zanii-underwrite 0.1.0__py3-none-any.whl

zanii_underwrite/__init__.py

@@ -0,0 +1,409 @@
+"""Zanii Underwrite formats. Each format is added here only after its spec and vectors are merged."""
+
+from ._common import Refusal, Result
+from .ai_use import AI_USE, AI_USE_LABELS, AI_USE_RULES, ai_use_statement
+from .backtest import BACKTEST, BACKTEST_RULES, run_backtest, shadow_gate_passes
+from .basis_risk import BASIS_RISK, BASIS_RISK_LABELS, BASIS_RISK_RULES, build_basis_risk
+from .case import CASE_ENTRY, CASE_RECORD, CASE_RULES, case_entry, check_case, verify_case
+from .cause import CAUSE, CAUSE_MAP, build_cause_map, classify_cause
+from .cause import RULES as _CAUSE_RULES
+from .certify_handoff import RULES as _CERTIFY_RULES
+from .certify_handoff import (
+    CertifyError,
+    certify_handoff,
+    retest_request,
+    retest_result,
+    retest_result_body,
+    suspension_notice,
+)
+from .claim import CLAIM, CLAIM_RULES, build_claim, check_claim
+from .cluster import (
+    CLUSTER,
+    CLUSTER_MAX_WINDOW_H,
+    CLUSTER_REINSURER_MIN,
+    CLUSTER_RULES,
+    CLUSTER_VERDICT,
+    CLUSTER_VERIFY_RULES,
+    CLUSTER_VIEWS,
+    build_cluster,
+    verify_cluster,
+)
+from .completeness import COMPLETENESS, build_completeness, check_completeness, verify_completeness
+from .consent_profile import PROFILE as CONSENT_PROFILE
+from .consent_profile import VERDICT as CONSENT_VERDICT
+from .consent_profile import build_uw_consent, build_withdrawal, check_consent, verify_consent_profile
+from .crosswalk import (
+    CROSSWALK,
+    CROSSWALK_LABELS,
+    CROSSWALK_REFS,
+    CROSSWALK_RESULT,
+    CROSSWALK_RULES,
+    CROSSWALK_SOURCES,
+    CROSSWALK_TABLE,
+    crosswalk,
+)
+from .exposure import EXPOSURE, build_exposure, verify_exposure
+from .exposure import ORDER as EXPOSURE_RULES
+from .gaming import GAMING_CHECKS, gaming_checks
+from .incident_export import (
+    INCIDENT_EXPORT,
+    INCIDENT_EXPORT_RULES,
+    INCIDENT_EXPORT_VERDICT,
+    build_incident_export,
+    check_incident_export,
+    incident_ledger_proofs,
+    verify_incident_export,
+)
+from .indicator import (
+    ZARI_MODEL,
+    ZARI_RESULT,
+    ZARI_RESULT_LEGACY,
+    ZARI_RULES,
+    check_zari_model,
+    evaluate_zari,
+    gaming_ok,
+    pool_complement,
+    sign_zari_model,
+    zari_facts,
+    zari_inputs,
+    zari_pack,
+)
+from .indicator_v2 import (
+    BACKTEST_V2,
+    BACKTEST_V2_RULES,
+    ZARI_MODEL_V2,
+    ZARI_RESULT_V2,
+    ZARI_RESULT_V2_LEGACY,
+    ZARI_V2_RULES,
+    check_zari_model_v2,
+    evaluate_zari_v2,
+    run_backtest_v2,
+)
+from .insurability import INSURABILITY, INSURABILITY_RULES, build_insurability, check_insurability, verify_insurability
+from .loss_record import LOSS_RECORD, LOSS_VERDICT, build_loss_record, verify_loss_record
+from .lossrun import (
+    LOSSRUN,
+    LOSSRUN_RULES,
