sourcecode 5.9.7__py3-none-any.whl → 5.9.9__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.9.7"
+__version__ = "5.9.9"

sourcecode/_build_commit.py

@@ -1,5 +1,5 @@
 """Generated at build time by hatch_build.py. Do not edit (AUD-592-D04)."""
 
-BUILD_COMMIT = 'ba9b9e9f310b129eb400a4c6e82b4d21f52366b8'
-CLOSURE_PROVENANCE = {'AUD-611-B05': {'commit': '', 'status': 'uncited'}, 'AUD-611-B06': {'commit': '', 'status': 'uncited'}, 'AUD-611-B07': {'commit': '', 'status': 'uncited'}, 'AUD-611-B08': {'commit': '', 'status': 'uncited'}, 'AUD-611-B09': {'commit': '', 'status': 'uncited'}, 'AUD-611-B10': {'commit': '', 'status': 'uncited'}, 'AUD-611-B11': {'commit': '', 'status': 'uncited'}, 'Window': {'commit': '', 'status': 'uncited'}, '`ASK-FIELD-01`': {'commit': '829f9fa', 'status': 'present'}, '`ASK-FIELD-02`': {'commit': '6a659fa', 'status': 'present'}, '`ASK-FIELD-03`': {'commit': '55b0d51', 'status': 'present'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}}
-CLOSURE_COVERAGE = {'closed_rows': 123, 'present': 91, 'absent': 0, 'unresolved': 0, 'uncited': 32, 'unknown': 0}
+BUILD_COMMIT = '9e8ac3fb54c7d82f42f5240ff518ec41276d9bc2'
+CLOSURE_PROVENANCE = {'AUD-611-B05': {'commit': '', 'status': 'uncited'}, 'AUD-611-B06': {'commit': '', 'status': 'uncited'}, 'AUD-611-B07': {'commit': '', 'status': 'uncited'}, 'AUD-611-B08': {'commit': '', 'status': 'uncited'}, 'AUD-611-B09': {'commit': '', 'status': 'uncited'}, 'AUD-611-B10': {'commit': '', 'status': 'uncited'}, 'AUD-611-B11': {'commit': '', 'status': 'uncited'}, 'AUD-612-07': {'commit': '', 'status': 'uncited'}, 'AUD-612-09': {'commit': '', 'status': 'uncited'}, 'AUD-612-14': {'commit': '', 'status': 'uncited'}, 'AUD-612-B03': {'commit': '', 'status': 'uncited'}, 'AUD-612-B07': {'commit': '', 'status': 'uncited'}, 'AUD-612-B13': {'commit': '', 'status': 'uncited'}, 'AUD-612-E': {'commit': '', 'status': 'uncited'}, 'AUD-612-G': {'commit': '', 'status': 'uncited'}, 'AUD-612-I': {'commit': '', 'status': 'uncited'}, 'AUD-612-K': {'commit': '', 'status': 'uncited'}, 'AUD-612-M': {'commit': '', 'status': 'uncited'}, 'AUD-612-R': {'commit': '', 'status': 'uncited'}, 'AUD-613-ROOT': {'commit': '', 'status': 'uncited'}, 'AUD-614-07': {'commit': '', 'status': 'uncited'}, 'AUD-614-F': {'commit': '', 'status': 'uncited'}, 'AUD-614-G': {'commit': '', 'status': 'uncited'}, 'AUD-614-I': {'commit': '', 'status': 'uncited'}, 'AUD-614-RISK-L0': {'commit': '', 'status': 'uncited'}, 'AUD-614-SELFTEST-TIMEOUT': {'commit': '', 'status': 'uncited'}, 'Window': {'commit': '', 'status': 'uncited'}, '`ASK-FIELD-01`': {'commit': '829f9fa', 'status': 'present'}, '`ASK-FIELD-02`': {'commit': '6a659fa', 'status': 'present'}, '`ASK-FIELD-03`': {'commit': '55b0d51', 'status': 'present'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}}
+CLOSURE_COVERAGE = {'closed_rows': 142, 'present': 91, 'absent': 0, 'unresolved': 0, 'uncited': 51, 'unknown': 0}

sourcecode/_docs/DEFECT-LEDGER.md

@@ -71,6 +71,68 @@ Commercially, the audit supports normal repositories up to several thousand
 files and keeps a provisional $35-50/developer/month range, but B01/B02 block
 annual-grade reliability and enterprise-scale positioning until resolved.
 
+**External audit intake `AUD-612`, re-audit of release 5.9.7 — 2026-08-27.**
+The external scope covered roughly 130 new invocations across three forks and direct
+retests of all AUD-611 items. It reports five clean forks, no target writes, commits
+or task-kills, and a score of **7.8/10**. It confirms B05, B06, B08, B09, B10 and B11,
+and reports B01 fixed in its own matrix; B01 remains release-artifact verification
+because the prior external round reproduced it. The new queue is:
+
+| ID | Severity | Status | Evidence / closure boundary |
+|---|---:|---|---|
+| AUD-612-B02 | Critical | open | `tutorials` root compact still timed out after 300-311s with zero stdout; warning proves activity, not completion. Define scale, deadline and partial-diagnostic contracts. |
+| AUD-612-B03 | High | closed | YAML cache-hit delivery now publishes `_cache.cache_source` and `timing_ms.served_from_cache` consistently; TeaVM YAML smoke plus the direct cache-hit seam regression pass. A real L2 benchmark remains follow-up because this environment rebuilt both runs. |
+| AUD-612-B04 | High | partial | Each `selftest` row now has configurable 120 s default timeout and structured timeout diagnostics/code 75; valid-row scale latency remains open for profiling. Dedicated TeaVM timeout contract regression passes. |
+| AUD-612-B07 | Medium | closed | `pr-impact --since` now resolves refs through the shared authority and publishes `GIT_REF_NOT_FOUND`; dedicated TeaVM and existing Git-ref regressions pass. |
+| AUD-612-B13 | Medium | closed/no-repro | Controlled TeaVM campaign: 30/30 `retrieve endpoint-security --endpoint /` executions completed with exit 0, valid JSON, no errors and stable content identity after cache warm-up. Reopen on a new correlated failure. |
+| AUD-612-L | High | open | `audit-report --format markdown` timed out at 420s/500s, 2/2, after ~228s in 5.9.6. Performance regression remains open; the one-shot heartbeat sub-issue is mitigated by repeated warnings. |
+| AUD-612-K | Medium | closed | Pack orchestration now streams child stderr, forwarding inherited `ASK_PROGRESS=1` progress while preserving aggregate stdout JSON. Dedicated TeaVM gate regression passes. |
+| AUD-612-M | Medium | closed | `explain` missing-class failures now use structured `INVALID_INPUT` stderr and `exit 1`; dedicated TeaVM regression passes. |
+| AUD-612-E | Medium | closed | The events branch now applies `_exit_on_unresolved_target`; missing event symbols return `not_found` with `exit 1`. TeaVM regression passes. |
+| AUD-612-G | Medium | closed | `review-pr` runtime failures and `activate` failures now publish the shared `error.code` envelope on stderr; stdout remains reserved for valid results. `no_diff` remains the intentional successful `no_changes` result. Dedicated TeaVM and contract tests pass. |
+| AUD-612-I | Medium | closed | Removed the residual `~10K` wording from the large-output warning; help, runtime warning and compact payload consistently describe a snapshot-dependent subset with explicit `full_available` metadata. Dedicated TeaVM regression passes. |
+| AUD-612-07 | Low | closed | Missing single tokens close to a registered command now use command admission with a nearest-command suggestion; existing paths retain implicit root-scan behavior. Dedicated TeaVM regression passes. |
+| AUD-612-09 | Medium | closed | `--files -` is documented and enforced as a newline-delimited changed-path list; raw unified diffs fail with an `--name-only` conversion hint. Dedicated TeaVM regressions pass. |
