sourcecode 5.9.3__py3-none-any.whl → 5.9.6__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.9.3"
+__version__ = "5.9.6"

sourcecode/_build_commit.py

@@ -1,5 +1,5 @@
 """Generated at build time by hatch_build.py. Do not edit (AUD-592-D04)."""
 
-BUILD_COMMIT = 'a0b0aba2d197881146491fccf60155b9d776bdb8'
-CLOSURE_PROVENANCE = {'Window': {'commit': '', 'status': 'uncited'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}}
-CLOSURE_COVERAGE = {'closed_rows': 113, 'present': 88, 'absent': 0, 'unresolved': 0, 'uncited': 25, 'unknown': 0}
+BUILD_COMMIT = '9bb90b227511dc71932bd66cf2ad103fd401314d'
+CLOSURE_PROVENANCE = {'Window': {'commit': '', 'status': 'uncited'}, '`ASK-FIELD-01`': {'commit': '829f9fa', 'status': 'present'}, '`ASK-FIELD-02`': {'commit': '6a659fa', 'status': 'present'}, '`ASK-FIELD-03`': {'commit': '55b0d51', 'status': 'present'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}}
+CLOSURE_COVERAGE = {'closed_rows': 116, 'present': 91, 'absent': 0, 'unresolved': 0, 'uncited': 25, 'unknown': 0}

sourcecode/_docs/DEFECT-LEDGER.md

@@ -16,6 +16,70 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
+**Field simulation on TeaVM, 2026-08-27 — `ASK-FIELD`.** A deep, non-destructive
+run of ASK `5.9.5` against `/Users/user/Documents/workspace/testing/teavm`
+(4,024 files; 3,539 Java files) exercised the main analysis commands, packs,
+baseline lifecycle, contracts and cache lifecycle. The checkout stayed clean
+and the prior release closure set showed no regression. Three behaviours were
+reproduced and are now closed below: cache warming was not visible to subsequent
+processes, root README summary extraction emitted a Markdown-link fragment, and
+Spring presence disagreed between `spring-audit` and `migrate-check`. The run
+also confirmed that endpoint zero-result disclosure, legal input refusals,
+baseline collision protection, pack `UNVERIFIED` semantics and target
+non-mutation remain intact. This is field evidence, not an external audit; it
+must not be represented as a release certification.
+
+| ID | Severity | Status | Evidence and required closure |
+|---|---:|---|---|
+| `ASK-FIELD-01` | P1 | **closed 5.9.6 (`829f9fa`)** | Explicit warm persists synchronously in its declared namespace; the fresh-process TeaVM lifecycle battery passes. |
+| `ASK-FIELD-02` | P1 | **closed 5.9.6 (`6a659fa`)** | Member annotation imports resolve from the declaring class and confirmed Spring evidence drives presence; TeaVM and Spring control parity passes. |
+| `ASK-FIELD-03` | P2 | **closed 5.9.6 (`55b0d51`)** | Split Markdown badge continuations are discarded without changing normal inline-link unwrapping; the real TeaVM summary regression passes. |
+
+The simulation did not open the Kotlin/Java/Node classification as a defect:
+the signals were explicitly confidence-scored and may represent a legitimate
+polyglot repository. It also did not open zero endpoints, minimum token-budget
+refusal, unsupported `explain --compact`, or contractless `verify`: each matched
+the declared contract and non-coverage in the observed run.
+
+**External audit intake `AUD-610`, release 5.9.3 — 2026-08-27.** The attached
+report scored the build **7.2/10** after five parallel batches and approximately
+120 invocations. It verified a clean target repository, no Java-file changes,
+no commits and no unauthorized persistence. The report praised structured errors,
+output bounding for agents and dry-run safety, but identified 17 defects or
+follow-ups. The full future closure criteria are maintained in
+[`DEVELOPMENT-ROADMAP.md`](DEVELOPMENT-ROADMAP.md); the ledger records their
+status boundary here so a later fix cannot silently close only one consumer.
+
+The report's P1 reliability cluster was `AUD-610-B01` (root YAML compact/agent
+zero-byte failure), `AUD-610-B02` (all `audit-report` formats zero-byte failure),
+`AUD-610-B03` (`risk --limit 0` legal-boundary crash) and `AUD-610-B04`
+(`timeline --since` pays for work then fails silently). None reproduced in the
+TeaVM `5.9.5` simulation; they are held as release-artifact verification items,
+not open deterministic defects.
+
+The remaining rows are: `AUD-610-B05` consumer-path admission (**closed
+5.9.4**, `86ed0a3`); `AUD-610-B06` invalid-input exit parity (**closed**,
+`ae2e8b1`, `f4b4f77`); `AUD-610-B07` command/path typo disambiguation
+(**closed**, `178aa6d`); `AUD-610-B08` pack
+gate ref admission (**closed 5.9.4**, `6690a7f`); `AUD-610-B09` inaccurate
+root help for `--files -` (**closed**, `f66cd28`, `52bcc36`); `AUD-610-B10`
+not-found envelope parity (**closed**, `c07581a`);
+`AUD-610-B11` malformed CVE feed status (**closed 5.9.4**, `abc6319`);
+`AUD-610-B12` unknown posture profiles (**closed 5.9.4**, `f7335b1`, `6e75646`);
+`AUD-610-B13` baseline overwrite (**closed 5.9.4**, `cbe4da9`);
+`AUD-610-B14` CLI/MCP population explanation (**closed**, `7c9b23e`);
+`AUD-610-B15` no-history contract parity (**closed**, `a130637`);
+`AUD-610-B16` UTF-8 replacement character (**platform verification hold**);
+and `AUD-610-B17` one-off retrieve silent failure (**investigation hold, not
+reproduced**).