+    build_loss_run,
+    build_lossrun,
+    verify_loss_run,
+    verify_lossrun,
+    wilson_low_ppm,
+)
+from .model_change import (
+    MODEL_ACCEPTANCE,
+    MODEL_REVIEW,
+    MODEL_SWITCH,
+    check_model_switch,
+    sign_model_acceptance,
+    sign_model_review,
+)
+from .monitoring import EVENT as MONITORING_EVENT
+from .monitoring import VERDICT as MONITORING_VERDICT
+from .monitoring import detect_monitoring_events, sign_monitoring_event, verify_monitoring_event
+from .oracle import (
+    ORACLE,
+    ORACLE_V2,
+    ORACLE_V2_BUILD_RULES,
+    ORACLE_V2_VERIFY_RULES,
+    ORACLE_VERDICT_V2,
+    build_oracle,
+    build_oracle_v2,
+    sign_oracle,
+    sign_oracle_v2,
+    verify_oracle,
+    verify_oracle_v2,
+)
+from .oracle import VERDICT as ORACLE_VERDICT
+from .pack import PACK, build_pack, check_pack_envelope, sign_pack, verify_pack
+from .pack import VERDICT as PACK_VERDICT
+from .performance import PERFORMANCE, build_performance, sign_performance, verify_performance
+from .performance import VERDICT as PERFORMANCE_VERDICT
+from .pool import (
+    POOL,
+    POOL_AUDIT_RULES,
+    POOL_MEMBERSHIP,
+    POOL_RELEASE_RULES,
+    POOL_RELEASE_VERDICT,
+    POOL_RULES,
+    POOL_SIGNED,
+    audit_pool,
+    build_pool,
+    pool_can_read,
+    sign_pool_release,
+    verify_pool_release,
+)
+from .portfolio import (
+    PORTFOLIO,
+    PORTFOLIO_RULES,
+    PORTFOLIO_SIGNED,
+    PORTFOLIO_VERDICT,
+    PORTFOLIO_VIEW_RULES,
+    build_portfolio,
+    portfolio_exclusion,
+    sign_portfolio,
+    verify_portfolio,
+)
+from .readiness import READINESS, build_readiness, check_readiness, verify_readiness
+from .renewal_diff import RENEWAL_DIFF, renewal_diff, renewal_diff_text
+from .report import HTML as REPORT_HTML
+from .report import REGIME_FIELDS, REPORT, REPORT_V2, render_report, report_freeze, sign_report, verify_report
+from .report import VERDICT as REPORT_VERDICT
+from .rulebook import (
+    POLICY_RECORD,
+    POLICY_VERDICT,
+    RULEBOOK,
+    apply_rulebook,
+    build_policy_record,
+    build_rulebook,
+    cosign_policy_record,
+    verify_policy_record,
+)
+from .rulebook import RESULT as RULEBOOK_RESULT
+from .taxonomy import TAXONOMY, build_taxonomy, classify, verify_taxonomy
+from .timeline import RULES as _TIMELINE_RULES
+from .timeline import TIMELINE, build_timeline
+from .weather import (
+    SIGNED_SKEW_S,
+    WEATHER,
+    WEATHER_RULES,
+    WEATHER_VERDICT,
+    sign_weather,
+    verify_weather,
+    weather_conditions_ok,
+)
+from .wording_check import (
+    WORDING,
+    WORDING_CHECK,
+    WORDING_CHECK_SIGNED,
+    WORDING_CHECK_SIGNED_RULES,
+    WORDING_CHECK_VERDICT,
+    check_wording,
+    sign_wording_check,
+    verify_wording_check,
+)
+
+PACKAGE = "zanii.underwrite"
+# The TypeScript rule lists, in check order, for the modules that keep their rules as a label table.