+| AUD-612-14 | Medium | closed | The current population is 104 CLI leaves versus 110 MCP tools, explicitly decomposed as 101 runtime-derived plus 9 native orchestration tools; `mcp list-tools --json` matches and the relationship is published. Existing TeaVM-backed population regression passes. |
+| AUD-612-R | Medium | closed | README, English guide and Spanish manual document that `rename-class` requires `--from/--to`, the old positional syntax is unsupported, and `--dry-run` is the migration safety step. TeaVM dry-run verification passes. |
+| AUD-613-ROOT | High | closed 5.9.8 | On a TTY, explicit `ask .` was misclassified as bare `ask` after path preprocessing and rendered only the welcome card. An explicit-path marker now distinguishes both flows; TeaVM pseudo-TTY and focused CLI regressions pass. |
+
+**External audit intake `AUD-614`, re-audit of release 5.9.8 — 2026-08-27.**
+Five clean forks exercised the `testing/` corpus without target-repository writes,
+commits or Java-file changes. The initial **8.0/10** score was superseded by the
+addendum confirming a second severe availability regression; the governing score is
+**7.5/10**. Previously closed semantic fixes remained stable, but the following rows
+are the current release blockers and contract gaps:
+
+| ID | Severity | Status | Evidence / closure boundary |
+|---|---:|---|---|
+| AUD-614-F | Critical | closed 5.9.8 (reverified) | The external `/dev/null` false-success is not reproducible in the current checkout: invalid TeaVM input returns `exit 1` and identical structured stderr whether stdout is captured or discarded. A dedicated redirection regression protects the boundary. Native Windows/MSYS release-artifact verification remains required because the external evidence conflicts. |
+| AUD-614-L | Critical / regression | open | `audit-report` is contention-sensitive on `thingsboard` (3,714 files): one clean run completed in 136 s, while concurrent/isolated runs exceeded 5 minutes; JSON, YAML and Markdown all exhibited the problem. `tutorials` reached 5m39.6s with zero stdout. Requires profiling, stage visibility, deadline and structured partial output. |
+| AUD-614-RISK-L0 | High / regression | closed 5.9.8 | `risk --limit 0` now returns a fast explicit zero-row view without constructing the repository-wide composer. It publishes `risks: []`, `shown: 0`, null totals and `analysis_skipped: true`; the TeaVM flow and dedicated regression pass. |
+| AUD-614-SELFTEST-TIMEOUT | High / contract regression | closed 5.9.8 | `selftest --timeout` is now an overall deadline; each child receives the remaining budget, interrupted/unstarted rows are structured as `error`, and the command returns code 75. The real TeaVM flow and dedicated regression pass. The separate fourth-run hang remains mixed evidence. |
+| AUD-614-WIN-PROC | Medium | open | Windows/MSYS timeout or SIGTERM can leave `ask.exe` descendants alive, with MSYS PIDs unusable by native `taskkill`. Validate signal handling and Windows Job Objects from native Windows and Git Bash. |
+| AUD-614-G | Medium | closed 5.9.8 | The shared error authority normalizes legacy producer spellings to canonical uppercase codes (`NO_DIFF_SOURCE`, `INVALID_LICENSE`). TeaVM `review-pr` and activation contract tests pass. |
+| AUD-614-E | Low | open | Impact commands now agree on unresolved exit status, but their `risk_level` values still diverge (`unknown`/`low`/`unknown`). Define one not-found payload semantics and enforce parity. |
+| AUD-614-I | Medium | closed 5.9.8 | The user manual and internal compacting comment no longer promise `~10K`; they state that `cold-start --compact` is snapshot-dependent, expose `estimated_tokens`, and require size validation before direct AI injection. The CLI help and payload already used this contract. A hard ceiling remains optional future scope. |
+| AUD-614-INTENT-TIE | Medium | open | Exact lexical ties at score `2.8284` still resolve differently for `endpoint security` and `security surface`. Define deterministic tie/margin semantics and add a real-repository regression. |
+| AUD-614-07 | Low | closed 5.9.8 (reverified) | The installed `ask spring-audi` entry point returns `Did you mean: spring-audit?`; the TeaVM path/typo regression battery passes. The external wording report is not reproducible in the current checkout. |
+| AUD-614-JUNIT4 | Medium | open | JUnit4 projects remain `project_type: unknown`; add evidence-backed classification without broad heuristic false positives. |
+
+The audit also confirms root cache reuse, stdin contracts, pack progress, explain and
+impact error routing, self-audit population disclosure, endpoint compact disclosure,
+Spring detection controls, baseline safety and the prior `/dev/null` fix matrix. The
+intermittent endpoint-security retrieval issue had 0/18 failures in this pass and stays
+under observation because its historical rate is about 2% over 51 runs.
+
+**Commercial boundary.** The corrected assessment is `$25-40/developer/month`, not the
+initial `$45-58` headline. Do not market enterprise-scale support or production CI
+gating for repositories above roughly 3,000 files until the four critical/high
+availability and error-transport rows are independently closed with bounded evidence.
+
+Commercially, normal repositories up to about 4,000 files remain viable at a provisional
+$40-55/developer/month. B02, B04 and L block annual CI-gating and extreme-monorepo claims;
+B03, K, M and G weaken machine-consumable evidence.
+
 **External audit intake `AUD-610`, release 5.9.3 — 2026-08-27.** The attached
 report scored the build **7.2/10** after five parallel batches and approximately
 120 invocations. It verified a clean target repository, no Java-file changes,

sourcecode/_docs/USER_GUIDE.md

@@ -46,16 +46,16 @@ CLI commands        — impact, endpoints, spring-audit, explain, … each a pro
 The key idea: the extraction is **content-addressed**. Commands reuse the parse cache and,
 where their analysed scope matches, the shared Canonical IR; `ask cache model` names what a
 warm buys for each command rather than implying that every projection costs the same. In
-5.9.7, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
+5.9.9, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
 model across all declared label seeds. (The extraction and consumption contract is fixed in
 the architecture ADRs 0001–0004 under `docs/architecture/`.)
 
 The current external pack audit intake is tracked in
 [`AUDIT-2026-08-26-EXTERNAL-5.8.28-PACK.md`](AUDIT-2026-08-26-EXTERNAL-5.8.28-PACK.md);
-the two pack fixes are included in release 5.9.7, with release-artifact verification
+the two pack fixes are included in release 5.9.9, with release-artifact verification
 remaining for detached execution and pack evidence.