+
+Commercially, the report recommends conditional pilot/adoption and a provisional
+`$35-50/developer/month` band, requiring closure of the flagship zero-byte paths
+before an annual commitment. This is recorded as external market evidence, not
+as a pricing approval or a product claim. The destructive commands excluded by
+the auditor remain outside the evidence set because only their dry-run paths were
+executed.
+
 **External `5.9.0` audit received, 2026-08-26 - `AUD-608`; corrections shipped in `5.9.1`.** The audited
 revision is the released `5.9.0` commit. The three confirmed corrections are
 closed: `AUD-608-C01` (P1, `cve` now declares its static inventory scope,

sourcecode/_docs/USER_GUIDE.md

@@ -46,15 +46,30 @@ CLI commands        — impact, endpoints, spring-audit, explain, … each a pro
 The key idea: the extraction is **content-addressed**. Commands reuse the parse cache and,
 where their analysed scope matches, the shared Canonical IR; `ask cache model` names what a
 warm buys for each command rather than implying that every projection costs the same. In
-5.9.3, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
+5.9.6, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
 model across all declared label seeds. (The extraction and consumption contract is fixed in
 the architecture ADRs 0001–0004 under `docs/architecture/`.)
 
 The current external pack audit intake is tracked in
 [`AUDIT-2026-08-26-EXTERNAL-5.8.28-PACK.md`](AUDIT-2026-08-26-EXTERNAL-5.8.28-PACK.md);
-the two pack fixes are included in release 5.9.3, with release-artifact verification
+the two pack fixes are included in release 5.9.6, with release-artifact verification
 remaining for detached execution and pack evidence.
 
+### Reliability contracts in 5.9.6
+
+Invalid analysis inputs fail before expensive work and use the structured
+`INVALID_INPUT` envelope: a missing `--consumer` repository, a malformed CVE
+feed, or an unresolved `pack gate --since` ref is never treated as an empty or
+`UNVERIFIED` result. `posture --diff` reports unknown profiles when the project
+declares profiles. `baseline capture` does not replace a snapshot already stored
+for the same commit; use `--auto` when a pipeline should skip it.
+
+With `endpoints --compact`, `endpoints: []` means the rows were deliberately
+omitted. Read `endpoints_note`, `endpoints_omitted` and `total`; an empty list is
+not evidence that the API has no routes. `impact` and `impact-chain` return exit
+code 1 when the target is unresolved, including when the selected repository
+contains no Java sources.
+
 ---
 
 ## The semantic engine
@@ -221,7 +236,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.9.3
+# ask 5.9.6
 ```
 
 Requires Python 3.9+.

sourcecode/architectural_baseline.py

@@ -445,11 +445,15 @@ def _announce_ask_dir(ask_dir: Path) -> None:
 
 
 def write_baseline(baseline: dict, out_dir: Path) -> Path:
-    """Write `baseline` as deterministic JSON under `out_dir`; return the file path."""
+    """Write a new baseline without replacing an existing commit snapshot."""
     _readonly.guard(out_dir, what="baseline history directory")
     out_dir.mkdir(parents=True, exist_ok=True)
     protect_ask_dir(out_dir)
     path = out_dir / _baseline_filename(baseline)
+    if path.exists():
+        raise FileExistsError(
+            f"Baseline already exists for commit {baseline.get('commit') or '-'}: {path}"
+        )
     path.write_text(
         json.dumps(baseline, sort_keys=True, indent=2) + "\n", encoding="utf-8"
     )

sourcecode/cli.py

@@ -4552,6 +4552,25 @@ def pack_gate_cmd(
         )
         raise typer.Exit(code=2)
     comparison_ref = since
+    if since is not None:
+        from sourcecode.git_checkout import RefError, repo_root, resolve_ref
+
+        try:
+            resolve_ref(repo_root(root), since)
+        except RefError as exc:
+            # Test doubles and callers that provide a non-Git analysis root are
+            # still handled by the existing pack component contracts. Only a
+            # ref failure in an actual repository is an invalid comparison.