+CAUSE_RULES = list(_CAUSE_RULES)
+CERTIFY_RULES = list(_CERTIFY_RULES)
+TIMELINE_RULES = list(_TIMELINE_RULES)
+
+__all__ = [
+    "AI_USE",
+    "AI_USE_LABELS",
+    "AI_USE_RULES",
+    "BACKTEST",
+    "BACKTEST_RULES",
+    "BACKTEST_V2",
+    "BACKTEST_V2_RULES",
+    "BASIS_RISK",
+    "BASIS_RISK_LABELS",
+    "BASIS_RISK_RULES",
+    "CASE_ENTRY",
+    "CASE_RECORD",
+    "CASE_RULES",
+    "CAUSE",
+    "CAUSE_MAP",
+    "CAUSE_RULES",
+    "CERTIFY_RULES",
+    "CLAIM",
+    "CLAIM_RULES",
+    "CLUSTER",
+    "CLUSTER_MAX_WINDOW_H",
+    "CLUSTER_REINSURER_MIN",
+    "CLUSTER_RULES",
+    "CLUSTER_VERDICT",
+    "CLUSTER_VERIFY_RULES",
+    "CLUSTER_VIEWS",
+    "COMPLETENESS",
+    "CONSENT_PROFILE",
+    "CONSENT_VERDICT",
+    "CROSSWALK",
+    "CROSSWALK_LABELS",
+    "CROSSWALK_REFS",
+    "CROSSWALK_RESULT",
+    "CROSSWALK_RULES",
+    "CROSSWALK_SOURCES",
+    "CROSSWALK_TABLE",
+    "EXPOSURE",
+    "EXPOSURE_RULES",
+    "GAMING_CHECKS",
+    "INCIDENT_EXPORT",
+    "INCIDENT_EXPORT_RULES",
+    "INCIDENT_EXPORT_VERDICT",
+    "INSURABILITY",
+    "INSURABILITY_RULES",
+    "LOSSRUN",
+    "LOSSRUN_RULES",
+    "LOSS_RECORD",
+    "LOSS_VERDICT",
+    "MODEL_ACCEPTANCE",
+    "MODEL_REVIEW",
+    "MODEL_SWITCH",
+    "MONITORING_EVENT",
+    "MONITORING_VERDICT",
+    "ORACLE",
+    "ORACLE_V2",
+    "ORACLE_V2_BUILD_RULES",
+    "ORACLE_V2_VERIFY_RULES",
+    "ORACLE_VERDICT",
+    "ORACLE_VERDICT_V2",
+    "PACK",
+    "PACKAGE",
+    "PACK_VERDICT",
+    "PERFORMANCE",
+    "PERFORMANCE_VERDICT",
+    "POLICY_RECORD",
+    "POLICY_VERDICT",
+    "POOL",
+    "POOL_AUDIT_RULES",
+    "POOL_MEMBERSHIP",
+    "POOL_RELEASE_RULES",
+    "POOL_RELEASE_VERDICT",
+    "POOL_RULES",
+    "POOL_SIGNED",
+    "PORTFOLIO",
+    "PORTFOLIO_RULES",
+    "PORTFOLIO_SIGNED",
+    "PORTFOLIO_VERDICT",
+    "PORTFOLIO_VIEW_RULES",
+    "READINESS",
+    "REGIME_FIELDS",
+    "RENEWAL_DIFF",
+    "REPORT",
+    "REPORT_HTML",
+    "REPORT_V2",
+    "REPORT_VERDICT",
+    "RULEBOOK",
+    "RULEBOOK_RESULT",
+    "SIGNED_SKEW_S",
+    "TAXONOMY",
+    "TIMELINE",
+    "TIMELINE_RULES",
+    "WEATHER",
+    "WEATHER_RULES",
+    "WEATHER_VERDICT",
+    "WORDING",
+    "WORDING_CHECK",
+    "WORDING_CHECK_SIGNED",
+    "WORDING_CHECK_SIGNED_RULES",
+    "WORDING_CHECK_VERDICT",
+    "ZARI_MODEL",
+    "ZARI_MODEL_V2",
+    "ZARI_RESULT",
+    "ZARI_RESULT_LEGACY",
+    "ZARI_RESULT_V2",
+    "ZARI_RESULT_V2_LEGACY",
+    "ZARI_RULES",
+    "ZARI_V2_RULES",
+    "CertifyError",
+    "Refusal",
+    "Result",
+    "ai_use_statement",
+    "apply_rulebook",
+    "audit_pool",
+    "build_basis_risk",
+    "build_cause_map",
+    "build_claim",
+    "build_cluster",
+    "build_completeness",
+    "build_exposure",
+    "build_incident_export",
+    "build_insurability",
+    "build_loss_record",
+    "build_loss_run",
+    "build_lossrun",
+    "build_oracle",
+    "build_oracle_v2",
+    "build_pack",
+    "build_performance",
+    "build_policy_record",
+    "build_pool",
+    "build_portfolio",
+    "build_readiness",
+    "build_rulebook",
+    "build_taxonomy",
+    "build_timeline",
+    "build_uw_consent",
+    "build_withdrawal",
+    "case_entry",
+    "certify_handoff",
+    "check_case",