 
-### Reliability contracts in 5.9.7
+### Reliability contracts in 5.9.9
 
 Invalid analysis inputs fail before expensive work and use the structured
 `INVALID_INPUT` envelope: a missing `--consumer` repository, a malformed CVE
@@ -236,7 +236,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.9.7
+# ask 5.9.9
 ```
 
 Requires Python 3.9+.
@@ -1381,6 +1381,10 @@ explaining. The rest do one thing; `ask <command> --help` is the whole story.
 | `ask chunk-file <file>` | supported | Split a large Java file into semantic chunks an agent can consume |
 | `ask intent "<question>"` | supported | Resolve a plain-language question to the typed `retrieve` query that answers it (scored lexical match against a declared vocabulary — no model, no generation). Prints the query; `--run` executes it. A question fitting two intents too closely is refused with both named. |
 | `ask rename-class` | supported | Word-boundary Java rename across the repository |
+
+**Migration note:** `rename-class` requires the explicit `--from OldName --to NewName`
+options. Older positional name syntax is no longer accepted. Add `--dry-run` when
+updating an existing script so the planned file changes can be reviewed first.
 | `ask schema <name>` | supported | Print a published JSON Schema for this tool's output |
 | `ask self-audit` | supported | Check the SHIPPED build's own coherence — cache model, format contract, schema registry and output affordances. Declares explicitly that the semantic engine does not apply to this product's own source (ASK analyses Java; this build is Python), rather than reporting zeros. `ask selftest` is the different question: the defect ledger run against a real repository. |
 | `ask auth workspace <repo>...` | supported | Aggregate workspace entitlement preview. `--enforce` opts into the named-buyer pilot that reuses the existing Pro gate when the organization-sized threshold is crossed; advisory mode remains the default and the CLI does not bill. |

sourcecode/cli.py

@@ -900,8 +900,8 @@ scope matches; `ask cache model` says exactly what a warm buys per command.
 [bold]Change and risk:[/bold]
   impact-chain <Class> .       [dim]# blast radius; TX/SEC findings opt-in[/dim]
   impact <Class> .             [dim]# reverse deps → endpoints reached[/dim]
-  pr-impact . --files -        [dim]# same, scoped to a diff on stdin; gating codes[/dim]
-  pr-risk . --files -          [dim]# one verdict for THIS diff; UNKNOWN fails the gate[/dim]
+  pr-impact . --files -        [dim]# changed-file list on stdin; gating codes[/dim]
+  pr-risk . --files -          [dim]# changed-file list on stdin; UNKNOWN fails the gate[/dim]
   posture . --since main       [dim]# did this branch open an endpoint? (exp.)[/dim]
   drift . --profile prod       [dim]# what opened up since the last capture[/dim]
   audit-report . --format markdown [dim]# signed human evidence bundle (exp.)[/dim]
@@ -1029,6 +1029,11 @@ def _set_detected_path(value: str) -> None:
     _tls.detected_path = value
 
 
+def _explicit_path_was_supplied() -> bool:
+    """Whether argv contained a repository path later removed by preprocessing."""
+    return bool(_tls.__dict__.get("explicit_path", False))
+
+
 # Options that take a value token — their next arg must not be treated as a path.
 _OPTIONS_WITH_VALUE: frozenset[str] = frozenset({
     "--format", "-f",
@@ -1271,6 +1276,7 @@ def _preprocess_args(args: list[str]) -> list[str]:
     ``_reject_path_before_subcommand``.
     """
     result = _normalise_repository_option(list(args))
+    _tls.explicit_path = False
     skip_next = False
     _path_index: int = -1
     for i, arg in enumerate(result):
@@ -1299,7 +1305,17 @@ def _preprocess_args(args: list[str]) -> list[str]:
         # got wrong instead of swallowing it and erroring on the next one.
         if _has_trailing_nonsubcommand_positional(result, i):
             _reject_unknown_command(arg)
+        # A single missing token that is very close to a command is a command
+        # typo, not a repository path. Existing directories retain the implicit
+        # `ask <path>` grammar, including names that resemble commands.
+        if not Path(arg).exists() and "/" not in arg and "\\" not in arg:
+            _command_matches = difflib.get_close_matches(
+                arg, sorted(_SUBCOMMANDS), n=3, cutoff=0.6
+            )
+            if _command_matches:
+                _reject_unknown_command(arg)
         _set_detected_path(arg)
+        _tls.explicit_path = True
         _path_index = i
     if _path_index >= 0:
         result.pop(_path_index)
@@ -1455,6 +1471,56 @@ def _inject_cache_meta(raw: str, meta: dict) -> str:
     return raw
 
 
+def _inject_cache_meta_yaml(raw: str, meta: dict) -> str:
+    """Inject the same cache provenance into a YAML answer as into JSON."""
+    try:
+        from io import StringIO
+        from ruamel.yaml import YAML as _YAML
+
+        yaml = _YAML()
+        obj = yaml.load(raw)
+        if isinstance(obj, dict):
+            obj["_cache"] = meta
+            if "cache_source" in meta:
+                obj["cache_source"] = meta["cache_source"]
+            out = StringIO()
+            yaml.dump(obj, out)
+            return out.getvalue()
+    except Exception:
+        pass
+    return raw
+
+
+def _refresh_delivery_timing_yaml(raw: str, *, served_from_cache: bool, elapsed_ms: float) -> str:
+    """Refresh cache timing in YAML without routing the machine answer through JSON."""
+    try:
+        from io import StringIO
+        from ruamel.yaml import YAML as _YAML
+
+        yaml = _YAML()
+        obj = yaml.load(raw)
+        if not isinstance(obj, dict):
+            return raw
+        meta = obj.setdefault("_meta", {})
+        if not isinstance(meta, dict):
+            return raw
+        timing = meta.setdefault("timing_ms", {})
+        if not isinstance(timing, dict):
+            timing = {}
+            meta["timing_ms"] = timing
+        timing["total_ms"] = round(elapsed_ms, 2)
+        timing["served_from_cache"] = served_from_cache
+        timing["timing_basis"] = "served_from_snapshot" if served_from_cache else "computed"
+        if served_from_cache:
+            timing["phase_timing_basis"] = "snapshot_build"
+        out = StringIO()
+        yaml.dump(obj, out)
+        return out.getvalue()
+    except Exception:
+        pass
+    return raw
+
+
 def _refresh_delivery_timing(
     raw: str,
     *,
@@ -3557,7 +3623,17 @@ def _resolve_files_option(
                 ),
             )
             raise typer.Exit(code=1)
-        return _text_input.parse_path_lines(_text_input.read_stdin_text()), "stdin"
+        stdin_text = _text_input.read_stdin_text()
+        if "diff --git " in stdin_text or "\n@@ " in stdin_text:
+            _emit_error_json(
+                INVALID_INPUT_CODE,
+                "--files - expects a list of changed paths, not a raw unified diff.",
+                hint=f"Pipe paths with: git diff --name-only REF | ask {command} . --files -",
+                expected="One repository-relative file path per line.",
+                reason="raw_diff_on_stdin",
+            )
+            raise typer.Exit(code=1)
+        return _text_input.parse_path_lines(stdin_text), "stdin"
     as_path = Path(raw)
     if as_path.is_file():
         return (
@@ -3587,6 +3663,20 @@ def _resolve_files_option(
 def _git_changed_files(root: Path, since: Optional[str]) -> "tuple[list[str], str]":
     """Resolve a local Git diff without network access or repository mutation."""
     if since:
+        # Resolve the ref through the shared authority before asking Git for the
+        # diff, so every consumer publishes the canonical ref error code.
