sourcecode 5.9.25__py3-none-any.whl → 5.9.26__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.9.25"
+__version__ = "5.9.26"

sourcecode/_build_commit.py

@@ -1,5 +1,5 @@
 """Generated at build time by hatch_build.py. Do not edit (AUD-592-D04)."""
 
-BUILD_COMMIT = 'd28b0cc19426b100d47381ab842d291860c6c3a2'
-CLOSURE_PROVENANCE = {'AUD-611-B05': {'commit': '', 'status': 'uncited'}, 'AUD-611-B06': {'commit': '', 'status': 'uncited'}, 'AUD-611-B07': {'commit': '', 'status': 'uncited'}, 'AUD-611-B08': {'commit': '', 'status': 'uncited'}, 'AUD-611-B09': {'commit': '', 'status': 'uncited'}, 'AUD-611-B10': {'commit': '', 'status': 'uncited'}, 'AUD-611-B11': {'commit': '', 'status': 'uncited'}, 'AUD-612-07': {'commit': '', 'status': 'uncited'}, 'AUD-612-09': {'commit': '', 'status': 'uncited'}, 'AUD-612-14': {'commit': '', 'status': 'uncited'}, 'AUD-612-B03': {'commit': '', 'status': 'uncited'}, 'AUD-612-B07': {'commit': '', 'status': 'uncited'}, 'AUD-612-B13': {'commit': '', 'status': 'uncited'}, 'AUD-612-E': {'commit': '', 'status': 'uncited'}, 'AUD-612-G': {'commit': '', 'status': 'uncited'}, 'AUD-612-I': {'commit': '', 'status': 'uncited'}, 'AUD-612-K': {'commit': '', 'status': 'uncited'}, 'AUD-612-M': {'commit': '', 'status': 'uncited'}, 'AUD-612-R': {'commit': '', 'status': 'uncited'}, 'AUD-613-ROOT': {'commit': '', 'status': 'uncited'}, 'AUD-614-07': {'commit': '', 'status': 'uncited'}, 'AUD-614-E': {'commit': '', 'status': 'uncited'}, 'AUD-614-F': {'commit': '', 'status': 'uncited'}, 'AUD-614-G': {'commit': '', 'status': 'uncited'}, 'AUD-614-I': {'commit': '', 'status': 'uncited'}, 'AUD-614-INTENT-TIE': {'commit': '', 'status': 'uncited'}, 'AUD-614-JUNIT4': {'commit': '', 'status': 'uncited'}, 'AUD-614-RISK-L0': {'commit': '', 'status': 'uncited'}, 'AUD-614-SELFTEST-TIMEOUT': {'commit': '', 'status': 'uncited'}, 'AUD-615-07': {'commit': '', 'status': 'uncited'}, 'AUD-615-COLD-COMPACT': {'commit': '', 'status': 'uncited'}, 'AUD-615-DRIFT': {'commit': '', 'status': 'uncited'}, 'AUD-615-E': {'commit': '', 'status': 'uncited'}, 'AUD-615-F': {'commit': '', 'status': 'uncited'}, 'AUD-615-INTENT-TIE': {'commit': '', 'status': 'uncited'}, 'AUD-615-JUNIT4': {'commit': '', 'status': 'uncited'}, 'AUD-615-RISK-L0': {'commit': '', 'status': 'uncited'}, 'AUD-615-SELFTEST-TIMEOUT': {'commit': '', 'status': 'uncited'}, 'AUD-616-E-PROV': {'commit': '', 'status': 'uncited'}, 'AUD-616-F, -RISK-L0, -SELFTEST-TIMEOUT, -INTENT-TIE, -DRIFT, -COLD-COMPACT, -E, -07': {'commit': '', 'status': 'uncited'}, 'AUD-616-INTENT-TIE-COV': {'commit': '', 'status': 'uncited'}, 'AUD-616-JUNIT4-SELF': {'commit': '', 'status': 'uncited'}, 'AUD-616-KOTLIN': {'commit': '', 'status': 'uncited'}, 'AUD-616-O': {'commit': '', 'status': 'uncited'}, 'AUD-616-P': {'commit': '', 'status': 'uncited'}, 'Window': {'commit': '', 'status': 'uncited'}, '`ASK-FIELD-01`': {'commit': '829f9fa', 'status': 'present'}, '`ASK-FIELD-02`': {'commit': '6a659fa', 'status': 'present'}, '`ASK-FIELD-03`': {'commit': '55b0d51', 'status': 'present'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`AUD-619-WATCH`': {'commit': '', 'status': 'uncited'}, '`AUD-620-COMMAND-SURFACE`': {'commit': '', 'status': 'uncited'}, '`AUD-620-REVIEW-PR`': {'commit': '', 'status': 'uncited'}, '`AUD-621-REVIEW-PR`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}, '`REG-04`': {'commit': '', 'status': 'uncited'}}
-CLOSURE_COVERAGE = {'closed_rows': 166, 'present': 91, 'absent': 0, 'unresolved': 0, 'uncited': 75, 'unknown': 0}
+BUILD_COMMIT = '2f283c4d305e2709dc154a4399650c2042b28d68'
+CLOSURE_PROVENANCE = {'AUD-611-B05': {'commit': '', 'status': 'uncited'}, 'AUD-611-B06': {'commit': '', 'status': 'uncited'}, 'AUD-611-B07': {'commit': '', 'status': 'uncited'}, 'AUD-611-B08': {'commit': '', 'status': 'uncited'}, 'AUD-611-B09': {'commit': '', 'status': 'uncited'}, 'AUD-611-B10': {'commit': '', 'status': 'uncited'}, 'AUD-611-B11': {'commit': '', 'status': 'uncited'}, 'AUD-612-07': {'commit': '', 'status': 'uncited'}, 'AUD-612-09': {'commit': '', 'status': 'uncited'}, 'AUD-612-14': {'commit': '', 'status': 'uncited'}, 'AUD-612-B03': {'commit': '', 'status': 'uncited'}, 'AUD-612-B07': {'commit': '', 'status': 'uncited'}, 'AUD-612-B13': {'commit': '', 'status': 'uncited'}, 'AUD-612-E': {'commit': '', 'status': 'uncited'}, 'AUD-612-G': {'commit': '', 'status': 'uncited'}, 'AUD-612-I': {'commit': '', 'status': 'uncited'}, 'AUD-612-K': {'commit': '', 'status': 'uncited'}, 'AUD-612-M': {'commit': '', 'status': 'uncited'}, 'AUD-612-R': {'commit': '', 'status': 'uncited'}, 'AUD-613-ROOT': {'commit': '', 'status': 'uncited'}, 'AUD-614-07': {'commit': '', 'status': 'uncited'}, 'AUD-614-E': {'commit': '', 'status': 'uncited'}, 'AUD-614-F': {'commit': '', 'status': 'uncited'}, 'AUD-614-G': {'commit': '', 'status': 'uncited'}, 'AUD-614-I': {'commit': '', 'status': 'uncited'}, 'AUD-614-INTENT-TIE': {'commit': '', 'status': 'uncited'}, 'AUD-614-JUNIT4': {'commit': '', 'status': 'uncited'}, 'AUD-614-RISK-L0': {'commit': '', 'status': 'uncited'}, 'AUD-614-SELFTEST-TIMEOUT': {'commit': '', 'status': 'uncited'}, 'AUD-615-07': {'commit': '', 'status': 'uncited'}, 'AUD-615-COLD-COMPACT': {'commit': '', 'status': 'uncited'}, 'AUD-615-DRIFT': {'commit': '', 'status': 'uncited'}, 'AUD-615-E': {'commit': '', 'status': 'uncited'}, 'AUD-615-F': {'commit': '', 'status': 'uncited'}, 'AUD-615-INTENT-TIE': {'commit': '', 'status': 'uncited'}, 'AUD-615-JUNIT4': {'commit': '', 'status': 'uncited'}, 'AUD-615-RISK-L0': {'commit': '', 'status': 'uncited'}, 'AUD-615-SELFTEST-TIMEOUT': {'commit': '', 'status': 'uncited'}, 'AUD-616-E-PROV': {'commit': '', 'status': 'uncited'}, 'AUD-616-F, -RISK-L0, -SELFTEST-TIMEOUT, -INTENT-TIE, -DRIFT, -COLD-COMPACT, -E, -07': {'commit': '', 'status': 'uncited'}, 'AUD-616-INTENT-TIE-COV': {'commit': '', 'status': 'uncited'}, 'AUD-616-JUNIT4-SELF': {'commit': '', 'status': 'uncited'}, 'AUD-616-KOTLIN': {'commit': '', 'status': 'uncited'}, 'AUD-616-O': {'commit': '', 'status': 'uncited'}, 'AUD-616-P': {'commit': '', 'status': 'uncited'}, 'Window': {'commit': '', 'status': 'uncited'}, '`ASK-FIELD-01`': {'commit': '829f9fa', 'status': 'present'}, '`ASK-FIELD-02`': {'commit': '6a659fa', 'status': 'present'}, '`ASK-FIELD-03`': {'commit': '55b0d51', 'status': 'present'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`AUD-619-WATCH`': {'commit': '', 'status': 'uncited'}, '`AUD-620-COMMAND-SURFACE`': {'commit': '', 'status': 'uncited'}, '`AUD-620-REVIEW-PR`': {'commit': '', 'status': 'uncited'}, '`AUD-621-REVIEW-PR`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-15`': {'commit': '', 'status': 'uncited'}, '`BUG-21`': {'commit': '', 'status': 'uncited'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}, '`REG-01`': {'commit': '', 'status': 'uncited'}, '`REG-04`': {'commit': '', 'status': 'uncited'}}
+CLOSURE_COVERAGE = {'closed_rows': 169, 'present': 91, 'absent': 0, 'unresolved': 0, 'uncited': 78, 'unknown': 0}

sourcecode/_docs/DEFECT-LEDGER.md

@@ -14,57 +14,82 @@ Status values: `open` · `in-progress` · `closed <version>` · `by-design` (wit
 The facts these rows are keyed to are published: `ask schema facts-v1` prints the registry
 (authority, definition, consumers, parity test) that the release battery enforces.
