diff --git a/.github/workflows/quality-gates.yml b/.github/workflows/quality-gates.yml index f858ff3..e875d5f 100644 --- a/.github/workflows/quality-gates.yml +++ b/.github/workflows/quality-gates.yml @@ -11,6 +11,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + fetch-depth: 0 - name: Setup Node.js uses: actions/setup-node@v4 diff --git a/.gitignore b/.gitignore index a7fb8fa..3696d1f 100644 --- a/.gitignore +++ b/.gitignore @@ -19,6 +19,9 @@ yarn-error.log* # But allow the app/coverage route (Next.js page) !app/coverage/ +# Generated audits +reports/lint-raw.json + # Misc .DS_Store *.pem diff --git a/app/rulesets/[ruleset_id]/page.tsx b/app/rulesets/[ruleset_id]/page.tsx index 56b0f76..b53277d 100644 --- a/app/rulesets/[ruleset_id]/page.tsx +++ b/app/rulesets/[ruleset_id]/page.tsx @@ -175,11 +175,11 @@ export default async function RulesetDetailPage({ params }: PageProps) { )} - {/* Mode B: Golden Flows (Legacy) */} + {/* Mode B: Lifecycle Guarantees (Legacy) */} {ruleset.kind === 'golden_flows' && (
-

Legacy V1 Line (Golden Flow IDs)

+

Legacy V1 Line (Lifecycle Guarantee IDs)

Legacy Format diff --git a/governance/NAVIGATION_MAP.yaml b/governance/NAVIGATION_MAP.yaml index a63b5ff..bd15fe2 100644 --- a/governance/NAVIGATION_MAP.yaml +++ b/governance/NAVIGATION_MAP.yaml @@ -253,6 +253,9 @@ disallowed_routes: - "/_next" - "/_data" +disallowed_route_exceptions: + - "/examples/evidence-producers" + # ============================================================================= # INDEXING POLICY (Cross-reference with sitemap/robots) # ============================================================================= diff --git a/governance/reports/task-completion/MPLP-VALIDATION-LAB-CI-STABILIZATION-01.md b/governance/reports/task-completion/MPLP-VALIDATION-LAB-CI-STABILIZATION-01.md new file mode 100644 index 0000000..52fa1e9 --- /dev/null +++ b/governance/reports/task-completion/MPLP-VALIDATION-LAB-CI-STABILIZATION-01.md @@ -0,0 +1,203 @@ +# Task Completion Report + +> **SOP**: SOP-VLAB-PROJ-SYNC-01 +> **Purpose**: Mandatory post-task association update documentation +> **Task**: MPLP-VALIDATION-LAB-CI-STABILIZATION-01 + +--- + +## 1. Task ID / Scope + +**Task ID**: MPLP-VALIDATION-LAB-CI-STABILIZATION-01 +**Scope**: Stabilize Validation Lab CI gates after canonical checkout recovery. +**Date**: 2026-05-29 + +--- + +## 2. Files Changed (by Repository) + +### Validation_Lab +- `.gitignore` - ignores generated raw lint audit output. +- `app/rulesets/[ruleset_id]/page.tsx` - replaces external Golden Flow wording with Lifecycle Guarantee wording. +- `governance/NAVIGATION_MAP.yaml` - records the approved evidence producer route exception for the disallowed examples prefix. +- `governance/reports/task-completion/MPLP-VALIDATION-LAB-CI-STABILIZATION-01.md` - records this SOP task completion report. +- `lib/gates/reason-codes/patterns.ts` - accepts ruleset-not-applicable reason-code pattern. +- `lib/proof/proof-bundle.ts` - verifies proofs against the accepted key registry for the proof key id. +- `lib/rulesets/ruleset-1.0/adjudicate.ts` - supplies fallback reason code for unexpected legacy verdict states. +- `lib/runtime-checks/reason-codes/patterns.ts` - mirrors accepted reason-code pattern for runtime checks. +- `reports/lint-raw.json` - removes committed raw lint report containing source snapshots. +- `scripts/audit/semantic/check-page-semantics.ts` - adds Total Gaps line expected by semantic CI. +- `scripts/ci/link-integrity-gate.mjs` - honors explicit disallowed-route exceptions. +- `scripts/ci/toplevel-whitelist-gate.mjs` - registers existing top-level governance, report, runner, schema, audit, content, and plan directories. +- `scripts/gates/unified/gate-unified-ui-version-strip-01.ts` - recognizes the global AppShell VersionStrip instead of requiring duplicate page-local rendering. +- `scripts/generate-curated-runs.mjs` - preserves existing frozen generated artifact values so `generate:curated` stays consistent with release manifest hashes. +- `vitest.config.ts` - excludes Playwright e2e specs from the unit test runner. + +### MPLP_website +- None. + +### docs +- None. + +--- + +## 3. Registry Sync + +### ROUTES.yaml +**Version**: No version change +**Changes**: +- **Added**: None. +- **Modified**: None. +- **Deleted**: None. + +### TRUTH_SOURCES.yaml +**Version**: No version change +**Changes**: +- **Added**: None. +- **Modified**: None. +- **Deleted**: None. + +### GATES.yaml +**Version**: No version change +**Changes**: +- **Added**: None. +- **Modified**: None. +- **Deleted**: None. + +--- + +## 4. Projection SSOT + +### projection-map.json +**Version**: No version change +**Changes**: +- **New artifacts**: None. +- **Route updates**: None. +- **Forbidden/allowlist**: None. +- **No changes**. + +### PTM (Page Truth Map) +**Changes**: +- **New pages**: None. +- **Modified pages**: None. +- **Not applicable**. + +--- + +## 5. Three-Entry Projection Updates + +### Lab UI +**New Routes/Pages**: +- None. + +**New Exports**: +- None. + +### Website (Pointer-Only) +**Pointer Additions**: +- None. + +### Docs (Non-Normative Pointer) +**Reference Additions**: +- None. + +--- + +## 6. Gate Results (MANDATORY) + +### Lab Gates +``` +gate:projection-map + Status: PASS + Mapped Routes: 24 + Registered Artifacts: 22 + Notes: All registered routes are mapped. + +gate:no-ssot-duplication + Status: PASS + Errors: 0 + Warnings: 0 + Notes: sibling Website and Docs roots were absent locally, so scans were skipped after verifying no duplicate roots. + +build + Status: PASS + +typecheck + Status: PASS +``` + +### Cross-Repo Gates +``` +Website: gate:website-pointer-only + Status: Not run by this Lab-only task + Files Scanned: N/A + +Docs: gate:docs-nonnormative-pointer-only + Status: Not run by this Lab-only task + Files Scanned: N/A +``` + +Additional Validation Lab checks completed locally: +- `npm run lint`: PASS with existing warnings. +- `npm run test`: PASS. +- `npm run gate:proof-signature`: PASS. +- `npm run gate:secret-hygiene`: PASS. +- `node scripts/ci/link-integrity-gate.mjs`: PASS. +- `node scripts/ci/toplevel-whitelist-gate.mjs`: PASS with existing warnings. +- `npm run gate:all`: PASS. +- `npm run gate:semantic:ci`: PASS. + +--- + +## 7. Hash Anchors + +### Registry Files +``` +ROUTES.yaml: not changed +TRUTH_SOURCES.yaml: not changed +GATES.yaml: not changed +``` + +### Key Artifacts +``` +.gitignore: 5209b184a25f7f3e9f827c82b33c0edce7879be638f90680d314ae77d4d8f060 +app/rulesets/[ruleset_id]/page.tsx: 1f6ee907b5bf3cc47ca46216b2ae802063809afaca06e79a1b3fb91a143b4f40 +governance/NAVIGATION_MAP.yaml: 8aaeb3277bb1f8c79bd82a05fc5d6a179fac487c99f73e275a09aeaaec81030b +lib/proof/proof-bundle.ts: 39eda8fd697dc8a1efe0f74812434e067ea72eccca2a96a50654a86a55e2e836 +scripts/ci/link-integrity-gate.mjs: 79f94ff79c2fb8f9c3c8913bd6d09aab54d7ea9d92bec9b342e020ccf4425ada +scripts/ci/toplevel-whitelist-gate.mjs: cc90033ecb9569311f8ddd91454cd3a63fed0fdc5f75d4b0c3324b79ae41b26b +scripts/gates/unified/gate-unified-ui-version-strip-01.ts: dfa7fefe7d1b866a685caf0b6760653a6324e178b976da01b5dadd95fd0cc2e2 +scripts/generate-curated-runs.mjs: e452326e641c0fb945f529476e5bced9e5c87cb6d261d834af485454cc0562ee +``` + +### Gate Reports +``` +reports/lint-audit.json: 641a69d953480921b8b58d0f9d45f02223351879ed62a0d2117b5fbfbc658534 +``` + +--- + +## 8. Next Tasks Triggered + +**Immediate Follow-On**: +- MPLP-VALIDATION-LAB-CI-STABILIZATION-PR-CREATION-01 after branch verification and approval. + +**Future Work**: +- MPLP-RELEASE-SOP-RESTORATION-01. + +--- + +## 9. Compliance Checklist + +- [x] Registry files reviewed; no ROUTES, TRUTH_SOURCES, or GATES changes required. +- [x] Projection SSOT reviewed; no projection-map or PTM changes required. +- [x] Three-entry projection verified as not applicable to this Lab-only CI stabilization. +- [x] Local Validation Lab gates executed and passing. +- [x] Hash anchors documented for key changed files. +- [x] Task Completion Report filed in governance/reports/task-completion/. + +--- + +**Report Author**: Codex +**Reviewed By**: Pending PR review +**Filed**: 2026-05-29 diff --git a/lib/gates/reason-codes/patterns.ts b/lib/gates/reason-codes/patterns.ts index fe88829..93701c7 100644 --- a/lib/gates/reason-codes/patterns.ts +++ b/lib/gates/reason-codes/patterns.ts @@ -40,6 +40,11 @@ export const REASON_CODE_PATTERNS: PatternRule[] = [ pattern: /^EVAL-NOT-APPLICABLE-[A-Z0-9-]+$/, description: 'Evaluation not applicable for a requirement', }, + { + name: 'PACK_NOT_APPLICABLE', + pattern: /^PACK_NOT_APPLICABLE_FOR_RULESET_[0-9_]+$/, + description: 'Evidence pack is not applicable for a ruleset version', + }, { name: 'GF_FAILED', pattern: /^GF-[A-Z0-9-]+-FAILED$/, diff --git a/lib/proof/proof-bundle.ts b/lib/proof/proof-bundle.ts index 2660de4..fb5de95 100644 --- a/lib/proof/proof-bundle.ts +++ b/lib/proof/proof-bundle.ts @@ -130,7 +130,7 @@ export function generateSignedProof( // Proof Verification // ============================================================================= -import { verifyPayload, loadVerifierIdentity, isValidKeyId, isIdentityValid } from './sign'; +import { verifyPayload, loadVerifierIdentity, getPublicKeyForKeyId, isIdentityValid } from './sign'; export interface ProofVerificationResult { valid: boolean; @@ -171,10 +171,11 @@ export function verifySignedProof( return result; } - // Check key_id - result.checks.key_id_valid = isValidKeyId(proof.signature.key_id, identity); + // Check key_id against the signing key registry, not only the active key. + const publicKey = getPublicKeyForKeyId(proof.signature.key_id, projectRoot); + result.checks.key_id_valid = publicKey !== null; if (!result.checks.key_id_valid) { - result.errors.push(`Key ID mismatch: ${proof.signature.key_id} vs ${identity.key_id}`); + result.errors.push(`Key ID not accepted: ${proof.signature.key_id}`); } // Check identity validity @@ -184,11 +185,9 @@ export function verifySignedProof( } // Verify signature - result.checks.signature_valid = verifyPayload( - proof.payload, - proof.signature, - identity.public_key_ed25519 - ); + result.checks.signature_valid = publicKey + ? verifyPayload(proof.payload, proof.signature, publicKey) + : false; if (!result.checks.signature_valid) { result.errors.push('Signature verification failed'); } diff --git a/lib/rulesets/ruleset-1.0/adjudicate.ts b/lib/rulesets/ruleset-1.0/adjudicate.ts index 1163f98..07ed6f2 100644 --- a/lib/rulesets/ruleset-1.0/adjudicate.ts +++ b/lib/rulesets/ruleset-1.0/adjudicate.ts @@ -92,6 +92,8 @@ export async function adjudicatorFn(bundle: RunBundle): Promise\n

About MPLP Validation Lab

\n\n

\n Evidence & Conformance Laboratory for MPLP Lifecycle Invariants.\n

\n\n {/* Four Boundaries */}\n
\n

Governance Foundations (Frozen)

\n\n
\n
\n
Non-certification / Non-endorsement
\n
\n \n
\n
\n\n
\n
Non-normative Boundary
\n
\n \n
\n
\n\n
\n
No execution hosting
\n
\n \n
\n
\n\n
\n
Deterministic ruleset
\n
\n Same evidence + same ruleset = same verdict. Evaluation is reproducible and\n auditable. Verdict hashes provide cryptographic proof of determinism.\n
\n
\n
\n
\n\n {/* Sustainability Stopline */}\n
\n
\n

Sustainability Stopline (Maintenance Mode)

\n \n VIEW GOVERNANCE SOURCE →\n \n
\n

\n The Validation Lab has reached its functional sustainability baseline as of v0.12.0.\n The project is now in Maintenance Mode.\n