+            if exc.code == "not_a_git_repository":
+                pass
+            else:
+                _emit_error_json(
+                    INVALID_INPUT_CODE,
+                    str(exc),
+                    ref=exc.ref or since,
+                    hint="Use a commit, tag, or local branch that exists in the repository.",
+                )
+                raise typer.Exit(code=2)
     if pr is not None:
         try:
             from sourcecode.github_diff import pull_request_base_ref
@@ -6968,7 +6987,6 @@ def main(
         return _core_dict_for_writers
 
     if not no_cache and _core_key and not _pipeline_error and not changed_only:
-        import atexit as _atexit
         import threading as _threading
 
         # Pre-compute core dict in the main thread — avoids the 5-second atexit
@@ -7009,9 +7027,18 @@ def main(
                 except Exception:
                     pass
 
-            _cache_write_thread = _threading.Thread(target=_write_cache_async, daemon=True)
-            _cache_write_thread.start()
-            _atexit.register(_cache_write_thread.join, 30.0)
+            # `cache warm` is an explicit persistence command. A daemon writer
+            # may still be serialising a large core when the child exits, so a
+            # successful warm could leave no entry for the next process to read.
+            # Keep the low-latency asynchronous path for ordinary analysis, but
+            # make the explicit warm contract synchronous and fail closed.
+            if os.environ.get("SOURCECODE_CACHE_SYNC") in ("1", "true", "yes"):
+                _write_cache_async()
+            else:
+                import atexit as _atexit
+                _cache_write_thread = _threading.Thread(target=_write_cache_async, daemon=True)
+                _cache_write_thread.start()
+                _atexit.register(_cache_write_thread.join, 30.0)
 
     # Update RIS with aggregated snapshot data (non-fatal side-effect).
     # Update RIS whenever git is available, even when L1/L2 cache is skipped
@@ -8578,6 +8605,9 @@ def impact_cmd(
       not_found  — no symbol and no substring. `risk_score` is null, never 0:
                    nothing was measured, which is not measuring zero.
 
+    An unresolved target exits with code 1, including when the selected repository
+    contains no Java sources; the structured answer still names `not_found`.
+
     \b
     NOTE: Free on repos up to the size limit; Pro unlocks enterprise-scale
     monoliths. Run 'ask license' for details.
@@ -8652,7 +8682,7 @@ def impact_cmd(
             format,
         )
         _emit_command_output(_nf_output, output_path, copy)
-        return
+        _exit_on_unresolved_target("not_found")
 
     _prog = Progress()
     _prog.start(f"building CIR ({len(file_list)} files) for impact analysis")
@@ -8902,7 +8932,8 @@ def endpoints_cmd(
         False, "--compact",
         help="Answer how exposed the repository is without listing every endpoint: "
              "counts by method, by security policy and by controller. Every count is "
-             "measured over the full population.",
+             "measured over the full population; an empty `endpoints` list means the "
+             "rows were intentionally omitted, not that no endpoints exist.",
     ),
     no_cache: bool = typer.Option(
         False, "--no-cache",
@@ -8980,6 +9011,13 @@ def endpoints_cmd(
     _enforce_format("endpoints", format)
 
     target = _admit_path(path)
+    if consumer:
+        # A missing consumer must fail before the server scan. Treating it as an
+        # empty consumer silently turns a requested join into an unfiltered one.
+        consumer = [
+            _admit_path(item, usage="endpoints --consumer")
+            for item in consumer
+        ]
 
     # AUD-591-A10: a prefix that is not a route selects nothing and reports it
     # as no exposure. Rejected before the analysis, so the shell rewrite is
@@ -9116,6 +9154,12 @@ def endpoints_cmd(
 
         _listed = len(data.get("endpoints", []))
         data["endpoints"] = []
+        data["endpoints_note"] = (
+            f"The endpoints list is intentionally omitted by --compact; "
+            f"{_listed} endpoint(s) were measured. An empty `endpoints` list "
+            "does not mean that the repository has no endpoints. Re-run without "
+            "--compact or narrow the request to retrieve rows."
+        )
         data["endpoints_omitted"] = {
             "total": _listed,
             "shown": 0,
@@ -10599,7 +10643,9 @@ def baseline_capture_cmd(
     ref: Optional[str] = typer.Option(
         None, "--ref",
         help="Human label for this baseline (e.g. a version or milestone). "
-             "The commit is recorded automatically when the path is a git repo.",
+             "The commit is recorded automatically when the path is a git repo. "
+             "A capture never overwrites an existing snapshot for the same commit; "
+             "use --auto to skip an already captured commit.",
     ),
     kind: str = typer.Option(
         "architecture", "--kind",
@@ -10750,7 +10796,16 @@ def baseline_capture_cmd(
     baseline = build_baseline(
         _cir, ref=ref, commit=git_commit(target_dir), record_env=record_env,
     )
-    written = write_baseline(baseline, dest)
+    try:
+        written = write_baseline(baseline, dest)
+    except FileExistsError as exc:
+        _prog.finish()
+        _emit_error_json(
+            INVALID_INPUT_CODE,
+            str(exc),
+            hint="Use `--auto` to skip an already captured commit, or capture a new commit.",
+        )
+        raise typer.Exit(code=1)
     _prog.finish()
 
     t = baseline["totals"]
@@ -10846,16 +10901,26 @@ def baseline_diff_cmd(
         _history = _resolve_history_dir((history_dir or target_dir).resolve())
         _series = load_series(_history)
         if not _series:
-            # No stored capture is not "nothing changed": there is no base to
-            # compare against, and answering with an empty diff would read as one.
