `--since REF`, explicit `--files`, or opt-in `--pr NUMBER`; `--format github-actions` emits CI annotations; `--fail-on` gates |
 | `verify` | core | does the repo satisfy its declared contracts, **relative to a baseline** | `.ask/contracts.yml`; `--format github-actions` emits a native CI annotation while preserving exit 0/1/2. `.ask/waivers.yml` adjudicates a finding as *not a defect here* (stable id + required reason, optional expiry) so a reviewed row stops holding the gate red — a baseline records accepted debt, a waiver says it was never a defect |
 | `verify-edit` | supported | did the working-tree edits change runtime behaviour | semantic diff gate for the edit loop |
 | `--compact` / `--agent` | — | bounded structural context for an agent | flags of the root command, not commands: not tiered |
 | `onboard` / `explain` / `cold-start` | supported | orientation in an unfamiliar repo; per-class summary; bootstrap snapshot | `onboard` publishes `population`, `population_unit` and `population_total` for its source-file universe |
-| `export` / `repo-ir` / `schema` | supported | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | `export --c4 --render mermaid\|svg` **draws** the model instead of only emitting it — presentation over the same payload, with the node cap written on the canvas |
+| `export` / `repo-ir` / `schema` | supported | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | `export --c4 --render mermaid\|svg` **draws** the model instead of only emitting it; `repo-ir --since REF --budget-tokens N` provides bounded, deterministic agent context |
 | `modernize` | supported | coupling hubs, cycles, dead zones, refactor candidates | |
 | `review-pr` / `fix-bug` / `prepare-context` | supported | diff review, symptom triage, task-shaped context | |
 | `plan` / `compare` / `delta` / `contract-diff` | supported | what to review for a change; candidates by measured cost; outcome of a change; public-contract break | no verdicts, measured cost only |
 | `validation` | supported | request-body validation coverage and gaps | |
-| `baseline capture\|diff` · `trend` | supported | versioned architectural metrics over time — and, with `--kind findings`, the **defect population** as a series, so "open since 5.8.28" is answerable without anybody keeping the tally (`first_seen` is the earliest STORED capture, and the payload says so); `ask trend .` reads the series (a repository path or a baselines directory), `ask baseline diff .` compares the tree against its newest point | trend reporting, not gating. Baselines land in `.ask/baselines` **inside the repository** — the history travels with the code, not with a vendor; an audit that must not write passes `--dir`. `capture --auto` is the unattended form (one baseline per commit, never rewrites one, never fails the build) — automate it: [baseline-ci.yml](docs/baseline-ci.yml) |
-| `cve` | supported | which dependency advisories a route can actually **reach** — not which are on the classpath | reads a **local** OSV feed (`--feed`); takes no network at analysis time, so a CI gate can never pass because a fetch timed out. Four verdicts: `reachable` (with the routes), `imported_not_exposed`, `not_observed` and `unknown`. Nothing answers *"not reachable"* — reflection, SPI loading and container wiring reach code no source edge names — and an unresolved Maven version is `unknown`, never `not_affected`. Feed staleness is read off the feed's own dates |
+| `baseline capture\|diff\|trend\|attest` | supported | versioned architectural metrics over time, findings history and a bounded read-only evidence attestation (`baseline-attestation-v1`) with explicit comparability and non-coverage | trend reporting and evidence continuity, not gating or legal compliance. Baselines land in `.ask/baselines` **inside the repository** or an external `--dir`; automate capture with [baseline-ci.yml](docs/baseline-ci.yml) |
+| `cve` | supported | which dependency advisories a route can actually **reach** — not which are on the classpath | reads a **local** OSV feed (`--feed`) and optional local VEX statements (`--vex`); VEX is matched exactly and annotates `accepted_by_vex` without changing reachability; takes no network at analysis time |
 | `intent` | supported | a plain-language question, resolved to the typed `retrieve` query that answers it | `ask intent "what breaks if I change OrderService?"`. A scored lexical match against a declared vocabulary — **no model, no generation** — so it resolves identically on every machine. It selects a query and prints it; `--run` executes it. A question fitting two intents too closely is refused with both named, because a well-formed answer to a question you did not ask is invisible once printed |
 | `remediate` | supported | the loop from a finding to a **verified** change | audit → recipe → apply in a dedicated worktree → `verify-edit`. Dry by default. Most findings are not mechanical and the plan says which and why; an apply that could not be verified reports `unverified`, never `applied` |
 | `pr-risk` | supported | one verdict for **this diff** — does the change make things worse? | `pack gate` answers about the repository; this answers about the change. Joins `pr-impact` reach, endpoint access, the shared risk model and CODEOWNERS. `--since` differences route inventories so `new_endpoints` is a fact rather than a guess. A changed file that maps to no class caps the verdict at `UNKNOWN`, which fails every gate — a partial blast radius is not a small one |

{sourcecode-5.9.0 → sourcecode-5.9.2}/README.md

@@ -10,7 +10,7 @@
 > question. All analysis is local and deterministic; see [Privacy](#configuration--privacy)
 > before inspecting a repository whose telemetry policy you need to control.
 