+    "check_claim",
+    "check_completeness",
+    "check_consent",
+    "check_incident_export",
+    "check_insurability",
+    "check_model_switch",
+    "check_pack_envelope",
+    "check_readiness",
+    "check_wording",
+    "check_zari_model",
+    "check_zari_model_v2",
+    "classify",
+    "classify_cause",
+    "cosign_policy_record",
+    "crosswalk",
+    "detect_monitoring_events",
+    "evaluate_zari",
+    "evaluate_zari_v2",
+    "gaming_checks",
+    "gaming_ok",
+    "incident_ledger_proofs",
+    "pool_can_read",
+    "pool_complement",
+    "portfolio_exclusion",
+    "render_report",
+    "renewal_diff",
+    "renewal_diff_text",
+    "report_freeze",
+    "retest_request",
+    "retest_result",
+    "retest_result_body",
+    "run_backtest",
+    "run_backtest_v2",
+    "shadow_gate_passes",
+    "sign_model_acceptance",
+    "sign_model_review",
+    "sign_monitoring_event",
+    "sign_oracle",
+    "sign_oracle_v2",
+    "sign_pack",
+    "sign_performance",
+    "sign_pool_release",
+    "sign_portfolio",
+    "sign_report",
+    "sign_weather",
+    "sign_wording_check",
+    "sign_zari_model",
+    "suspension_notice",
+    "verify_case",
+    "verify_cluster",
+    "verify_completeness",
+    "verify_consent_profile",
+    "verify_exposure",
+    "verify_incident_export",
+    "verify_insurability",
+    "verify_loss_record",
+    "verify_loss_run",
+    "verify_lossrun",
+    "verify_monitoring_event",
+    "verify_oracle",
+    "verify_oracle_v2",
+    "verify_pack",
+    "verify_performance",
+    "verify_policy_record",
+    "verify_pool_release",
+    "verify_portfolio",
+    "verify_readiness",
+    "verify_report",
+    "verify_taxonomy",
+    "verify_weather",
+    "verify_wording_check",
+    "weather_conditions_ok",
+    "wilson_low_ppm",
+    "zari_facts",
+    "zari_inputs",
+    "zari_pack",
+]

zanii_underwrite/__main__.py

@@ -0,0 +1,4 @@
+"""``python -m zanii_underwrite``: the zanii-uw-py CLI (cli.py)."""
+from .cli import run
+
+run()

zanii_underwrite/_common.py

@@ -0,0 +1,102 @@
+"""Shared helpers: the refusal type, strict times, counts and RFC 8785 key order."""
+from __future__ import annotations
+
+import re
+from datetime import UTC, datetime
+from typing import Any, TypedDict
+
+from zanii.keys import public_key_from_did
+
+MAX_SAFE = 2**53 - 1
+_TIME = re.compile(r"[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z")
+_DECIMAL = re.compile(r"(0|[1-9][0-9]*)")
+HASH = re.compile(r"sha256:[0-9a-f]{64}")
+_DID = re.compile(r"did:key:z6Mk[1-9A-HJ-NP-Za-km-z]{44}")
+
+
+class Refusal(Exception):
+    """An input or document a spec refuses; ``rule`` is the spec's rule id."""
+
+    def __init__(self, rule: str) -> None:
+        super().__init__(rule)
+        self.rule = rule
+
+
+class Result(TypedDict):
+    ok: bool
+    reasons: list[str]
+
+
+def result(found: set[str], order: list[str]) -> Result:
+    """First failure wins, in spec order: ``reasons`` holds the earliest rule broken, or nothing."""
+    reasons = [r for r in order if r in found][:1]
+    return {"ok": not reasons, "reasons": reasons}
+
+
+def is_count(v: object) -> bool:
+    """A non-negative safe integer. JSON 5.0 equals 5 (JCS writes both as 5); a bool is never a count."""