-            _emit_error_json(
-                INVALID_INPUT_CODE,
-                f"No findings baseline is stored for '{target_dir}'.",
-                path=str(_history),
-                hint="Capture one first: ask baseline capture <path> --kind findings.",
-                expected="A stored findings-baseline-v1 JSON file.",
+            # Empty history is an honest query result, not invalid input. Keep
+            # diff/trend/attest interchangeable so automation can branch on one
+            # status instead of treating the same state as success in one command
+            # and a failure in another.
+            _emit_command_output(
+                _serialize_dict({
+                    "schema": "findings-delta-v1",
+                    "status": "no_history",
+                    "history_dir": str(_history),
+                    "message": "No findings baseline is stored; no delta was computed.",
+                    "non_coverage": [
+                        "Capture one first: ask baseline capture <path> --kind findings."
+                    ],
+                    "counts": {"new": 0, "resolved": 0, "unchanged": 0},
+                }, format),
+                output_path, copy,
+                success_msg=f"Findings delta written to {output_path} (no history)",
+                fmt=format,
             )
-            raise typer.Exit(code=1)
+            return
 
         _prog = Progress()
         _prog.start("auditing the working tree")
@@ -10886,15 +10951,18 @@ def baseline_diff_cmd(
         history = _resolve_history_dir((history_dir or target_dir).resolve())
         latest = latest_baseline_path(history)
         if latest is None:
-            _emit_error_json(
-                INVALID_INPUT_CODE,
-                f"No captured baseline found for '{target_dir}'.",
-                path=str(history),
-                hint=_BASELINE_HISTORY_HINT,
-                expected="A stored architectural-baseline-v1 JSON file, or a "
-                         "repository whose .ask/baselines holds one.",
+            _emit_command_output(
+                _serialize_dict({
+                    "schema": "architectural-delta-v1",
+                    "status": "no_history",
+                    "history_dir": str(history),
+                    "message": "No captured baseline was found; no delta was computed.",
+                    "non_coverage": [_BASELINE_HISTORY_HINT],
+                }, format),
+                output_path, copy,
+                success_msg=f"Baseline diff written to {output_path} (no history)",
             )
-            raise typer.Exit(code=1)
+            return
         baseline_file = latest
 
     if not baseline_file.exists():
@@ -11022,15 +11090,19 @@ def baseline_trend_cmd(
 
     baselines = load_baselines_dir(trend_dir)
     if not baselines:
-        _emit_error_json(
-            INVALID_INPUT_CODE,
-            f"No architectural baselines found in '{trend_dir}'.",
-            path=str(trend_dir),
-            hint=_BASELINE_HISTORY_HINT,
-            expected="A repository with a captured history, or a directory "
-                     "containing architectural-baseline-v1 JSON files.",
+        _emit_command_output(
+            _serialize_dict({
+                "schema": "architectural-trend-v1",
+                "status": "no_history",
+                "baseline_count": 0,
+                "points": [],
+                "hotspot_trends": [],
+                "non_coverage": [_BASELINE_HISTORY_HINT],
+            }, format),
+            output_path, copy,
+            success_msg=f"Trend written to {output_path} (no history)",
         )
-        raise typer.Exit(code=1)
+        return
 
     data = build_trend(baselines)
     output = _serialize_dict(data, format)
@@ -14519,7 +14591,9 @@ def posture_cmd(
     Two axes, and they are different questions. `--diff` holds the tree fixed
     and moves the profile set. `--diff-ref` (and `--since`) hold the profile set
     fixed and move the tree: *does this change what a client can reach without
-    authenticating?* That one takes `--fail-on` and is the per-PR gate.
+    authenticating?* That one takes `--fail-on` and is the per-PR gate. When the
+    repository declares profiles, `--diff` rejects a profile name outside that
+    population instead of comparing a configuration that does not exist.
 
     \b
     Examples:
@@ -14743,10 +14817,28 @@ def posture_cmd(
                 )
                 raise typer.Exit(code=1)
             left_raw, right_raw = diff.split(":", 1)
+            left_profiles = _parse_set(left_raw, flag="--diff (left side)")
+            right_profiles = _parse_set(right_raw, flag="--diff (right side)")
+            from sourcecode.spring_profiles import profile_population
+
+            declared_profiles = set(profile_population(path).names)
+            missing_profiles = sorted(
+                (left_profiles | right_profiles) - declared_profiles
+            )
+            if missing_profiles and declared_profiles:
+                _emit_error_json(
+                    INVALID_INPUT_CODE,
+                    "--diff names profile(s) not declared by the repository: "
+                    + ", ".join(missing_profiles),
+                    profiles=missing_profiles,
+                    hint="Use profiles reported by `ask posture <repo>`; use a single "
+                    "posture run to inspect an undeclared profile explicitly.",
+                )
+                raise typer.Exit(code=1)
             data = diff_posture(
                 path,
-                _parse_set(left_raw, flag="--diff (left side)"),
-                _parse_set(right_raw, flag="--diff (right side)"),
+                left_profiles,
+                right_profiles,
                 overrides,
             )
         else:
@@ -15571,7 +15663,7 @@ def impact_chain_cmd(
         output = _serialize_dict(data, format)
         _emit_command_output(output, output_path, copy,
                              success_msg=f"Impact chain written to {output_path}")
-        return
+        _exit_on_unresolved_target("not_found")
 
     _prog = Progress()
     _prog.start(f"analyzing impact ({len(file_list)} files)")
@@ -20306,6 +20398,11 @@ def cache_warm_cmd(
     # console script from PATH. A stale global script can otherwise warm one
     # package installation while the caller reads another one, leaving a view
     # apparently fresh even though its cache entry was never written.
+    # The warm's child must finish its cache writes before reporting success.