 
-## Current Synchronization — Alternative External Audit `5.9.23`, carried into `5.9.25` (2026-09-01)
-
-**Release gate: do not use 5.9.25 to gate unattended CI through the audit-command
-family.** A native-Windows alternative audit of the 5.9.23 build measured 55
-`rc=0`, zero-byte answers and eight timeouts in 84 runs. The failures include
-`spring-audit`, `verify`, `risk`, Markdown `audit-report`, `migrate-check`, and
-`migrate-apply`; the prior 3/47 observation was materially incomplete. The
-cause remains unproven. A security-rules phase is a supported hypothesis, not a
-closure claim. `exit 0` is valid only for a non-empty stdout answer or a verified
-`--output` artifact; a missing phase result must be structured failure, never an
-empty finding set.
-
-Priority order is: `ALT-01` silent success and unkept output promises;
-`ALT-02` budget/partial-result failure; `ALT-03` security-rules phase bisection;
-`ALT-04` content-id instability; `ALT-05` contradictory migration totals;
-`ALT-06` false-complete selftest; then remediation, context bounds and CLI
-ergonomics. Full evidence: [`AUDIT-2026-09-01-ALTERNATIVE-5.9.23.md`](AUDIT-2026-09-01-ALTERNATIVE-5.9.23.md)
-and [`AUDIT-2026-09-01-EXTERNAL-5.9.23.md`](AUDIT-2026-09-01-EXTERNAL-5.9.23.md).
+## Current Synchronization — Alternative External Audit `5.9.25`, and External Audit `5.9.25` (2026-09-02)
+
+**Release `5.9.26` closes eight rows from this round with verified evidence**
+(`ALT-09`, `ALT-11`, `BUG-01`, `BUG-03`, `REG-02`'s disclosure half, `ALT-06`'s
+itemization half, plus the `remediation-report` path-admission coverage gap
+and the `ALT-01`/`ALT-03` forensic sidecar) — see each row below for the
+commit-level detail, and `CHANGELOG.md` for the release note. It does **not**
+close the release gate: `ALT-01`/`ALT-03` were investigated and instrumented,
+not fixed, because the failure did not reproduce outside native Windows.
+
+**Release gate unchanged and now more urgent: do not use 5.9.25 or 5.9.26 to
+gate unattended CI through the audit-command family.** Two independent re-audits of
+5.9.25 agree the empty-`exit 0` defect did not shrink. The multi-repository
+audit measured it at 18.4% (9/49, byte-counted) and, for the first time, in
+`spring-audit` itself — the command the tool's own help recommends first. The
+native-Windows audit found the same failure has gone from a hang to something
+**erratic**: the identical `migrate-apply .` invocation gave 8/8 empty answers
+in one batch and 3/3 full answers minutes later with nothing else changed, and
+the failure spread to `migrate-check` and `onboard`, both reliable in 5.9.23.
+`ALT-01` is **reopened**: the commit cited as closing it does not hold under
+native re-test — `risk . -o FILE` still returns `rc=0`, zero bytes, and no
+file in 4/4 runs.
+
+Three rows are genuinely closed with verified evidence this round: `ALT-04`
+(content-id clock exclusion, 3/3 stable hashes), `ALT-05` (findings-population
+reconciliation, exact arithmetic), and `REG-01` (root `ask --help` no longer
+hangs — sub-linear cost curve up to 4,772 files; the original 31-repo extreme
+case was not re-confirmed). `BUG-15` (Rich markup leak) and `BUG-21`
+(`--jobs` range validation) also close cleanly.
+
+Priority order is: `ALT-01` reopened silent success and unkept output
+promises; `ALT-03` security/audit-phase bisection, now with an erratic rather
+than hang-only signature; `ALT-09` (new) `cache clear` ignoring a piped `n`
+answer; `REG-02` agent memory ceiling; `BUG-01` silent malformed-file
+disappearance; then `ALT-07` remediate hang, `ALT-10`/`ALT-11` new latency and
+ergonomics findings, and remaining CLI ergonomics. Full evidence:
+[`AUDIT-2026-09-02-ALTERNATIVE-5.9.25.md`](AUDIT-2026-09-02-ALTERNATIVE-5.9.25.md)
+and [`AUDIT-2026-09-02-EXTERNAL-5.9.25.md`](AUDIT-2026-09-02-EXTERNAL-5.9.25.md).
 
 | ID | Severity | Status | Evidence and required closure |
 |---|---:|---|---|
-| `ALT-01` | Critical maximum | **fixed, pending native-Windows repetition** | `a7ad44b` hardens the required-answer and output-artifact guards: `exit 0` now requires delivered stdout or a verified requested artifact. Native 30-run repetition remains the release closure evidence. |
+| `ALT-01` | Critical maximum | **reopened, contradicted by native re-test** | `risk . -o FILE` returned `rc=0`, 0 bytes, no file in 4/4 native runs. Source review of the guard (`_fail_on_missing_required_answer`, `_fail_on_unkept_output_promise`, armed for `risk`/`spring-audit`/`verify`/`audit-report`/`migrate-check`/`migrate-apply` via `REQUIRED_ANSWER_COMMANDS`) finds it correctly wired end to end on this platform; the field failure is not reproducible outside native Windows. Both guards now write a forensic sidecar (`empty_answer_diagnostics.record`, referenced as `diagnostics_path` in the error envelope) capturing phase/RSS/argv/pid at the exact moment either fires, so the next occurrence carries evidence instead of a report written from memory. This does not close the row — it makes the next native reproduction diagnosable. |
 | `ALT-02` | Critical maximum | **fixed, bounded-phase follow-up** | `aab1e8b` propagates deadline checks into security posture and publishes omitted stages and partial coverage. A small-repository budget can still finish its coarse earlier phases before the deadline is observed; `ALT-03` owns reducing that phase granularity. |
-| `ALT-03` | High | **open, investigation** | The security-rules phase is the common evidence-backed suspect: all affected audit flows consume security findings, security `retrieve` queries timed out, and `remediate` stalled in the same phase. Bisect the known working small subtree against the 3,342-file root; do not assert causality before reproducing it. |
-| `ALT-04` | High | **fixed** | `36e3893` excludes every nested `*_time_ms` execution clock from `content_id`; parametric tests retain semantic-field sensitivity. |
-| `ALT-05` | High | **fixed** | `b12c8f1` publishes `population_total` and `excluded_before_cap` beside the compact findings cap, reconciling it with the summary population. |
-| `ALT-06` | High | **fixed** | `6d0889e` publishes structured limitations for failed, unrun and unknown ledger rows; `5620864` also makes generic task `gaps` invalidate envelope completeness. |
+| `ALT-03` | High | **open, investigation, sharper signature** | Failures are now mostly near-instant (1-2s) empty success rather than multi-minute hangs on the same commands — consistent with a phase being *skipped*, not *stuck*. The audit could not isolate a trigger below three concurrent heavy ASK processes. Bisect the known working small subtree against the 3,342-file root; do not assert causality before reproducing it. The `ALT-01` diagnostic sidecar now records the last known phase and peak RSS at the moment of every occurrence, closing the evidence gap the audits both named. |
+| `ALT-04` | High | **fixed, confirmed** | `36e3893` excludes every nested `*_time_ms` execution clock from `content_id`. Re-confirmed: `impact-chain` gave the same hash across 3 repeated native runs (was 3 different hashes in 5.9.23). |
+| `ALT-05` | High | **fixed, confirmed** | `b12c8f1` publishes `population_total` and `excluded_before_cap` beside the compact findings cap. Re-confirmed with exact arithmetic: `1526 - 593 = 933 = by_rule.MIG-016`. |
+| `ALT-06` | High | **fixed** | `complete` is correctly `false` when rows fail. The itemization half is also closed: `answer_bounds._summarise` picked a dict's `id` before its `reason`/`what`, so `selftest`'s per-category `limitations` entries rendered as the bare slug (`selftest_rows_failed`) with the actual failing row IDs dropped even though `reason` and the new `rows` field named them. `_summarise` now prefers the descriptive text; no other producer in this codebase pairs `id` with `what`/`reason` on the same dict, so nothing else changes. |
 | `ALT-07` | Medium | **open** | `remediate` regressed from a 23.6-second answer to hangs beyond 400 seconds in `auditing for repairable findings`; it shares the `ALT-03` investigation until separated by evidence. |
-| `ALT-08` | Medium | **fixed** | `15d77d2` publishes the effective per-task stdout budget and the full-artifact path; bounded output remains skipped only for explicit `--output` artifacts. |
-| `NEW-01` | Critical maximum | **superseded by ALT-01** | The earlier 3/47 `risk` and Markdown `audit-report` observation undercounted the native-Windows audit-family failure. |
-| `REG-02` | Critical | **open, regression** | The 1,536 MB default `--agent` ceiling rejects valid large repositories only after spending minutes; it is not published in successful default-agent metadata. Bound projection during construction, sample RSS periodically, and publish the effective ceiling. |
-| `REG-03` | High | **open, regression** | Warm `spring-audit` was measured 2.1–3.8x slower despite a fully reused CIR. Attribute the warm pass before claiming cache benefit. |
-| `REG-01` | High | **open, regression** | Root `ask --help` took 83–86 seconds in a workspace with nested repositories. Help must not perform unbounded repository/profile analysis. |
-| `REG-04` | Medium | **closed 5.9.24** | `_meta.answer_bounds.capped` now aggregates nested cap contracts, so compact answers disclose rows omitted below nested payloads. Regression coverage includes nested dictionaries and lists. |
-| `NEW-02` | High | **open** | Overloaded endpoint handlers can all inherit the final overload's `declaration_line`. Resolve by mapping annotation/signature or publish ambiguity. |