+        from sourcecode.git_checkout import RefError, resolve_ref
+
+        try:
+            resolve_ref(root, since)
+        except RefError as exc:
+            _emit_error_json(
+                exc.code,
+                exc.message,
+                hint="Check the repository and ref, or pass --files explicitly.",
+                ref=since,
+            )
+            raise typer.Exit(code=1)
         command = ["git", "diff", "--name-only", since, "HEAD"]
         description = f"git diff {since} HEAD"
     else:
@@ -5244,7 +5334,7 @@ def main(
     # Bare invocation at a human terminal → branded quickstart instead of
     # dumping a large JSON blob. Agents/pipes are untouched: any arg/flag, or a
     # non-TTY stdout (piped), falls through to the normal analysis + JSON.
-    if len(sys.argv) <= 1 and sys.stdout.isatty():
+    if len(sys.argv) <= 1 and not _explicit_path_was_supplied() and sys.stdout.isatty():
         _print_welcome()
         raise typer.Exit()
 
@@ -6054,6 +6144,26 @@ def main(
                             )
                     except Exception:
                         pass  # stale value better than crash
+            else:
+                _cache_hit_content = _inject_cache_meta_yaml(
+                    _cache_hit_content,
+                    _cache_meta_block(
+                        cache_source=_hit_source,
+                        git_head_at_generation=_git_sha,
+                        current_git_head=_git_sha,
+                        has_uncommitted_changes=False,
+                        has_uncommitted_changes_basis="YAML cache delivery",
+                        generated_at=None,
+                        data_scope=("COMPACT" if compact else ("AGENT" if agent else "FULL")),
+                        target=target,
+                        with_ris_fact=True,
+                    ),
+                )
+                _cache_hit_content = _refresh_delivery_timing_yaml(
+                    _cache_hit_content,
+                    served_from_cache=True,
+                    elapsed_ms=(time.monotonic() - _t0) * 1000,
+                )
             # C1: token economy on the agent-facing views (cache-hit path).
             if format == "json" and (compact or agent):
                 from sourcecode.token_estimate import inject_token_economy as _inj_te
@@ -7828,31 +7938,33 @@ def prepare_context_cmd(
     # review-pr specific fields
     if task == "review-pr":
         if output.error_code:
-            _err_out: dict[str, Any] = {
-                "task": output.task,
-                "ci_decision": output.ci_decision or "error",
-                "error": output.error_code,
-                "message": output.error_message,
-            }
-            if output.since:
-                _err_out["since"] = output.since
-            if output.error_hints:
-                _err_out["hint"] = output.error_hints
-            # AUD-598-B01: an early return is still this run's whole answer, so
-            # it carries the same identity as the long one.
-            _err_json = _stamp_envelope(
-                json.dumps(_err_out, indent=2, ensure_ascii=_json_ensure_ascii())
+            if output.error_code == "no_diff":
+                _no_diff_out = {
+                    "task": output.task,
+                    "ci_decision": "no_changes",
+                    "summary": "No changes detected",
+                }
+                _no_diff_json = _stamp_envelope(
+                    json.dumps(_no_diff_out, indent=2, ensure_ascii=_json_ensure_ascii())
+                )
+                if output_path is not None:
+                    _safe_write_file(output_path, _no_diff_json)
+                else:
+                    sys.stdout.buffer.write(_no_diff_json.encode("utf-8"))
+                    sys.stdout.buffer.write(b"\n")
+                    sys.stdout.buffer.flush()
+                raise typer.Exit()
+            _error_hint = " ".join(str(h) for h in (output.error_hints or []))
+            _emit_error_json(
+                output.error_code,
+                output.error_message or "review-pr could not complete.",
+                command="review-pr",
+                ci_decision=output.ci_decision or "error",
+                since=output.since or None,
+                hint=_error_hint or None,
+                hints=output.error_hints or None,
             )
-            if output_path is not None:
-                _safe_write_file(output_path, _err_json)
-            else:
-                sys.stdout.buffer.write(_err_json.encode("utf-8"))
-                sys.stdout.buffer.write(b"\n")
-                sys.stdout.buffer.flush()
-            # FIX: no_diff (no PR changes) is not an error — exit 0, consistent
-            # with delta's no_changes handling. Only true errors exit non-zero.
-            _review_pr_exit = 0 if output.error_code == "no_diff" else 1
-            raise typer.Exit(code=_review_pr_exit)
+            raise typer.Exit(code=1)
         out["review_type"] = "pull_request"
         if output.ci_decision:
             out["ci_decision"] = output.ci_decision
@@ -13288,7 +13400,7 @@ def risk_cmd(
     """
     _require_answer_delivery("risk")
     _apply_jobs(jobs)
-    from sourcecode.risk import build_risk
+    from sourcecode.risk import build_risk, zero_risk_payload
 
     path = _admit_path(path)
     # B18: both spellings of the same fact, resolved by the crosswalk the report
@@ -13328,6 +13440,19 @@ def risk_cmd(
             raise typer.Exit(code=1)
         band_filter = _resolved_band
 
+    # AUD-614-RISK-L0: a zero-row view must not construct the full repository-wide
+    # composer only to discard every result. The payload says totals were skipped,
+    # rather than turning an empty requested view into a false zero census.
+    if limit == 0 and not table and not rule_filter and band_filter is None and not top_n:
+        data = zero_risk_payload(
+            path, min_band=min_band, profiles=_profile_set(profile),
+        )
+        _emit_command_output(
+            _serialize_dict(data, format), output_path, copy,
+            success_msg=f"risk written to {output_path} (0 rows requested)",
+        )