-![Version](https://img.shields.io/badge/version-5.9.0-blue)
+![Version](https://img.shields.io/badge/version-5.9.2-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -73,6 +73,14 @@ the CI signal; `--allow-unverified` can change only that exit code, never the
 reported verdict. Every pack carries a manifest with component invocations,
 source evidence and content fingerprints.
 
+For agent integrations, `ask repo-ir --since <ref> --budget-tokens N` bounds the
+serialized inline answer. If the full graph does not fit, ASK returns its summary
+view and declares `token_budget.coverage: non_coverage`; it never silently truncates
+JSON. For a rerunnable cost comparison, use `scripts/context_cost_harness.py` with
+explicit `--with-ask` and `--without-ask` command templates. It executes without a
+shell and publishes a token delta only when both commands resolve and `--comparable`
+is declared.
+
 The [Product Route](docs/PRODUCT-ROUTE.md) is normative: ASK focuses on
 deterministic evidence for Java/Spring modernization and safe change. Packs
 compose existing commands; they do not hide or replace them.
@@ -139,15 +147,22 @@ set `ASK_MAX_RSS_MB=<megabytes>`; if the process exceeds it, ASK refuses the
 answer with `MEMORY_TOO_LARGE`, including the observed peak and limit. Leave it
 unset, or set it to `0`, to disable the ceiling explicitly.
 
-**Current performance status.** Release 5.9.0 retains the shared Canonical IR
+**Current performance status.** Release 5.9.2 retains the shared Canonical IR
 path used by `validation` and now passes that same CIR into labelled `data-exposure`
 runs; the no-label path remains parse-free. These are implementation properties,
 not duration promises. A controlled external warm-path audit has opened performance
 and bounded-output regressions for this release; use `ask cache model <repo>` and
 `--progress stderr` for supervised runs, and consult the
-[latest external audit intake](docs/AUDIT-2026-08-26-EXTERNAL-5.8.31.md) before
+[latest external audit intake](docs/AUDIT-2026-08-26-EXTERNAL-5.9.0.md) before
 treating a historical timing or bounded flag as a current guarantee.
 