-| `BUG-01` | Critical maximum | **open, P0** | A malformed Java file can disappear without a file-specific declaration. Publish parse failure/recovery in the answer bounds and preserve any affected endpoint gap. |
+| `ALT-08` | Medium | **fixed, confirmed** | `15d77d2` publishes the effective per-task stdout budget and the full-artifact path; confirmed functioning, with a minor arithmetic mismatch in `prepare-context review-pr`'s `_truncation_summary` noted as low-severity follow-up. |
+| `ALT-09` | Critical | **open, new** | `ask cache clear .` deletes cache entries even when piped stdin answers `n`; only true EOF (`< /dev/null`) correctly refuses. The non-interactivity detector appears to treat "stdin has bytes" as "proceed" instead of reading and comparing them against `y`/`yes`. Low blast radius today (cache is rebuildable); fix the detection to use `isatty()` plus an actual answer comparison before any future destructive command reuses the same pattern. |
+| `ALT-10` | Medium | **open, new** | `onboard .` took 164.9s cold in one native session versus a consistent 681-780ms in every prior round on the same repository (~240x). Delivered a full answer, so not release-blocking alone; profile for a shared warm-up path with the `ALT-01`/`ALT-03` commands. |
+| `ALT-11` | Low | **fixed** | `watch` now emits a `{"tick": 0, "status": "watching", "elapsed_ms": …}` NDJSON line on stdout immediately after the index warms and before the tick loop begins — the channel `watch` already promises a consumer is reading, unlike stderr, whose silence on a non-TTY stream is a deliberate, tested invariant elsewhere in the CLI. Written to `--output` too. |
+| `NEW-01` | Critical maximum | **escalated** | Now measured at 18.4% (9/49, byte-counted) and reaches `spring-audit --compact` in addition to `risk` and Markdown `audit-report`. Two identical back-to-back `spring-audit thingsboard --compact` runs (46,596 bytes/69.7s, then 0 bytes/57.2s) refute the earlier "only on abnormally fast runs" hypothesis. `BUG-17` (`remediation-report` silently empty on an unexpected positional, rather than `INVALID_USAGE`) does not reproduce as described here: the command returns its normal, non-empty bundled-ledger report regardless of the path given, by design (`del path` — "the bundled ledger is used"), so it is not the same failure class as `NEW-01`. What is real and now fixed is narrower: `path_admission`'s own coverage battery had a gap for exactly this command — `remediation-report`'s `path` parameter matched the battery's repo-path discovery heuristic with no invocation row, a pre-existing red independent of this audit. Closed by documenting the exclusion inline (`PATH_NOT_READ_BY_DESIGN` in `tests/test_path_admission.py`), the same "opt-out is a decision, not an omission" convention `cli.py` already uses for `--copy`/`Progress`. |
+| `REG-02` | Critical | **partially fixed: disclosure half closed, enforcement-timing half open** | Reproduced and fixed the specific gap named in both audits: a successful `--agent` run published `_meta.memory.configured_max_rss_mb: null` even though `_root_memory_seam` was actively enforcing the 1,536 MB default at every phase boundary for that same run. `disclosure()` now takes the same `default_ceiling_mb` `exceeded()` already did, and the root command threads whether `--agent` is active through a per-invocation flag (`_AGENT_MODE_ACTIVE`) so a successful run says what protected it. The still-open half — the ceiling rejecting large repositories only after minutes of work, and a higher observed peak than 5.9.23 (2,029.92 MB vs 1,552.45 MB) — needs periodic RSS sampling with early abort inside the expensive phases themselves (`BUG-22`'s row), which cannot be validated without the field's own large repository. |
+| `REG-03` | High | **open, regression, unchanged** | Warm `spring-audit` still shows no reliable time or reliability benefit over cold; the `NEW-01` back-to-back pair is itself the sharpest evidence, since the "warm" run was proportionally slower and the one that came back empty. |
+| `REG-01` | High | **closed, resolved on measured range** | Root `ask --help` no longer hangs in a nested-repository workspace: cost now scales sub-linearly (49 files: 608ms; 4,772 files: 13.6s), against 82-86s trending to 120s+/`rc=124` in 5.9.23. The original 31-repo/8,322-file extreme case was not re-confirmed — the audit's own 110s harness cutoff interrupted it. Re-run that specific extreme case before treating the ceiling as proven. |
+| `REG-04` | Medium | **closed 5.9.24, reconfirmed** | `_meta.answer_bounds.capped` aggregation re-verified in `migrate-check --compact`: all 5 nested cap contracts listed, 268 omitted values disclosed. |
+| `NEW-02` | High | **open, unchanged** | Overloaded endpoint handlers can all inherit the final overload's `declaration_line`; the `anchor_ambiguity`/`overload_count` fields expected from this row are still absent from the payload. Resolve by mapping annotation/signature or publish ambiguity. |
+| `BUG-01` | Critical maximum | **fixed, mechanism narrowed, not eliminated** | Reproduced directly: a missing `;` or a missing `)` on a method signature both extract a clean class+method symbol pair with balanced braces, so the E-10 brace-only check (`unbalanced_braces`) never fired and the file passed as clean. `repository_ir.py` now also masks and checks paren balance (`unbalanced_parens`), publishing the same `parse_structure` gap for that shape. This is a heuristic extractor without a real Java grammar, so a syntax error that disturbs neither braces nor parens (for example a missing operand with balanced punctuation on both sides) remains undetectable by construction — the row stays open at lower severity for that residual class, not closed. |
 | `BUG-02` | Critical maximum | **open, P0** | Large `risk` ended `rc=127` with no output or structured failure. Add fail-fast resource/process handling and durable partial checkpoints. |
 | `BUG-12` | Critical maximum | **open, P0** | Deep `--agent` output construction reaches multi-gigabyte RSS before a small answer. Bound projection while building. |
-| `BUG-03` | High | **open, P1** | Marginal Spring detection can overstate what a zero-finding result covers. Publish Spring footprint/coverage with the stack-fit claim. |
+| `BUG-03` | High | **fixed** | `non_coverage.stack_fit`'s marginal-detection disclosure (`fit: "partial"`, below 10% Spring-bean density) has existed since AUD-596-D13 but was unreachable from `risk` and `posture`: neither call site passed `spring_footprint`, so `java_files` stayed 0 and the branch that reads it could never fire regardless of the real ratio. Both now compute it the same way `spring-audit`'s own call already did (`sum(bean.spring for bean in graph.beans.values())` over `len(cir.files)`); verified end to end on a 1-bean/16-file fixture. |
 | `BUG-04` | High | **open, P1** | `selftest` publishes `complete=true` with five error rows. Derive bounds from actual results. |
 | `BUG-05` | High | **open, P1** | Overloaded endpoint handlers can receive the wrong declaration line. Resolve by mapping annotation or publish ambiguity. |
 | `BUG-07` | Closed 5.9.23, verification gap | Compact JVM inventory is bounded, but the audit notes no selftest row protects the correction. Add release-battery coverage before treating it as durable closure. |
-| `BUG-10` | High | **open, P1** | Unsupported routing styles can produce empty coverage gaps. Publish detected-but-unmodeled routing gaps. |
-| `BUG-11` | High | **open, P1** | Default `pack assessment` can fail on a small Spring repository. Use a bounded default or explicit full mode. |
-| `BUG-13` | High | **open, P1** | Unscoped `selftest` starts over nested repositories after warning. Refuse and require an explicit path. |
-| `BUG-16` | High | **open, P1** | Context-cache growth has no published budget or eviction contract; about 1.5 GB was measured. |
+| `BUG-10` | High | **open, P1, unchanged** | Unsupported routing styles can produce empty coverage gaps. Publish detected-but-unmodeled routing gaps. |
+| `BUG-11` | High | **open, P1, now hangs instead of failing fast** | Default `pack assessment` and `pack gate --since` now hang to their external kill (300s/200s) instead of the legitimate `INVALID_INPUT`/`INVALID_USAGE` they gave in 5.9.23 — both compose the audit-family commands affected by `ALT-01`/`ALT-03` and inherit the failure. |
+| `BUG-13` | High | **open, P1, unchanged** | Unscoped `selftest` starts over nested repositories after warning. Refuse and require an explicit path. |
+| `BUG-15` | Low | **closed 5.9.25** | Non-TTY `ask --help` no longer emits Rich markup: 0 occurrences of `[bold]`/`[dim]`/`[bold green]`, down from 208 (5.9.22) and 202 (5.9.23). |
+| `BUG-16` | High | **open, P1, unchanged** | Context-cache growth has no published budget or eviction contract; ~1.7 GB was measured (was ~1.6 GB in 5.9.23). |
+| `BUG-21` | Low | **closed 5.9.25** | `--jobs` now rejects out-of-range values with `INVALID_USAGE` stating the `1<=x<=128` bound, replacing silent acceptance. |
 | `BUG-22` | High | **open, P1** | RSS ceilings are checked post-hoc. Add periodic sampling and orderly abort. |
 
-The remaining `BUG-04b`, `BUG-06`, `BUG-08`, `BUG-09`, `BUG-15`, `BUG-19`,
-`BUG-20`, `BUG-21` and `BUG-23` findings are open P2/coverage follow-ups in
-the audit document. None is closed by documentation alone.