+    if isinstance(v, bool) or not isinstance(v, (int, float)):
+        return False
+    return float(v).is_integer() and 0 <= v <= MAX_SAFE
+
+
+def is_number(v: object) -> bool:
+    return isinstance(v, (int, float)) and not isinstance(v, bool)
+
+
+def is_decimal(v: object) -> bool:
+    return isinstance(v, str) and _DECIMAL.fullmatch(v) is not None
+
+
+def parse_time(v: object) -> datetime | None:
+    """``YYYY-MM-DDTHH:MM:SSZ`` that is a real instant, else None."""
+    if not isinstance(v, str) or not _TIME.fullmatch(v):
+        return None
+    try:
+        return datetime.strptime(v, "%Y-%m-%dT%H:%M:%SZ").replace(tzinfo=UTC)
+    except ValueError:
+        return None
+
+
+def parse_any_time(v: object) -> datetime | None:
+    """A Blackbox event time (ISO 8601 with Z, milliseconds allowed)."""
+    if not isinstance(v, str) or not v.endswith("Z"):
+        return None
+    try:
+        return datetime.fromisoformat(v)
+    except ValueError:
+        return None
+
+
+def fmt_time(t: datetime) -> str:
+    return t.strftime("%Y-%m-%dT%H:%M:%SZ")
+
+
+def utf16_key(s: str) -> bytes:
+    """RFC 8785 order: UTF-16 code units."""
+    return s.encode("utf-16-be")
+
+
+def sorted_unique(v: object) -> bool:
+    """An array of strings sorted by code units with no duplicates."""
+    if not isinstance(v, list) or not all(isinstance(x, str) for x in v):
+        return False
+    return v == sorted(set(v), key=utf16_key)
+
+
+def get(doc: Any, path: str) -> Any:
+    """The value at a dotted path, or KeyError."""
+    for k in path.split("."):
+        if not isinstance(doc, dict) or k not in doc:
+            raise KeyError(path)
+        doc = doc[k]
+    return doc
+
+
+def is_did(v: object) -> bool:
+    """The ``did`` class (consent-profile.md section 8.2): an Ed25519 ``did:key``."""
+    return isinstance(v, str) and _DID.fullmatch(v) is not None and public_key_from_did(v) is not None
+
+
+def is_hash(v: object) -> bool:
+    return isinstance(v, str) and HASH.fullmatch(v) is not None

zanii_underwrite/_exact.py

@@ -0,0 +1,35 @@
+"""Exact arithmetic for spec/pool.md and spec/indicator.md: decimal strings and the integer Poisson score interval."""
+from __future__ import annotations
+
+import math
+import re
+from fractions import Fraction
+
+
+def decimal_pattern(places: int) -> re.Pattern[str]:
+    """A positive or zero decimal string with at most ``places`` decimals."""
+    return re.compile(r"(0|[1-9][0-9]*)(\.[0-9]{1," + str(places) + r"})?")
+
+
+def parse_decimal(s: str) -> Fraction:
+    """The exact value of a decimal string already matched against ``decimal_pattern``."""
+    whole, _, part = s.partition(".")
+    return Fraction(int(whole + part), 10 ** len(part))
+
+
+def isqrt_ceil(x: int) -> int:
+    """The least integer whose square is at least ``x``."""
+    r = math.isqrt(x)
+    return r if r * r == x else r + 1
+
+
+def poisson_range_per_million(k: int, n: int) -> dict[str, int]:
+    """pool.md section 5: the 95% Poisson score interval of ``k`` events in ``n`` units, per million, rounded outward."""
+    if k < 0 or n < 1:
+        raise ValueError("k must be >= 0 and n >= 1")
+    m = 1_000_000
+    s = isqrt_ceil((2500 * k + 2401) * m * m)
+    base, den = (1250 * k + 2401) * m, 1250 * n * m
+    low = math.floor(Fraction((base - 49 * s) * m, den))
+    high = math.ceil(Fraction((base + 49 * s) * m, den))
+    return {"low": max(0, low), "high": high}

zanii_underwrite/_taxonomy_data.py

@@ -0,0 +1,128 @@
+"""Taxonomy v1 data, transcribed from spec/taxonomy.md sections 1 and 6 (immutable once published)."""
+
+# (id, English meaning, Arabic meaning), in canonical order (section 1).