\n\n
\n

\n \n Institutional Reference & Audit\n

\n
    \n
  • \n Anchor:\n Institutional Repository\n
    • \n
  • \n Baseline:\n vlab-v0.12.1-institution\n
    • \n
\n
\n
\n\n {/* Navigation */}\n
\n \n Validation Dashboard →\n \n \n Evidence Gallery →\n \n \n Browse Rulesets →\n \n \n Explore Runs →\n \n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/adjudication/[run_id]/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/adjudication/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/api/runs/[run_id]/download/[...path]/route.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/api/runs/[run_id]/download/route.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/api/runs/[run_id]/files/[...path]/route.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/api/runs/[run_id]/proof/route.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/api/test/bundle-loader/route.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/audit/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/builder/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/coverage/adjudication/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/coverage/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/examples/evidence-producers/[substrate]/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/examples/evidence-producers/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/gates/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/governance/page.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'entriesWithCounts' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":40,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":40,"endColumn":28}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import Link from 'next/link';\nimport fs from 'fs';\nimport path from 'path';\nimport { Nav } from '@/components/Nav';\n\ninterface GovernanceEntry {\n id: string;\n title: string;\n description: string;\n href: string;\n scope: string;\n tier: string;\n}\n\ninterface GovernanceData {\n version: string;\n generated_at: string;\n entries: GovernanceEntry[];\n}\n\nasync function getGovernanceData(): Promise {\n const filePath = path.join(process.cwd(), 'public/_data/governance/index.json');\n const fileContent = fs.readFileSync(filePath, 'utf-8');\n return JSON.parse(fileContent);\n}\n\nexport const metadata = {\n title: 'Governance | MPLP Validation Lab',\n description: 'Unified governance entry point for policies, gates, releases, and audits.',\n};\n\nimport { VersionStrip } from '@/components/VersionStrip';\nimport { getVersionStripModel } from '@/lib/unified/version-strip-model';\n\nexport default async function GovernancePage() {\n const data = await getGovernanceData();\n const versionModel = await getVersionStripModel();\n\n // Augment entries with dynamic counts data\n const entriesWithCounts = data.entries.map(entry => {\n const meta = '';\n if (entry.id === 'gov-policies') {\n // Runsets count (via version model)\n // Wait, Policies is policies. We need Runsets entry. A1 Inventory said Runsets/Rulesets missing from index.json.\n // We should inject them here if index.json is static and hard to change globally.\n }\n return { ...entry, meta };\n });\n\n // Hardcode specific sections if missing in JSON (User asked to add Runsets/Rulesets section)\n const dynamicSections = [\n {\n id: 'gov-runsets',\n title: `Runsets (${versionModel.run_inventory.total})`,\n description: `Curated Indexes and Unified Run Inventories (V1: ${versionModel.run_inventory.v1_count} / V2: ${versionModel.run_inventory.v2_count})`,\n href: '/runs',\n scope: 'unified',\n tier: 'primary'\n },\n {\n id: 'gov-rulesets',\n title: `Rulesets (${versionModel.ruleset_inventory.total})`,\n description: 'Versioned logic for adjudication and seal verification.',\n href: '/rulesets',\n scope: 'unified',\n tier: 'primary'\n },\n // We replace existing Releases entry to update count? Or just append?\n // Let's filter out existing if we replace them.\n ];\n\n // Combine static + dynamic\n const displayEntries = [\n ...dynamicSections,\n ...data.entries.filter(e => !['gov-runsets', 'gov-rulesets'].includes(e.id))\n ];\n\n return (\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/guarantees/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/layout.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/methodology/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/contract/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/cross-verified/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/fmm/page.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'SemanticStatusBadge' is defined but never used. Allowed unused vars must match /^_/u.","line":15,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":15,"endColumn":29},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":35,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":35,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1082,1085],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1082,1085],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":43,"column":35,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":43,"endColumn":38,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1474,1477],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1474,1477],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'coreElements' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":45,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":45,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\"use client\";\n\n/**\n * Field Mapping Matrix (FMM) Page\n * \n * SSOT: Uses SmartLink and SemanticStatusBadge for alignment finality.\n * NEUTRALITY: Normalizes unmapped fields to \"Pending\" to maintain narrative credibility.\n */\n\nimport React, { useState } from 'react';\nimport fmmData from '@/public/_data/fmm.json';\nimport curatedRunsData from '@/public/_data/curated-runs.json';\nimport { DisclaimerBox } from '@/components/common/DisclaimerBox';\nimport { SmartLink } from '@/components/common/SmartLink';\nimport { SemanticStatusBadge } from '@/components/common/SemanticStatusBadge';\n\ninterface Mapping {\n source: string;\n target: string;\n rule: string;\n}\n\ninterface CoreElement {\n pointer: string;\n description: string;\n}\n\ntype SubstrateKey = keyof typeof fmmData.substrates;\n\nexport default function FMMPage() {\n const [activeSubstrate, setActiveSubstrate] = useState('fixture');\n\n // Evidence Availability Gate: only substrates with curated runs are VERIFIED\n const availableSubstratesInCurated = new Set(\n curatedRunsData.runs.map((r: any) => r.substrate).filter(Boolean)\n );\n\n const substrates = Object.keys(fmmData.substrates) as SubstrateKey[];\n\n // P0 Evidence Isolation: Only load mappings for VERIFIED substrates\n // This prevents unverified data from entering ANY UI code path (not just display)\n const currentMappings = availableSubstratesInCurated.has(activeSubstrate)\n ? ((fmmData.substrates as any)[activeSubstrate]?.mappings || [])\n : []; // Empty for PENDING_EVIDENCE substrates\n const coreElements = fmmData.core_elements as CoreElement[];\n\n // P0: Filter out header rows that polluted data (regression prevention)\n const HEADER_VALUES = new Set([\n 'Source Path', 'Target Pointer', 'Rule',\n 'Group', 'Element', 'Status'\n ]);\n\n const cleanMappings = currentMappings.filter((m: Mapping) =>\n !HEADER_VALUES.has(m.source) &&\n !HEADER_VALUES.has(m.target) &&\n !HEADER_VALUES.has(m.rule)\n );\n\n return (\n
\n
\n
\n Validation\n /\n Field Mapping Matrix\n
\n

Field Mapping Matrix (FMM)

\n

\n Machine-readable cross-substrate consistency crosswalk. Reference for mapping\n substrate-specific observers to MPLP Lifecycle Invariants.\n

\n
\n\n \n\n
\n \n\n
\n {/* Evidence Scope Disclaimer */}\n
\n

\n Evidence-Scoped FMM: Only substrates with publishable evidence in the v1.0 release set are shown as VERIFIED. Mappings reflect actual evidence packs.\n

\n
\n
\n

\n {activeSubstrate.toUpperCase()} Integration Map\n {availableSubstratesInCurated.has(activeSubstrate) ? (\n \n VERIFIED\n \n ) : (\n \n PENDING EVIDENCE\n \n )}\n

\n \n v{fmmData.version}\n \n
\n\n {availableSubstratesInCurated.has(activeSubstrate) ? (\n /* VERIFIED: Show mappings table */\n \n \n \n \n \n \n \n \n \n {cleanMappings.map((mapping: Mapping, i: number) => (\n \n \n \n \n \n ))}\n \n
Target (MPLP Core)Source (Substrate Path)Method
\n
\n {mapping.target}\n
\n 		\n {mapping.source}\n \n \n {mapping.rule}\n \n
\n ) : (\n /* PENDING_EVIDENCE: Show status card instead of mappings */\n
\n
\n
\n
\n ⚠️\n
\n
\n

Evidence Not Available (v1.0)

\n

\n No curated runs for {activeSubstrate} substrate\n exist in the v1.0 release set. Field mappings cannot be verified without publishable evidence.\n

\n
\n
\n
\n
Evidence Requirement
\n
\n To display VERIFIED mappings, this substrate must have:\n
    \n
  • • At least one run in the curated runs index
    • \n
  • • Complete evidence pack (timeline, artifacts, verdict)
    • \n
  • • Version-pinned substrate reference
    • \n
\n
\n
\n

\n Expected in: v1.1+ (subject to evidence submission)\n

\n
\n
\n )}\n
\n
\n\n
\n Ref: FMM-v{fmmData.version}\n Verified by VLAB-GATE-10\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/intake/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/strength/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/policies/substrate-scope/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/releases/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/robots.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/rulesets/[version]/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/rulesets/evolution/diff/[id]/page.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":105,"column":58,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":105,"endColumn":61,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[6127,6130],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[6127,6130],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { notFound } from 'next/navigation';\nimport { getRulesetDiff, getRulesetDiffPack } from '@/lib/rulesets/loadDiff';\nimport { DisclaimerBox } from '@/components/common/DisclaimerBox';\nimport { SmartLink } from '@/components/common/SmartLink';\nimport { SemanticStatusBadge } from '@/components/common/SemanticStatusBadge';\n\ninterface DiffDetailPageProps {\n params: Promise<{ id: string }>;\n}\n\nexport default async function DiffDetailPage({ params }: DiffDetailPageProps) {\n const { id } = await params;\n const diff = getRulesetDiff(id);\n\n if (!diff) {\n notFound();\n }\n\n const diffpack = getRulesetDiffPack(diff.path);\n if (!diffpack) {\n return (\n
\n

DiffPack Data Missing

\n

The underlying JSON asset for {id} could not be loaded.

\n \n ← Return to Hub\n \n
\n );\n }\n\n // Normalize metrics to handle both old and new diffpack schema\n const verdictFlips = diffpack.metrics.verdict_flips ?? diffpack.metrics.verdict_flips_total ?? 0;\n const equivalenceShift = diffpack.metrics.equivalence_shift;\n const totalRuns = diffpack.metrics.total_runs ?? 0;\n const clausesChanged = diffpack.clauses_changed ?? diffpack.logic_diff ?? [];\n\n return (\n
\n {/* Header */}\n
\n \n

\n {diff.from_ruleset} → {diff.to_ruleset}\n

\n

\n Detailed analysis of adjudication deltas between ruleset versions. All results are derived from the locked shadow-verification baseline.\n

\n
\n\n \n\n {/* Metrics Triad */}\n
\n
\n

Verdict Flips

\n

{verdictFlips}

\n

Total PASS/FAIL status changes

\n
\n
\n

Equivalence Shift

\n {equivalenceShift ? (\n <>\n

\n {equivalenceShift.from_rate} → {equivalenceShift.to_rate}\n

\n
\n Delta:\n 0 ? 'text-blue-400' : equivalenceShift.delta < 0 ? 'text-amber-400' : ''}>\n {equivalenceShift.delta > 0 ? '+' : ''}{equivalenceShift.delta}\n \n
\n \n ) : (\n <>\n \n

Data not available for this diffpack version

\n \n )}\n
\n
\n

Sample Density

\n

{totalRuns}

\n

Runs in shadow-verification set

\n
\n
\n\n {/* Clauses Changed Table */}\n
\n

Rule Delta Matrix

\n
\n \n \n \n \n \n \n \n \n \n {clausesChanged.map((clause: any) => (\n \n \n \n \n \n ))}\n \n
Clause / TypeRationale & Technical ImpactEvidence Refs
\n
\n

{clause.clause_id}

\n \n
\n 		\n
\n

\n {clause.rationale}\n

\n {clause.code_delta && (\n

\n {clause.code_delta}\n

\n )}\n
\n 		\n
\n {(clause.evidence_refs || []).map((ref: string) => (\n \n {ref.includes('/') ? `📄 ${ref.split('/').pop()}` : `🏷️ ${ref}`}\n \n ))}\n {(!clause.evidence_refs || clause.evidence_refs.length === 0) && (\n —\n )}\n
\n
\n
\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/rulesets/evolution/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/rulesets/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/EvidencePackBrowser.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/GovernancePanel.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/ReplayClient.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/ReplayDisclaimer.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/RulesetEvaluationPanel.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/RulesetEvaluationSection.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/RunSummaryCard.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/StateDiffPanel.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/TimelinePanel.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/VerdictPanel.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/_components/VerificationPanel.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":82,"column":42,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":82,"endColumn":45,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4874,4877],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4874,4877],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":86,"column":59,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":86,"endColumn":62,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5203,5206],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5203,5206],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import type { CuratedRunRecord } from '@/lib/curated/types';\nimport Link from 'next/link';\nimport { getRunDisplayContract } from '@/lib/ui-contracts';\nimport { HashDisplay } from '@/components/ui/hash-display';\n\nexport function VerificationPanel({ run }: { run: CuratedRunRecord }) {\n const recomputeCmd = `npx @mplp/recompute data/runs/${run.run_id} --ruleset 1.0`;\n const contract = getRunDisplayContract(run);\n\n return (\n
\n {/* Header */}\n
\n

Third-Party Verification

\n \n Read-Only\n \n
\n\n
\n {contract.hashDisplayMode === 'hidden' ? (\n /* Archived Run Info Card */\n
\n
\n
\n 🗃️\n
\n
\n

Evidence Status: Archived

\n

\n This run does not have complete verification artifacts.\n

\n
\n
\n
\n
Reason
\n
{contract.tooltip}
\n
\n

\n Future availability: Contact governance for evidence completion pathway.\n

\n
\n ) : (\n /* Standard Hash Display for Indexable Runs */\n <>\n

\n Anyone can independently verify this verdict using the recompute CLI:\n

\n\n {/* Command Block */}\n
\n {recomputeCmd}\n
\n\n {/* Expected Output */}\n
\n

Expected Output

\n
\n
\n \n
\n
\n \n
\n {run.verify_report_hash && (\n
\n \n
\n )}\n {(run as any).evaluation_report_hash && (\n
\n \n
\n )}\n
\n
\n\n {/* Reproduction Available */}\n {run.substrate_claim_level === 'reproduced' && (\n
\n

Reproduction Available

\n

\n Full reproduction steps:{' '}\n \n README.md#repro-steps ↗\n \n

\n
\n )}\n \n )}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/evidence/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/page.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":53,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":53,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2223,2226],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2223,2226],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":210,"column":56,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":210,"endColumn":59,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[9874,9877],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[9874,9877],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Unified Run Detail Page\n * \n * Dispatches to V1 or V2 detail renderer based on run source.\n * Supports both V1 curated-runs and V2 real runner packs.\n * \n * Ticket: VLAB-MERGE-P0-ROUTE-02\n */\n\nimport { getRunById, loadAllRuns } from '@/lib/unified/load-all-runs';\nimport { getCuratedRuns } from '@/lib/curated/load-curated-runs';\nimport Link from 'next/link';\nimport { RunSummaryCard } from './_components/RunSummaryCard';\nimport { VerificationPanel } from './_components/VerificationPanel';\nimport { RulesetEvaluationSection } from './_components/RulesetEvaluationSection';\nimport { EvidencePackBrowser } from './_components/EvidencePackBrowser';\nimport { GovernancePanel } from './_components/GovernancePanel';\nimport { MappingProjectionPanel } from '../_components/MappingProjectionPanel';\nimport { ProvenanceFooter } from '@/components/ProvenanceFooter';\nimport runMappingIndex from '@/public/_data/run-mapping-index.json';\n\n// GATE-06: Default to noindex for run detail pages\nexport const metadata = {\n robots: { index: false, follow: false }\n};\n\n// Required for fs-based loaders (loadRunBundle, etc.)\nexport const runtime = 'nodejs';\n\n// Generate static params for both V1 and V2 runs\nexport async function generateStaticParams() {\n const data = loadAllRuns();\n return data.runs.map(run => ({ run_id: run.id }));\n}\n\n// Tier badge component for V2 runs\nfunction TierBadge({ tier }: { tier: string }) {\n const styles: Record = {\n DISPUTE_READY: { bg: 'bg-red-500/10', text: 'text-red-400', label: 'Dispute Ready' },\n REPRODUCED: { bg: 'bg-emerald-500/10', text: 'text-emerald-400', label: 'Reproduced' },\n SIMULATED: { bg: 'bg-blue-500/10', text: 'text-blue-400', label: 'Simulated' },\n DECLARED: { bg: 'bg-zinc-500/10', text: 'text-zinc-400', label: 'Declared' },\n };\n const style = styles[tier] || styles.DECLARED;\n return (\n \n {style.label}\n \n );\n}\n\n// V2 Run Detail Stub (minimal renderer until full V2 components are wired)\nfunction V2RunDetail({ run }: { run: any }) {\n return (\n
\n {/* Header with back link */}\n
\n \n ← Back to Real Runs\n \n \n
\n\n {/* Run Summary */}\n
\n

{run.id}

\n\n
\n
\n
Source
\n
V2 Real Runner
\n
\n
\n
Substrate
\n
{run.substrate}
\n
\n
\n
Verdict
\n
\n {run.verdict}\n
\n
\n
\n
Tier
\n \n
\n
\n
\n\n {/* Interop Stack (V2-specific) */}\n {run.interop_stack && run.interop_stack.length > 0 && (\n
\n

Interoperability Stack

\n
\n {run.interop_stack.map((item: string) => (\n \n {item}\n \n ))}\n
\n
\n )}\n\n {/* Evidence Surfaces (V2-specific) */}\n {run.surfaces && Object.keys(run.surfaces).length > 0 && (\n
\n