+    # This is scoped to the child so ordinary root analyses retain their async
+    # write latency while `cache warm` has a durable cross-process contract.
+    _sc_env = os.environ.copy()
+    _sc_env["SOURCECODE_CACHE_SYNC"] = "1"
     _sc_bin = [sys.executable, "-m", "sourcecode"]
 
     # AUD-600-R01: which views a warm builds is `cache_model`'s fact, not a pair
@@ -20363,7 +20460,9 @@ def cache_warm_cmd(
             # none of it — only the exit code and, on failure, stderr. Capturing it
             # held a whole repository's answer in memory for nothing; on a 24 074-file
             # repository that is megabytes the parent buffers and drops.
-            result = _sub.run(cmd, stdout=_sub.DEVNULL, stderr=_sub.PIPE, text=True)
+            result = _sub.run(
+                cmd, stdout=_sub.DEVNULL, stderr=_sub.PIPE, text=True, env=_sc_env
+            )
         finally:
             _prog.stop()
         if result.returncode != 0:

sourcecode/cve_feed.py

@@ -258,9 +258,14 @@ def load_feed(feed_path: Path, *, now: Optional[datetime] = None) -> Feed:
                     newest = stamp
 
     if unreadable:
+        feed.error = f"{unreadable} feed file(s) were not valid JSON"
         feed.limitations.append(
-            f"{unreadable} feed file(s) were not valid JSON and were skipped"
+            f"{unreadable} feed file(s) were not valid JSON; the feed was rejected"
         )
+        # Partial advisory data is unsafe for a reachability gate: a skipped
+        # file can contain the one advisory that should have blocked the run.
+        feed.loaded = False
+        return feed
     feed.packages = len(feed.by_package)
     feed.loaded = True
 

sourcecode/self_audit.py

@@ -246,6 +246,15 @@ def run_self_audit() -> dict:
     from sourcecode import __version__
 
     commands = _registered_commands()
+    # CLI leaves and MCP tools are related populations, not aliases of one
+    # another: MCP also serves native orchestration tools with no CLI command.
+    from sourcecode.mcp.registry import build_mcp_tool_specs
+    from sourcecode.mcp.server import _NATIVE_MCP_TOOLS
+
+    cli_command_count = len(commands)
+    mcp_registry_count = len(build_mcp_tool_specs())
+    native_mcp_count = len(_NATIVE_MCP_TOOLS)
+    mcp_tool_count = mcp_registry_count + native_mcp_count
     checks = [
         _check_cache_model(commands),
         _check_format_contract(commands),
@@ -268,7 +277,22 @@ def run_self_audit() -> dict:
         "schema": SCHEMA_ID,
         "verdict": verdict,
         "tool_version": __version__,
-        "commands_registered": len(commands),
+        "commands_registered": cli_command_count,
+        "mcp_tools_served": mcp_tool_count,
+        "tool_populations": {
+            "cli_commands": {
+                "count": cli_command_count,
+                "definition": "registered CLI leaf commands, including commands hidden from MCP",
+            },
+            "mcp_tools": {
+                "count": mcp_tool_count,
+                "definition": "runtime-derived MCP tools plus native orchestration tools",
+                "runtime_derived": mcp_registry_count,
+                "native_orchestration": native_mcp_count,
+            },
+            "relationship": "mcp_tools = runtime_derived_mcp_tools + native_orchestration_tools; "
+            "CLI command count is not expected to equal MCP tool count",
+        },
         "counts": {
             "checks": len(checks),
             "passed": sum(1 for c in checks if c.status == STATUS_PASS),

sourcecode/spring_model.py

@@ -130,6 +130,21 @@ def _resolve_bean_annotation(
     """
     simple = ann.lstrip("@")
     imports = imports_by_class.get(owner_fqn) or {}
+    if not imports:
+        # Field and method nodes carry a member suffix, while imports belong to
+        # their declaring class. Missing this join turns a foreign annotation
+        # such as Maven's `@Component` into an unresolved one and can falsely
+        # advertise a non-Spring repository as Spring. Member nodes have used
+        # both `Class#member` and `Class.member` identities over time.
+        owner_class = owner_fqn.split("#", 1)[0]
+        imports = imports_by_class.get(owner_class) or {}
+        if not imports:
+            declaring = max(
+                (name for name in imports_by_class if owner_fqn.startswith(name + ".")),
+                key=len,
+                default="",
+            )
+            imports = imports_by_class.get(declaring) or {}
 
     exact = imports.get(simple)
     if exact:
@@ -387,6 +402,22 @@ class BeanGraph:
             for b in self.beans.values()
         )
 
+    def has_confirmed_spring_beans(self) -> bool:
+        """True only when a bean annotation resolves to ``org.springframework``.