+The remaining `BUG-04b`, `BUG-06`, `BUG-08`, `BUG-09`, `BUG-19`, `BUG-20` and
+`BUG-23` findings are open P2/coverage follow-ups in the audit document. None
+is closed by documentation alone.
 
 ## Current Synchronization — External Audit `AUD-621`
 

sourcecode/_docs/USER_GUIDE.md

@@ -279,7 +279,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.9.25
+# ask 5.9.26
 ```
 
 Requires Python 3.9+.

sourcecode/answer_bounds.py

@@ -77,7 +77,16 @@ def _summarise(value: Any) -> Any:
     payloads would see the same fact move twice.
     """
     if isinstance(value, dict):
-        for key in ("id", "what", "reason", "not_covered", "message", "title"):
+        # R-05 (5.9.25 alternative audit): `reason`/`what` are the producer's
+        # own descriptive sentence about the gap; `id` is a stable category
+        # slug meant for a consumer that filters programmatically, not for a
+        # human reading `gaps`. `id` used to be checked first, so a producer
+        # that published both (selftest's `limitations`) had its actual
+        # itemized detail — which rows, not just how many — silently dropped
+        # in favor of the bare slug. No other producer in this codebase pairs
+        # `id` with `what`/`reason` on the same dict, so this reorder changes
+        # nothing for any of them.
+        for key in ("what", "reason", "not_covered", "message", "title", "id"):
             if key in value and isinstance(value[key], str):
                 return value[key][:200]
         return {k: v for k, v in list(value.items())[:3] if not isinstance(v, (dict, list))}

sourcecode/cli.py

@@ -1746,6 +1746,44 @@ def _stdin_is_interactive() -> bool:
         return False
 
 
+def _read_piped_answer(*, timeout: float = 0.2) -> Optional[str]:
+    """Best-effort read of a non-interactive stdin's actual content.
+
+    ALT-09 (5.9.25 alternative audit): the non-interactive branch of a
+    destructive prompt treated *any* redirected stdin as an implicit "yes" —
+    `echo n | ask cache clear .` deleted cache files despite the piped answer
+    being an explicit refusal, and only true immediate EOF (`< /dev/null`)
+    happened to refuse, by accident of `_confirm`'s own EOF handling on a
+    different path. A non-interactive caller can still mean to answer.
+
+    This reads one line on a background thread and gives it `timeout` seconds
+    to arrive. A pipe with data (or a closed pipe with none) resolves almost
+    immediately either way. A stdin that is open but never closed — an
+    inherited terminal fd, an MCP session — resolves neither within the
+    window, and this returns `None` rather than block: the caller falls back
+    to its prior default-confirm behavior in that case, unchanged.
+    """
+    import threading
+
+    result: list = [None]
+
+    def _reader() -> None:
+        try:
+            result[0] = sys.stdin.readline()
+        except Exception:
+            result[0] = None
+
+    reader = threading.Thread(target=_reader, daemon=True)
+    reader.start()
+    reader.join(timeout)
+    if reader.is_alive():
+        return None
+    line = result[0]
+    if not line:
+        return None
+    return line.strip()
+
+
 def _confirm(question: str, *, command: str, default: bool = False, err: bool = False) -> bool:
     """Ask a yes/no question, and diagnose a prompt that cannot be answered.
 
@@ -2160,7 +2198,16 @@ def _stamp_envelope(content: str) -> str:
     try:
         from sourcecode import resource_budget
 
-        extra["memory"] = resource_budget.disclosure()
+        # REG-02: `--agent` enforces `DEFAULT_AGENT_RSS_CEILING_MB` at every
+        # phase boundary (`_root_memory_seam`) whether or not `ASK_MAX_RSS_MB`
+        # was set, so a successful run under it must not disclose "no ceiling
+        # configured" — that was the exact gap the field measured.
+        extra["memory"] = resource_budget.disclosure(
+            default_ceiling_mb=(
+                resource_budget.DEFAULT_AGENT_RSS_CEILING_MB
+                if _AGENT_MODE_ACTIVE else None
+            ),
+        )
     except Exception as _exc:  # a footprint sample is not the envelope
         degraded = degraded or f"memory disclosure unavailable: {type(_exc).__name__}"
 
@@ -3000,6 +3047,12 @@ _OUTPUT_PROMISED: "Optional[str]" = None
 _OUTPUT_DELIVERED: bool = False
 _ANSWER_REQUIRED_BY: "Optional[str]" = None
 
+#: REG-02. Whether the running root invocation set `--agent`, so the envelope
+#: builder can disclose the mode-specific RSS default `_root_memory_seam`
+#: actually enforces — set at the same point that seam is armed, and reset at
+#: the top of `main()` like every other per-invocation global here.
+_AGENT_MODE_ACTIVE: bool = False
+
 # ALT-01. These commands publish repository-analysis answers. A successful
 # process with neither stdout nor a verified output artifact is never valid.
 # Kept as one authority so the entry point can arm the guard before Click enters
@@ -3094,6 +3147,9 @@ def _fail_on_missing_required_answer(exit_code: object) -> None:
     """Turn a silent successful composed run into a typed failure (C3-122)."""
     if exit_code not in (0, None) or _OUTPUT_DELIVERED or not _ANSWER_REQUIRED_BY:
         return
+    from sourcecode import empty_answer_diagnostics as _diag
+
+    _diag_path = _diag.record(_ANSWER_REQUIRED_BY, "missing_required_answer")
     _emit_error_json(
         EXECUTION_FAILED_CODE,
         f"{_ANSWER_REQUIRED_BY} finished without publishing an answer.",
@@ -3104,6 +3160,10 @@ def _fail_on_missing_required_answer(exit_code: object) -> None:
         ),
         command=_ANSWER_REQUIRED_BY,
         expected="parseable stdout or the requested output artifact",
+        # ALT-03/NEW-01: two audits measured this outcome without pinning a
+        # mechanism. This sidecar captures phase/RSS/argv at the moment of
+        # failure so the next occurrence carries its own forensic record.
+        diagnostics_path=_diag_path,
     )
     raise SystemExit(1)
 
@@ -3122,6 +3182,11 @@ def _fail_on_unkept_output_promise(exit_code: object) -> None:
     missing = _unkept_output_promise()
     if missing is None:
         return
+    from sourcecode import empty_answer_diagnostics as _diag
+
+    _diag_path = _diag.record(
+        _ANSWER_REQUIRED_BY, "unkept_output_promise", promised_path=str(missing),
+    )
     _emit_error_json(
         EXECUTION_FAILED_CODE,
         f"The run finished without producing '{missing}'.",
@@ -3133,6 +3198,9 @@ def _fail_on_unkept_output_promise(exit_code: object) -> None:
         ),
         expected="The file named by --output.",
         path=str(missing),
+        # ALT-01: the guard closing on paper did not close it in the field.