+**CI delivery and workspace licensing.** `migrate-check --format sarif` emits
+ASK-owned migration findings with source locations and provenance; it does not
+re-emit imported scanner findings. `ask auth workspace <repo>...` previews the
+aggregate Java entitlement. `--enforce` is an opt-in named-buyer pilot that reuses
+the existing Pro gate; advisory mode remains the default and no billing is
+performed by the CLI.
+
 **What a warm actually covers.** `ask cache warm` rebuilds the declared root views and their
 shared structural layers (L1/L2 + the Repository Intelligence Snapshot + the shared Canonical
 IR). Pass `--views compact` or `--views compact,agent` to warm only selected views; without
@@ -173,7 +188,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.9.0 — and, on a build that has aged,
+ask version                    # ask 5.9.2 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 
@@ -457,27 +472,28 @@ from it.
 | `posture` | supported | which beans a profile set wires, and how effective endpoint access differs between two sets | the most differentiated capability here. `--resolve-environments` says which set the repository decides; `--profile-from <file>` reads the artefact that actually decides it (Kubernetes manifest, compose file, deployment plan, `Dockerfile`, dotenv) and answers under that set, with the `file:line` — deciding nothing leaves the verdict untouched |
 | `risk` | supported | what each defect actually costs, once reach, access, write effect and the shape of the input path are in it | `defect_severity × reachability × auth_verdict × write_effect × query_construction × input_constraints`; every factor names its authority; the `query_construction` factor covers MyBatis `${}` splicing with a three-state verdict (`reaches` / `does_not_reach` / `undecidable`) and publishes the census; `--table --rule SEC-008 --band high --top-n 20` gives audit triage without `jq` |
 | `enrich` | experimental | another scanner's SARIF findings, ranked by what this repository does with them | `--sarif <log>`; same composition as `risk`, with `--table --rule <id> --band high --top-n 20` for triage |
-| `audit-report` | supported | human audit bundle over existing `risk` + `posture` evidence, optionally signed | includes `evidence_manifest` claim provenance; `--format markdown`; `--sign-key <file>` signs canonical JSON with HMAC-SHA256 |
+| `audit-report` | supported | human audit bundle over existing `risk` + `posture` evidence, optionally signed | includes `evidence_manifest` claim provenance; `--format markdown`; `--sign-key <file>` signs canonical JSON with HMAC-SHA256; `--pack ens` adds a technical ENS control matrix |
+| `audit-verify` | supported | offline verification of a signed `audit-report` bundle | recomputes the canonical payload and HMAC-SHA256; returns `valid: true/false` and a CI-friendly exit code without re-running the audit |
 | `migrate-recipe` | supported | the migration report as the OpenRewrite recipe that applies it | only recipes a finding named; the manual remainder published beside them; writes nothing without `--write`, and never a runnable command for an empty recipe list |
 | `migrate-apply` | supported | apply a measured recipe without touching the main tree | Maven and Gradle executors; plan by default; `--write` requires clean Git, pinned version and isolated worktree; no automatic commit or merge |
 | `data-exposure` | supported | which routes can carry the data you labelled, and who reaches them | labels declared in `sourcecode.config.json` — never inferred from a name; `signature` and `call_reach` evidence published apart, field-level flow out of scope (NC-008). With nothing declared, `ask data-exposure /path/to/repo` answers `answered: false` and hands back the file, the key and an example to declare — it never reports zero exposed routes |
 | `data-exposure --init` | supported | generate review-only label candidates | writes only `.ask/data-label-candidates-v1.json` with `status: proposed_only`; it never activates labels |
 | `endpoints` | core | every REST endpoint, effective path, security policy, confidence | Spring MVC + JAX-RS (~65 % recall on JAX-RS sub-resource locators). `--compact` answers the exposure census without the rows; `--servlets` lists the servlet-mounted surface as its own population; `--client-usage` says which routes the TS/JS client in this repository actually calls; `--consumer <repo>` (repeatable) joins the routes against consumers in **other** repositories — TypeScript/JS and Java — and turns the census into a surface-reduction plan: open and called (fix now), open and called by nobody (delete rather than guard), and calls this server serves no route for |
 | `spring-audit` | core | transactional anomalies + security configuration/exposure + validation gaps | `--ci`, `-f github-comment`, or `-f github-actions` for native CI annotations; `--table --rule SEC-008 --top-n 20` for human-scale review. Every run inventories its own rules — `rules_run`, `rules_not_run`, `rules_partially_run`, `rules_run_count`/`rules_total` — so "all of them" is a fact, not an assumption |
-| `migrate-check` | core | Boot 2→3 readiness + Java LTS/licensing inventory: located blockers, per-dimension score, effort, detected Java 8/11/17/21/25 evidence and explicit licensing-review signals | `--target-jdk 25` sets the target LTS route; `--blast-radius` orders the re-test plan; `--format github-actions` emits a stable CI annotation; `--table --rule MIG-001 --band critical --top-n 20` for blocker triage |
+| `migrate-check` | core | Boot 2→3 readiness + Java LTS/licensing inventory: located blockers, per-dimension score, effort, detected Java 8/11/17/21/25 evidence and explicit licensing-review signals | `--target-jdk 25` sets the target LTS route; `--blast-radius` orders the re-test plan; `--format github-actions` emits a stable CI annotation; `--format sarif` emits located ASK-owned findings; `--table --rule MIG-001 --band critical --top-n 20` for blocker triage |