+CLASSES: tuple[tuple[str, str, str], ...] = (
+    ('WRONG_FACT', 'The agent stated or used something false: an invented value, tool or result, or a fact the evidence contradicts.', 'قدّم الوكيل أو استخدم معلومة غير صحيحة: قيمة أو أداة أو نتيجة مختلقة، أو معلومة يناقضها الدليل.'),
+    ('UNAUTH_ACTION', 'The agent took an action its rules, plan or clearance did not allow, and the action went through.', 'نفّذ الوكيل إجراءً لا تسمح به قواعده أو خطته أو تصريحه، ومرّ الإجراء.'),
+    ('BLOCKED_ACTION', 'The agent tried an action that a control stopped before it had any effect.', 'حاول الوكيل إجراءً أوقفته أداة رقابة قبل أن يكون له أي أثر.'),
+    ('SPEND_OVERRUN', 'Spend or model calls crossed, or came close to, a budget or limit set for the session or the agent.', 'تجاوز الإنفاق أو استدعاءات النموذج ميزانية أو حدًا محددًا للجلسة أو للوكيل، أو اقترب منه.'),
+    ('INJECTION', 'Instructions or tool data from an untrusted source reached the agent: prompt injection, a changed or poisoned tool, tampered memory.', 'وصلت إلى الوكيل تعليمات أو بيانات أداة من مصدر غير موثوق: حقن تعليمات، أو أداة متغيرة أو مسمومة، أو ذاكرة معبث بها.'),
+    ('EXFIL', 'Data or credentials were sent, or asked for, outside where their rules allow.', 'أُرسلت بيانات أو بيانات اعتماد، أو طُلبت، خارج ما تسمح به قواعدها.'),
+    ('APPROVAL_FAIL', 'The human approval control did not work as intended: no one confirmed, the approved action changed, or sign-off is missing or invalid.', 'لم تعمل رقابة الموافقة البشرية كما يجب: لم يؤكد أحد، أو تغيّر الإجراء المعتمد، أو التوقيع مفقود أو غير صالح.'),
+    ('FALSE_DONE', 'The agent reported a task as done or successful when the record contradicts it or cannot show it.', 'أبلغ الوكيل أن المهمة أُنجزت أو نجحت بينما يناقض السجل ذلك أو لا يثبته.'),
+    ('DISCLOSURE', 'Personal or regulated data or content was used or shown against its region, consent, access or regulator rules.', 'استُخدمت بيانات أو محتويات شخصية أو خاضعة للتنظيم أو عُرضت بما يخالف قواعد المنطقة أو الموافقة أو الوصول أو الجهة الرقابية.'),
+    ('PROVIDER_FAIL', "A run failed or degraded because a model provider, tool or the agent's connection failed.", 'فشل التشغيل أو تراجع بسبب عطل في مزوّد النموذج أو الأداة أو اتصال الوكيل.'),
+    ('OTHER', 'Recorded, but not an insurance event class in v1: record integrity, run hygiene, operations. Every code not in this table also lands here.', 'مُسجّل لكنه ليس فئة حدث تأميني في الإصدار 1: سلامة السجل، أو جودة التشغيل، أو العمليات. وكل رمز غير موجود في هذا الجدول يندرج هنا.'),
+)
+
+# code -> (class, tier rule), section 6 order.