+        # This sidecar captures phase/RSS/argv at the moment of failure.
+        diagnostics_path=_diag_path,
     )
     raise SystemExit(1)
 
@@ -5547,6 +5615,8 @@ def main(
         cache_observation.reset()
     except Exception:
         pass
+    global _AGENT_MODE_ACTIVE
+    _AGENT_MODE_ACTIVE = False
     _apply_jobs(jobs)
     # A root option so the ceiling is one policy rather than sixty flags, and an
     # environment variable so it survives into a subcommand's own parse: Click
@@ -5858,6 +5928,7 @@ def main(
 
     # --agent: enable signal analyzers; output via agent_view (not compact)
     if agent:
+        _AGENT_MODE_ACTIVE = True
         dependencies = True
         env_map = True
         code_notes = True
@@ -17684,6 +17755,7 @@ def watch_cmd(
 
     _prog = Progress()
     _prog.start("warming the index")
+    _warm_t0 = time.monotonic()
     try:
         from sourcecode import context_cache as _ctxcache
 
@@ -17700,6 +17772,24 @@ def watch_cmd(
     try:
         if output_path is not None:
             _sink = open(output_path, "w", encoding="utf-8")
+        # ALT-11 (5.9.25 audit): a non-TTY `watch` gave no output at all until
+        # its first change or its external timeout — indistinguishable from
+        # hung. The `Progress` spinner above stays correctly silent there by
+        # design (a non-interactive command's stderr is a byte-identical
+        # contract), so the confirmation belongs in the one channel `watch`
+        # already promises a consumer is reading: its own NDJSON stdout.
+        from sourcecode.watch_loop import WatchEvent
+
+        _warming_event = WatchEvent(
+            tick=0, status="watching",
+            elapsed_ms=int((time.monotonic() - _warm_t0) * 1000),
+        )
+        _warming_line = _json.dumps(_warming_event.to_dict(), ensure_ascii=False)
+        lines.append(_warming_line)
+        typer.echo(_warming_line)
+        if _sink is not None:
+            _sink.write(_warming_line + "\n")
+            _sink.flush()
         for event in watch(
             target,
             analyse=analyse_with_pr_impact(target, cir, model),
@@ -20695,6 +20785,12 @@ def cache_clear_cmd(
                 typer.echo("Aborted.", err=True)
                 raise typer.Exit(code=1)
         else:
+            # ALT-09: a piped answer is read and honored before falling back
+            # to the idempotent-cleanup default; see `_read_piped_answer`.
+            _answer = _read_piped_answer()
+            if _answer is not None and _answer.lower() in ("n", "no"):
+                typer.echo("Aborted.", err=True)
+                raise typer.Exit(code=1)
             typer.echo(
                 f"Non-interactive: clearing cache for {target}{_ris_note}. "
                 "Pass --yes to silence this notice.",
@@ -21364,14 +21460,21 @@ def cache_context_clear_cmd(
     """Delete the AI Context Cache for a repository (structured context + stats)."""
     from sourcecode import context_cache as _ctxcache
     target = _resolve_repo_root(Path(path))
-    if not yes and _stdin_is_interactive():
-        if not _confirm(
-            f"Delete AI context cache for {target}?",
-            command="ask cache context-clear",
-            err=True,
-        ):
-            typer.echo("Aborted.", err=True)
-            raise typer.Exit(code=1)
+    if not yes:
+        if _stdin_is_interactive():
+            if not _confirm(
+                f"Delete AI context cache for {target}?",
+                command="ask cache context-clear",
+                err=True,
+            ):
+                typer.echo("Aborted.", err=True)
+                raise typer.Exit(code=1)
+        else:
+            # ALT-09: same piped-answer read as `cache clear`.
+            _answer = _read_piped_answer()
+            if _answer is not None and _answer.lower() in ("n", "no"):
+                typer.echo("Aborted.", err=True)
+                raise typer.Exit(code=1)
     removed = _ctxcache.clear_for_repo(target)
     typer.echo(f"Removed {removed} context file(s).")
 

sourcecode/empty_answer_diagnostics.py

@@ -0,0 +1,94 @@
+"""Forensic snapshot for the unproven empty-`exit 0` field defect (ALT-01/ALT-03/NEW-01).
+
+Two independent 5.9.25 audits measured `spring-audit`, `verify`, `risk`,
+`audit-report`, `migrate-check` and `migrate-apply` returning `exit 0` with an
+empty answer — from 3/47 to 18.4% of runs — and neither could pin a
+mechanism: a directed 2-concurrent-process contention test reproduced 5/5
+with a full answer, the empty runs ranged from near-instant to a multi-minute
+hang, and a correlation with 3+ concurrent heavy processes is explicitly
+unconfirmed, not established. Every guard already in `cli.py`
+(`_fail_on_missing_required_answer`, `_fail_on_unkept_output_promise`) turns
+this into a typed failure instead of a false `exit 0` — but neither guard,
+nor static reading of the code they protect, can explain *why* the answer was
+missing on an unreproduced Windows race. Shipping a guess at that mechanism
+without evidence is how a real defect gets marked closed on a plausible
+story instead of a fact (the house rule this ledger is built on).
+
+What is directly actionable without a Windows repro is what both audits asked
+for explicitly: capture the process's own state at the exact moment either
+guard is about to fire, every time it fires, so the next occurrence in the
+field carries its own forensic record instead of a report written from
+memory afterward.
+"""
+from __future__ import annotations
+
+import json
+import os
+import sys
+import time
+import uuid
+from pathlib import Path
+from typing import Any, Optional
+
+#: Override for the diagnostics directory, mirroring `SOURCECODE_CACHE_DIR`'s
+#: shape. Independent of the per-repository cache: this fires exactly when a
+#: repository-scoped cache directory may not have been resolved yet.
+ENV_DIAGNOSTICS_DIR = "SOURCECODE_DIAGNOSTICS_DIR"
+
+#: Diagnostics are capped so a genuinely recurring failure cannot grow this
+#: directory without bound; the newest snapshots are what a bisection needs.
+_MAX_SNAPSHOTS = 200
+
+
+def _diagnostics_dir() -> Path:
+    from sourcecode.cache import _user_home
+
+    override = os.environ.get(ENV_DIAGNOSTICS_DIR, "")
+    return Path(override) if override else _user_home() / ".sourcecode" / "diagnostics"
+
+
+def record(command: Optional[str], reason: str, **extra: Any) -> Optional[str]:
+    """Write a best-effort snapshot of process state; return its path or None.
+
+    Never raises and never blocks meaningfully: this runs on the failure path
+    of a command that is already about to report a typed error, so a
+    diagnostics write must not become a second failure, mask the first one,
+    or cost the caller real latency.
+    """
+    try:
+        from sourcecode import resource_budget as _rb
+        from sourcecode.progress import last_known_phase
+
+        snapshot: dict = {
+            "recorded_at": time.time(),
+            "command": command,
+            "reason": reason,
+            "pid": os.getpid(),
+            "argv": sys.argv[1:],
+            "phase": last_known_phase(),
+            "peak_rss_mb": _rb.peak_rss_mb(),
+            "python": sys.version.split()[0],
+            "platform": sys.platform,
+        }
+        snapshot.update(extra)
+        directory = _diagnostics_dir()
+        directory.mkdir(parents=True, exist_ok=True)
+        name = f"{int(snapshot['recorded_at'])}-{os.getpid()}-{uuid.uuid4().hex[:8]}.json"
+        path = directory / name
+        path.write_text(
+            json.dumps(snapshot, indent=2, sort_keys=True, ensure_ascii=True, default=str),
+            encoding="utf-8",
+        )
+        _prune(directory)
+        return str(path)
+    except Exception:
+        return None
+
+
+def _prune(directory: Path) -> None:
+    try:
+        files = sorted(directory.glob("*.json"), key=lambda p: p.stat().st_mtime)
+        for stale in files[: max(0, len(files) - _MAX_SNAPSHOTS)]:
+            stale.unlink(missing_ok=True)
+    except Exception:
+        pass

sourcecode/posture.py

@@ -1424,10 +1424,19 @@ def _posture(
     # stack IS modelled cannot be told apart from a build that does not publish
     # it at all, and the catalogue promises it.
     from sourcecode.non_coverage import stack_fit as _stack_fit
+    from sourcecode.spring_model import BeanGraph as _BeanGraph
     from sourcecode.spring_model import spring_detected as _detect_spring
 
+    # BUG-03 (5.9.25 audit): same gap as `risk`'s call — `stack_fit`'s
+    # marginal-detection disclosure was unreachable here without a footprint.
+    _beans = _BeanGraph.build(cir).beans
     payload["stack_fit"] = _stack_fit(
-        _detect_spring(cir), security_frameworks=_security_frameworks(cir)
+        _detect_spring(cir),
+        security_frameworks=_security_frameworks(cir),
+        spring_footprint={
+            "spring_beans": sum(1 for bean in _beans.values() if bean.spring),
+            "java_files": len(cir.files),
+        },
     )
     # Which chain is wired is a fact about a bean; what that chain permits is the
     # fact about the request, and it is the one a reviewer asked for.

sourcecode/progress.py

@@ -136,6 +136,25 @@ def _terminal_capable() -> bool:
     return True
 
 
+#: The most recent phase any `Progress` in this process entered, and when.