 | `impact` / `impact-chain` | core | blast radius of a change, to the endpoints it reaches | target the **interface**, not the `Impl` |
 | `pr-impact` | core | the same, scoped to a PR diff | local `git diff HEAD`, `--since REF`, explicit `--files`, or opt-in `--pr NUMBER`; `--format github-actions` emits CI annotations; `--fail-on` gates |
 | `verify` | core | does the repo satisfy its declared contracts, **relative to a baseline** | `.ask/contracts.yml`; `--format github-actions` emits a native CI annotation while preserving exit 0/1/2. `.ask/waivers.yml` adjudicates a finding as *not a defect here* (stable id + required reason, optional expiry) so a reviewed row stops holding the gate red — a baseline records accepted debt, a waiver says it was never a defect |
 | `verify-edit` | supported | did the working-tree edits change runtime behaviour | semantic diff gate for the edit loop |
 | `--compact` / `--agent` | — | bounded structural context for an agent | flags of the root command, not commands: not tiered |
 | `onboard` / `explain` / `cold-start` | supported | orientation in an unfamiliar repo; per-class summary; bootstrap snapshot | `onboard` publishes `population`, `population_unit` and `population_total` for its source-file universe |
-| `export` / `repo-ir` / `schema` | supported | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | `export --c4 --render mermaid\|svg` **draws** the model instead of only emitting it — presentation over the same payload, with the node cap written on the canvas |
+| `export` / `repo-ir` / `schema` | supported | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | `export --c4 --render mermaid\|svg` **draws** the model instead of only emitting it; `repo-ir --since REF --budget-tokens N` provides bounded, deterministic agent context |
 | `modernize` | supported | coupling hubs, cycles, dead zones, refactor candidates | |
 | `review-pr` / `fix-bug` / `prepare-context` | supported | diff review, symptom triage, task-shaped context | |
 | `plan` / `compare` / `delta` / `contract-diff` | supported | what to review for a change; candidates by measured cost; outcome of a change; public-contract break | no verdicts, measured cost only |
 | `validation` | supported | request-body validation coverage and gaps | |
-| `baseline capture\|diff` · `trend` | supported | versioned architectural metrics over time — and, with `--kind findings`, the **defect population** as a series, so "open since 5.8.28" is answerable without anybody keeping the tally (`first_seen` is the earliest STORED capture, and the payload says so); `ask trend .` reads the series (a repository path or a baselines directory), `ask baseline diff .` compares the tree against its newest point | trend reporting, not gating. Baselines land in `.ask/baselines` **inside the repository** — the history travels with the code, not with a vendor; an audit that must not write passes `--dir`. `capture --auto` is the unattended form (one baseline per commit, never rewrites one, never fails the build) — automate it: [baseline-ci.yml](docs/baseline-ci.yml) |
-| `cve` | supported | which dependency advisories a route can actually **reach** — not which are on the classpath | reads a **local** OSV feed (`--feed`); takes no network at analysis time, so a CI gate can never pass because a fetch timed out. Four verdicts: `reachable` (with the routes), `imported_not_exposed`, `not_observed` and `unknown`. Nothing answers *"not reachable"* — reflection, SPI loading and container wiring reach code no source edge names — and an unresolved Maven version is `unknown`, never `not_affected`. Feed staleness is read off the feed's own dates |
+| `baseline capture\|diff\|trend\|attest` | supported | versioned architectural metrics over time, findings history and a bounded read-only evidence attestation (`baseline-attestation-v1`) with explicit comparability and non-coverage | trend reporting and evidence continuity, not gating or legal compliance. Baselines land in `.ask/baselines` **inside the repository** or an external `--dir`; automate capture with [baseline-ci.yml](docs/baseline-ci.yml) |
+| `cve` | supported | which dependency advisories a route can actually **reach** — not which are on the classpath | reads a **local** OSV feed (`--feed`) and optional local VEX statements (`--vex`); VEX is matched exactly and annotates `accepted_by_vex` without changing reachability; takes no network at analysis time |
 | `intent` | supported | a plain-language question, resolved to the typed `retrieve` query that answers it | `ask intent "what breaks if I change OrderService?"`. A scored lexical match against a declared vocabulary — **no model, no generation** — so it resolves identically on every machine. It selects a query and prints it; `--run` executes it. A question fitting two intents too closely is refused with both named, because a well-formed answer to a question you did not ask is invisible once printed |
 | `remediate` | supported | the loop from a finding to a **verified** change | audit → recipe → apply in a dedicated worktree → `verify-edit`. Dry by default. Most findings are not mechanical and the plan says which and why; an apply that could not be verified reports `unverified`, never `applied` |
 | `pr-risk` | supported | one verdict for **this diff** — does the change make things worse? | `pack gate` answers about the repository; this answers about the change. Joins `pr-impact` reach, endpoint access, the shared risk model and CODEOWNERS. `--since` differences route inventories so `new_endpoints` is a fact rather than a guess. A changed file that maps to no class caps the verdict at `UNKNOWN`, which fails every gate — a partial blast radius is not a small one |