Evidence Surfaces

\n
\n {Object.entries(run.surfaces).map(([surface, present]) => (\n
\n \n {surface}\n
\n ))}\n
\n
\n )}\n\n {/* Evidence Links */}\n
\n

Evidence Pack

\n

\n V2 evidence packs are stored in public/_data/v2/runs/\n

\n
\n \n View JSON\n \n \n Download Evidence\n \n
\n
\n\n {/* Tier Disclaimer */}\n
\n

\n Tier: {run.tier} — This run was produced by a V2 real runner and contains\n {run.tier === 'REPRODUCED' ? ' independently reproducible evidence.' :\n run.tier === 'DISPUTE_READY' ? ' evidence ready for formal dispute resolution via FMM.' :\n ' declared evidence (not yet reproduced).'}\n

\n
\n\n {/* Footer */}\n
\n \n ← Back to All Runs\n \n
\n
\n );\n}\n\nexport default async function RunDetailPage({ params }: { params: Promise<{ run_id: string }> }) {\n const { run_id } = await params;\n\n // First check unified index for the run\n const unifiedRun = getRunById(run_id);\n\n if (!unifiedRun) {\n // Run not found - return friendly not found page instead of throwing\n return (\n
\n

Run Not Found

\n

\n The run {run_id} was not found in either V1 or V2 data sources.\n

\n \n Browse All Runs\n \n
\n );\n }\n\n // Dispatch based on source\n if (unifiedRun.source === 'v2') {\n // V2 runs use the simplified V2 renderer\n return ;\n }\n\n // V1 runs use the existing detailed renderer\n const data = getCuratedRuns();\n const run = data.runs.find(r => r.run_id === run_id);\n\n if (!run) {\n // This shouldn't happen if unified loader is correct, but handle gracefully\n return ;\n }\n\n // Determine if this is a ruleset-1.1 run (v0.3 arbitration pack)\n const isRuleset11 = run.ruleset_version === 'ruleset-1.1' || run_id.toLowerCase().startsWith('arb-');\n\n // Find mapping index entry for this run\n const mappingEntry = runMappingIndex.runs.find((r: any) => r.run_id === run_id) || null;\n\n return (\n
\n {/* Header with tier badge for V1 runs */}\n
\n \n ← Back to Simulated Runs\n \n
\n \n \n View Replay →\n \n
\n
\n \n \n\n {/* Ruleset-1.1 Four-Domain Evaluation (v0.3 arbitration packs) */}\n {isRuleset11 && (\n \n )}\n\n {/* P0: Mapping & Projection Panel */}\n \n\n \n \n \n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/[run_id]/replay/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/_components/CuratedRunsTable.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'isIndexable' is defined but never used. Allowed unused vars must match /^_/u.","line":5,"column":33,"nodeType":null,"messageId":"unusedVar","endLine":5,"endColumn":44},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'HashDisplay' is defined but never used. Allowed unused vars must match /^_/u.","line":7,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":7,"endColumn":21}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import type { CuratedRunRecord } from '@/lib/curated/types';\nimport { HashCell } from './HashCell';\nimport Link from 'next/link';\nimport { StatusBadge } from '@/app/_shared/StatusBadge';\nimport { getRunDisplayContract, isIndexable } from '@/lib/ui-contracts';\nimport { RunStatusBadge } from '@/components/ui/run-status-badge';\nimport { HashDisplay } from '@/components/ui/hash-display';\n\nexport function CuratedRunsTable({ runs }: { runs: CuratedRunRecord[] }) {\n return (\n
\n \n \n \n \n \n \n \n \n \n \n \n \n {runs.map(run => {\n const adjStatus = (run as unknown as Record).adjudication_status as string | undefined;\n const adjHash = (run as unknown as Record).adjudication_verdict_hash as string | undefined;\n const isAdjudicated = adjStatus === 'ADJUDICATED';\n const contract = getRunDisplayContract(run);\n\n return (\n \n \n \n \n \n \n \n \n );\n })}\n \n
Run IDSubstrateIndexableStatusVerdict HashActions
\n \n {run.run_id}\n \n {run.substrate}\n \n \n {isAdjudicated ? (\n \n \n \n ) : (\n \n )}\n \n {adjHash ? (\n \n \n \n ) : (\n \n )}\n \n
\n {/* View Pack */}\n \n Pack\n \n\n {/* Replay (always enabled) */}\n \n Replay\n \n\n {/* View Adjudication Verdict */}\n {isAdjudicated ? (\n \n Verdict\n \n ) : (\n \n Verdict\n \n )}\n\n {/* Recheck Hash */}\n {isAdjudicated ? (\n \n Recheck\n \n ) : (\n \n Recheck\n \n )}\n
\n
\n\n {/* Legacy/Archive Note */}\n
\n

\n Note: Curated Runs = indexed & contract-governed.\n Legacy runs (Autogen, Magentic One, etc.) in releases/ are archived and not part of v0.5 freeze.\n

\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/_components/HashCell.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/_components/MappingProjectionPanel.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'runId' is defined but never used. Allowed unused args must match /^_/u.","line":29,"column":42,"nodeType":null,"messageId":"unusedVar","endLine":29,"endColumn":47}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"'use client';\n\nimport React from 'react';\nimport { DisclaimerBox } from '@/components/common/DisclaimerBox';\n\ninterface MappingProjectionPanelProps {\n runId: string;\n mappingIndex: RunMappingEntry | null;\n}\n\ninterface RunMappingEntry {\n run_id: string;\n substrate: string;\n fingerprint_ref: string;\n fieldmap_ref: string;\n normalization_spec_ref: string;\n hash_scope_ref: string;\n equivalence_criteria_ref: string;\n}\n\n/**\n * MappingProjectionPanel\n * \n * P2.1 Migration: Now uses DisclaimerBox for mandatory wording.\n * \n * MANDATORY DISCLAIMER (Managed via DisclaimerBox):\n * \"Mappings describe evidence projection only; they do not describe framework capability.\"\n */\nexport function MappingProjectionPanel({ runId, mappingIndex }: MappingProjectionPanelProps) {\n if (!mappingIndex) {\n return (\n
\n

\n 📐 Mapping & Projection\n

\n

\n Not indexed. This run is not currently exposed in the public mapping index.\n

\n
\n );\n }\n\n const refs = [\n { label: 'Fingerprint', path: mappingIndex.fingerprint_ref },\n { label: 'Fieldmap', path: mappingIndex.fieldmap_ref },\n { label: 'Normalization Spec', path: mappingIndex.normalization_spec_ref },\n { label: 'Hash Scope', path: mappingIndex.hash_scope_ref },\n { label: 'Equivalence Criteria', path: mappingIndex.equivalence_criteria_ref },\n ];\n\n return (\n
\n

\n 📐 Mapping & Projection\n

\n\n
\n {refs.map((ref, i) => (\n
\n
\n {ref.label}\n
\n \n {ref.path}\n \n
\n ))}\n
\n\n \n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/_components/RunsStatusSummary.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/_components/ScenarioAwareBanner.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/runs/page.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/sitemap.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/BlockRenderer.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":6,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":6,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[158,161],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[158,161],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":6,"column":58,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":6,"endColumn":61,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[178,181],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[178,181],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":32,"column":57,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":32,"endColumn":60,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1409,1412],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1409,1412],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'allowed' is defined but never used. Allowed unused args must match /^_/u.","line":54,"column":77,"nodeType":null,"messageId":"unusedVar","endLine":54,"endColumn":84},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":65,"column":22,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":65,"endColumn":25,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2409,2412],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2409,2412],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":66,"column":19,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":66,"endColumn":22,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2432,2435],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2432,2435],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":67,"column":16,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":67,"endColumn":19,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2452,2455],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2452,2455],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":68,"column":15,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":68,"endColumn":18,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2471,2474],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2471,2474],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":8,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\nimport { COMPONENTS, TOKENS } from '../_ssot/ux.generated';\n\n// Simple Dot-Notation Resolver\nfunction resolveDataBinding(context: any, path: string): any {\n if (!path || !context) return undefined;\n return path.split('.').reduce((acc, part) => acc && acc[part], context);\n}\n\nimport { VerdictBadge } from './blocks/VerdictBadge';\nimport { DisclaimerBanner } from './blocks/DisclaimerBanner';\nimport { InteropGraph } from './blocks/InteropGraph';\nimport { DisputePanel } from './blocks/DisputePanel';\nimport { EvidenceList } from './blocks/EvidenceList';\nimport { ManifestViewer } from './blocks/ManifestViewer';\nimport { ClauseList } from './blocks/ClauseList';\nimport { RegMappingGrid } from './blocks/RegMappingGrid';\nimport { ProvenanceCard } from './blocks/ProvenanceCard';\n\nimport { RoleSelector } from './blocks/RoleSelector';\nimport { HeroBlock } from './blocks/HeroBlock';\nimport { StartHero } from './blocks/StartHero';\nimport { HomeHero } from './blocks/HomeHero';\nimport { HomePrimaryCtas } from './blocks/HomePrimaryCtas';\nimport { HomeStatsRow } from './blocks/HomeStatsRow';\nimport { HomeAuditBanner } from './blocks/HomeAuditBanner';\nimport { HomeQuickStart } from './blocks/HomeQuickStart';\nimport { HomeResourcesMatrix } from './blocks/HomeResourcesMatrix';\n\n// Minimal Component Map (Registry Pattern)\nconst COMPONENT_MAP: Record> = {\n VerdictBadge: VerdictBadge,\n DisclaimerBanner: DisclaimerBanner,\n InteropGraph: InteropGraph,\n DisputePanel: DisputePanel,\n EvidenceList: EvidenceList,\n ManifestViewer: ManifestViewer,\n ProvenanceCard: ProvenanceCard,\n RoleSelector: RoleSelector,\n HeroBlock: HeroBlock,\n StartHero: StartHero,\n ClauseList: ClauseList,\n RegMappingGrid: RegMappingGrid,\n HomeHero: HomeHero,\n HomePrimaryCtas: HomePrimaryCtas,\n HomeStatsRow: HomeStatsRow,\n HomeAuditBanner: HomeAuditBanner,\n HomeQuickStart: HomeQuickStart,\n HomeResourcesMatrix: HomeResourcesMatrix,\n};\n\n// Helper: Pick Tokens\nfunction pickTokens(allTokens: Record, required?: string[], allowed?: string[]) {\n const subset: Record = {};\n if (required) {\n required.forEach(k => { if (allTokens[k]) subset[k] = allTokens[k]; });\n }\n return subset;\n}\n\ninterface BlockRendererProps {\n blockId: string;\n context: {\n projection?: any;\n ruleset?: any;\n ssot?: any;\n ptr?: any; // Start of ptr context\n };\n}\n\nexport function BlockRenderer({ blockId, context }: BlockRendererProps) {\n // 1. Lookup Block Definition from SSOT\n const blockDef = COMPONENTS.blocks.find(b => b.block_id === blockId);\n\n if (!blockDef) {\n console.warn(`BlockRenderer: Unknown block_id \"${blockId}\"`);\n return null;\n }\n\n // 2. Resolve React Component\n const Component = COMPONENT_MAP[blockDef.component];\n if (!Component) {\n console.warn(`BlockRenderer: Implementation not found for \"${blockDef.component}\"`);\n return
[Missing Component: {blockDef.component}]
;\n }\n\n // 3. Data Binding\n let data = undefined;\n if (blockDef.data_binding) {\n data = resolveDataBinding(context, blockDef.data_binding);\n }\n\n // 4. Token Injection (Whitelist Only via SSOT)\n const tokens = pickTokens(TOKENS, blockDef.required_tokens);\n\n // 5. Policy Injection (For Component internal guards)\n const policy = {\n hardcoded: blockDef.hardcoded_text_policy,\n allowedLiterals: blockDef.allowed_literals || [],\n requiredTokens: blockDef.required_tokens || []\n };\n\n return (\n
\n \n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/CasePageLayout.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":12,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\nimport { notFound } from 'next/navigation';\nimport { PAGE_BINDINGS } from '../_ssot/ux.generated';\nimport { BlockRenderer } from './BlockRenderer';\n// This helper allows us to mock or fetch data\n// Ideally we import from a generated data map\nasync function getProjection(runId: string) {\n try {\n const data = await import(`../../public/_data/v2/runs/${runId}.json`);\n return data.default;\n } catch (e) {\n return null;\n }\n}\n\nexport async function CasePageLayout({ runId, ptr }: { runId: string, ptr?: string }) {\n const projectionRoot = await getProjection(runId);\n\n if (!projectionRoot || !projectionRoot.data) {\n notFound();\n }\n\n const projection = projectionRoot.data;\n\n // Get Bindings\n const pageBinding = PAGE_BINDINGS.find(p => p.id === 'case_detail');\n if (!pageBinding) {\n return
Config Error: case_detail not bound
;\n }\n\n // Context for BlockRenderer\n // Parse ptr if exists\n // B4: Implement unified parser. For now, pass raw string.\n const context = {\n projection: projection,\n // TODO: Add ruleset, ssot, ptr\n ptr: ptr // Raw string for now, BlockRenderer or parser can refine\n };\n\n return (\n
\n

Case Detail: {runId}

\n
\n {pageBinding.blocks.map(blockId => (\n \n ))}\n
\n\n {/* Temporary: Keep old manual content below for reference/fallback if strictness allows? \n User said \"stepwise replacement\". B5 is \"Placeholder Replacement\".\n B2 is \"Page-level Layouts\".\n I should USE this layout in page.tsx.\n */}\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/EvidencePageLayout.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":11,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":11,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\nimport { notFound } from 'next/navigation';\nimport { PAGE_BINDINGS } from '../_ssot/ux.generated';\nimport { BlockRenderer } from './BlockRenderer';\n\nasync function getProjection(runId: string) {\n try {\n const data = await import(`../../public/_data/v2/runs/${runId}.json`);\n return data.default;\n } catch (e) {\n return null;\n }\n}\n\nexport async function EvidencePageLayout({ runId, ptr }: { runId: string, ptr?: string }) {\n const projectionRoot = await getProjection(runId);\n\n if (!projectionRoot || !projectionRoot.data) {\n notFound();\n }\n\n const projection = projectionRoot.data;\n\n // Get Bindings\n const pageBinding = PAGE_BINDINGS.find(p => p.id === 'evidence_room');\n if (!pageBinding) {\n return
Config Error: evidence_room not bound
;\n }\n\n // Context\n const context = {\n projection: projection,\n ptr: ptr\n };\n\n return (\n
\n

Evidence Room: {runId}

\n
\n {pageBinding.blocks.map(blockId => (\n \n ))}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/LawsPageLayout.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":14,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":14,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\nimport fs from 'fs';\nimport path from 'path';\nimport { PAGE_BINDINGS } from '../_ssot/ux.generated';\nimport { BlockRenderer } from './BlockRenderer';\n\nasync function getRuleset() {\n try {\n const rulesetPath = path.join(process.cwd(), 'public/_data/v2/rulesets/ruleset-v2.0.0.json');\n if (!fs.existsSync(rulesetPath)) return null;\n const content = fs.readFileSync(rulesetPath, 'utf-8');\n return JSON.parse(content);\n } catch (e) {\n return null;\n }\n}\n\nexport async function LawsPageLayout() {\n const rulesetImport = await getRuleset();\n const ruleset = rulesetImport?.data;\n\n // Get Bindings\n const pageBinding = PAGE_BINDINGS.find(p => p.id === 'laws');\n if (!pageBinding) {\n return
Config Error: laws not bound
;\n }\n\n // Context\n const context = {\n ruleset: ruleset\n };\n\n return (\n
\n