+#: Module-level rather than per-instance so the ALT-03/NEW-01 diagnostic dump
+#: (fired from the top-level exit guard in `cli.py`, which holds no reference
+#: to the command's own `Progress` object) can report what phase a run was in
+#: when it turned out to have produced nothing — the one fact every affected
+#: audit run recorded manually and this product did not.
+_LAST_PHASE: "Optional[dict]" = None
+
+
+def last_known_phase() -> "Optional[dict]":
+    """The last `(phase, entered_at)` recorded by any `Progress` here, or None."""
+    return _LAST_PHASE
+
+
+def _record_phase(phase: str) -> None:
+    global _LAST_PHASE
+    _LAST_PHASE = {"phase": phase, "entered_at": time.time()}
+
+
 class Progress:
     """In-place spinner on stderr.
 
@@ -229,6 +248,7 @@ class Progress:
 
     def start(self, phase: str = "initializing") -> "Progress":
         self._t0 = time.monotonic()
+        _record_phase(phase)
         with self._lock:
             self._phase = phase
             self._phase_t0 = self._t0
@@ -254,6 +274,7 @@ class Progress:
         return self
 
     def update(self, phase: str) -> None:
+        _record_phase(phase)
         with self._lock:
             self._phase = phase
             self._phase_t0 = time.monotonic()

sourcecode/reconciliation.py

@@ -259,7 +259,8 @@ def _rule_parse_coverage(
 def parse_structure_findings(
     unbalanced_files: "frozenset[str]",
 ) -> list[ReconciliationFinding]:
-    """Files whose braces do not balance once comments and strings are masked.
+    """Files whose braces or parentheses do not balance once comments and
+    strings are masked.
 
     **E-10.** `BrokenSyntax.java` on spaghetti-api has two opening braces and no
     closing one — invalid Java by any compiler — and the extractor recovered a
@@ -268,6 +269,13 @@ def parse_structure_findings(
     indefensible is that the payload said nothing, so a consumer read those
     symbols with the same confidence as symbols from a file that parses.
 
+    **BUG-01 (5.9.25 audit).** Brace balance alone is a narrow net: `int x = 5`
+    missing its `;`, or `void broken( {` missing its `)`, both extract a clean
+    class+method pair with balanced braces, so the file passed as clean with no
+    disclosure. A masked paren-balance check catches that second shape — a
+    parameter or argument list that never closes is invalid Java regardless of
+    the braces around it — without a real Java grammar.
+
     Distinct from `parse_coverage`, which fires on *total* extraction absence.
     This rule fires when extraction succeeded over source that cannot be
     complete, so what it qualifies is confidence, not presence.
@@ -280,10 +288,11 @@ def parse_structure_findings(
             rule="parse_structure",
             symbols=tuple(lost),
             detail=(
-                f"{len(lost)} Java file(s) do not have balanced braces once comments "
-                "and strings are masked — they cannot be valid Java. Symbols "
-                "recovered from them are a partial reading: members after the "
-                "unclosed block, and the type's own end, are not modelled."
+                f"{len(lost)} Java file(s) do not have balanced braces or "
+                "parentheses once comments and strings are masked — they "
+                "cannot be valid Java. Symbols recovered from them are a "
+                "partial reading: content after the unclosed block or "
+                "argument list, and the type's own end, are not modelled."
             ),
         )
     ]

sourcecode/release_info.py

@@ -27,7 +27,7 @@ from typing import Any, Optional
 #: The date `__version__` was released, from that version's CHANGELOG entry.
 #: `tests/test_release_info.py` fails the build if the two disagree, so this is
 #: a copy of a fact rather than a second authority for it.
-RELEASE_DATE = "2026-09-01"
+RELEASE_DATE = "2026-09-02"
 
 #: Releases per day, measured over the latest 30 CHANGELOG releases (the same
 #: computation the test re-runs). The nine-day interval before 5.9.0 lowers

sourcecode/repository_ir.py

@@ -6824,7 +6824,19 @@ def build_repo_ir(
                 })
         # E-10: a brace that never closes is not a style question — it means the
         # symbols recovered from this file stop somewhere the reader cannot see.
-        elif symbols and source.count("{") != source.count("}"):
+        #
+        # BUG-01 (5.9.25 audit): brace balance alone missed most real syntax
+        # errors — `int x = 5` with a missing `;`, or `void broken( {` with a
+        # missing `)`, both extract a clean class+method symbol pair with
+        # balanced braces, so the file vanished with no disclosure at all. An
+        # unbalanced *paren* count, masked the same way, catches the second
+        # shape cheaply without a real Java grammar: a method or call whose
+        # parameter/argument list never closes is invalid Java regardless of
+        # what its braces do.
+        elif symbols and (
+            source.count("{") != source.count("}")
+            or source.count("(") != source.count(")")
+        ):
             _masked_src = _mask_java(source)
             if _masked_src.count("{") != _masked_src.count("}"):
                 _unbalanced_files.append(rel_path)
@@ -6833,6 +6845,13 @@ def build_repo_ir(
                     "status": "recovered",
                     "reason": "unbalanced_braces",
                 })
+            elif _masked_src.count("(") != _masked_src.count(")"):
+                _unbalanced_files.append(rel_path)
+                _parse_failures.setdefault(rel_path, {
+                    "path": rel_path,
+                    "status": "recovered",
+                    "reason": "unbalanced_parens",
+                })
         _per_file.append((rel_path, package, raw_imports, symbols))
         if "@" in source:
             _parsed_refs = _extract_annotation_type_refs(source, package)

sourcecode/resource_budget.py

@@ -136,9 +136,18 @@ def configured_ceiling_mb(*, default: Optional[float] = None) -> Optional[float]
     return value
 
 
-def disclosure() -> dict[str, Any]:
-    """Return stable metadata describing the observed process footprint."""
-    ceiling = configured_ceiling_mb()
+def disclosure(*, default_ceiling_mb: Optional[float] = None) -> dict[str, Any]:
+    """Return stable metadata describing the observed process footprint.
+
+    REG-02 (5.9.25 audit): a successful `--agent` run published
+    `configured_max_rss_mb: null` even though `_root_memory_seam` was
+    actively enforcing `DEFAULT_AGENT_RSS_CEILING_MB` at every phase boundary
+    for that same run — this function had no way to know the mode-specific
+    default applied. `default_ceiling_mb` lets a caller that knows which
+    default is in force for the active command say so; `exceeded()` already
+    takes the same parameter for the enforcement side of this exact fact.
+    """
+    ceiling = configured_ceiling_mb(default=default_ceiling_mb)
     peak, basis = peak_rss_sample()
     return {
         "unit": "MB",

sourcecode/risk.py

@@ -1957,8 +1957,23 @@ def _assemble_payload(
     # rather than by measurement. AUD-596-D13: published in both cases — the
     # model is already built, so it costs nothing, and a catalogued sub-schema
     # that appears only on the repositories nobody asked about is not published.
+    # BUG-03 (5.9.25 audit): `stack_fit`'s marginal-detection disclosure
+    # (`fit: "partial"`, published when Spring beans are under 10% of the
+    # scope) has existed since AUD-596-D13 but was unreachable here — this
+    # call never passed `spring_footprint`, so `java_files` stayed 0 and the
+    # branch that reads it could never fire, regardless of how marginal the
+    # detection actually was. `spring-audit`'s own call
+    # (`spring_security_audit.py`) already computes this the same way.
+    from sourcecode.spring_model import BeanGraph as _BeanGraph
+
+    _model = getattr(composer, "model", None)
+    _beans = (_model.bean_graph if _model is not None else _BeanGraph.build(composer.cir)).beans
     payload["stack_fit"] = non_coverage.stack_fit(
-        spring_detected(composer.cir, model=getattr(composer, "model", None))
+        spring_detected(composer.cir, model=_model),
+        spring_footprint={
+            "spring_beans": sum(1 for bean in _beans.values() if bean.spring),
+            "java_files": len(composer.cir.files),
+        },
     )
     # C3-87 (and C2-31's rule, applied to the second consumer): the counts above
     # are arithmetic over what was composed, and on a cut run that is a truncated

sourcecode/selftest.py

@@ -954,23 +954,36 @@ def run_selftest(
     counts = {status: 0 for status in (PASS, FAIL, NOT_APPLICABLE, ERROR)}
     for result in results:
         counts[result["status"]] = counts.get(result["status"], 0) + 1
+    # R-05 (5.9.25 alternative audit): `answer_bounds.derive` renders each
+    # limitation by picking `id` first, and `id` here was a fixed category
+    # slug — so a `selftest` payload that failed on ten named rows carried
+    # exactly one generic sentence in `_meta.answer_bounds.gaps`, with the
+    # actual `rows[]` this payload already publishes never referenced. Each
+    # entry now names which rows, in `reason` (what `_summarise` now prefers)
+    # and in `rows` (for a consumer that wants the list itself).