{sourcecode-5.9.0 → sourcecode-5.9.2}/docs/AUDIT-2026-08-26-EXTERNAL-5.8.32.md

@@ -10,6 +10,13 @@ This note separates reproduced defects from unreproduced claims, inconclusive
 measurements and feature intake, per the ledger's maintenance rule: no row is
 closed from a report alone, and no row is dismissed from a report alone.
 
+> **Historical snapshot.** The subsequent `5.9.0` reconciliation identified an
+> effective-access payload shape not covered by this note's posture test, so
+> its `AUD-607-O01` non-reproduction is superseded by `AUD-608-O01`. Its
+> `cache warm` exit-143 observation was rejected after controlled runs found an
+> external 120-second timeout. See
+> [`AUDIT-2026-08-26-EXTERNAL-5.9.0.md`](AUDIT-2026-08-26-EXTERNAL-5.9.0.md).
+
 ## Executive Result
 
 The reverification round confirms **five findings still closed on their third or

sourcecode-5.9.2/docs/AUDIT-2026-08-26-EXTERNAL-5.9.0.md

@@ -0,0 +1,98 @@
+# External Audit - 5.9.0
+
+**Received:** 2026-08-26  
+**Audited revision:** `b4c3691c4110d863fedcd54a61a08fd2997e400c` (`5.9.0`)  
+**Method:** external findings reconciled against the released source tree
+
+## Result
+
+This is `AUD-608`. The report is not adopted verbatim: each item below records
+the result of source-level reconciliation and the action justified by it.
+
+## Confirmed defects
+
+### AUD-608-C01 - `cve` does not disclose inventory coverage
+
+**Priority:** P1  
+**Status:** closed in `fe1f624`
+
+`ask cve` builds its inventory from static dependency analysis; it does not
+resolve a Maven or Gradle dependency graph. A vulnerable transitive component
+absent from that inventory can therefore be indistinguishable from no matching
+advisory. Individual match records may contain scope, but the top-level result
+and `--help` do not disclose the inventory coverage.
+
+**Required correction:** publish inventory scope and non-coverage in output and
+help; do not imply resolved transitive coverage without an explicitly declared
+resolved-graph mode; add manifest-versus-resolved fixtures.
+
+### AUD-608-P01 - `pr-risk --since` hides an execution error as non-coverage
+
+**Priority:** P1  
+**Status:** closed in `b479465`
+
+The `--since` path uses `ContextGraph` without importing it. A broad exception
+handler turns the resulting `NameError` into `non_coverage`, then states that
+the comparison was not requested. This is an execution failure, not an
+analytical limitation.
+
+**Required correction:** construct the base context correctly; return genuine
+base-materialisation failures as structured errors; keep
+`new_endpoints_basis` consistent with invocation and result; test both a valid
+`--since` comparison and an unreadable base.
+
+### AUD-608-O01 - effective-access branches bypass `posture --diff --limit`
+
+**Priority:** P2  
+**Status:** closed in `5f8a50b`
+
+`POSTURE_BOUNDED_LISTS` omits `permit_all`, while the shared helper bounds only
+list values. Effective-access `evidence` is a dictionary and also bypasses the
+cap. This is a real output-bounding gap in a diff shape absent from the earlier
+reproduction.
+
+**Required correction:** bound `permit_all` and bounded dictionaries, or
+normalise them before the shared pass; exercise every list and map branch from
+the public CLI; verify emitted bytes and estimated size fall under `--limit`.
+
+## Carried documentation item
+
+### AUD-607-U01 - new command help does not state budget-policy applicability
+
+**Priority:** P3  
+**Status:** closed in `19811ac`
+
+The helpers for `cve`, `drift`, `intent`, `pr-risk`, `remediate`,
+`self-audit`, and `watch` expose generic ceilings but do not say whether
+analysis or memory budgets apply. Help must state the applicable policy or
+explicit non-applicability from the command registry.
+
+## Rejected or follow-up observations
+
+### AUD-607-U02 - `cache warm` exit 143
+
+**Status:** not reproduced
+
+The apparent failure was an external 120-second wrapper timeout. Controlled
+runs with sufficient time completed successfully; no cache defect is tracked.
+
+### AUD-608-C02 - UTF-8 mojibake reported for `chunk-file`
+
+**Status:** external reproduction required
+
+The released reader explicitly uses UTF-8 and serialises Unicode text; the
+reported default-encoding cause is absent from source. Retain a platform/output
+transport follow-up only until raw UTF-8 input and raw CLI output prove a
+mismatch.
+
+The cache-warm timing and compact empty-output reports are also rejected as
+timeout artefacts after the audit's later controlled measurements.
+
+## Reconciliation
+
+- The audit revision is the current release revision, so these findings apply
+  to shipped `5.9.0` code.
+- `AUD-608-O01` supersedes the earlier `AUD-607-O01` non-reproduction: the new
+  evidence identifies a previously untested effective-access payload shape.
+- Previous closures remain closed unless a new public reproduction contradicts
+  them.

{sourcecode-5.9.0 → sourcecode-5.9.2}/docs/CACHE.md

@@ -137,6 +137,7 @@ The second anchor is the field one, and it carries its own build for the same re
 | `chunk-file` | nothing | not timed | no | — | Reads one file; nothing to cache. |
 | `intent` | nothing | not timed | no | — | Resolving a question is a string operation over a declared vocabulary; only --run reaches the retrieval engine. |
 | `self-audit` | nothing | not timed | no | — | Reads this build's own registries and manifest; it never analyses a repository, so there is nothing to cache. |
+| `remediation-report` | nothing | not timed | no | — | Reads the bundled remediation ledger and build provenance; it analyses no repository and uses no cache layer. |
 | `drift` | the shared work | not timed | no | `parse`, `cir` | Resolves the posture through the shared CIR; --against resolves a second profile set over the same parse. |
 | `watch` | the shared work | not timed | yes | `parse`, `cir` | Warms once, then answers each save against the warm IR — the reason a per-save question is affordable at all. |
 | `pr-risk` | the shared work | not timed | no | `parse`, `cir` | Reuses the shared CIR for the blast radius; --since builds a second IR over the base tree, which is not cached. |
@@ -147,6 +148,7 @@ The second anchor is the field one, and it carries its own build for the same re
 | `explain-endpoint` | the shared work | not measured on the battery yet — bounded by `endpoints` on the same repository | yes | `cir`, `parse` | Builds the repository IR to answer about ONE route, so the warm it shares with `endpoints` and `posture` is the whole difference between a question you ask once and a question you ask twenty times. |
 | `selftest` | the shared work | not timed | no | `cir`, `parse` | Runs the ledger's acceptance criteria by invoking other commands against this repository, so it inherits their layers — a warm makes those runs warm. It holds no cache of its own and stores nothing. |
 | `regress` | nothing | not timed | no | — | Diffs two payload files this CLI already wrote; analyses no source, so no cache layer applies. What it reads about caching is the `cache_layers` field inside those payloads — to refuse a comparison taken under different cache states, not to use one. |
+| `audit-verify` | nothing | not timed | no | — | Verifies one local report and key; it does not inspect a repository or use ASK analysis caches. |
 | `trend` | nothing | not timed | no | — | Reads stored baseline artifacts from disk; analyses no source, so no cache layer applies. Same command as `baseline trend`. |
 | `baseline` | the shared work | capture 8.7 s → 3.6 s | no | `parse` | `capture`/`diff`/`trend` over architectural metrics. The field figure is `capture`, the subcommand that analyses; `trend` reads stored artifacts and has its own row. |
 | `retrieve` | the shared work | not timed | no | `cir`, `parse` | Every query builds or reuses the shared CIR a warm builds. |