+CODES: dict[str, tuple[str, str]] = {
+    'MISSING_LOCAL': ('OTHER', 'by_severity'),
+    'ALTERED': ('OTHER', 'by_severity'),
+    'EXTRA_LOCAL': ('OTHER', 'by_severity'),
+    'LOCAL_GAP': ('OTHER', 'by_severity'),
+    'RECEIPT_MISSING': ('OTHER', 'by_severity'),
+    'UNATTRIBUTED_CHANGE': ('OTHER', 'by_severity'),
+    'INTEGRITY_FAILED': ('OTHER', 'by_severity'),
+    'ANCHOR_STALE': ('OTHER', 'by_severity'),
+    'LEDGER_VIOLATION': ('OTHER', 'by_severity'),
+    'ANCHOR_REJECTED': ('OTHER', 'by_severity'),
+    'SDK_SILENT': ('OTHER', 'by_severity'),
+    'D1_REPEAT_CALL': ('OTHER', 'by_severity'),
+    'D2_ACTION_LOOP': ('OTHER', 'by_severity'),
+    'D3_ERROR_STREAK': ('PROVIDER_FAIL', 'by_severity'),
+    'D4_CONTEXT_BLOAT': ('OTHER', 'by_severity'),
+    'D5_CACHE_BREAK': ('OTHER', 'by_severity'),
+    'RETRY_STORM': ('PROVIDER_FAIL', 'by_severity'),
+    'DANGLING_TOOL_CALL': ('OTHER', 'by_severity'),
+    'C_CUSUM': ('OTHER', 'by_severity'),
+    'ORPHANED_TOOL_CALL': ('OTHER', 'by_severity'),
+    'CHECKPOINT_REPLAY': ('UNAUTH_ACTION', 'by_severity'),
+    'EXIT_DURABILITY': ('OTHER', 'by_severity'),
+    'D6_SPEND': ('SPEND_OVERRUN', 'by_severity'),
+    'CALL_LIMIT': ('SPEND_OVERRUN', 'by_severity'),
+    'MODEL_DEPRECATED': ('OTHER', 'by_severity'),
+    'AGENT_SPEND': ('SPEND_OVERRUN', 'by_severity'),
+    'AGENT_CALL_LIMIT': ('SPEND_OVERRUN', 'by_severity'),
+    'AGENT_OUTLIER': ('SPEND_OVERRUN', 'by_severity'),
+    'PLAN_DEVIATION': ('UNAUTH_ACTION', 'by_severity'),
+    'PLAN_VIOLATION': ('UNAUTH_ACTION', 'by_severity'),
+    'STERILE_VIOLATION': ('UNAUTH_ACTION', 'by_severity'),
+    'PLAN_INVALID': ('OTHER', 'by_severity'),
+    'FALSE_CLAIM': ('FALSE_DONE', 'by_severity'),
+    'CLAIM_UNVERIFIED': ('FALSE_DONE', 'by_severity'),
+    'FALSE_SUCCESS': ('FALSE_DONE', 'by_severity'),
+    'VERIFY_REGRESSION': ('FALSE_DONE', 'by_severity'),
+    'UNKNOWN_TOOL': ('WRONG_FACT', 'by_severity'),
+    'TOOL_ARGS_INVALID': ('WRONG_FACT', 'by_severity'),
+    'FABRICATED_VALUE': ('WRONG_FACT', 'by_severity'),
+    'SUCCESS_AFTER_ERROR': ('FALSE_DONE', 'by_severity'),
+    'PHANTOM_RESULT': ('WRONG_FACT', 'by_severity'),
+    'UNGROUNDED_CLAIM': ('WRONG_FACT', 'by_severity'),
+    'CONTRADICTED_CLAIM': ('WRONG_FACT', 'by_severity'),
+    'JUDGE_FAILED': ('WRONG_FACT', 'by_severity'),
+    'USER_DOWNVOTE': ('WRONG_FACT', 'by_severity'),
+    'POLICY_DENIED': ('BLOCKED_ACTION', 'near_miss'),
+    'POLICY_VIOLATION': ('UNAUTH_ACTION', 'by_severity'),
+    'POLICY_AUDIT': ('UNAUTH_ACTION', 'by_severity'),
+    'WALL_CROSSED': ('DISCLOSURE', 'by_severity'),
+    'NEAR_MISS': ('OTHER', 'near_miss'),
+    'REVOKED_MEMORY_READ': ('DISCLOSURE', 'by_severity'),
+    'MEMORY_CHAIN_BROKEN': ('INJECTION', 'by_severity'),
+    'TOOL_OUTPUT_MISMATCH': ('INJECTION', 'by_severity'),
+    'PRECOG_RISK': ('OTHER', 'near_miss'),