+    errored_rows = [r["row"] for r in results if r["status"] == ERROR]
+    failed_rows = [r["row"] for r in results if r["status"] == FAIL]
     limitations: list[dict[str, Any]] = []
     if counts[ERROR]:
         limitations.append({
             "id": "selftest_rows_not_run",
-            "reason": f"{counts[ERROR]} ledger row(s) could not run",
+            "reason": f"{counts[ERROR]} ledger row(s) could not run: "
+                      f"{', '.join(errored_rows)}",
             "count": counts[ERROR],
+            "rows": errored_rows,
         })
     if counts[FAIL]:
         limitations.append({
             "id": "selftest_rows_failed",
-            "reason": f"{counts[FAIL]} ledger assertion(s) did not hold",
+            "reason": f"{counts[FAIL]} ledger assertion(s) did not hold: "
+                      f"{', '.join(failed_rows)}",
             "count": counts[FAIL],
+            "rows": failed_rows,
         })
     if unknown:
         limitations.append({
             "id": "selftest_unknown_rows",
-            "reason": "requested ledger rows do not exist",
+            "reason": f"requested ledger rows do not exist: {', '.join(unknown)}",
             "rows": unknown,
         })
     return {

sourcecode/watch_loop.py

@@ -101,7 +101,7 @@ class WatchEvent:
     """One tick's answer."""
 
     tick: int = 0
-    status: str = "idle"            # idle | changed | error
+    status: str = "idle"            # watching | idle | changed | error
     changes: Changes = field(default_factory=Changes)
     analysis: "Optional[dict]" = None
     error: str = ""

{sourcecode-5.9.25.dist-info → sourcecode-5.9.26.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.9.25
+Version: 5.9.26
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -59,7 +59,7 @@ Description-Content-Type: text/markdown
 > question. All analysis is local and deterministic; see [Privacy](#configuration--privacy)
 > before inspecting a repository whose telemetry policy you need to control.
 
-![Version](https://img.shields.io/badge/version-5.9.25-blue)
+![Version](https://img.shields.io/badge/version-5.9.26-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -290,7 +290,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.9.25 — and, on a build that has aged,
+ask version                    # ask 5.9.26 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.9.25.dist-info → sourcecode-5.9.26.dist-info}/RECORD

@@ -1,10 +1,10 @@
-sourcecode/__init__.py,sha256=MtlfIgDZzDrOnmDuTETquhbQ9yFiHFleLZ9oUJXeyhc,309
+sourcecode/__init__.py,sha256=yjkRwJomDMH7QIDQ_QztOQiiuBgCA9f6tISLAKRx-MI,309
 sourcecode/__main__.py,sha256=qDFVkobwsdZrX0B3stiRqsUNivVpybKO-egzAwCW4xw,165
-sourcecode/_build_commit.py,sha256=lOLiVZBzoZPQ5WEGzYe1auvTEGaaZpO4xh_-E6axm2s,11687
+sourcecode/_build_commit.py,sha256=YbiK39JRRfcLPBQ4MwI3XHWbAxoSspOo30E_bkKfgTA,11834
 sourcecode/access_drift.py,sha256=uYD8ipiEAaTnkz0IhG6ujU_KI3LghdY-6ycurs-BZnc,9355
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/analysis_budget.py,sha256=ZuNEboPF8A6GK-_V7WNt92ezgriga7_Rbr-vvSN4UEE,4183
-sourcecode/answer_bounds.py,sha256=mZHTO41wgzq4o6jk1X4QuqOv788rE208AFDvcE0JUz4,11569
+sourcecode/answer_bounds.py,sha256=1okgQxXSz8Tjl5X54Jg9bVL0u1MvmrMCdM1BO_gscf0,12221
 sourcecode/archetype.py,sha256=V_s5grgpbanrXb8qGEQb73W5Cg5iKW9FQHWKgg5KM8Y,41201
 sourcecode/architectural_baseline.py,sha256=9ds-ZYw4dEJUKWZSdq_ufHq7d2AXnMbEHteSQlT7iu8,26468
 sourcecode/architectural_delta.py,sha256=JhZVmA0gYUryt4x4ieVuxPbcvoBygHgADZaYJ_o4gdk,15142
@@ -35,7 +35,7 @@ sourcecode/change_plan.py,sha256=drAoDsqFplutCLc6Y0xue7sYkTls0SpYh7aOXvttv3I,129
 sourcecode/ci_output.py,sha256=X4NRokWWMRF9Ex8OQrEO2g04GzJ00GDP5zYIoqI9YCc,4625
 sourcecode/cir_graphs.py,sha256=RytqSv1WF8kdlfXj2fPQz16LY4akS2kyThbdWL8beCQ,14835
 sourcecode/classifier.py,sha256=ft1RGPIChvO84q2QMrEH93x1J15AXNWMh26lnxvoRao,26476
-sourcecode/cli.py,sha256=NVh5xaPvG4woswb_pM-O7EmpN6tmiQQyV7kscgARZYA,962254
+sourcecode/cli.py,sha256=-iHhbHsc0vm8eIuBpGNPm8B3Il92Ynl8azz3HeW8aFw,967004
 sourcecode/click_runtime.py,sha256=K2cUdzFhbd6uEUpucWptXE89_z-ZNZGsqgd-34usUXk,1890
 sourcecode/client_calls.py,sha256=YOPnfRZzRyqmdHvXSVeiunW8cuiuCuWXacNIQRgKMCw,22640
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
@@ -65,6 +65,7 @@ sourcecode/deployment_prefix.py,sha256=kPHPT6ZLg6CnMqCp9QwhbNNjDyS0sXAfKlPtSHUMg
 sourcecode/detach.py,sha256=Otoe7Egcn5Mcl_cRAstXLyDWA5D7dPAhOv39T5fJYpo,8257
 sourcecode/doc_analyzer.py,sha256=05bjTUbDbmnbajD_cgRnACzS8T7xxBKVX4CjkJlhZg8,24411
 sourcecode/dynamic_argument_surface.py,sha256=u6zJoY-zChYVw1-SrgiyAq-rUwqMZ5ZqBwLfbPJ_8ng,2960
+sourcecode/empty_answer_diagnostics.py,sha256=bNi4rc0ZK6rK8WzbNXYzVSVbgm8h6z9gGI9OF1K503o,3891
 sourcecode/empty_reach.py,sha256=evKK2DyHbjqe_Wimq4-HfgD40Fdk-j6WiZwQaVXQ5t4,15671
 sourcecode/endpoint_disposition.py,sha256=WXNoHIjQW2uORG54zUygi8LUJKWj6E_y8q9rps2rWoU,9595
 sourcecode/endpoint_literals.py,sha256=Qf4gTZzvNSFDGDuOvF0YRL9NvaYKKj24klhR5LIOaXc,3263
@@ -124,23 +125,23 @@ sourcecode/path_filters.py,sha256=YWhiy6mARZ8QPDMA6O274jbjHSk6pKE_LMvj8ge_Nbs,15
 sourcecode/perf.py,sha256=hB0LE0fhH_TwePXmIdtxhTyol6GBTwVBkAcxJa7MYpg,67254
 sourcecode/phased_run.py,sha256=vvLUUZkt4jfvzLsPBwqjgoiSXeahVnDhzbBWTQt6dDk,24972
 sourcecode/pipe_contract.py,sha256=PML0Er5d8uDyec4OrdUXuyqHbGPUYndjeaKUjkFz2u4,8369
-sourcecode/posture.py,sha256=OQX3r0wBzdRNwMs6fuJcpFKPuyoC_uAkAVoKsYuwqgE,87190
+sourcecode/posture.py,sha256=5vJNIzuj9iWWuyJ0EPEcMkGtILfYXNrFsr1S4pA6tyg,87614
 sourcecode/pr_comment_renderer.py,sha256=239PmJdf95av_ZW236C7_tvq_ahECeuF9AZxrheJ4OQ,15573
 sourcecode/pr_impact.py,sha256=8RgTJgvEThezh-Vm65eiFvJBdb45VjcbewEk5P144-0,39184
 sourcecode/pr_risk.py,sha256=Qbj1aK-JsdTQd_nji_-RaZAL3WUbwqDg9aH-cHQkoog,11354
 sourcecode/prepare_context.py,sha256=QsJiKoJRNn5_1adyBbKguH_wiaM8hpPLE0fLG9J4ilU,245016