{sourcecode-5.9.0 → sourcecode-5.9.2}/docs/DEFECT-LEDGER.md

@@ -16,6 +16,23 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
+**External `5.9.0` audit received, 2026-08-26 - `AUD-608`; corrections shipped in `5.9.1`.** The audited
+revision is the released `5.9.0` commit. The three confirmed corrections are
+closed: `AUD-608-C01` (P1, `cve` now declares its static inventory scope,
+`fe1f624`), `AUD-608-P01` (P1, `pr-risk --since` returns structured base-ref
+errors, `b479465`), and `AUD-608-O01` (P2, `posture --diff --limit` bounds
+`permit_all` plus effective-access evidence maps, `5f8a50b`). `AUD-607-U01`
+is also closed (`19811ac`): the seven new command helps state budget-policy
+non-applicability. `AUD-607-U02` is
+withdrawn after controlled runs showed an external 120-second timeout;
+`AUD-608-C02` (reported UTF-8 mojibake in `chunk-file`) remains a platform
+reproduction follow-up because the released reader is explicitly UTF-8.
+
+The new effective-access evidence supersedes the prior `AUD-607-O01`
+non-reproduction: that check did not exercise the payload shape now identified.
+Historical records below remain snapshots. Full evidence is in
+[`AUDIT-2026-08-26-EXTERNAL-5.9.0.md`](AUDIT-2026-08-26-EXTERNAL-5.9.0.md).
+
 **External `5.8.32` audit received, 2026-08-26 — `AUD-607`.** Two independent
 reports ([`AUDIT-2026-08-26-EXTERNAL-5.8.32.md`](AUDIT-2026-08-26-EXTERNAL-5.8.32.md)):
 a reverification round (9.7/10) and a comparison round against `5.8.31` (8/10).

{sourcecode-5.9.0 → sourcecode-5.9.2}/docs/DEVELOPMENT-ROADMAP.md

@@ -3,7 +3,21 @@
 *Chief-engineer development record. This is the internal, dev-facing counterpart to the
 customer-facing `docs/EXECUTIVE-ROADMAP.md`.*
 
-> **CURRENT QUEUE — release `5.9.0`, following two external audits of `5.8.32`, received 2026-08-26 (`AUD-607`).**
+> **CURRENT QUEUE — release `5.9.2`; external reconciliation `AUD-608` is implemented.**
+> `AUD-608-C01` is closed in `fe1f624`: `cve` declares static
+> dependency-inventory coverage and non-coverage. `AUD-608-P01` is closed in
+> `b479465`: `pr-risk --since` constructs its base context and surfaces failures
+> as structured errors. `AUD-608-O01` is closed in `5f8a50b`: all
+> effective-access branches in `posture --diff` are bounded and covered by
+> byte-size tests. `AUD-607-U01` is closed in `19811ac`: seven command helps
+> state analysis and memory budget non-applicability. `AUD-607-U02` is closed as a
+> 120-second external timeout artefact. The reported `chunk-file` mojibake is
+> follow-up only until a raw platform reproduction proves a Unicode mismatch.
+> The earlier `AUD-607-O01` non-reproduction did not cover the newly identified
+> effective-access shape and is superseded. Full evidence is in
+> [`AUDIT-2026-08-26-EXTERNAL-5.9.0.md`](AUDIT-2026-08-26-EXTERNAL-5.9.0.md).
+
+> **Historical queue — release `5.9.0`, following two external audits of `5.8.32`, received 2026-08-26 (`AUD-607`).**
 > A reverification round (9.7/10) and a comparison round against `5.8.31` (8/10). **No regression reported by either round**;
 > six previously closed findings hold on their third or fourth consecutive re-check.
 > `AUD-607-C01` (P1, `chunk-file` chunk content did not match its own declared `start_line`/`end_line`; reproduction found
@@ -84,6 +98,7 @@ aspirations: each is asserted by that row's tests.
 | `AUD-607-X07` | P3 | Stored finding baselines across releases. | `ask baseline capture/diff/trend --kind findings` (`findings-baseline-v1`) | **Implemented (`55b93c2`).** The same store as the architectural series, prefixed so neither reads the other's documents. `first_seen` is the earliest STORED capture and the payload says so. A rename is published as one resolved and one new. |
 | `AUD-607-X08` | P3 | Environment drift alerting. | `ask drift` (`access-drift-v1`) | **Implemented (`6463fdf`).** One arithmetic for both axes (time and environment), so the two answers cannot disagree. `newly_unmatched` and `newly_matched` are separate buckets; a `removed` route is never reported as having become safe. |
 | `AUD-607-X09` | P3 | `self-audit` — run ASK against its own build. | `ask self-audit` (`self-audit-v1`) | **Implemented (`f1fa913`), with its "not recommended" reason shipped inside the payload.** The semantic engine does not apply to Python source, so those figures are absent and declared rather than reported as zeros. What it does check — cache model, format contract, schema registry and output affordances over the INSTALLED build — found a real drift on its first run. |
+| `ASK-COM-01` | P1 | Continuous evidence attestation over persisted baseline history. | `ask baseline attest` (`baseline-attestation-v1`) | **Implemented.** Read-only projection of architecture or findings trend; publishes capture boundaries, latest commit, comparability and explicit non-coverage. It never claims legal compliance, improvement, or a clean zero without history. |
 