+        return
+
     # `risk` composes six axes by re-reading five other commands' authorities — it
     # is the slowest command in the CLI (15s on BroadleafCommerce) and shipped
     # without a single byte on stderr while it ran.
@@ -15675,6 +15800,7 @@ def impact_chain_cmd(
                 f"{evt_result.metadata.get('consumer_count', 0)} consumers)"
             ),
         )
+        _exit_on_unresolved_target(evt_result.resolution)
         return
 
     result = run_impact_chain(
@@ -16051,6 +16177,15 @@ def explain_cmd(
     else:
         output = explanation.render_text()
 
+    if not explanation.found:
+        _emit_error_json(
+            INVALID_INPUT_CODE,
+            f"Class '{class_name}' was not found in repository symbols.",
+            hint="Pass an existing class name or FQN; use `ask repo-ir` for the symbol list.",
+            expected="A class present in the analyzed repository.",
+        )
+        raise typer.Exit(code=1)
+
     _emit_command_output(output, output_path, copy,
                          success_msg=f"Explanation written to {output_path}")
 
@@ -18059,6 +18194,10 @@ def selftest_cmd(
              "checkout's runner). Published with every verdict — the difference "
              "ASK-09 hid in was the entry point, not the repository.",
     ),
+    timeout: int = typer.Option(
+        120, "--timeout", min=1,
+        help="Maximum seconds allowed for each ledger row (default: 120).",
+    ),
     output_path: Optional[Path] = typer.Option(
         None, "--output", "-o", help="Write the verdicts to a file instead of stdout.",
     ),
@@ -18111,7 +18250,9 @@ def selftest_cmd(
     _prog = Progress()
     _prog.start("running the ledger against this repository")
     try:
-        data = run_selftest(target, rows=selected, entry_point=entry_point)
+        data = run_selftest(
+            target, rows=selected, entry_point=entry_point, timeout=timeout
+        )
     finally:
         _prog.stop()
 
@@ -19362,7 +19503,8 @@ def cold_start_cmd(
     finally:
         _prog.stop()
     if compact:
-        # P1-C: cap at ~10K tokens — keep the fields that orient a reader.
+        # Keep the fields that orient a reader; the resulting size depends on
+        # the stored snapshot and is not a fixed token ceiling.
         #
         # B14. This used to be a fixed key allowlist and a silent `[:30]`, and it
         # took 1 968 807 characters to 16 452 (−99,2 %) while removing 11 of 19
@@ -19413,7 +19555,7 @@ def cold_start_cmd(
         _notice(
             f"WARNING: Output is ~{_tokens // 1000}K tokens. This exceeds the context window of "
             "most LLMs (GPT-4o: 128K, Claude Sonnet: 200K). "
-            "Use --compact for a ~10K token subset, or --output FILE to save."
+            "Use --compact for a snapshot-dependent orientation subset, or --output FILE to save."
         )
     # AUD-596-D01: this payload builds its own `_meta` above (estimated tokens,
     # token economy) and used to skip the envelope for that reason — so the one

sourcecode/error_schema.py

@@ -8,6 +8,19 @@ INVALID_USAGE_CODE = "INVALID_USAGE"
 EXECUTION_FAILED_CODE = "EXECUTION_FAILED"
 INTERNAL_ERROR_CODE = "INTERNAL_ERROR"
 
+# Domain-specific producers historically used snake_case while the public error
+# contract uses canonical uppercase identifiers. Keep the normalization here so
+# every CLI surface that builds the shared envelope agrees.
+_CANONICAL_CODE_ALIASES = {
+    "no_diff_source": "NO_DIFF_SOURCE",
+    "invalid_license": "INVALID_LICENSE",
+}
+
+
+def canonical_error_code(code: str) -> str:
+    """Return the public spelling for a producer's error code."""
+    return _CANONICAL_CODE_ALIASES.get(code, code)
+
 #: The exit code each error class leaves with — the other half of `AUD-596-D11`.
 #:
 #: That row closed the *code* half: `INVALID_INPUT` used to exit 1 or 2 depending
@@ -59,6 +72,7 @@ def build_error_object(
     hint: str | None = None,
     expected: str | None = None,
 ) -> dict[str, str]:
+    code = canonical_error_code(code)
     return {
         "code": code,
         "message": message,

sourcecode/license.py

@@ -715,8 +715,8 @@ def require_pro(feature_name: str) -> None:
 def activate_license(license_key: str) -> None:
     """Validate license_key via Edge Function, write ~/.sourcecode/license.json.
 
-    Outputs JSON to stdout; exits 0 on success, 1 on any failure.
-    Never raises — all error paths emit JSON and call sys.exit(1).
+    Outputs JSON to stdout on success; exits 0 on success, 1 on any failure.
+    Errors use the CLI JSON envelope on stderr so stdout remains machine-safe.
     """
     if not _LICENSE_KEY_RE.match(license_key):
         _fail("invalid_license", "License key format is invalid.")
@@ -760,8 +760,10 @@ def activate_license(license_key: str) -> None:
 # ---------------------------------------------------------------------------
 
 def _fail(error: str, message: str) -> None:
-    """Emit JSON error to stdout and exit 1. Never returns."""
-    payload = {"error": error, "message": message}
-    sys.stdout.write(json.dumps(payload, ensure_ascii=False) + "\n")
-    sys.stdout.flush()
+    """Emit the shared structured error envelope to stderr and exit 1."""
+    from sourcecode.error_schema import build_error_envelope
+
+    payload = build_error_envelope(error, message, command="activate")
+    sys.stderr.write(json.dumps(payload, ensure_ascii=False) + "\n")
+    sys.stderr.flush()
     sys.exit(1)

sourcecode/packs.py

@@ -22,6 +22,7 @@ import json
 import subprocess
 import sys
 import tempfile
+import threading
 import time
 from pathlib import Path
 from typing import Any, Callable, Optional, Sequence
@@ -681,9 +682,29 @@ def _run_command(command: str, root: Path, output: Path, extra: list[str]) -> di
     # Run from the repository so relative deployment inputs and build-tool
     # discovery have the same meaning as they do for a user invoking ASK there.
     started = time.monotonic()
-    completed = subprocess.run(
-        argv, capture_output=True, text=True, check=False, cwd=str(root),
+    process = subprocess.Popen(
+        argv,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        text=True,
+        cwd=str(root),
     )
+    stderr_lines: list[str] = []
+
+    def _forward_stderr() -> None:
+        assert process.stderr is not None
+        for line in process.stderr:
+            stderr_lines.append(line)
+            # Child diagnostics are operational progress/errors, never pack data.
+            sys.stderr.write(line)
+            sys.stderr.flush()
+
+    stderr_thread = threading.Thread(target=_forward_stderr, daemon=True)
+    stderr_thread.start()
+    assert process.stdout is not None
+    stdout_text = process.stdout.read()
+    process.wait()
+    stderr_thread.join(timeout=1)
     duration_ms = int((time.monotonic() - started) * 1000)
     payload: Any = None
     if output.is_file():
@@ -694,9 +715,9 @@ def _run_command(command: str, root: Path, output: Path, extra: list[str]) -> di
     return {
         "command": command,
         "invocation": ["ask", command, *extra, str(root), "--format", "json"],
-        "exit_code": completed.returncode,
+        "exit_code": process.returncode,
         "payload": payload,
-        "stderr": completed.stderr[-4000:] if completed.stderr else None,
+        "stderr": "".join(stderr_lines)[-4000:] if stderr_lines else None,
         # AUD-600-D02: the clock the manifest was missing, taken where the
         # component actually runs.
         "duration_ms": duration_ms,

sourcecode/progress.py

@@ -523,13 +523,15 @@ class Progress:
 
     def _slow_warning_loop(self) -> None:
         """Give non-interactive supervisors a delayed liveness signal only."""