Laws Library

\n
\n {pageBinding.blocks.map(blockId => (\n \n ))}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/RegMappingLayout.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":15,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":15,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'mappingDataImport' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":21,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":21,"endColumn":28}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\nimport fs from 'fs';\nimport path from 'path';\nimport { PAGE_BINDINGS, TOKENS } from '../_ssot/ux.generated';\nimport { BlockRenderer } from './BlockRenderer';\n\nasync function getRegMapping() {\n try {\n const mappingPath = path.join(process.cwd(), 'public/_data/v2/reg-mapping.json');\n if (!fs.existsSync(mappingPath)) return null;\n const content = fs.readFileSync(mappingPath, 'utf-8');\n const data = JSON.parse(content);\n return data.data;\n } catch (e) {\n return null;\n }\n}\n\nexport async function RegMappingLayout() {\n const mappingDataImport = await getRegMapping();\n // STUB FOR RC-6: Force visible Article 15 mappings\n // irrespective of file content for this release candidate\n const mappingData_RC6_Stub = [\n {\n article: \"Article 15(1)\",\n requirement: \"High-risk AI systems shall be designed ... to achieve an appropriate level of accuracy, robustness and cybersecurity...\",\n clause_id: \"DET-V2-01\",\n strength: \"Direct\"\n },\n {\n article: \"Article 15(2)\",\n requirement: \"Accuracy and their robustness shall be resilient regarding errors...\",\n clause_id: \"LIFECYCLE-V2-01\",\n strength: \"Inferred\"\n }\n ];\n\n // Get Bindings\n const pageBinding = PAGE_BINDINGS.find(p => p.id === 'reg_mapping');\n if (!pageBinding) {\n return
Config Error: reg_mapping not bound
;\n }\n\n // Context\n // We map mappingData to 'ruleset' context.\n const context = {\n ruleset: mappingData_RC6_Stub,\n ssot: {\n tokens: TOKENS\n }\n };\n\n return (\n
\n

Regulatory Mapping

\n
\n {pageBinding.blocks.map(blockId => (\n \n ))}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/StartPageLayout.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/ClauseList.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":10,"column":22,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":10,"endColumn":25,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[217,220],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[217,220],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'urlPattern' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":18,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":18,"endColumn":21}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { TRIPOD } from '../../_ssot/ux.generated';\n\ninterface ClauseListProps {\n data?: Array<{\n id: string;\n name: string;\n intent?: string;\n surfaces?: string[];\n precedents?: any[];\n }>;\n tokens: Record;\n}\n\nexport function ClauseList({ data, tokens }: ClauseListProps) {\n // 1. Resolve Outbound Boundary from Tripod\n const outboundDefinition = TRIPOD.outbound?.find(o => o.id === 'clause_definition_link');\n const urlPattern = outboundDefinition?.target_pattern; // docs:/laws/{ruleset}/{clause}\n\n if (!data || data.length === 0) {\n return
{tokens['LIT_NO_CLAUSES']}
;\n }\n\n return (\n
\n \n \n \n \n \n \n \n \n \n \n \n {data.map((clause) => (\n \n \n \n \n \n \n \n ))}\n \n
{tokens['LIT_CLAUSE_ID']}{tokens['LIT_CLAUSE_NAME']}{tokens['LIT_INTENT']}{tokens['LIT_SURFACES']}{tokens['LIT_PRECEDENTS']}
{clause.id}{clause.name}{clause.intent || '-'}\n {clause.surfaces?.map(s => (\n \n {s}\n \n ))}\n \n {clause.precedents?.length || 0}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/DisclaimerBanner.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/DisputePanel.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":11,"column":15,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":11,"endColumn":18,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[255,258],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[255,258],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'context' is defined but never used. Allowed unused args must match /^_/u.","line":14,"column":46,"nodeType":null,"messageId":"unusedVar","endLine":14,"endColumn":53}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\n\ninterface DisputePanelProps {\n data?: {\n root_cause?: string;\n replay_instructions?: string;\n ptr?: string; // Pointer to failure context if any\n };\n tokens: Record;\n context?: any;\n}\n\nexport function DisputePanel({ data, tokens, context }: DisputePanelProps) {\n const na = tokens['LIT_NOT_APPLICABLE'];\n\n if (!data || (!data.root_cause && !data.replay_instructions)) {\n return (\n
\n {na}\n
\n );\n }\n\n const rootCauseLabel = tokens['LIT_ROOT_CAUSE'];\n const replayLabel = tokens['LIT_REPLAY_INSTRUCTIONS'];\n const title = tokens['LIT_DISPUTE_CLOSURE'];\n\n return (\n
\n

{title}

\n\n
\n {/* Root Cause */}\n {data?.root_cause && (\n
\n

{rootCauseLabel}

\n

{data.root_cause}

\n
\n )}\n\n {/* Replay */}\n {data?.replay_instructions && (\n
\n

{replayLabel}

\n \n {data.replay_instructions}\n \n {data.ptr && (\n \n Jump to Evidence →\n \n )}\n
\n )}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/EvidenceList.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":13,"column":24,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":13,"endColumn":27,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[319,322],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[319,322],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\n\ninterface EvidenceListProps {\n data?: Array<{\n label?: string;\n ptr?: string;\n // Other fields like mime_type, content_digest might exist but UI minimal for now\n }>;\n tokens: Record;\n context?: {\n ptr?: string;\n [key: string]: any;\n };\n}\n\nexport function EvidenceList({ data, tokens, context }: EvidenceListProps) {\n const title = tokens['LIT_EVIDENCE_DOCKET']; // No fallback, relying on SSOT\n const activePtr = context?.ptr;\n\n if (!data || data.length === 0) {\n return (\n
\n
\n {tokens['LIT_NOT_AVAILABLE']}\n
\n
\n {tokens['LIT_REASON_EVIDENCE_MISSING']}\n
\n
\n {tokens['LIT_ACTION_HOW_TO_REPRO']}\n
\n
\n );\n }\n\n return (\n
\n

\n {title}\n

\n
    \n {data.map((slice, idx) => {\n const isActive = activePtr && slice.ptr === activePtr;\n // Canonical pointer usage\n const ptr = slice.ptr || `#slice-${idx}`;\n\n return (\n
  • \n \n
    \n \n {slice.label || `Slice ${idx + 1}`}\n \n {isActive && (\n \n Active\n
    \n     \n )}\n
    \n \n {ptr}\n \n \n
    • \n );\n })}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HeroBlock.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":5,"column":12,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":5,"endColumn":15,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[67,70],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[67,70],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":8,"column":19,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":8,"endColumn":22,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[142,145],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[142,145],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\n\ninterface HeroBlockProps {\n data?: any;\n tokens: Record;\n context?: {\n ruleset?: any;\n };\n}\n\nexport function HeroBlock({ tokens, context }: HeroBlockProps) {\n const title = tokens['LIT_LAWS_TITLE'];\n const desc = tokens['LIT_LAWS_DESC'];\n const versionLabel = tokens['LIT_RULESET_VERSION_LABEL'];\n const version = context?.ruleset?.version;\n\n return (\n
\n
\n
\n

\n {title}\n

\n {desc && (\n

\n {desc}\n

\n )}\n
\n\n {version && (\n
\n \n {versionLabel}\n \n \n {version}\n \n
\n )}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HomeAuditBanner.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HomeHero.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HomePrimaryCtas.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HomeQuickStart.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HomeResourcesMatrix.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/HomeStatsRow.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":4,"column":88,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":4,"endColumn":91,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[116,119],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[116,119],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\n\nexport function HomeStatsRow({ tokens, data }: { tokens: Record, data: any }) {\n // Fallback if data absent (though binding should provide ssot.stats)\n const stats = [\n { label: tokens.LIT_STATS_RUNS, value: data?.run_count || tokens.LIT_NOT_AVAILABLE },\n { label: tokens.LIT_STATS_RULESET, value: data?.ruleset_version || \"v2.0\" },\n { label: tokens.LIT_STATS_DETERMINISM, value: \"100%\" },\n { label: tokens.LIT_STATS_EVIDENCE_PACKS, value: data?.evidence_count || tokens.LIT_NOT_AVAILABLE },\n ];\n\n return (\n
\n
\n {stats.map((stat, i) => (\n
\n
{stat.value}
\n
{stat.label}
\n
\n ))}\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/InteropGraph.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/ManifestViewer.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":11,"column":24,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":11,"endColumn":27,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[311,314],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[311,314],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import React from 'react';\n\ninterface ManifestViewerProps {\n data?: {\n run_id?: string;\n ruleset_version?: string;\n schema_bundle_version?: string;\n pack_root_hash?: string;\n env_ref?: { image_digest: string } | string;\n produced_at?: string;\n [key: string]: any;\n };\n tokens: Record;\n}\n\nexport function ManifestViewer({ data, tokens }: ManifestViewerProps) {\n if (!data) return null;\n\n const discl = tokens['DISCL_NOT_SDK'] || 'Not SDK';\n const hash = data.pack_root_hash || data.canonical || tokens['LIT_NOT_APPLICABLE'];\n const env = typeof data.env_ref === 'object' ? data.env_ref.image_digest : (data.env_ref || tokens['LIT_NOT_APPLICABLE']);\n\n return (\n
\n
\n
\n {tokens['LIT_RUN_ID']}\n {data.run_id || tokens['LIT_NOT_APPLICABLE']}\n
\n
\n {tokens['LIT_RULESET_VERSION']}\n {data.ruleset_version || tokens['LIT_NOT_APPLICABLE']}\n
\n
\n {tokens['LIT_SCHEMA_BUNDLE']}\n {data.schema_bundle_version || tokens['LIT_NOT_APPLICABLE']}\n
\n
\n {tokens['LIT_PACK_ROOT_HASH']}\n {hash}\n
\n
\n {tokens['LIT_ENV_REF']}\n {env}\n
\n
\n\n
\n \n {discl}\n \n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/ProvenanceCard.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/RegMappingGrid.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/RoleSelector.tsx","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":7,"column":12,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":7,"endColumn":15,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[160,163],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[160,163],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":35,"column":35,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":35,"endColumn":38,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1250,1253],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1250,1253],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport React from 'react';\nimport Link from 'next/link';\nimport { ROLES, JOURNEYS } from '../../_ssot/ux.generated';\n\ninterface RoleSelectorProps {\n data?: any; // ssot.roles\n tokens: Record;\n}\n\nexport function RoleSelector({ data, tokens }: RoleSelectorProps) {\n // 1. Validate Data\n const roles = data || ROLES; // Fallback to SSOT if binding fails, but binding is \"ssot.roles\"\n\n // 2. Resolve Journey Entrypoints\n function getEntrypoint(roleId: string): string {\n const journey = JOURNEYS.find(j => j.role === roleId);\n if (!journey || journey.steps.length < 2) return '#';\n // Step 0 is usually /start, Step 1 is the first case\n // Logic: Return the route of the second step (index 1) as the target\n return journey.steps[1]?.route || '#';\n }\n\n if (!roles || roles.length === 0) {\n return
{tokens['LIT_NOT_APPLICABLE']}
;\n }\n\n return (\n
\n

\n {tokens['LIT_CHOOSE_ROLE']}\n

\n\n
\n {roles.map((role: any) => {\n const href = getEntrypoint(role.id);\n return (\n \n

\n {role.title}\n

\n

\n {tokens[role.intent]}\n

\n\n
\n {tokens['LIT_START_JOURNEY']}\n →\n
\n\n {/* Optional: Show primary questions as bullets if space allows? Keep simple for now */}\n \n );\n })}\n
\n\n {tokens['DISCL_NOT_CERTIFICATION'] && (\n

\n {tokens['DISCL_NOT_CERTIFICATION']}\n

\n )}\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/StartHero.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_components/blocks/VerdictBadge.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_registry/data-registry.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_registry/facets.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_registry/hosts.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_registry/route-registry.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_ssot/nav.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'JOURNEYS' is defined but never used. Allowed unused vars must match /^_/u.","line":6,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":6,"endColumn":18},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'SHELVES' is defined but never used. Allowed unused vars must match /^_/u.","line":6,"column":20,"nodeType":null,"messageId":"unusedVar","endLine":6,"endColumn":27}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\n/**\n * SSOT-Driven Navigation Adapter\n * Derived from ux.generated.ts to ensure compliance with Court IA.\n */\nimport { JOURNEYS, SHELVES } from './ux.generated';\nimport { HOSTS } from '../_registry/hosts';\n\nimport { TOKENS } from './ux.generated';\n\nexport const NAV_ITEMS: { label: string; href: string; special?: boolean }[] = [\n { label: TOKENS['LIT_NAV_DOCKET'], href: '/' },\n { label: TOKENS['LIT_NAV_START'], href: '/start' },\n { label: TOKENS['LIT_NAV_CASES'], href: '/cases' },\n { label: TOKENS['LIT_NAV_LAWS'], href: '/laws' },\n { label: TOKENS['LIT_NAV_COMPLIANCE'], href: '/policies/reg-mapping' }\n];\n\nexport const FOOTER_LINKS = [\n { label: 'Regulatory Mapping', href: '/policies/reg-mapping' },\n { label: 'Disclaimer', href: `${HOSTS.DOCS}/governance/disclaimer`, external: true }\n];\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/_ssot/ux.generated.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/v2/types/projections.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":39,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":39,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1054,1057],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1054,1057],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"export type IndexabilityStatus = 'INDEXABLE_REAL' | 'INDEXABLE_SYNTHETIC' | 'NON_INDEXABLE';\nexport type EvidenceMaturityTier = 'DECLARED' | 'REPRODUCED' | 'DISPUTE_READY';\n\nexport interface AdjudicableSurfaces {\n intent: boolean;\n plan: boolean;\n confirm: boolean;\n trace: boolean;\n snapshots: boolean;\n mcp?: boolean;\n a2a?: boolean;\n}\n\nexport interface RunProjectionIndexItem {\n pack_id: string;\n indexability_status: IndexabilityStatus;\n substrate_id: string;\n substrate_name: string;\n scenario: string;\n verdict: string;\n tags: string[];\n // RC-2 Scope Fields\n tier?: EvidenceMaturityTier;\n interop_stack?: string[];\n surfaces?: AdjudicableSurfaces;\n}\n\nexport interface RunProjectionFacets {\n substrate: string[];\n verdict: string[];\n indexability_status: string[];\n tier?: string[];\n interop_stack?: string[][]; // Array of stacks (which are string arrays)\n}\n\nexport interface RunProjectionIndex {\n projection_type: 'runs_index';\n generated_at: string;\n source_version: any;\n projection_schema_version?: string;\n scope_ssot_version?: string;\n scope_freeze_ref?: string;\n data: {\n runs: RunProjectionIndexItem[];\n facets: RunProjectionFacets;\n };\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/validation/page.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'globalAlignment' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":23},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'AlertTriangle' is defined but never used. Allowed unused vars must match /^_/u.","line":12,"column":31,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":44},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'XCircle' is defined but never used. Allowed unused vars must match /^_/u.","line":12,"column":46,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":53},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'GitBranch' is defined but never used. Allowed unused vars must match /^_/u.","line":12,"column":63,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":72}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Validation Dashboard Page\n * \n * Hub for \"Institutional Integrity\" and \"Governance Gates\".\n * All links derived from lab-manifest.json (SSOT).\n */\n\nimport type { Metadata } from 'next';\nimport labManifest from '@/public/_meta/lab-manifest.json';\nimport globalAlignment from '@/public/_meta/global-alignment.json';\nimport gateStatus from '@/public/_meta/gates/gate-status.json';\nimport { Shield, CheckCircle, AlertTriangle, XCircle, Layers, GitBranch, Terminal } from 'lucide-react';\nimport { DisclaimerBox } from '@/components/common/DisclaimerBox';\nimport { SmartLink } from '@/components/common/SmartLink';\nimport { SemanticStatusBadge } from '@/components/common/SemanticStatusBadge';\n\nconst LAB_CANONICAL_HOST = 'https://lab.mplp.io';\n\ninterface Gate {\n id: string;\n status: 'PASS' | 'FAIL' | string;\n description: string;\n}\n\ninterface GateStatus {\n generated_at: string;\n lab_series: string;\n gates: Gate[];\n artifact_hash: string;\n}\n\nexport const metadata: Metadata = {\n title: 'Validation Dashboard — MPLP Validation Lab',\n description: 'Protocol alignment, governance gates, and structural integrity status for the MPLP Validation Lab.',\n alternates: {\n canonical: `${LAB_CANONICAL_HOST}/validation`,\n },\n};\n\nexport default function ValidationDashboard() {\n const labVersion = labManifest.lab_series;\n const status = gateStatus as unknown as GateStatus;\n const gates = status.gates;\n\n return (\n
\n {/* Header */}\n
\n
\n Home\n /\n Validation Dashboard\n
\n