 ### Explicitly Rejected
 
@@ -663,12 +678,17 @@ Java file, ~500 MB per 24 000-file repository), which is a sizing document and a
 **What blocks `S-18` is `S-27`, and no memo saw it.** The row below is the reason `fleet`
 moves ahead of everything except `S-23`.
 
+**S-27 measurement increment shipped:** `ask auth workspace <repo>...` now publishes
+`workspace-entitlement-v1` with unique repository count, aggregate Java population and
+an explicit `advisory_only` policy status. It does not alter the existing per-repository
+gate; entitlement enforcement remains pending named-buyer validation.
+
 | # | Row | Mechanism | Done when |
 |---|---|---|---|
-| `S-27` | **The licence axis cannot charge the buyer the product is being built for** ⭐ — `P-13` | `is_large_repo()` counts Java files **per repository path** against `_FREE_REPO_JAVA_FILE_LIMIT = 500` (`license.py:121`, `:521`), and the only other axis is the `delta` automation quota (`:267`). An organisation of 40 microservices at 300 Java files each crosses no threshold on any repository and **pays nothing**. That is precisely the buyer the third memo identifies correctly — flota, defendibilidad, *"how many unauthenticated routes does my organisation have"* — so the product's own price model excludes it. This is not a pricing preference: it is a measured contradiction between the gate in `license.py` and the route in `PRODUCT-ROUTE.md` | An axis that can charge an organisation — repository count, or a fleet manifest, or seats over a workspace — declared in `license.entitlement()` with `when_it_changes` saying what it costs, exactly as `P-2` established for the existing axis. **Not** by lowering the per-repo threshold, which would start charging the users the current rule deliberately leaves free. Acceptance: a fixture workspace of N small repositories reaches the same entitlement decision as one large repository of the same total size, or the difference is published as a stated product decision rather than an accident of the counter |
-| `S-28` ◑ | **SARIF out — the findings reach the tab the developer already reads** — **first safe increment in `17fe1ca`**: `ask pack gate --format sarif` emits SARIF 2.1.0 decision diagnostics from the gate manifest only. A BLOCK/UNVERIFIED component becomes a locationless result with its component, status and exit code; a PASS emits nothing. This is deliberately narrower than an audit-finding export: no source location is invented and no component payload is re-emitted. | The schema was already in the house: `sarif.py` parses SARIF 2.1.0 for `enrich`, with severity mapping, location resolution and an `unresolved` list that names why a result could not be placed. The implemented gate channel reaches CI without presenting imported findings as ASK discoveries. **Remaining:** source-level exports for commands that own a finding population, with a round-trip assertion over their locations and non-coverage. A result that arrived through `enrich` stays attributed to the tool that found it and is never re-emitted as ASK's own: the enrichment is the reachability, not the detection (`NC-001`, `NC-002`). |
-| `S-29` | **The remediation record becomes a public, generated page** | Twenty rows closed and field-verified in twenty-four hours, a mechanism in source per row, two rejected with their measurement and their price. It lives in `docs/DEFECT-LEDGER.md`, which is shipped inside the wheel and nowhere else. The commercial argument is exact and is the memo's best: the first objection to a single-maintainer proprietary product is *"what if it disappears"*, and the hardest answer is not an SLA promise but the product's own numbers | A **generated projection**, never the raw file — `P-14`: rows open and closed per version, median days to closure, declined rows with their reason, derived from the ledger plus `build_commit` so it cannot drift from what shipped. Redaction is part of the acceptance criterion, not a follow-up: no absolute maintainer paths, no third-party evaluation subjects named as audited. Assertion over the generator, not over the output |
-| `S-30` | **The token bill becomes a measured number, and `--since` carries the budget** | Two halves of one thesis the memo states correctly: the customer's real cost is the agent's context bill, not the licence. The stateful half it proposes (a session that remembers what the agent was given) is **refused** — it makes the answer depend on what the agent claims it saw, which breaks the determinism this product sells. The stateless half is already almost built: `--since`, `delta`, `regress`, content-addressed answers and the declared `--compact` / `--agent` ceilings | (a) `--since <ref>` composed with a token budget on the existing bounded views, so an agent supplies the sha it holds and gets only what changed inside a stated ceiling, with `non_coverage` for what the budget cut. (b) A reproducible harness in the repository that runs one real agent task with and without ASK and publishes tokens per resolved task — under the honest-benchmark rule: what did **not** work is reported first, and no figure is published that a reader cannot re-run |
+| `S-27` ◑ | **The licence axis cannot charge the buyer the product is being built for** ⭐ — `P-13` | `is_large_repo()` counts Java files **per repository path** against `_FREE_REPO_JAVA_FILE_LIMIT = 500`, while `auth workspace` aggregates the fleet. The opt-in `--enforce` pilot now applies the existing Pro gate to that aggregate without changing per-repository behavior or billing code. | Measurement and pilot gate shipped. Full activation remains conditional on named-buyer validation; no default user is charged or blocked. |
+| `S-28` ✅ | **SARIF out — the findings reach the tab the developer already reads** — **closed with source-level migration export:** `pack gate`, `spring-audit`, `verify` and `migrate-check` emit SARIF 2.1.0 through dedicated ASK-owned renderers. Source findings carry their own locations; contract and gate decisions remain locationless where no source span exists. | The output channel is now available for the ASK-owned finding populations, with provenance and non-coverage preserved. Imported SARIF remains input to `enrich` and is never re-emitted as ASK discovery. |
+| `S-29` ✅ | **The remediation record becomes a public, generated page** — **closed:** `remediation-report` publishes the redacted projection of the shipped ledger with counts, distributions, provenance and closure coverage. Private narrative and paths stay excluded; the output is explicitly a trust artifact, not an SLA or security verdict. | `ask remediation-report` is the generated public projection; its tests assert redaction, provenance and consistency with the ledger. |
+| `S-30` ✅ | **The token bill becomes a measured number, and `--since` carries the budget** | **Shipped:** `repo-ir --budget-tokens N` composes with `--since`, and `scripts/context_cost_harness.py` measures a declared task with and without ASK. It publishes bytes/tokens, build and tree state, output hashes and a delta only when both commands resolve and the operator declares `--comparable`; otherwise it records `not_comparable` without a commercial figure. The stateful session proposal remains refused because it would make answers depend on what the agent claims to have seen, breaking determinism. | Closed for the stateless scope: budgeted bounded view plus reproducible two-command harness. No agent quality claim is published by default; comparable task definitions and their rerunnable artifacts remain the operator's evidence. |
 