+
+        An unresolved simple annotation remains admissible for model consumers:
+        the missing import is not proof that the annotation is foreign. It is,
+        however, insufficient evidence for the cross-command product fact
+        ``spring_detected``. Otherwise a repository such as TeaVM, which uses
+        Maven's ``@Component`` spelling without Spring, is advertised as Spring.
+        """
+        return any(
+            b.spring
+            and b.annotation_fqn.startswith(_SPRING_PACKAGE_PREFIX)
+            and b.stereotype not in _JPA_ONLY_STEREOTYPES
+            for b in self.beans.values()
+        )
+
     def spring_beans(self) -> dict[str, BeanNode]:
         """The Spring IoC bean-definition population, keyed by symbol.
 
@@ -652,4 +683,13 @@ def spring_detected(
     can still ask.
     """
     graph = model.bean_graph if model is not None else BeanGraph.build(cir)
-    return bool(graph.has_spring_beans()) or int(tx_total or 0) > 0
+    if graph.has_confirmed_spring_beans() or int(tx_total or 0) > 0:
+        return True
+    # Preserve the conservative model behaviour for a genuinely unresolved
+    # annotation, but never let a resolved foreign annotation trigger presence.
+    return any(
+        b.spring
+        and not b.annotation_fqn
+        and b.stereotype not in _JPA_ONLY_STEREOTYPES
+        for b in graph.beans.values()
+    )

sourcecode/summarizer.py

@@ -458,6 +458,10 @@ class ProjectSummarizer:
             if (
                 _BADGE_RE.match(line)
                 or _LINK_ONLY_RE.match(line)
+                # A Markdown badge may wrap before its closing `](url)`. The
+                # first line is discarded above, but the continuation must not
+                # become a standalone project description.
+                or _re.match(r"^\s*\)?\]\([^)]*\)\s*$", line)
                 or ("<" in line and ">" in line and not _html_stripped)
             ):
                 # AUD-596-B07: a bar written on one line never becomes a

{sourcecode-5.9.3.dist-info → sourcecode-5.9.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.9.3
+Version: 5.9.6
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -59,7 +59,7 @@ Description-Content-Type: text/markdown
 > question. All analysis is local and deterministic; see [Privacy](#configuration--privacy)
 > before inspecting a repository whose telemetry policy you need to control.
 
-![Version](https://img.shields.io/badge/version-5.9.3-blue)
+![Version](https://img.shields.io/badge/version-5.9.6-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -196,7 +196,7 @@ set `ASK_MAX_RSS_MB=<megabytes>`; if the process exceeds it, ASK refuses the
 answer with `MEMORY_TOO_LARGE`, including the observed peak and limit. Leave it
 unset, or set it to `0`, to disable the ceiling explicitly.
 
-**Current performance status.** Release 5.9.3 retains the shared Canonical IR
+**Current performance status.** Release 5.9.6 retains the shared Canonical IR
 path used by `validation` and now passes that same CIR into labelled `data-exposure`
 runs; the no-label path remains parse-free. These are implementation properties,
 not duration promises. A controlled external warm-path audit has opened performance
@@ -218,6 +218,14 @@ in `overlapping_paths`; a missing or non-directory path is rejected as structure
 invalid input rather than treated as an empty repository. This prevents silent
 entitlement errors in CI and does not change per-repository gates or billing.
 
+Release 5.9.6 also hardens the boundary contracts: missing consumer repositories,
+malformed CVE feeds and unresolved `pack gate --since` refs fail as structured
+input errors; duplicate same-commit baselines are never overwritten. `posture
+--diff` validates unknown profiles when the repository declares profiles. In
+`endpoints --compact`, an empty `endpoints` list is explicitly marked as an
+intentional omission, not an empty API; unresolved `impact` and `impact-chain`
+queries exit non-zero, including on repositories without Java sources.