Validation Dashboard

\n
\n \n
\n \n Publication Integrity Verified\n
\n
\n

\n Authoritative status of Protocol alignment and automated Publication Integrity gates.\n This release ({labVersion}) is cryptographically anchored and audited.\n

\n
\n\n
\n
\n {/* Governance Gates Section */}\n
\n
\n
\n
\n \n
\n

Governance Gates (SEAL)

\n
\n
\n\n
\n {gates.map((gate: Gate) => (\n
\n
\n
\n

{gate.id}

\n \n
\n

{gate.description}

\n
\n
\n ))}\n
\n
\n
\n\n {/* Sidebars strictly derived from SSOT */}\n
\n
\n

\n \n Validation Products\n

\n\n
\n \n

Cross-Framework Equivalence

\n \n \n\n \n

Field Mapping Matrix (FMM)

\n \n \n
\n\n
\n

\n \n Institutional Anchors\n

\n
\n \n View Master Repository\n \n
\n
\n \n
\n
\n
\n
\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/app/validation/samples/page.tsx","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'LAB_CANONICAL_HOST' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":14,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":14,"endColumn":25}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Evidence Samples Gallery (MUST-1)\n * \n * Showcases \"Same-Scale\" equivalence pairs across substrates.\n */\n\nimport type { Metadata } from 'next';\nimport crossVerifiedReport from '@/public/_data/cross-verified/v0.10.2-report.json';\nimport { DisclaimerBox } from '@/components/common/DisclaimerBox';\nimport { CheckCircle, ArrowRightLeft, FileJson } from 'lucide-react';\nimport { SmartLink } from '@/components/common/SmartLink';\nimport { SemanticStatusBadge } from '@/components/common/SemanticStatusBadge';\n\nconst LAB_CANONICAL_HOST = 'https://lab.mplp.io';\n\nexport const metadata: Metadata = {\n title: 'Evidence Gallery — MPLP Validation Lab',\n description: 'MUST-1: Cross-substrate same-scale evidence samples comparing identical scenarios.',\n};\n\ninterface ReportEntry {\n run_id: string;\n substrate: string;\n scenario_family: string;\n normalized_hash: string;\n verdict_status: string;\n}\n\ninterface EquivalenceMatrix {\n left_run_id: string;\n right_run_id: string;\n equivalent: boolean;\n diff_ref: string;\n}\n\ninterface CrossVerifiedReport {\n entries: ReportEntry[];\n equivalence_matrix: EquivalenceMatrix[];\n}\n\nexport default function EvidenceGallery() {\n const report = crossVerifiedReport as unknown as CrossVerifiedReport;\n\n const heroSamples = report.equivalence_matrix.filter(m => m.equivalent);\n const hasSamples = heroSamples.length > 0;\n\n return (\n
\n
\n
\n Validation\n /\n Evidence Gallery\n
\n

\n Same-Scale Samples (MUST-1) {!hasSamples && '— None yet'}\n

\n

\n Institutional Domain Breadth proof: Direct comparison of identical scenarios across disparate substrates.\n These bit-identical samples establish a substrate-neutral scale for adjudication.\n

\n
\n\n \n\n
\n {heroSamples.map((sample, i) => {\n const left = report.entries.find(e => e.run_id === sample.left_run_id);\n const right = report.entries.find(e => e.run_id === sample.right_run_id);\n\n if (!left || !right) return null;\n\n return (\n
\n
\n
\n
{left.substrate}
\n
\n

{left.run_id}

\n
\n \n Admission: PASS\n
\n
\n
\n
\n \n
\n
\n
{right.substrate}
\n
\n

{right.run_id}

\n
\n \n Admission: PASS\n
\n
\n
\n
\n\n
\n
\n \n Equivalent result: {left.scenario_family}\n
\n
\n \n \n View Semantic Diff\n \n
\n
\n
\n );\n })}\n\n {!hasSamples && (\n
\n \n

Normalization Convergence in Progress

\n

\n No identical "Hero Samples" are currently bit-locked for the v1.0 series.\n This is a planned latency state as substrates migrate toward the new SSOT projection mapping.\n

\n
\n \n How to produce the first sample →\n \n
\n
\n )}\n
\n\n
\n

About Same-Scale Samples

\n

\n MUST-1 ensures that the Validation Lab can compare disparate frameworks on an identical scale.\n

\n
\n
\n

Step 1: Capture

\n

Events captured via observers.

\n
\n
\n

Step 2: Map

\n

Normalized via Field Mapping Matrix (FMM).

\n
\n
\n

Step 3: Anchor

\n

Semantic hash anchored for bit-level proof.