-        if self._stop_event.wait(timeout=self._slow_warning_after) or self._stopped:
-            return
-        try:
-            self._write(
-                f"[ask] warning: run has exceeded {_duration(self._slow_warning_after)}; "
-                "still working (set --progress stderr for periodic heartbeats)\n"
-            )
-            self._slow_warning_emitted = True
-        except Exception:
-            pass
+        while not self._stop_event.wait(timeout=self._slow_warning_after):
+            if self._stopped:
+                return
+            try:
+                elapsed = time.monotonic() - self._t0
+                self._write(
+                    f"[ask] warning: run has exceeded {_duration(elapsed)}; "
+                    "still working (set --progress stderr for periodic heartbeats)\n"
+                )
+                self._slow_warning_emitted = True
+            except Exception:
+                pass

sourcecode/risk.py

@@ -50,6 +50,67 @@ if TYPE_CHECKING:
 RISK_SCHEMA = "risk-v1"
 
 
+def zero_risk_payload(
+    root: Path,
+    *,
+    min_band: str,
+    profiles: "Optional[set[str]]" = None,
+) -> dict:
+    """Return an honest zero-row view without paying for repository analysis.
+
+    `--limit 0` asks for no risk rows. Running the full composer and then slicing
+    to zero paid the repository-wide analysis cost while producing no evidence.
+    Totals are therefore explicitly unknown rather than falsely reported as zero.
+    """
+    from sourcecode import non_coverage
+    from sourcecode.provenance import build_evidence_manifest
+
+    payload: dict[str, Any] = {
+        "schema_version": RISK_SCHEMA,
+        "model": RISK_MODEL,
+        "status": "zero_row_view",
+        "note": (
+            "No risk rows were requested (`--limit 0`), so repository analysis was "
+            "skipped. `risks: []` means no rows were requested, not that the "
+            "repository has no defects. Re-run without zero limit to measure totals."
+        ),
+        "total_defects": None,
+        "total_findings": None,
+        "composition_working_set": {
+            "source_files": None,
+            "audit_findings": None,
+            "candidate_defects": None,
+            "defects_composed": 0,
+            "basis": "analysis skipped because the requested row limit was zero",
+        },
+        "counts_note": (
+            "Totals are null because no repository analysis ran; risks is an empty "
+            "requested view, not a finding census."
+        ),
+        "shown": 0,
+        "by_band": {},
+        "by_tier": {},
+        "risks": [],
+        "limit": 0,
+        "min_band": min_band,
+        "non_coverage": non_coverage.block("security_surface"),
+        "zero_row_view": {
+            "requested_limit": 0,
+            "analysis_skipped": True,
+            "rerun": "ask risk <repository> without --limit 0",
+        },
+    }
+    if profiles is not None:
+        payload["profile_set"] = sorted(profiles)
+    payload["evidence_manifest"] = build_evidence_manifest(
+        payload,
+        command="risk",
+        root=root,
+        inputs={"limit": 0, "min_band": min_band, "profiles": sorted(profiles) if profiles else None},
+    )
+    return payload
+
+
 #: What a bounded row keeps, in one place, so the view and the declaration of the
 #: view cannot be edited apart.
 #:

sourcecode/selftest.py

@@ -87,7 +87,7 @@ class Subject:
     entry_point: str
     java_files: int = 0
     platform: str = ""
-    timeout: int = 900
+    timeout: float = 900
 
     def run(
         self, *args: str, sanitize_environment: bool = False
@@ -872,6 +872,7 @@ def run_selftest(
     *,
     rows: "tuple[str, ...]" = (),
     entry_point: "str | None" = None,
+    timeout: int = 120,
 ) -> "dict[str, Any]":
     """Run the ledger's assertions against *repo* and publish the verdicts."""
     from sourcecode.repository_ir import find_java_files
@@ -881,7 +882,9 @@ def run_selftest(
         entry_point=entry_point or _entry_point(),
         platform=f"{_platform_label()} / python "
                  f"{_platform.python_version()}",
+        timeout=float(timeout),
     )
+    deadline = time.monotonic() + float(timeout)
     try:
         subject.java_files = len(find_java_files(Path(repo)))
     except Exception:
@@ -892,12 +895,51 @@ def run_selftest(
     unknown = sorted(wanted - {row.id.upper() for row in ROWS})
 
     results: "list[dict[str, Any]]" = []
-    for row in selected:
+    for index, row in enumerate(selected):
         started = time.perf_counter()
+        remaining = deadline - time.monotonic()
+        if remaining <= 0:
+            outcome = _result(
+                ERROR,
+                f"the check did not start before the overall {timeout}s deadline",
+            )
+            results.append({
+                "row": row.id,
+                "what": row.what,
+                "assertion": row.assertion,
+                "seconds": round(time.perf_counter() - started, 2),
+                **outcome,
+            })
+            for pending in selected[index + 1:]:
+                results.append({
+                    "row": pending.id,
+                    "what": pending.what,
+                    "assertion": pending.assertion,
+                    "seconds": 0.0,
+                    **_result(ERROR, f"not started: overall {timeout}s deadline exhausted"),
+                })
+            break
+        subject.timeout = remaining
         try:
             outcome = row.check(subject)
         except subprocess.TimeoutExpired:
             outcome = _result(ERROR, f"the check did not finish in {subject.timeout}s")
+            results.append({
+                "row": row.id,
+                "what": row.what,
+                "assertion": row.assertion,
+                "seconds": round(time.perf_counter() - started, 2),
+                **outcome,
+            })
+            for pending in selected[index + 1:]:
+                results.append({
+                    "row": pending.id,
+                    "what": pending.what,
+                    "assertion": pending.assertion,
+                    "seconds": 0.0,
+                    **_result(ERROR, f"not started: overall {timeout}s deadline exhausted"),
+                })
+            break
         except Exception as exc:  # a broken check is not a passing row
             outcome = _result(ERROR, f"{type(exc).__name__}: {exc}")
         results.append({
@@ -907,6 +949,7 @@ def run_selftest(
             "seconds": round(time.perf_counter() - started, 2),
             **outcome,
         })
+        subject.timeout = float(timeout)
 
     counts = {status: 0 for status in (PASS, FAIL, NOT_APPLICABLE, ERROR)}
     for result in results:

{sourcecode-5.9.7.dist-info → sourcecode-5.9.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.9.7
+Version: 5.9.9
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -59,7 +59,7 @@ Description-Content-Type: text/markdown
 > question. All analysis is local and deterministic; see [Privacy](#configuration--privacy)
 > before inspecting a repository whose telemetry policy you need to control.
 
-![Version](https://img.shields.io/badge/version-5.9.7-blue)
+![Version](https://img.shields.io/badge/version-5.9.9-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -196,7 +196,7 @@ set `ASK_MAX_RSS_MB=<megabytes>`; if the process exceeds it, ASK refuses the
 answer with `MEMORY_TOO_LARGE`, including the observed peak and limit. Leave it
 unset, or set it to `0`, to disable the ceiling explicitly.