+
 **What a warm actually covers.** `ask cache warm` rebuilds the declared root views and their
 shared structural layers (L1/L2 + the Repository Intelligence Snapshot + the shared Canonical
 IR). Pass `--views compact` or `--views compact,agent` to warm only selected views; without
@@ -243,7 +251,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.9.3 — and, on a build that has aged,
+ask version                    # ask 5.9.6 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.9.3.dist-info → sourcecode-5.9.6.dist-info}/RECORD

@@ -1,12 +1,12 @@
-sourcecode/__init__.py,sha256=UDhga2gkkWXn74Pt5-7wx8lD43QwN3SpJUzes_yiE-s,308
+sourcecode/__init__.py,sha256=CbRd02cfZUR4FzB0YaXA5TDXpC4TVs6rxREE8Mh4QVo,308
 sourcecode/__main__.py,sha256=qDFVkobwsdZrX0B3stiRqsUNivVpybKO-egzAwCW4xw,165
-sourcecode/_build_commit.py,sha256=_5RY0YyRD9M5XcuDOokJ_Lx30t5eia8v9rvq3NDpzB0,8740
+sourcecode/_build_commit.py,sha256=k-8VdhNwE-xC_kVXs_f5MKE4bT-D4Ow9l0KgBIHMjVM,8926
 sourcecode/access_drift.py,sha256=1R7_fiAPvKNOnxc9uxkH3JH-k8MiAuyE7FwWUX1r4Fg,8995
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/analysis_budget.py,sha256=ZuNEboPF8A6GK-_V7WNt92ezgriga7_Rbr-vvSN4UEE,4183
 sourcecode/answer_bounds.py,sha256=_51_DCuYEUmI_xwUFxDMiprSavkNakkLiIBbPjevQ3M,9793
 sourcecode/archetype.py,sha256=V_s5grgpbanrXb8qGEQb73W5Cg5iKW9FQHWKgg5KM8Y,41201
-sourcecode/architectural_baseline.py,sha256=4GiMVBLJVHvRKSWQGf2ZVurI1-R0qk5pmaevgvGSgVA,26325
+sourcecode/architectural_baseline.py,sha256=9ds-ZYw4dEJUKWZSdq_ufHq7d2AXnMbEHteSQlT7iu8,26468
 sourcecode/architectural_delta.py,sha256=JhZVmA0gYUryt4x4ieVuxPbcvoBygHgADZaYJ_o4gdk,15142
 sourcecode/architecture_analyzer.py,sha256=GFc4ek-s1IHWM7pl-0L32WahZ93AmDgrAMcOuBKA5Dk,61463
 sourcecode/architecture_summary.py,sha256=BVVRHd952cjRhjHnR6CPrvKgaa-tdM16l-pBi1yDCPs,32395
@@ -35,7 +35,7 @@ sourcecode/change_plan.py,sha256=drAoDsqFplutCLc6Y0xue7sYkTls0SpYh7aOXvttv3I,129
 sourcecode/ci_output.py,sha256=X4NRokWWMRF9Ex8OQrEO2g04GzJ00GDP5zYIoqI9YCc,4625
 sourcecode/cir_graphs.py,sha256=RytqSv1WF8kdlfXj2fPQz16LY4akS2kyThbdWL8beCQ,14835
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=quyqy_kgnVGoCue8UcibOX3EjDg1epoLMV7uwSeOHUg,933170
+sourcecode/cli.py,sha256=uX7QYtJUYQJ8ci_ca4WI_evIjeVcsEZbef5iCDPptBg,938038
 sourcecode/client_calls.py,sha256=YOPnfRZzRyqmdHvXSVeiunW8cuiuCuWXacNIQRgKMCw,22640
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=Lnfmm9I3k0H1jP1tV6ZJ-R7znjQPLPLCe5TzV1Jb_PM,15323
@@ -52,7 +52,7 @@ sourcecode/contract_init.py,sha256=bXRCqWM9tvrDLeT8j7ea6IWf87jB4VJxnlSzGBsRRXo,1
 sourcecode/contract_model.py,sha256=nRxJKPMs1VHwFTa8AVXhGmaLjti3Lr2sjHDpWgv1bfE,3917
 sourcecode/contract_pipeline.py,sha256=4XE-xhab7ysdExXyUOBl2hAH4MABo7moKnT9V4XcEwQ,30243
 sourcecode/coverage_parser.py,sha256=X9scuUWxacahYTrTBGea2Ku-sf-WCVcnc9OEB35_3IU,19340
-sourcecode/cve_feed.py,sha256=t93Ofu0uxB3zyI8W9nUKmH4Ljbt4qZpGIg68IP_aTrY,10749
+sourcecode/cve_feed.py,sha256=IBVpQaY04biXKEeNf1qKO_95GqEV23fwhj4oNk7s1-g,11028
 sourcecode/cve_reachability.py,sha256=aEHkG3IaeLxgekK79cz07QTcv9LZHEqEYqyLGjwjzSE,20409
 sourcecode/data_exposure.py,sha256=73EcuHsN3ESKdSvSj1B2FzD1myGJqzlNJpYO1NpI5WM,19963
 sourcecode/data_labels.py,sha256=9v0JaICRH7jIZ015T1_DuT5E0MFfeL-Wcq1WOPE0Fe0,10965
@@ -166,7 +166,7 @@ sourcecode/security_config.py,sha256=LUppRDYQK0oKM4qdEOLObaeU3frFTS-paEZo7dMgtY8
 sourcecode/security_config_scan.py,sha256=LU8gfNUBB6wjKR8jkK-qRKtUrbkHZ301_Xsk6hSp4XU,35916
 sourcecode/security_posture.py,sha256=ZWgWMsVdvkDHOkTtAy6T3Q9Kp8ufWsdqPsFQZVBNAFM,56885