\n
\n
\n
\n
\n );\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/GovernanceBanner.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/Nav.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/ProvenanceFooter.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/VersionStrip.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/common/BoundText.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/common/DisclaimerBox.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/common/SemanticStatusBadge.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/common/SmartLink.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/common/VersionBadge.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/layout/Footer.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/layout/non-endorsement-banner.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/ui/hash-display.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/ui/icons.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/ui/logo.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/components/ui/run-status-badge.tsx","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/eslint.config.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/adjudication/adjudicate.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/adjudication/deterministicHash.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/bundles/load_run_bundle.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'NormalizedVerdict' is defined but never used. Allowed unused vars must match /^_/u.","line":18,"column":5,"nodeType":null,"messageId":"unusedVar","endLine":18,"endColumn":22},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'Pack' is defined but never used. Allowed unused vars must match /^_/u.","line":21,"column":5,"nodeType":null,"messageId":"unusedVar","endLine":21,"endColumn":9},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'LoadStatus' is defined but never used. Allowed unused vars must match /^_/u.","line":24,"column":5,"nodeType":null,"messageId":"unusedVar","endLine":24,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'LoadError' is defined but never used. Allowed unused vars must match /^_/u.","line":25,"column":5,"nodeType":null,"messageId":"unusedVar","endLine":25,"endColumn":14},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'parseNdjson' is defined but never used. Allowed unused vars must match /^_/u.","line":73,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":73,"endColumn":21}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":5,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * RunBundle Loader\n * \n * Loads runs into ABMC-compliant RunBundle structure.\n * Supports both legacy GF runs and new v0.3 runs.\n * \n * DOES NOT REPLACE loadRun.ts - parallel implementation.\n * \n * All verdicts are normalized at load time via mapToNormalizedVerdict.\n * Downstream code always receives NormalizedVerdict.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { mapToNormalizedVerdict } from './normalize';\nimport type {\n RunBundle,\n NormalizedVerdict,\n BundleManifest,\n EvidencePointers,\n Pack,\n TraceData,\n Event,\n LoadStatus,\n LoadError,\n} from './types';\n\nconst RUNS_ROOT = path.resolve(process.cwd(), 'data/runs');\n\n// =============================================================================\n// Path Safety\n// =============================================================================\n\nconst SAFE_RUN_ID_PATTERN = /^[a-z0-9._-]+$/i;\n\nfunction isValidRunId(runId: string): boolean {\n if (!runId || runId.includes('..') || runId.includes('/') || runId.includes('\\\\')) {\n return false;\n }\n return SAFE_RUN_ID_PATTERN.test(runId);\n}\n\n// =============================================================================\n// JSON Helpers (distinguish missing vs invalid)\n// =============================================================================\n\ntype JsonReadResult =\n | { ok: true; data: T }\n | { ok: false; reason: 'missing' | 'invalid'; error: string };\n\nfunction readJsonSafe(filePath: string): JsonReadResult {\n try {\n if (!fs.existsSync(filePath)) {\n return { ok: false, reason: 'missing', error: 'File not found' };\n }\n const content = fs.readFileSync(filePath, 'utf-8');\n const data = JSON.parse(content) as T;\n return { ok: true, data };\n } catch (e) {\n // File exists but parse failed = invalid (not missing)\n return {\n ok: false,\n reason: 'invalid',\n error: e instanceof Error ? e.message : 'Parse error'\n };\n }\n}\n\n// =============================================================================\n// NDJSON Parser\n// =============================================================================\n\nfunction parseNdjson(filePath: string): Event[] {\n if (!fs.existsSync(filePath)) return [];\n\n try {\n const content = fs.readFileSync(filePath, 'utf-8');\n const lines = content.trim().split('\\n').filter(line => line.trim());\n\n const events: Event[] = [];\n for (const line of lines) {\n try {\n events.push(JSON.parse(line));\n } catch {\n // Skip invalid lines\n }\n }\n return events;\n } catch {\n return [];\n }\n}\n\n// =============================================================================\n// Main Loader\n// =============================================================================\n\nexport function loadRunBundle(runId: string): RunBundle {\n // Initialize result\n const result: RunBundle = {\n run_id: runId,\n verdict: null,\n bundle_manifest: null,\n integrity_hash_path: null,\n evidence_pointers: null,\n pack: null,\n load_status: {\n b1_verdict: 'missing',\n b2_manifest: 'missing',\n b3_integrity: 'missing',\n b4_pointers: 'missing',\n pack: 'missing',\n b1_was_legacy: false,\n },\n load_errors: [],\n };\n\n // Path safety check\n if (!isValidRunId(runId)) {\n result.load_errors.push({\n artifact: 'B1',\n code: 'INVALID-RUN-ID',\n message: `Invalid run_id: ${runId}`,\n });\n return result;\n }\n\n const base = path.join(RUNS_ROOT, runId);\n if (!fs.existsSync(base)) {\n result.load_errors.push({\n artifact: 'B1',\n code: 'RUN-NOT-FOUND',\n message: `Run directory not found: ${runId}`,\n path: base,\n });\n return result;\n }\n\n // =========================================================================\n // B1: verdict.json → ALWAYS normalize to NormalizedVerdict\n // =========================================================================\n const verdictPath = path.join(base, 'verdict.json');\n const verdictResult = readJsonSafe(verdictPath);\n\n if (verdictResult.ok) {\n const raw = verdictResult.data as Record;\n\n // All verdicts go through normalization\n // This ensures consistent structure regardless of disk format\n result.verdict = mapToNormalizedVerdict(raw, runId);\n result.load_status.b1_verdict = 'ok';\n\n // Track if it came from legacy format (no topline + domain_verdicts)\n const hadABMCFields = 'topline' in raw && 'domain_verdicts' in raw;\n result.load_status.b1_was_legacy = !hadABMCFields;\n } else {\n // Properly distinguish missing vs invalid\n result.load_status.b1_verdict = verdictResult.reason;\n result.load_status.b1_was_legacy = false;\n\n const code = verdictResult.reason === 'invalid'\n ? 'BUNDLE-INVALID-B1'\n : 'BUNDLE-MISSING-B1';\n\n result.load_errors.push({\n artifact: 'B1',\n code,\n message: verdictResult.error,\n path: verdictPath,\n });\n }\n\n // =========================================================================\n // B2: bundle.manifest.json (optional for legacy runs)\n // =========================================================================\n const bundleManifestPath = path.join(base, 'bundle.manifest.json');\n const bundleResult = readJsonSafe(bundleManifestPath);\n\n if (bundleResult.ok) {\n result.bundle_manifest = bundleResult.data;\n result.load_status.b2_manifest = 'ok';\n result.ruleset_ref = bundleResult.data.ruleset_ref;\n } else {\n // Use reason field to determine missing vs invalid\n result.load_status.b2_manifest = bundleResult.reason;\n if (bundleResult.reason === 'invalid') {\n result.load_errors.push({\n artifact: 'B2',\n code: 'BUNDLE-INVALID-B2',\n message: bundleResult.error,\n path: bundleManifestPath,\n });\n }\n // 'missing' is not an error for legacy runs\n }\n\n // =========================================================================\n // B3: integrity/sha256sums.txt (required)\n // =========================================================================\n const integrityPath = path.join(base, 'integrity', 'sha256sums.txt');\n if (fs.existsSync(integrityPath)) {\n result.integrity_hash_path = integrityPath;\n result.load_status.b3_integrity = 'ok';\n } else {\n result.load_status.b3_integrity = 'missing';\n result.load_errors.push({\n artifact: 'B3',\n code: 'BUNDLE-MISSING-B3',\n message: 'sha256sums.txt not found',\n path: integrityPath,\n });\n }\n\n // =========================================================================\n // B4: evidence_pointers.json (optional for legacy runs)\n // =========================================================================\n const pointersPath = path.join(base, 'evidence_pointers.json');\n const pointersResult = readJsonSafe(pointersPath);\n\n if (pointersResult.ok) {\n result.evidence_pointers = pointersResult.data;\n result.load_status.b4_pointers = 'ok';\n } else {\n // Use reason field to determine missing vs invalid\n result.load_status.b4_pointers = pointersResult.reason;\n if (pointersResult.reason === 'invalid') {\n result.load_errors.push({\n artifact: 'B4',\n code: 'BUNDLE-INVALID-B4',\n message: pointersResult.error,\n path: pointersPath,\n });\n }\n // 'missing' is not an error for legacy runs\n }\n\n // =========================================================================\n // Pack: Load trace events\n // =========================================================================\n const packRoot = result.bundle_manifest?.pack_root\n ? path.join(base, result.bundle_manifest.pack_root)\n : base; // Legacy: pack is at run root\n\n // Try multiple possible event locations\n const eventPaths = [\n path.join(packRoot, 'timeline', 'events.ndjson'), // EPC 1.0 Canonical\n path.join(packRoot, 'trace', 'events.ndjson'), // v0.3 Beta\n path.join(base, 'timeline', 'events.ndjson'), // Legacy location\n ];\n\n let trace: TraceData | undefined;\n for (const p of eventPaths) {\n if (fs.existsSync(p)) {\n const traceData = fs.readFileSync(p, 'utf-8');\n const traceEvents = traceData.split('\\n')\n .filter(line => line.trim())\n .map(line => ({ ...JSON.parse(line), ts: undefined }));\n\n trace = {\n events: traceEvents as Event[],\n raw_path: p,\n };\n break;\n }\n }\n\n if (trace) {\n result.pack = {\n root: packRoot,\n trace,\n };\n result.load_status.pack = 'ok';\n } else {\n result.load_status.pack = 'missing';\n result.load_errors.push({\n artifact: 'pack',\n code: 'PACK-TRACE-MISSING',\n message: 'No events.ndjson found',\n });\n }\n\n // =========================================================================\n // Ruleset ref fallback (from legacy manifest if B2 missing)\n // =========================================================================\n if (!result.ruleset_ref) {\n const legacyManifestPath = path.join(base, 'manifest.json');\n const legacyResult = readJsonSafe<{ ruleset_version?: string }>(legacyManifestPath);\n if (legacyResult.ok && legacyResult.data.ruleset_version) {\n result.ruleset_ref = legacyResult.data.ruleset_version;\n }\n }\n\n return result;\n}\n\n// =============================================================================\n// Batch Operations\n// =============================================================================\n\nexport function loadAllRunBundles(runIds: string[]): Map {\n const results = new Map();\n for (const runId of runIds) {\n results.set(runId, loadRunBundle(runId));\n }\n return results;\n}\n\nexport function listRunIds(): string[] {\n if (!fs.existsSync(RUNS_ROOT)) return [];\n return fs.readdirSync(RUNS_ROOT).filter((d) => {\n const p = path.join(RUNS_ROOT, d);\n return fs.statSync(p).isDirectory() && isValidRunId(d);\n });\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/bundles/normalize.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/bundles/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/cn.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/curated/load-curated-runs.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/curated/ssot.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/curated/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/engine/ingest.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'EPC_CONSTANTS' is defined but never used. Allowed unused vars must match /^_/u.","line":11,"column":51,"nodeType":null,"messageId":"unusedVar","endLine":11,"endColumn":64},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":63,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":63,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Evidence Pack Ingestion\n * \n * Handles loading evidence packs from directory or zip.\n * IMPORTANT: No execution capability - only file reading.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport { PackHandle, PackManifest, IngestOptions, EPC_CONSTANTS } from './types';\n\n/**\n * Ingest an evidence pack from directory or zip file.\n * \n * @param packPath Path to pack directory or zip file\n * @param options Ingestion options\n * @returns PackHandle ready for verification\n */\nexport async function ingest(\n packPath: string,\n options: IngestOptions = {}\n): Promise {\n const absolutePath = path.resolve(packPath);\n\n // Check if path exists\n if (!fs.existsSync(absolutePath)) {\n throw new Error(`Pack path does not exist: ${absolutePath}`);\n }\n\n const stats = fs.statSync(absolutePath);\n\n // Handle zip files\n if (stats.isFile() && absolutePath.endsWith('.zip')) {\n if (options.allow_zip === false) {\n throw new Error('Zip extraction disabled');\n }\n // TODO: Extract zip to temp directory\n throw new Error('Zip extraction not yet implemented');\n }\n\n // Must be a directory\n if (!stats.isDirectory()) {\n throw new Error(`Pack path must be a directory or zip file: ${absolutePath}`);\n }\n\n // Build file inventory\n const fileInventory = options.skip_inventory\n ? []\n : buildFileInventory(absolutePath);\n\n // Calculate total size\n const totalSize = calculateTotalSize(absolutePath, fileInventory);\n\n // Load manifest if exists\n const manifestPath = path.join(absolutePath, 'manifest.json');\n let manifestRaw: PackManifest | undefined;\n\n if (fs.existsSync(manifestPath)) {\n try {\n const content = fs.readFileSync(manifestPath, 'utf-8');\n manifestRaw = JSON.parse(content) as PackManifest;\n } catch (e) {\n // Manifest parse error will be caught by verify.ts\n }\n }\n\n // Detect layout version\n const layoutVersion = detectLayoutVersion(absolutePath, fileInventory);\n\n return {\n root_path: absolutePath,\n file_inventory: fileInventory,\n total_size_bytes: totalSize,\n layout_version: layoutVersion,\n manifest_raw: manifestRaw,\n from_zip: false,\n };\n}\n\n/**\n * Build file inventory (relative paths) for a pack directory.\n */\nfunction buildFileInventory(rootPath: string, relativePath: string = ''): string[] {\n const files: string[] = [];\n const currentPath = path.join(rootPath, relativePath);\n\n const entries = fs.readdirSync(currentPath, { withFileTypes: true });\n\n for (const entry of entries) {\n const entryRelativePath = relativePath ? `${relativePath}/${entry.name}` : entry.name;\n\n if (entry.isDirectory()) {\n // Recurse into subdirectory\n files.push(...buildFileInventory(rootPath, entryRelativePath));\n } else if (entry.isFile()) {\n files.push(entryRelativePath);\n }\n // Skip symlinks and other special files (security)\n }\n\n return files;\n}\n\n/**\n * Calculate total size of all files in pack.\n */\nfunction calculateTotalSize(rootPath: string, fileInventory: string[]): number {\n let total = 0;\n\n for (const file of fileInventory) {\n const filePath = path.join(rootPath, file);\n try {\n const stats = fs.statSync(filePath);\n total += stats.size;\n } catch {\n // Skip files that can't be read\n }\n }\n\n return total;\n}\n\n/**\n * Detect EPC layout version based on pack structure.\n */\nfunction detectLayoutVersion(rootPath: string, fileInventory: string[]): string {\n // Check for EPC v1.0 required files/dirs\n const hasManifest = fileInventory.includes('manifest.json');\n const hasIntegrity = fileInventory.some(f => f.startsWith('integrity/'));\n const hasArtifacts = fileInventory.some(f => f.startsWith('artifacts/'));\n const hasTimeline = fileInventory.some(f => f.startsWith('timeline/'));\n\n if (hasManifest && hasIntegrity && hasArtifacts && hasTimeline) {\n return '1.0';\n }\n\n return 'unknown';\n}\n\n/**\n * Compute SHA-256 hash of a file.\n */\nexport function hashFile(filePath: string): string {\n const content = fs.readFileSync(filePath);\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\n/**\n * Compute SHA-256 hash of string content.\n */\nexport function hashString(content: string): string {\n return crypto.createHash('sha256').update(content, 'utf-8').digest('hex');\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/engine/packHash.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/engine/types.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'VerdictStatus' is defined but never used. Allowed unused vars must match /^_/u.","line":11,"column":27,"nodeType":null,"messageId":"unusedVar","endLine":11,"endColumn":40}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Validation Lab Engine Types\n * \n * Core type definitions for evidence pack verification.\n * Aligned with:\n * - evidence-pack-contract-v1.0.md\n * - ruleset-contract-v1.0.md\n * - pointer-contract-v1.0.md\n */\n\nimport { AdmissionStatus, VerdictStatus, EvidencePointer } from '../verdict/types';\nimport { FailureTaxonomy } from '../verdict/taxonomy';\n\n// =============================================================================\n// Pack Handle (from ingest.ts)\n// =============================================================================\n\n/**\n * Represents an ingested evidence pack ready for verification.