 sourcecode/product_info.py,sha256=rpuCDf0KM2SD-WP8vw2tjdcbhWPsOGEVjSWqS8fkzlo,4966
-sourcecode/progress.py,sha256=qA21SmbPoruAvulSsyYwIU75tIx0-iBpNxqFaYzPlo4,27625
+sourcecode/progress.py,sha256=00PJTq1yoZQt4JNQFtxLEuyO0Hq4zL5OYbb214Iw9Tc,28445
 sourcecode/provenance.py,sha256=gLbsLv0gze7k7ChM4i5M3MwKfFPzs8wzM72rUd2C5sM,7342
 sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,12970
 sourcecode/readiness_timeline.py,sha256=KjghC1MWH7Tzto97TBR3N0F8FkR87w5z7lZ1QsWvAQE,8506
 sourcecode/readonly.py,sha256=8MJfg5E5gjwHN2f2qw0RM7fdzxTFeOsdGwLNKHCh-xc,7462
-sourcecode/reconciliation.py,sha256=pmqc0JNcAagKGWDcjH2rLDlKlAbfJCVUj86vV--YEXQ,35689
+sourcecode/reconciliation.py,sha256=EtYzWaYN7Nng-lfL6jNVqlZl6CL6QvEi0xf8xYQYGfg,36213
 sourcecode/redactor.py,sha256=SB4hwIvg8h-hvcqKcDWaZvA-aSyn-at-BIRwa0tUv5E,3227
 sourcecode/reference_facts.py,sha256=mx7H-Ax5y8sKAQHrnJCXlgjkUzqZtQTByv9Zy2lxKQQ,15500
 sourcecode/regress.py,sha256=6rlFP2rsIzVKAA0spJ66To528GyBtnRI2Zg9vAGq8kQ,13264
 sourcecode/regulatory_pack.py,sha256=xVWd8hYg6MjGfkFP8UWcYeLmNMxEk8k2uSbTcnGMbhg,3421
-sourcecode/release_info.py,sha256=deK17VdMaSvMYhwjpfotdnNyorDbhfRU0pZKks1NRgk,5918
+sourcecode/release_info.py,sha256=vYe0WiVq1H7D5h07cvTfNRXi_43pJK3SC7lcaTQG6pc,5918
 sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcrw,9408
 sourcecode/remediation_diff.py,sha256=fGYqPmQF7bO54L8ivztX5PgmW4fVu54gNcG6OEQ192U,9730
 sourcecode/remediation_flow.py,sha256=OFlrNCD2dKw1WlX5cHqVl1yrQZHi2TjCThH8Q3X1PwI,10294
@@ -148,10 +149,10 @@ sourcecode/remediation_report.py,sha256=z28x-u618feU2d7ol_FW7IfhUOq6iETCfdpl7zJC
 sourcecode/remedies.py,sha256=V2_cD4pLq8bKRkzF-3RGFoiu1xWYZS384WDVp1MrlZw,10225
 sourcecode/rename_refactor.py,sha256=oASZIf7TxcOBy3RQ0FuOe-4HlNW_JOu9RW9JqCxGNBE,17225
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
-sourcecode/repository_ir.py,sha256=O6d1IWp0-RlJyx4OHBGcflvNA0CgsTS7td7UlI9t7S8,528687
-sourcecode/resource_budget.py,sha256=wqe6WuXlEfxAgBGLj0QX47HmV8WldaYWQjLe-TMR6hk,7938
+sourcecode/repository_ir.py,sha256=iDPcbQ3S17td_b9l2oS-p2vUnt-tov83f8I60Tx1bxE,529667
+sourcecode/resource_budget.py,sha256=gVPjiMlTB9jWR2zbZIuyWma15ccSNqHXwWb6Rwd_HmQ,8527
 sourcecode/ris.py,sha256=HsLVHZfseEHNqMyxrj8SvrzUK7jE_85lsWjHtsEw9ik,29196
-sourcecode/risk.py,sha256=rG7fqDIjyhtvB0Qje0d2ZEUl5kemMBwbuOJG8ZJxqrQ,102552
+sourcecode/risk.py,sha256=I9nPKLI0C9EL2gZdRoPDSLK8FuLLBtu4EFzGP1xWK70,103407
 sourcecode/risk_model.py,sha256=RoC-G15qZP5BLEwwmcr4eJ0APgvIbh1WTqhTVT-5YFE,10895
 sourcecode/rule_catalog.py,sha256=7lwyNe_sA7M9KtoKXVf9qQYBlo7VEPQ3IK1KiGSqTts,5408
 sourcecode/rule_pass.py,sha256=Z1UBe0y4WOokGVeOfn325jlphdEdarM_oGNQ9sHzcrY,15157
@@ -169,7 +170,7 @@ sourcecode/security_config_scan.py,sha256=LU8gfNUBB6wjKR8jkK-qRKtUrbkHZ301_Xsk6h
 sourcecode/security_posture.py,sha256=FS3WYU9C2_KP4aO0SdkFZ808CMWIvKYyTMcCE9UaSWw,57984
 sourcecode/selection_contract.py,sha256=O3q_zHBgUsp1SDukqmH9nOUO6HxLFH_7fAqVL7JMV_A,1974
 sourcecode/self_audit.py,sha256=ZK6VZwbkTL66f4Q4U_JD6sdl6KjQ4DvtPcn5XqGcZDY,11541
-sourcecode/selftest.py,sha256=Ci7hF2khCxcw0pSVKMh7DlrYuutU9ojt31IWAsMzdlg,42461
+sourcecode/selftest.py,sha256=hQA4SwOhikeetesHMzDWPl1izdEsrT4MaUfmcvlCCX0,43317
 sourcecode/semantic_analyzer.py,sha256=xGwQvhU9xeOlZ4N-TPXFZT8HBHx4Rg0nPwu8nDFl00Y,95621
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
 sourcecode/semantic_integration_engine.py,sha256=ZjyKJKOj-adScWlYBuWx8Ee_P0F4_OImUJVnCYgopuU,20952
@@ -205,7 +206,7 @@ sourcecode/verify_rules.py,sha256=R3l6nLT6WQzUNBzxtmnxyGZcKj9qMDW38Y0c0gNdCGk,19
 sourcecode/version_check.py,sha256=CHp6ZxTIfo8kyHPCBgJA1uFC0xQCoXMuuOfrW8QTL8o,4942
 sourcecode/vex.py,sha256=0-gdUPbKD9XgA3y_ASc_DE-TaHKzruA5znRsMYUeAoY,3399
 sourcecode/waivers.py,sha256=VlGsvpGt9K5ih3q7P5-co1ob2IROyZDSlVLMZyLbLJU,14874
-sourcecode/watch_loop.py,sha256=Zj8yBJOnkyJSL41JeXjkakAZy9vD3y-lX2wDOPS6o7c,7770
+sourcecode/watch_loop.py,sha256=yL3XRmCxN_enaG-2GyuTzp_c1Uma2HkGeo7njg1IhQA,7781
 sourcecode/wired_surface.py,sha256=M5m2gDufCA4xUlU9z6CRSJeJBfbMeedkSXpvJGKnPT8,12066
 sourcecode/workspace.py,sha256=H2X1GkIIYqiODJsTu8aLIi2RceuXHYdzwgGrYf92DZU,8277
 sourcecode/defect_classes/__init__.py,sha256=Y_8W7fnchyFWkR4yB_PE1q8b5-JxF3kEH3EiihSI4eg,8038
@@ -275,13 +276,13 @@ sourcecode/telemetry/consent.py,sha256=-Wb8BFGXEexOs8M0Eja7F-T6ZtLNPeRoZnHcHvlP7
 sourcecode/telemetry/events.py,sha256=l3Z2SQUO4_C2D2ItXOOdVNimAmHedUHnUxqYFTxnsAE,2900
 sourcecode/telemetry/filters.py,sha256=-lqT2oorECuqEIdeHb--7AZ6BCaUx0bya720a-Z5x6w,7335
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode/_docs/DEFECT-LEDGER.md,sha256=JyRLeRBjV5luaHrh2w1U2TdK6l3erTRwrCS9kB8wxco,1174219
+sourcecode/_docs/DEFECT-LEDGER.md,sha256=u8hxZPGvCBg2_XHVBgsZFkkiK8XIXaqcd4S2PV3SbYE,1181653
 sourcecode/_docs/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
 sourcecode/_docs/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode/_docs/USER_GUIDE.md,sha256=s4H1q5ADDn0IYDzTyXFFQSojOH7ko8clwhNU0CKfcTk,108622
-sourcecode-5.9.25.dist-info/METADATA,sha256=UtJhhuSIbv7yKfhmeQvvy1-kq6gMqjoCMEVAlPLr8W0,67653
-sourcecode-5.9.25.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.9.25.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.9.25.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
-sourcecode-5.9.25.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode-5.9.25.dist-info/RECORD,,
+sourcecode/_docs/USER_GUIDE.md,sha256=kNvyTAwgllFoFE-8FP9UnLF1SYuBXLkQKWiwa8HL-Ug,108622
+sourcecode-5.9.26.dist-info/METADATA,sha256=iTQwypyGJ6UIq6q8qhBKPcAtUYECrpKwY-EAHfiGxo0,67653
+sourcecode-5.9.26.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.9.26.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.9.26.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
+sourcecode-5.9.26.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
+sourcecode-5.9.26.dist-info/RECORD,,