 sourcecode/selection_contract.py,sha256=O3q_zHBgUsp1SDukqmH9nOUO6HxLFH_7fAqVL7JMV_A,1974
-sourcecode/self_audit.py,sha256=XlPZwLwX8k7B_iyLtyNpL9OkibLOu79yCbM9gkuOMnQ,10338
+sourcecode/self_audit.py,sha256=ZK6VZwbkTL66f4Q4U_JD6sdl6KjQ4DvtPcn5XqGcZDY,11541
 sourcecode/selftest.py,sha256=WjD2xMa55k2svoBMpBLpHCPMip3rtSNUbskSqsuB3iY,40056
 sourcecode/semantic_analyzer.py,sha256=xGwQvhU9xeOlZ4N-TPXFZT8HBHx4Rg0nPwu8nDFl00Y,95621
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
@@ -178,14 +178,14 @@ sourcecode/source_text.py,sha256=R52gmSljz7L6YVPbixv5W-LOZ5eKUVvSUP3S-QH_IWc,904
 sourcecode/spring_event_topology.py,sha256=5_ON_21Le5zbG-1GRc5GLIi5HJfy_QjcXLVPC5WeUGQ,18055
 sourcecode/spring_findings.py,sha256=U5gMDdSdhpJLstt3ghG4y5CCS9nzIU9NuRMHpNu7FpY,27766
 sourcecode/spring_impact.py,sha256=nX-tuZOiWYc54tlCkBtel07_ksI5MCmFYNb-WONkCPM,98607
-sourcecode/spring_model.py,sha256=VHankGENA8vyVtJ5SfT1Of6SONCM-GX4eO78jjcJFYI,27086
+sourcecode/spring_model.py,sha256=MBUKR1tes5UVGxtYiv4J2WrydgOp_zReek7P7hO50hA,28962
 sourcecode/spring_profiles.py,sha256=jDNBVhEZQAZXrpqt85FkP2URsMw4YWhQo3W3SLHuwpM,19617
 sourcecode/spring_properties.py,sha256=kPTk5qAJxdbHc1hclhHAP0O-hCIzBn8PTh3lzl-I4a4,8400
 sourcecode/spring_security_audit.py,sha256=mJxrB-uKvMh2aF3Q8cFVOC8yOYb2JW8P-yK-paMTQBQ,71218
 sourcecode/spring_semantic.py,sha256=zrUYWF7Gnz6hpP_3hRveHmGEntT95WpgXt6u7PzLSGg,16835
 sourcecode/spring_tx_analyzer.py,sha256=cFK9M3madb7dKbJ_d97cO-1fGMUPDOwB8KoJ-oocMeY,50951
 sourcecode/sql_taint.py,sha256=As1DbEdjXMBFjCTXU5ojksOzuKkP6LmnuMVnzzmckzc,26998
-sourcecode/summarizer.py,sha256=9LqLQWuGr6zmgpDAbgC7ZCS7mTI4Vnv4KzfHisdr9zY,41073
+sourcecode/summarizer.py,sha256=ldvynjFaKQmQKLiu4_QJEpdciI6WybEodvN7TPQzfwA,41350
 sourcecode/target_admission.py,sha256=wFZ4pzlxhiF6Q6s2lEAZEzcCfj1Y6xNvujjt8MdO0Qo,7154
 sourcecode/test_gap_ranking.py,sha256=hl-tTyQUXZGJycG1b6npbLeE_DaVHaOsvPwG9qqC5y8,15711
 sourcecode/test_sources.py,sha256=MO6dYg5ogTN29n9G0-IbMqx8omCT23lkhQHbEze2p5M,9441
@@ -273,13 +273,13 @@ sourcecode/telemetry/consent.py,sha256=-Wb8BFGXEexOs8M0Eja7F-T6ZtLNPeRoZnHcHvlP7
 sourcecode/telemetry/events.py,sha256=l3Z2SQUO4_C2D2ItXOOdVNimAmHedUHnUxqYFTxnsAE,2900
 sourcecode/telemetry/filters.py,sha256=-lqT2oorECuqEIdeHb--7AZ6BCaUx0bya720a-Z5x6w,7335
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode/_docs/DEFECT-LEDGER.md,sha256=EkYSJieDrazfADCZ8tsCsybyW9U0nAzWDQ8rS4KmGTU,1115164
+sourcecode/_docs/DEFECT-LEDGER.md,sha256=8VCou5sbCLeRew53_g4qzOwJT5gk3VT-9raFRYnzkY8,1119529
 sourcecode/_docs/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
 sourcecode/_docs/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode/_docs/USER_GUIDE.md,sha256=Yz49suorAuiyJLgdl3yPZAWH3aMzycejEhY8Aoeszcc,103883
-sourcecode-5.9.3.dist-info/METADATA,sha256=mxk_hAlo_FQe8kyHzN4d9ZXqBK3a6wt8xbeFw776CbI,64209
-sourcecode-5.9.3.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.9.3.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.9.3.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
-sourcecode-5.9.3.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode-5.9.3.dist-info/RECORD,,
+sourcecode/_docs/USER_GUIDE.md,sha256=uL8xhxZzt7YddqEIxClPky9n_9fgRUzV71EJJzg4nPI,104721
+sourcecode-5.9.6.dist-info/METADATA,sha256=0lScNAiEEcjd-RM0Og37w0jO4ZMIt4UjI7oRlfZPGqE,64752
+sourcecode-5.9.6.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.9.6.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.9.6.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
+sourcecode-5.9.6.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
+sourcecode-5.9.6.dist-info/RECORD,,