\n */\nexport interface PackHandle {\n /** Absolute path to pack root directory */\n root_path: string;\n\n /** List of all files in pack (relative paths) */\n file_inventory: string[];\n\n /** Total size in bytes */\n total_size_bytes: number;\n\n /** Detected EPC layout version */\n layout_version: string;\n\n /** Raw manifest.json content (if exists) */\n manifest_raw?: PackManifest;\n\n /** Whether pack was extracted from zip */\n from_zip: boolean;\n}\n\n/**\n * Pack manifest structure per EPC v1.0\n */\nexport interface PackManifest {\n pack_version: string;\n pack_id: string;\n created_at: string;\n generator: {\n name: string;\n version: string;\n fingerprint: string;\n };\n protocol_version: string;\n scenario_id: string;\n artifacts_included: string[];\n compatibility?: {\n min_ruleset_version: string;\n max_ruleset_version: string;\n };\n}\n\n// =============================================================================\n// Verification Report (from verify.ts)\n// =============================================================================\n\n/**\n * Result of a single verification check.\n */\nexport interface CheckResult {\n /** Check identifier */\n check_id: string;\n\n /** Human-readable check name */\n name: string;\n\n /** Check category */\n category: CheckCategory;\n\n /** Result status */\n status: 'PASS' | 'FAIL' | 'WARN' | 'SKIP';\n\n /** Human-readable message */\n message: string;\n\n /** If FAIL, the taxonomy code */\n taxonomy?: FailureTaxonomy;\n\n /** If FAIL, evidence pointers */\n pointers?: EvidencePointer[];\n\n /** Execution time in ms */\n duration_ms: number;\n}\n\nexport type CheckCategory =\n | 'ADMISSION_SECURITY'\n | 'ADMISSION_STRUCTURE'\n | 'INTEGRITY'\n | 'MANIFEST'\n | 'VERSION_BINDING'\n | 'TIMELINE';\n\n/**\n * A blocking failure that prevents admission.\n */\nexport interface BlockingFailure {\n check_id: string;\n taxonomy: FailureTaxonomy;\n message: string;\n pointers: EvidencePointer[];\n}\n\n/**\n * Computed hashes for audit trail.\n */\nexport interface ComputedHashes {\n /** SHA-256 of normalized sha256sums.txt */\n pack_root_hash: string;\n\n /** SHA-256 of manifest.json */\n manifest_hash: string;\n\n /** SHA-256 of this report (computed after serialization) */\n report_hash?: string;\n\n /** Schema bundle hash from SYNC_REPORT */\n schemas_bundle_hash: string;\n\n /** Invariants bundle hash from SYNC_REPORT */\n invariants_bundle_hash: string;\n}\n\n/**\n * The complete verification report.\n */\nexport interface VerificationReport {\n /** Report version */\n report_version: '1.0';\n\n /** Timestamp of verification */\n verified_at: string;\n\n /** Pack identifier */\n pack_id: string;\n\n // NOTE: pack_path removed for privacy (P0-2: no absolute paths in output)\n\n /** Final admission status */\n admission_status: AdmissionStatus;\n\n /** All checks performed */\n checks: CheckResult[];\n\n /** Blocking failures (if any) */\n blocking_failures: BlockingFailure[];\n\n /** Computed hashes for audit */\n hashes: ComputedHashes;\n\n /** Ruleset used for version binding */\n ruleset_version: string;\n\n /** Protocol version from pack */\n protocol_version?: string;\n\n /** Total verification time in ms */\n total_duration_ms: number;\n}\n\n// =============================================================================\n// Ingest Options\n// =============================================================================\n\nexport interface IngestOptions {\n /** Allow zip extraction (default: true) */\n allow_zip?: boolean;\n\n /** Temporary directory for zip extraction */\n temp_dir?: string;\n\n /** Skip file inventory (for large packs) */\n skip_inventory?: boolean;\n}\n\n// =============================================================================\n// Verify Options\n// =============================================================================\n\nexport interface VerifyOptions {\n /** Ruleset version to use (default: 'ruleset-1.0') */\n ruleset_version?: string;\n\n /** Path to SYNC_REPORT.json */\n sync_report_path?: string;\n\n /** Strict mode: fail on any WARN */\n strict?: boolean;\n\n /** Skip specific checks */\n skip_checks?: string[];\n}\n\n// =============================================================================\n// Constants (from EPC v1.0)\n// =============================================================================\n\nexport const EPC_CONSTANTS = {\n MAX_PACK_SIZE_BYTES: 50 * 1024 * 1024, // 50 MB\n MAX_FILE_COUNT: 1000,\n ALLOWED_EXTENSIONS: ['.json', '.ndjson', '.yaml', '.yml', '.txt', '.sha256'],\n REQUIRED_FILES: ['manifest.json', 'integrity/sha256sums.txt', 'integrity/pack.sha256'],\n REQUIRED_DIRS: ['artifacts', 'timeline', 'integrity'],\n} as const;\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/engine/verify.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'crypto' is defined but never used. Allowed unused vars must match /^_/u.","line":15,"column":13,"nodeType":null,"messageId":"unusedVar","endLine":15,"endColumn":19},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'CheckCategory' is defined but never used. Allowed unused vars must match /^_/u.","line":25,"column":5,"nodeType":null,"messageId":"unusedVar","endLine":25,"endColumn":18},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'EvidencePointer' is defined but never used. Allowed unused vars must match /^_/u.","line":27,"column":27,"nodeType":null,"messageId":"unusedVar","endLine":27,"endColumn":42},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'checkManifestRequiredFields' is defined but never used. Allowed unused vars must match /^_/u.","line":327,"column":16,"nodeType":null,"messageId":"unusedVar","endLine":327,"endColumn":43},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'skipSet' is assigned a value but never used. Allowed unused args must match /^_/u.","line":445,"column":53,"nodeType":null,"messageId":"unusedVar","endLine":445,"endColumn":60},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'skipSet' is assigned a value but never used. Allowed unused args must match /^_/u.","line":725,"column":52,"nodeType":null,"messageId":"unusedVar","endLine":725,"endColumn":59},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'skipSet' is assigned a value but never used. Allowed unused args must match /^_/u.","line":813,"column":5,"nodeType":null,"messageId":"unusedVar","endLine":813,"endColumn":12}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":7,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Evidence Pack Verification\n * \n * Core verification engine for Validation Lab.\n * Implements checks per:\n * - evidence-pack-contract-v1.0.md\n * - ruleset-contract-v1.0.md\n * - admission-criteria-v1.0.md\n * \n * IMPORTANT: No execution capability - only verification.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\n\nimport {\n PackHandle,\n VerificationReport,\n CheckResult,\n BlockingFailure,\n ComputedHashes,\n VerifyOptions,\n EPC_CONSTANTS,\n CheckCategory,\n} from './types';\nimport { AdmissionStatus, EvidencePointer } from '../verdict/types';\nimport { FailureTaxonomy } from '../verdict/taxonomy';\nimport { hashFile, hashString } from './ingest';\n\n// =============================================================================\n// Main Verification Function\n// =============================================================================\n\n/**\n * Verify an evidence pack.\n * \n * @param pack PackHandle from ingest()\n * @param options Verification options\n * @returns VerificationReport\n */\nexport async function verify(\n pack: PackHandle,\n options: VerifyOptions = {}\n): Promise {\n const startTime = Date.now();\n const checks: CheckResult[] = [];\n const blockingFailures: BlockingFailure[] = [];\n\n const rulesetVersion = options.ruleset_version || 'ruleset-1.0';\n const labRoot = path.resolve(__dirname, '../..');\n\n // D6: Build skip set for efficient lookup\n const skipSet = new Set(options.skip_checks || []);\n\n // Helper to run a check or skip it\n const runOrSkip = async (\n checkFn: () => Promise,\n checkId: string\n ): Promise => {\n if (skipSet.has(checkId)) {\n return {\n check_id: checkId,\n name: `Skipped: ${checkId}`,\n category: 'ADMISSION_SECURITY', // Will be overwritten by actual category\n status: 'SKIP',\n message: 'Skipped by options.skip_checks',\n duration_ms: 0,\n };\n }\n return await checkFn();\n };\n\n // Execute checks in order per admission-criteria-v1.0.md\n\n // === ADMISSION: Security Checks ===\n checks.push(await runOrSkip(() => checkFileCount(pack), 'ADM-SEC-001'));\n checks.push(await runOrSkip(() => checkTotalSize(pack), 'ADM-SEC-002'));\n checks.push(await runOrSkip(() => checkAllowedExtensions(pack), 'ADM-SEC-003'));\n checks.push(await runOrSkip(() => checkPathTraversal(pack), 'ADM-SEC-004'));\n\n // === ADMISSION: Structure Checks ===\n checks.push(await runOrSkip(() => checkRequiredFiles(pack), 'ADM-STR-001'));\n checks.push(await runOrSkip(() => checkRequiredDirs(pack), 'ADM-STR-002'));\n checks.push(await runOrSkip(() => checkLayoutVersion(pack), 'ADM-STR-003'));\n\n // === INTEGRITY Checks ===\n const integrityChecks = await runIntegrityChecks(pack, skipSet);\n checks.push(...integrityChecks);\n\n // === MANIFEST Checks ===\n const manifestChecks = await runManifestChecks(pack, skipSet);\n checks.push(...manifestChecks);\n\n // === VERSION BINDING Checks ===\n const syncReportPath = options.sync_report_path || path.join(labRoot, 'SYNC_REPORT.json');\n const rulesetPath = path.join(labRoot, 'data/rulesets', rulesetVersion);\n const versionChecks = await runVersionBindingChecks(pack, rulesetPath, syncReportPath, skipSet);\n checks.push(...versionChecks);\n\n // === TIMELINE Checks ===\n const timelineChecks = await runTimelineChecks(pack);\n checks.push(...timelineChecks);\n\n // Collect blocking failures\n for (const check of checks) {\n if (check.status === 'FAIL' && check.taxonomy) {\n blockingFailures.push({\n check_id: check.check_id,\n taxonomy: check.taxonomy,\n message: check.message,\n pointers: check.pointers || [],\n });\n }\n }\n\n // Determine admission status\n let admissionStatus: AdmissionStatus;\n if (blockingFailures.length > 0) {\n admissionStatus = 'NOT_ADMISSIBLE';\n } else if (checks.some(c => c.status === 'WARN')) {\n admissionStatus = options.strict ? 'NOT_ADMISSIBLE' : 'ADMISSIBLE';\n } else {\n admissionStatus = 'ADMISSIBLE';\n }\n\n // Compute hashes\n const hashes = await computeHashes(pack, syncReportPath);\n\n const endTime = Date.now();\n\n const report: VerificationReport = {\n report_version: '1.0',\n verified_at: new Date().toISOString(),\n pack_id: pack.manifest_raw?.pack_id || 'unknown',\n // NOTE: pack_path removed for privacy (P0-2: no absolute paths in output)\n admission_status: admissionStatus,\n checks,\n blocking_failures: blockingFailures,\n hashes,\n ruleset_version: rulesetVersion,\n protocol_version: pack.manifest_raw?.protocol_version,\n total_duration_ms: endTime - startTime,\n };\n\n // Compute report hash\n const reportJson = JSON.stringify(report, null, 2);\n report.hashes.report_hash = hashString(reportJson);\n\n return report;\n}\n\n// =============================================================================\n// Admission: Security Checks\n// =============================================================================\n\nasync function checkFileCount(pack: PackHandle): Promise {\n const start = Date.now();\n const count = pack.file_inventory.length;\n\n if (count > EPC_CONSTANTS.MAX_FILE_COUNT) {\n return {\n check_id: 'ADM-SEC-001',\n name: 'File Count Limit',\n category: 'ADMISSION_SECURITY',\n status: 'FAIL',\n message: `Pack contains ${count} files, exceeds limit of ${EPC_CONSTANTS.MAX_FILE_COUNT}`,\n taxonomy: FailureTaxonomy.PACK_TOO_LARGE,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-SEC-001',\n name: 'File Count Limit',\n category: 'ADMISSION_SECURITY',\n status: 'PASS',\n message: `${count} files (limit: ${EPC_CONSTANTS.MAX_FILE_COUNT})`,\n duration_ms: Date.now() - start,\n };\n}\n\nasync function checkTotalSize(pack: PackHandle): Promise {\n const start = Date.now();\n const sizeMB = (pack.total_size_bytes / (1024 * 1024)).toFixed(2);\n const limitMB = EPC_CONSTANTS.MAX_PACK_SIZE_BYTES / (1024 * 1024);\n\n if (pack.total_size_bytes > EPC_CONSTANTS.MAX_PACK_SIZE_BYTES) {\n return {\n check_id: 'ADM-SEC-002',\n name: 'Pack Size Limit',\n category: 'ADMISSION_SECURITY',\n status: 'FAIL',\n message: `Pack size ${sizeMB} MB exceeds limit of ${limitMB} MB`,\n taxonomy: FailureTaxonomy.PACK_TOO_LARGE,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-SEC-002',\n name: 'Pack Size Limit',\n category: 'ADMISSION_SECURITY',\n status: 'PASS',\n message: `${sizeMB} MB (limit: ${limitMB} MB)`,\n duration_ms: Date.now() - start,\n };\n}\n\nasync function checkAllowedExtensions(pack: PackHandle): Promise {\n const start = Date.now();\n const disallowed: string[] = [];\n\n for (const file of pack.file_inventory) {\n const ext = path.extname(file).toLowerCase();\n if (ext && !(EPC_CONSTANTS.ALLOWED_EXTENSIONS as readonly string[]).includes(ext)) {\n disallowed.push(file);\n }\n }\n\n if (disallowed.length > 0) {\n return {\n check_id: 'ADM-SEC-003',\n name: 'Allowed Extensions',\n category: 'ADMISSION_SECURITY',\n status: 'FAIL',\n message: `Disallowed file extensions: ${disallowed.slice(0, 5).join(', ')}${disallowed.length > 5 ? '...' : ''}`,\n taxonomy: FailureTaxonomy.DISALLOWED_FILE_TYPE,\n pointers: disallowed.slice(0, 5).map(f => ({\n artifact_path: f,\n content_hash: '',\n locator: `file:${f}`,\n requirement_id: 'EPC-§9',\n })),\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-SEC-003',\n name: 'Allowed Extensions',\n category: 'ADMISSION_SECURITY',\n status: 'PASS',\n message: 'All file extensions are allowed',\n duration_ms: Date.now() - start,\n };\n}\n\nasync function checkPathTraversal(pack: PackHandle): Promise {\n const start = Date.now();\n const violations: string[] = [];\n\n for (const file of pack.file_inventory) {\n // Check for path traversal patterns\n if (file.includes('..') || file.startsWith('/') || file.includes('\\\\')) {\n violations.push(file);\n }\n }\n\n if (violations.length > 0) {\n return {\n check_id: 'ADM-SEC-004',\n name: 'Path Traversal',\n category: 'ADMISSION_SECURITY',\n status: 'FAIL',\n message: `Path traversal patterns detected: ${violations.slice(0, 3).join(', ')}`,\n taxonomy: FailureTaxonomy.PATH_TRAVERSAL_DETECTED,\n pointers: violations.slice(0, 3).map(f => ({\n artifact_path: f,\n content_hash: '',\n locator: `file:${f}`,\n requirement_id: 'EPC-§9',\n })),\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-SEC-004',\n name: 'Path Traversal',\n category: 'ADMISSION_SECURITY',\n status: 'PASS',\n message: 'No path traversal patterns detected',\n duration_ms: Date.now() - start,\n };\n}\n\n// =============================================================================\n// Admission: Structure Checks\n// =============================================================================\n\nasync function checkRequiredFiles(pack: PackHandle): Promise {\n const start = Date.now();\n const missing: string[] = [];\n\n for (const required of EPC_CONSTANTS.REQUIRED_FILES) {\n if (!pack.file_inventory.includes(required)) {\n missing.push(required);\n }\n }\n\n if (missing.length > 0) {\n return {\n check_id: 'ADM-STR-001',\n name: 'Required Files',\n category: 'ADMISSION_STRUCTURE',\n status: 'FAIL',\n message: `Missing required files: ${missing.join(', ')}`,\n taxonomy: FailureTaxonomy.REQUIRED_ARTIFACT_MISSING,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-STR-001',\n name: 'Required Files',\n category: 'ADMISSION_STRUCTURE',\n status: 'PASS',\n message: 'All required files present',\n duration_ms: Date.now() - start,\n };\n}\n\n/**\n * Check: Required Manifest Fields\n */\nasync function checkManifestRequiredFields(pack: PackHandle): Promise {\n const start = Date.now();\n\n // Per evidence-pack-contract-v1.0.md + ruleset-1.0 governance:\n // Required fields for container-layer contract compliance\n // NOTE: scenario_id is OPTIONAL (belongs in curated allowlist/registry, not pack manifest)\n // Per Sprint v0.1 Constraint 1: scenario_id/target_gf/claim_level/repro_ref → allowlist ONLY\n const requiredFields = ['pack_version', 'pack_id', 'created_at', 'protocol_version'];\n\n const manifest = pack.manifest_raw || {};\n const missing: string[] = [];\n\n for (const field of requiredFields) {\n if (!(field in manifest)) {\n missing.push(field);\n }\n }\n\n // Optional fields validation (if present, validate format)\n // scenario_id: if present, must be non-empty string\n if ('scenario_id' in manifest) {\n if (typeof manifest.scenario_id !== 'string' || !manifest.scenario_id.trim()) {\n return {\n check_id: 'MAN-FLD-001',\n name: 'Required Manifest Fields',\n category: 'MANIFEST',\n status: 'FAIL',\n message: 'scenario_id present but invalid (must be non-empty string)',\n taxonomy: FailureTaxonomy.MANIFEST_PARSE_FAILED,\n duration_ms: Date.now() - start,\n };\n }\n }\n\n if (missing.length > 0) {\n return {\n check_id: 'MAN-FLD-001',\n name: 'Required Manifest Fields',\n category: 'MANIFEST',\n status: 'FAIL',\n message: `Missing required manifest fields: ${missing.join(', ')}`,\n taxonomy: FailureTaxonomy.MANIFEST_PARSE_FAILED,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'MAN-FLD-001',\n name: 'Required Manifest Fields',\n category: 'MANIFEST',\n status: 'PASS',\n message: 'All required manifest fields present and valid',\n duration_ms: Date.now() - start,\n };\n}\n\nasync function checkRequiredDirs(pack: PackHandle): Promise {\n const start = Date.now();\n const missing: string[] = [];\n\n for (const dir of EPC_CONSTANTS.REQUIRED_DIRS) {\n const hasDir = pack.file_inventory.some(f => f.startsWith(dir + '/'));\n if (!hasDir) {\n missing.push(dir);\n }\n }\n\n if (missing.length > 0) {\n return {\n check_id: 'ADM-STR-002',\n name: 'Required Directories',\n category: 'ADMISSION_STRUCTURE',\n status: 'FAIL',\n message: `Missing required directories: ${missing.join(', ')}`,\n taxonomy: FailureTaxonomy.REQUIRED_ARTIFACT_MISSING,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-STR-002',\n name: 'Required Directories',\n category: 'ADMISSION_STRUCTURE',\n status: 'PASS',\n message: 'All required directories present',\n duration_ms: Date.now() - start,\n };\n}\n\nasync function checkLayoutVersion(pack: PackHandle): Promise {\n const start = Date.now();\n\n if (pack.layout_version === 'unknown') {\n return {\n check_id: 'ADM-STR-003',\n name: 'Layout Version',\n category: 'ADMISSION_STRUCTURE',\n status: 'FAIL',\n message: 'Could not detect EPC layout version',\n taxonomy: FailureTaxonomy.MANIFEST_PARSE_FAILED,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'ADM-STR-003',\n name: 'Layout Version',\n category: 'ADMISSION_STRUCTURE',\n status: 'PASS',\n message: `EPC layout version: ${pack.layout_version}`,\n duration_ms: Date.now() - start,\n };\n}\n\n// =============================================================================\n// Integrity Checks\n// =============================================================================\n\nasync function runIntegrityChecks(pack: PackHandle, skipSet: Set = new Set()): Promise {\n const checks: CheckResult[] = [];\n\n // Check sha256sums.txt file verification\n checks.push(await checkSha256Sums(pack));\n\n // Check pack.sha256\n checks.push(await checkPackHash(pack));\n\n // Check coverage: all pack files must be in sha256sums.txt (C-HARD-03)\n checks.push(await checkSha256Coverage(pack));\n\n return checks;\n}\n\nasync function checkSha256Sums(pack: PackHandle): Promise {\n const start = Date.now();\n const sumsPath = path.join(pack.root_path, 'integrity/sha256sums.txt');\n\n if (!fs.existsSync(sumsPath)) {\n return {\n check_id: 'INT-001',\n name: 'SHA256 Sums File',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: 'integrity/sha256sums.txt not found',\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n\n try {\n const content = fs.readFileSync(sumsPath, 'utf-8');\n const lines = content.trim().split('\\n');\n const mismatches: string[] = [];\n\n for (const line of lines) {\n const match = line.match(/^([a-f0-9]{64})\\s+(.