 
-**Current performance status.** Release 5.9.7 retains the shared Canonical IR
+**Current performance status.** Release 5.9.9 retains the shared Canonical IR
 path used by `validation` and now passes that same CIR into labelled `data-exposure`
 runs; the no-label path remains parse-free. These are implementation properties,
 not duration promises. A controlled external warm-path audit has opened performance
@@ -218,7 +218,7 @@ in `overlapping_paths`; a missing or non-directory path is rejected as structure
 invalid input rather than treated as an empty repository. This prevents silent
 entitlement errors in CI and does not change per-repository gates or billing.
 
-Release 5.9.7 also hardens the boundary contracts: missing consumer repositories,
+Release 5.9.9 also carries the boundary-contract hardening: missing consumer repositories,
 malformed CVE feeds and unresolved `pack gate --since` refs fail as structured
 input errors; duplicate same-commit baselines are never overwritten. `posture
 --diff` validates unknown profiles when the repository declares profiles. In
@@ -251,7 +251,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.9.7 — and, on a build that has aged,
+ask version                    # ask 5.9.9 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 
@@ -501,6 +501,10 @@ The everyday loop: diff-based PR review, symptom-driven bug triage, and delta co
 
 ### 7 · Utilities
 `ask rename-class` (word-boundary Java rename) · `ask chunk-file` (split large files for agents) · `ask cache` (status / warm / model / clear / freshness) · `ask self-audit` (does the installed build's own registry agree with itself?)
+
+`rename-class` migration note: current releases require the explicit form
+`ask rename-class <repo> --from OldName --to NewName`. Older positional forms are
+not accepted; use `--dry-run` first when migrating scripts.
 → [reference](docs/USER_GUIDE.md)
 
 ---

{sourcecode-5.9.7.dist-info → sourcecode-5.9.9.dist-info}/RECORD

@@ -1,6 +1,6 @@
-sourcecode/__init__.py,sha256=gFKYhRgFEIRJQkCoClBu-R4CIT4KIDVnPAvdp9RZjgA,308
+sourcecode/__init__.py,sha256=TXUdRcR-lIVuPA34D4Cvw3nLwLIzsk1-nyQ8bLeS6AM,308
 sourcecode/__main__.py,sha256=qDFVkobwsdZrX0B3stiRqsUNivVpybKO-egzAwCW4xw,165
-sourcecode/_build_commit.py,sha256=7TTq7KpgqFZyS9X9WdPvNJ9CJ5-afbJ6tFk_zAiwjzM,9290
+sourcecode/_build_commit.py,sha256=yGp-IrT0vxNwHnCuNvgYKtp_TTcmGqyszcIcHVpS10I,10274
 sourcecode/access_drift.py,sha256=1R7_fiAPvKNOnxc9uxkH3JH-k8MiAuyE7FwWUX1r4Fg,8995
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/analysis_budget.py,sha256=ZuNEboPF8A6GK-_V7WNt92ezgriga7_Rbr-vvSN4UEE,4183
@@ -35,7 +35,7 @@ sourcecode/change_plan.py,sha256=drAoDsqFplutCLc6Y0xue7sYkTls0SpYh7aOXvttv3I,129
 sourcecode/ci_output.py,sha256=X4NRokWWMRF9Ex8OQrEO2g04GzJ00GDP5zYIoqI9YCc,4625
 sourcecode/cir_graphs.py,sha256=RytqSv1WF8kdlfXj2fPQz16LY4akS2kyThbdWL8beCQ,14835
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=ULjbDXHGezsDnbdW2be3oci6LuXvHDNUwEmDMtyNL7M,938155
+sourcecode/cli.py,sha256=X_gCZrrE_bQuCntOjE9rwzvjXirkdZ5ZPbmQjVhMvaw,943965
 sourcecode/client_calls.py,sha256=YOPnfRZzRyqmdHvXSVeiunW8cuiuCuWXacNIQRgKMCw,22640
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=Lnfmm9I3k0H1jP1tV6ZJ-R7znjQPLPLCe5TzV1Jb_PM,15323
@@ -72,7 +72,7 @@ sourcecode/entrypoint_classifier.py,sha256=jhTYlyqDJH2AtdEcLVaRU3lYRTJuF8DkxVzl4
 sourcecode/env_analyzer.py,sha256=tU2CcW-Lkl__60DMd4ibYnXnxfmPbV5Z9GrToSWLdSA,22029
 sourcecode/envelope.py,sha256=rISj4NXJZTX0scP7O01fmxl6xnCr_D_c482LkpPzVc0,17407
 sourcecode/environment_resolution.py,sha256=e86HT3RNbIIUIRChvz1Pu9Um81UvYu22BkpHNnwbUQI,30650
-sourcecode/error_schema.py,sha256=uAWEknt3Z-6pNoNaiaSVeiDHdBe-bmt08BDlkS1YaAs,2951
+sourcecode/error_schema.py,sha256=DhxsIvpzAbEzluWFE4IWXYRyccECcJkq2mT2KJB5Tew,3485
 sourcecode/evidence_provider.py,sha256=GSSL44JEaouO5AHks2sB3d1YvC9xIKIld1yBYxZpXxo,4277
 sourcecode/execution_plan.py,sha256=R18LdPHnyfu8YMURwhs4PDUqpWFUVxJHgtb8bfg031k,30130
 sourcecode/explain.py,sha256=soWg-KevnESW9UIBCLTMJOnpR3U0fQi5vwbJnh7xr1c,34744
@@ -96,7 +96,7 @@ sourcecode/identity_fallback.py,sha256=uRC_j_80uaI4Ue4tf-OhKX4h472dmufYcjEFGSxY2
 sourcecode/integration_coordinates.py,sha256=rvuApnS7WdRUbeQLg_oKj-Gi0koO2RKdw6HenXNgrDo,12443
 sourcecode/intent_router.py,sha256=hC_o0VYfSjzSXecFkpiD7vzFgvt44YAw6E_jrMeGiZ4,15555
 sourcecode/jdk_exports.py,sha256=fCrlwNAXUT9gge_joq6kMnY3zJxYB2pxqy-0w3o3MJI,874
-sourcecode/license.py,sha256=Rx_TXEztUJB9TzI352hEh8cmCd-30J9WS6iT4EndcW0,30974
+sourcecode/license.py,sha256=eIEuIVQXywl_S9LOIACOEpJ4M5RyaPvWrqg_jSNOrXA,31088
 sourcecode/manifest_cache.py,sha256=aPRHUs781d00fVbtlTiSaq0-AS9bAqS7_zJ0snZvlJs,2244
 sourcecode/mcp_nudge.py,sha256=beNjfyb7z09T1rnS4t6Q4qfbLzZQNaP6ddCA4XpmV0s,3256