+    'ABNORMAL_RUN': ('OTHER', 'by_severity'),
+    'TOKEN_MISUSE': ('EXFIL', 'by_severity'),
+    'TOOL_CHANGED': ('INJECTION', 'by_severity'),
+    'PROMPT_INJECTION': ('INJECTION', 'by_severity'),
+    'TOOL_DRIFTED': ('INJECTION', 'by_severity'),
+    'PROMPT_CHANGED': ('OTHER', 'by_severity'),
+    'SELF_CHANGE': ('OTHER', 'by_severity'),
+    'SELF_CHANGE_UNAPPROVED': ('UNAUTH_ACTION', 'by_severity'),
+    'ELICITATION_SECRET': ('EXFIL', 'by_severity'),
+    'BYPASS': ('OTHER', 'by_severity'),
+    'LOST_COMMS': ('PROVIDER_FAIL', 'by_severity'),
+    'EMERGENCY': ('OTHER', 'by_severity'),
+    'AUTOMATION_SURPRISE': ('UNAUTH_ACTION', 'by_severity'),
+    'TAKEOVER': ('OTHER', 'by_severity'),
+    'PAUSED': ('OTHER', 'by_severity'),
+    'DIRECTIVE': ('OTHER', 'by_severity'),
+    'UNDO_FAILED': ('OTHER', 'by_severity'),
+    'APPROVAL_REJECTED': ('BLOCKED_ACTION', 'near_miss'),
+    'APPROVAL_TIMEOUT': ('APPROVAL_FAIL', 'near_miss'),
+    'APPROVAL_PENDING': ('OTHER', 'by_severity'),
+    'APPROVAL_ARGS_CHANGED': ('APPROVAL_FAIL', 'by_severity'),
+    'PREFLIGHT_DEGRADED': ('OTHER', 'by_severity'),
+    'DUTY_LIMIT': ('OTHER', 'by_severity'),
+    'TYPE_UNRATED': ('OTHER', 'by_severity'),
+    'NO_CLEARANCE': ('UNAUTH_ACTION', 'by_severity'),
+    'NOTAM_CONFLICT': ('UNAUTH_ACTION', 'by_severity'),
+    'ENVELOPE_SHAPED': ('UNAUTH_ACTION', 'by_severity'),
+    'EMERGENCY_LOCATOR': ('PROVIDER_FAIL', 'by_severity'),
+    'SAFETY_REPORT': ('OTHER', 'near_miss'),
+    'MAYDAY': ('OTHER', 'near_miss'),
+    'PAN_PAN': ('OTHER', 'near_miss'),
+    'UNAPPROVED_MODIFICATION': ('OTHER', 'by_severity'),
+    'CHECK_OVERDUE': ('OTHER', 'by_severity'),
+    'RATING_LAPSED': ('OTHER', 'by_severity'),
+    'APPROVER_FATIGUE': ('APPROVAL_FAIL', 'by_severity'),
+    'DATA_LEFT_REGION': ('DISCLOSURE', 'by_severity'),
+    'DATA_REGION_UNKNOWN': ('DISCLOSURE', 'by_severity'),
+    'DATA_TO_UNAPPROVED_DESTINATION': ('EXFIL', 'by_severity'),
+    'DATA_CANARY_TRIPPED': ('EXFIL', 'by_severity'),
+    'CONSENT_WITHDRAWN_USE': ('DISCLOSURE', 'by_severity'),
+    'SECRET_SENT': ('EXFIL', 'by_severity'),
+    'UNEVIDENCED_SIDE_EFFECT': ('OTHER', 'by_severity'),
+    'TOOL_WITNESS_INVALID': ('INJECTION', 'by_severity'),
+    'UNPROVEN_SIDE_EFFECT': ('OTHER', 'by_severity'),
+    'EGRESS_OPEN': ('OTHER', 'by_severity'),
+    'UNSCREENED_COUNTERPARTY': ('UNAUTH_ACTION', 'by_severity'),
+    'SCREENING_HIT_PAID': ('UNAUTH_ACTION', 'by_severity'),
+    'FTA_NO_HANDOFF': ('OTHER', 'by_severity'),
+    'BREAK_GLASS': ('DISCLOSURE', 'by_severity'),
+    'HEALTH_SIGNATURE_INVALID': ('APPROVAL_FAIL', 'by_severity'),
+    'UNCONFIRMED_RECOMMENDATION': ('APPROVAL_FAIL', 'by_severity'),
+    'AGENT_ACTION_NOT_IN_SYSTEM': ('FALSE_DONE', 'by_severity'),
+    'SYSTEM_CHANGE_NOT_IN_RECORD': ('OTHER', 'by_severity'),
+    'SYSTEM_RECORD_MISMATCH': ('WRONG_FACT', 'by_severity'),
+}