 **One anti-goal recorded here so it is refused once.** No rule DSL and no third-party rule
 plugins for the architecture contracts of `S-23`'s neighbourhood. The memo cites *"grep grew

{sourcecode-5.9.0 → sourcecode-5.9.2}/docs/EXECUTIVE-ROADMAP.md

@@ -5,7 +5,21 @@
 > `pack assessment` and `pack gate`, and make evidence and safe change the
 > product surface. This roadmap must not introduce a competing product thesis.
 
-> **CURRENT STATUS — release `5.9.0`, following two external audits of `5.8.32`, 2026-08-26.** Two
+> **CURRENT UPDATE — release `5.9.2`, following the external `5.9.0` reconciliation (`AUD-608`).**
+> The commercial increment adds stateless context budgets, a reproducible context-cost harness,
+> source-level migration SARIF and an opt-in workspace entitlement pilot. Advisory behaviour remains
+> the default; named-buyer validation is still required before broad enforcement.
+> Three defects confirmed in the shipped release are closed: `cve` now
+> discloses its static inventory (`fe1f624`), `pr-risk --since` returns a
+> structured error for unreadable base context (`b479465`), and
+> `posture --diff --limit` bounds effective-access lists and maps (`5f8a50b`).
+> The seven new command helps now state analysis and memory budget
+> non-applicability (`19811ac`). The reported `cache warm` exit-143 was an external
+> 120-second timeout, not a product regression. The prior posture
+> non-reproduction did not cover the payload shape now identified. Details are
+> in [`AUDIT-2026-08-26-EXTERNAL-5.9.0.md`](AUDIT-2026-08-26-EXTERNAL-5.9.0.md).
+
+> **HISTORICAL STATUS — release `5.9.0`, following two external audits of `5.8.32`, 2026-08-26.** Two
 > independent rounds scored the release **9.7/10** (reverification) and **8/10** (comparison against
 > `5.8.31`). **Neither round reported a regression**, and both maintained the same commercial
 > position: buy, at `$30-50` per developer per month. Six previously reported findings are confirmed

{sourcecode-5.9.0 → sourcecode-5.9.2}/docs/PRODUCT-ROUTE.md

@@ -180,6 +180,11 @@ vulnerability is exploitable; and `not_observed` is explicitly not a statement
 of safety, because reflection, SPI loading and container wiring reach code no
 source edge names.
 
+An operator may also pass `--vex` with local, exact advisory/package decisions.
+ASK publishes those decisions as `accepted_by_vex` while preserving its own
+reachability verdict; an expired or absent VEX statement is not treated as a
+negative.
+
 ## Implementation order
 
 The implementation route is shipped through five bounded steps. The status is