 sourcecode/metrics_analyzer.py,sha256=gLoRWKygF18jLgwsqmGXSWopw-f5iO1VbM7Jjdif6ag,22809
@@ -112,7 +112,7 @@ sourcecode/output_ceiling.py,sha256=rMLDHbXeC6C_uP8iQSVbbCGiJ_n0gMr2YI9zt5nltFA,
 sourcecode/output_encoding.py,sha256=OxiZQtr7uWBDUtblNQviNHsTH1Xo9AZEpsegPlQWKFk,2139
 sourcecode/output_sink.py,sha256=Eya-PnXxqc3RGulJoLhuC9LUF73SZD0aO5O2B0xAMXU,8762
 sourcecode/pack_manifest.py,sha256=Qm6et6SQsFCLc-HJ-Uhz1XlcOa77ZDHgks4JVDEENss,20820
-sourcecode/packs.py,sha256=y5IGuzF4LYzZl9z5WtkxjWFAmUNphDvmbHUFGkuUieE,48879
+sourcecode/packs.py,sha256=_f3bRzGIy_Cv2cSUMSco3e6nKxJbApT47PUYMEZwZEw,49506
 sourcecode/parallel.py,sha256=QocwdZoUabdxzd_jEz7f6B2XMsYWFaCFaIl0tIEQs3g,10546
 sourcecode/parse_cache.py,sha256=BaPzh-KygmY4OpJQm2YGh6PWztYsj58vHWTu2eSF4s8,38769
 sourcecode/partial_contract.py,sha256=FZUBACkClvRAmPeYVjxNWeQmP6Y22KW4fPeeTfmT80A,5951
@@ -128,7 +128,7 @@ sourcecode/pr_impact.py,sha256=8RgTJgvEThezh-Vm65eiFvJBdb45VjcbewEk5P144-0,39184
 sourcecode/pr_risk.py,sha256=Qbj1aK-JsdTQd_nji_-RaZAL3WUbwqDg9aH-cHQkoog,11354
 sourcecode/prepare_context.py,sha256=QsJiKoJRNn5_1adyBbKguH_wiaM8hpPLE0fLG9J4ilU,245016
 sourcecode/product_info.py,sha256=rpuCDf0KM2SD-WP8vw2tjdcbhWPsOGEVjSWqS8fkzlo,4966
-sourcecode/progress.py,sha256=frGEzCq-6gIQzPocrLyeEVLIzLmSnDauoX-3H6yE-3I,23054
+sourcecode/progress.py,sha256=3tO-rKlRpPPFnRU-qIlQMyq4lsiecMo4GqxEsxAnpMA,23147
 sourcecode/provenance.py,sha256=gLbsLv0gze7k7ChM4i5M3MwKfFPzs8wzM72rUd2C5sM,7342
 sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,12970
 sourcecode/readiness_timeline.py,sha256=KjghC1MWH7Tzto97TBR3N0F8FkR87w5z7lZ1QsWvAQE,8506
@@ -149,7 +149,7 @@ sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ
 sourcecode/repository_ir.py,sha256=xW3ahhhejolAaQL-EMEjOPYmrxhEx5S_3BNGxTEX56U,523074
 sourcecode/resource_budget.py,sha256=Bo-XMvVK9XyHY_S06fVirZrhXgwmnr3XI38-Li55NWY,7767
 sourcecode/ris.py,sha256=zlns4esv1tK8VDIYzOzRmw5yM6VLx7oxaPNB_kN3it4,28617
-sourcecode/risk.py,sha256=uwKSK5BLNVXaSnRDEmepmFGXODppGmzwS0c-yCEwKrc,100319
+sourcecode/risk.py,sha256=98MhXPM4unAJZFTKKEeAbEjLq4NZ0Wy-66AHQfA3x7c,102506
 sourcecode/risk_model.py,sha256=RoC-G15qZP5BLEwwmcr4eJ0APgvIbh1WTqhTVT-5YFE,10895
 sourcecode/rule_catalog.py,sha256=QCx6ToFTMCtDt5uuX1uBMLuw3b9Cd92gGRsX34kud4U,5328
 sourcecode/rule_pass.py,sha256=DTNxD-nAecMJhIzI1LCd9FyRumInQSZjitacNh4Zoc8,14671
@@ -167,7 +167,7 @@ sourcecode/security_config_scan.py,sha256=LU8gfNUBB6wjKR8jkK-qRKtUrbkHZ301_Xsk6h
 sourcecode/security_posture.py,sha256=ZWgWMsVdvkDHOkTtAy6T3Q9Kp8ufWsdqPsFQZVBNAFM,56885
 sourcecode/selection_contract.py,sha256=O3q_zHBgUsp1SDukqmH9nOUO6HxLFH_7fAqVL7JMV_A,1974
 sourcecode/self_audit.py,sha256=ZK6VZwbkTL66f4Q4U_JD6sdl6KjQ4DvtPcn5XqGcZDY,11541
-sourcecode/selftest.py,sha256=WjD2xMa55k2svoBMpBLpHCPMip3rtSNUbskSqsuB3iY,40056
+sourcecode/selftest.py,sha256=eaKk7Cm2MPX8hry5yZh0qUnRgv8GwJGXTcHyHH6LZVw,41742
 sourcecode/semantic_analyzer.py,sha256=xGwQvhU9xeOlZ4N-TPXFZT8HBHx4Rg0nPwu8nDFl00Y,95621
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
 sourcecode/semantic_integration_engine.py,sha256=ZjyKJKOj-adScWlYBuWx8Ee_P0F4_OImUJVnCYgopuU,20952
@@ -273,13 +273,13 @@ sourcecode/telemetry/consent.py,sha256=-Wb8BFGXEexOs8M0Eja7F-T6ZtLNPeRoZnHcHvlP7
 sourcecode/telemetry/events.py,sha256=l3Z2SQUO4_C2D2ItXOOdVNimAmHedUHnUxqYFTxnsAE,2900
 sourcecode/telemetry/filters.py,sha256=-lqT2oorECuqEIdeHb--7AZ6BCaUx0bya720a-Z5x6w,7335
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode/_docs/DEFECT-LEDGER.md,sha256=ln-d2Sw8RWXfqWZoJLGmBl3AceG4wPEDPpNhVQEdlgg,1123683
+sourcecode/_docs/DEFECT-LEDGER.md,sha256=u_9OsNch-Ft1Qu_JnobW4FlVnP53MW9ABw3dZw89c6E,1132675
 sourcecode/_docs/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
 sourcecode/_docs/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode/_docs/USER_GUIDE.md,sha256=K9kO1AzIBfwpM3U02sBPPQuyBIA6GU3UBBO0OojgpgI,104721
-sourcecode-5.9.7.dist-info/METADATA,sha256=rnWzcNS9xiYtpYSTsxzwRh4J7KuUGqsXWi9MPhgKmH8,64752
-sourcecode-5.9.7.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.9.7.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.9.7.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
-sourcecode-5.9.7.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode-5.9.7.dist-info/RECORD,,
+sourcecode/_docs/USER_GUIDE.md,sha256=F1dkuPZSohjBLRhNx7YMnUBTJaGJRxwP7D9SZeh8Bqo,104970
+sourcecode-5.9.9.dist-info/METADATA,sha256=Ugbu3bEkMEQj7JkQvbaNhzytfDnNUaJ4cX7IuQVvvS0,64978
+sourcecode-5.9.9.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.9.9.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.9.9.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
+sourcecode-5.9.9.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
+sourcecode-5.9.9.dist-info/RECORD,,