+)$/);\n if (!match) continue;\n\n const [, expectedHash, relativePath] = match;\n const filePath = path.join(pack.root_path, relativePath);\n\n if (!fs.existsSync(filePath)) {\n mismatches.push(`${relativePath} (missing)`);\n continue;\n }\n\n const actualHash = hashFile(filePath);\n if (actualHash !== expectedHash) {\n mismatches.push(`${relativePath} (hash mismatch)`);\n }\n }\n\n if (mismatches.length > 0) {\n return {\n check_id: 'INT-001',\n name: 'SHA256 Sums Verification',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Hash verification failed: ${mismatches.slice(0, 3).join(', ')}${mismatches.length > 3 ? '...' : ''}`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n pointers: mismatches.slice(0, 3).map(f => ({\n artifact_path: f.split(' ')[0],\n content_hash: '',\n locator: `file:${f.split(' ')[0]}`,\n requirement_id: 'EPC-§7',\n })),\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'INT-001',\n name: 'SHA256 Sums Verification',\n category: 'INTEGRITY',\n status: 'PASS',\n message: `${lines.length} files verified`,\n duration_ms: Date.now() - start,\n };\n } catch (e) {\n return {\n check_id: 'INT-001',\n name: 'SHA256 Sums Verification',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Error reading sha256sums.txt: ${e}`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n}\n\nasync function checkPackHash(pack: PackHandle): Promise {\n const start = Date.now();\n const packHashPath = path.join(pack.root_path, 'integrity/pack.sha256');\n const sumsPath = path.join(pack.root_path, 'integrity/sha256sums.txt');\n\n if (!fs.existsSync(packHashPath)) {\n return {\n check_id: 'INT-002',\n name: 'Pack Root Hash',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: 'integrity/pack.sha256 not found',\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n\n try {\n // Read expected hash\n const expectedHash = fs.readFileSync(packHashPath, 'utf-8').trim().split(/\\s/)[0];\n\n // Compute normalized hash per EPC v1.0 (B2 fix)\n const sumsContent = fs.readFileSync(sumsPath, 'utf-8');\n const normalizedSums = normalizeSha256Sums(sumsContent);\n const computedHash = hashString(normalizedSums);\n\n if (computedHash !== expectedHash) {\n return {\n check_id: 'INT-002',\n name: 'Pack Root Hash',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Pack hash mismatch: expected ${expectedHash.slice(0, 16)}..., computed ${computedHash.slice(0, 16)}...`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'INT-002',\n name: 'Pack Root Hash',\n category: 'INTEGRITY',\n status: 'PASS',\n message: `Pack root hash verified: ${computedHash.slice(0, 16)}...`,\n duration_ms: Date.now() - start,\n };\n } catch (e) {\n return {\n check_id: 'INT-002',\n name: 'Pack Root Hash',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Error verifying pack hash: ${e}`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n}\n\n/**\n * C-HARD-03: Check that all pack files are covered by sha256sums.txt\n * This prevents attacks where extra files are added but not hashed.\n */\nasync function checkSha256Coverage(pack: PackHandle): Promise {\n const start = Date.now();\n const sumsPath = path.join(pack.root_path, 'integrity/sha256sums.txt');\n\n // Files that are excluded from coverage check (per EPC §7)\n const excludedFiles = new Set([\n 'integrity/pack.sha256', // Self-reference excluded\n 'integrity/sha256sums.txt', // Self-reference\n ]);\n\n if (!fs.existsSync(sumsPath)) {\n return {\n check_id: 'INT-003',\n name: 'SHA256 Coverage',\n category: 'INTEGRITY',\n status: 'SKIP',\n message: 'sha256sums.txt not found',\n duration_ms: Date.now() - start,\n };\n }\n\n try {\n const content = fs.readFileSync(sumsPath, 'utf-8');\n const lines = content.trim().split('\\n');\n\n // Build set of files declared in sha256sums.txt\n const declaredFiles = new Set();\n for (const line of lines) {\n const match = line.match(/^[a-f0-9]{64}\\s+(.+)$/);\n if (match) {\n declaredFiles.add(match[1]);\n }\n }\n\n // Check coverage: all pack files must be in sha256sums\n const uncovered: string[] = [];\n for (const file of pack.file_inventory) {\n if (!excludedFiles.has(file) && !declaredFiles.has(file)) {\n uncovered.push(file);\n }\n }\n\n // Check orphans: all declared files must exist in pack\n const orphans: string[] = [];\n for (const declaredFile of declaredFiles) {\n if (!pack.file_inventory.includes(declaredFile)) {\n orphans.push(declaredFile);\n }\n }\n\n if (uncovered.length > 0) {\n return {\n check_id: 'INT-003',\n name: 'SHA256 Coverage',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Uncovered files: ${uncovered.slice(0, 3).join(', ')}${uncovered.length > 3 ? '...' : ''}`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n pointers: uncovered.slice(0, 3).map(f => ({\n artifact_path: f,\n content_hash: '',\n locator: `file:${f}`,\n requirement_id: 'EPC-§7',\n })),\n duration_ms: Date.now() - start,\n };\n }\n\n if (orphans.length > 0) {\n return {\n check_id: 'INT-003',\n name: 'SHA256 Coverage',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Orphan entries in sha256sums: ${orphans.slice(0, 3).join(', ')}`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n\n return {\n check_id: 'INT-003',\n name: 'SHA256 Coverage',\n category: 'INTEGRITY',\n status: 'PASS',\n message: `Coverage complete: ${pack.file_inventory.length - excludedFiles.size} files covered`,\n duration_ms: Date.now() - start,\n };\n } catch (e) {\n return {\n check_id: 'INT-003',\n name: 'SHA256 Coverage',\n category: 'INTEGRITY',\n status: 'FAIL',\n message: `Error checking coverage: ${e}`,\n taxonomy: FailureTaxonomy.INTEGRITY_HASH_MISMATCH,\n duration_ms: Date.now() - start,\n };\n }\n}\n\n/**\n * Normalize sha256sums.txt per EPC v1.0:\n * - Sort by path (lexicographic ascending)\n * - LF line endings\n * - No trailing newline\n */\nfunction normalizeSha256Sums(content: string): string {\n const lines = content.trim().split(/\\r?\\n/);\n const entries = lines\n .filter(l => l.match(/^[a-f0-9]{64}\\s+.+$/))\n .map(l => {\n const [hash, ...pathParts] = l.split(/\\s+/);\n return { hash, path: pathParts.join(' ') };\n })\n .sort((a, b) => a.path.localeCompare(b.path));\n\n return entries.map(e => `${e.hash} ${e.path}`).join('\\n');\n}\n\n// =============================================================================\n// Manifest Checks\n// =============================================================================\n\nasync function runManifestChecks(pack: PackHandle, skipSet: Set = new Set()): Promise {\n const checks: CheckResult[] = [];\n const start = Date.now();\n\n if (!pack.manifest_raw) {\n checks.push({\n check_id: 'MAN-001',\n name: 'Manifest Parse',\n category: 'MANIFEST',\n status: 'FAIL',\n message: 'Could not parse manifest.json',\n taxonomy: FailureTaxonomy.MANIFEST_PARSE_FAILED,\n duration_ms: Date.now() - start,\n });\n return checks;\n }\n\n const manifest = pack.manifest_raw;\n\n // Check required fields\n // Per Sprint v0.1 Constraint 1: scenario_id → allowlist ONLY, not required in manifest\n const requiredFields = ['pack_version', 'pack_id', 'created_at', 'protocol_version'];\n const missing = requiredFields.filter(f => !(f in manifest));\n\n if (missing.length > 0) {\n checks.push({\n check_id: 'MAN-001',\n name: 'Required Manifest Fields',\n category: 'MANIFEST',\n status: 'FAIL',\n message: `Missing required fields: ${missing.join(', ')}`,\n taxonomy: FailureTaxonomy.MANIFEST_PARSE_FAILED,\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'MAN-001',\n name: 'Required Manifest Fields',\n category: 'MANIFEST',\n status: 'PASS',\n message: 'All required fields present',\n duration_ms: Date.now() - start,\n });\n }\n\n // Check artifacts_included matches actual files\n if (manifest.artifacts_included) {\n const declared = new Set(manifest.artifacts_included);\n const actual = new Set(\n pack.file_inventory\n .filter(f => f.startsWith('artifacts/'))\n .map(f => path.basename(f, '.json'))\n );\n\n const missing = [...declared].filter(a => !actual.has(a));\n\n if (missing.length > 0) {\n checks.push({\n check_id: 'MAN-002',\n name: 'Artifacts Consistency',\n category: 'MANIFEST',\n status: 'WARN',\n message: `Declared artifacts not found: ${missing.join(', ')}`,\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'MAN-002',\n name: 'Artifacts Consistency',\n category: 'MANIFEST',\n status: 'PASS',\n message: 'Declared artifacts match actual files',\n duration_ms: Date.now() - start,\n });\n }\n }\n\n return checks;\n}\n\n// =============================================================================\n// Version Binding Checks\n// =============================================================================\n\nasync function runVersionBindingChecks(\n pack: PackHandle,\n rulesetPath: string,\n syncReportPath: string,\n skipSet: Set = new Set()\n): Promise {\n const checks: CheckResult[] = [];\n const start = Date.now();\n\n // Load ruleset manifest\n const rulesetManifestPath = path.join(rulesetPath, 'manifest.yaml');\n if (!fs.existsSync(rulesetManifestPath)) {\n checks.push({\n check_id: 'VER-001',\n name: 'Ruleset Manifest',\n category: 'VERSION_BINDING',\n status: 'SKIP',\n message: `Ruleset manifest not found: ${rulesetManifestPath}`,\n duration_ms: Date.now() - start,\n });\n return checks;\n }\n\n // Load SYNC_REPORT.json\n if (!fs.existsSync(syncReportPath)) {\n checks.push({\n check_id: 'VER-002',\n name: 'Sync Report',\n category: 'VERSION_BINDING',\n status: 'SKIP',\n message: `SYNC_REPORT.json not found: ${syncReportPath}`,\n duration_ms: Date.now() - start,\n });\n return checks;\n }\n\n try {\n const syncReport = JSON.parse(fs.readFileSync(syncReportPath, 'utf-8'));\n const rulesetManifestContent = fs.readFileSync(rulesetManifestPath, 'utf-8');\n\n // Parse ruleset manifest (simple YAML parsing for key fields)\n // Note: These are under \"protocol:\" section in manifest\n const rulesetSchemaHash = extractYamlValue(rulesetManifestContent, 'schemas_bundle_sha256');\n const rulesetInvariantHash = extractYamlValue(rulesetManifestContent, 'invariants_bundle_sha256');\n // protocol.version is nested, but our simple extractor will find it\n const rulesetProtocolVersion = extractYamlNestedValue(rulesetManifestContent, 'protocol', 'version');\n\n // SYNC_REPORT has integrity.* structure\n const syncSchemaHash = syncReport.integrity?.schemas_bundle_sha256;\n const syncInvariantHash = syncReport.integrity?.invariants_bundle_sha256;\n\n // VER-001: Sync Report valid\n const upstreamCommit = syncReport.upstream_commit;\n checks.push({\n check_id: 'VER-001',\n name: 'Sync Report Loaded',\n category: 'VERSION_BINDING',\n status: 'PASS',\n message: upstreamCommit\n ? `Upstream commit: ${upstreamCommit.slice(0, 8)}...`\n : 'Upstream commit: not_bound (optional in v1.0)',\n duration_ms: Date.now() - start,\n });\n\n // VER-002: Protocol version present in pack\n if (pack.manifest_raw?.protocol_version) {\n checks.push({\n check_id: 'VER-002',\n name: 'Protocol Version Present',\n category: 'VERSION_BINDING',\n status: 'PASS',\n message: `Pack protocol version: ${pack.manifest_raw.protocol_version}`,\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'VER-002',\n name: 'Protocol Version Present',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'Pack manifest missing protocol_version',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n }\n\n // VER-003: Schemas bundle hash binding (C-HARD-02) - REQUIRED\n if (!rulesetSchemaHash) {\n checks.push({\n check_id: 'VER-003',\n name: 'Schemas Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'Ruleset manifest missing schemas_bundle_sha256',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n } else if (!syncSchemaHash) {\n checks.push({\n check_id: 'VER-003',\n name: 'Schemas Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'SYNC_REPORT missing integrity.schemas_bundle_sha256',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n } else if (rulesetSchemaHash === syncSchemaHash) {\n checks.push({\n check_id: 'VER-003',\n name: 'Schemas Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'PASS',\n message: `Schemas hash: ${rulesetSchemaHash.slice(0, 16)}...`,\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'VER-003',\n name: 'Schemas Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: `Schemas hash mismatch: ruleset=${rulesetSchemaHash.slice(0, 16)}... sync=${syncSchemaHash.slice(0, 16)}...`,\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n }\n\n // VER-004: Invariants bundle hash binding (C-HARD-02) - REQUIRED\n if (!rulesetInvariantHash) {\n checks.push({\n check_id: 'VER-004',\n name: 'Invariants Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'Ruleset manifest missing invariants_bundle_sha256',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n } else if (!syncInvariantHash) {\n checks.push({\n check_id: 'VER-004',\n name: 'Invariants Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'SYNC_REPORT missing integrity.invariants_bundle_sha256',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n } else if (rulesetInvariantHash === syncInvariantHash) {\n checks.push({\n check_id: 'VER-004',\n name: 'Invariants Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'PASS',\n message: `Invariants hash: ${rulesetInvariantHash.slice(0, 16)}...`,\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'VER-004',\n name: 'Invariants Bundle Hash',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: `Invariants hash mismatch: ruleset=${rulesetInvariantHash.slice(0, 16)}... sync=${syncInvariantHash.slice(0, 16)}...`,\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n }\n\n // VER-005: Protocol Version Binding (C-HARD-04) - REQUIRED\n // Ruleset protocol.version must match pack protocol_version\n const packProtocolVersion = pack.manifest_raw?.protocol_version;\n if (!rulesetProtocolVersion) {\n checks.push({\n check_id: 'VER-005',\n name: 'Protocol Version Binding',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'Ruleset manifest missing protocol.version',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n } else if (!packProtocolVersion) {\n checks.push({\n check_id: 'VER-005',\n name: 'Protocol Version Binding',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: 'Pack missing protocol_version for binding check',\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n } else if (rulesetProtocolVersion === packProtocolVersion) {\n checks.push({\n check_id: 'VER-005',\n name: 'Protocol Version Binding',\n category: 'VERSION_BINDING',\n status: 'PASS',\n message: `Protocol versions match: ${rulesetProtocolVersion}`,\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'VER-005',\n name: 'Protocol Version Binding',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: `Protocol version mismatch: ruleset=${rulesetProtocolVersion} pack=${packProtocolVersion}`,\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n }\n\n } catch (e) {\n checks.push({\n check_id: 'VER-001',\n name: 'Version Binding Parse',\n category: 'VERSION_BINDING',\n status: 'FAIL',\n message: `Error parsing version binding files: ${e}`,\n taxonomy: FailureTaxonomy.VERSION_BINDING_FAILED,\n duration_ms: Date.now() - start,\n });\n }\n\n return checks;\n}\n\n/**\n * Simple YAML value extractor (avoids full YAML parser dependency)\n */\nfunction extractYamlValue(content: string, key: string): string | null {\n const regex = new RegExp(`${key}:\\\\s*[\"']?([^\"'\\\\n]+)[\"']?`);\n const match = content.match(regex);\n return match ? match[1].trim() : null;\n}\n\n/**\n * Extract nested YAML value (e.g., protocol.version from \"protocol:\\n version: 1.0\")\n * Simple approach: find parent key, then find child key in subsequent indented lines\n */\nfunction extractYamlNestedValue(content: string, parent: string, child: string): string | null {\n const lines = content.split('\\n');\n let inParent = false;\n\n for (const line of lines) {\n // Check if this is the parent key\n if (line.match(new RegExp(`^${parent}:\\\\s*$`))) {\n inParent = true;\n continue;\n }\n\n // If we're in parent section and line is indented\n if (inParent) {\n if (line.match(/^\\s+\\w/)) {\n // Check for child key\n const childMatch = line.match(new RegExp(`^\\\\s+${child}:\\\\s*[\"']?([^\"'\\\\n]+)[\"']?`));\n if (childMatch) {\n return childMatch[1].trim();\n }\n } else if (line.match(/^\\w/)) {\n // New top-level key, exit parent section\n inParent = false;\n }\n }\n }\n return null;\n}\n\n// =============================================================================\n// Timeline Checks\n// =============================================================================\n\nasync function runTimelineChecks(pack: PackHandle): Promise {\n const checks: CheckResult[] = [];\n const start = Date.now();\n\n const eventsPath = path.join(pack.root_path, 'timeline/events.ndjson');\n\n if (!fs.existsSync(eventsPath)) {\n checks.push({\n check_id: 'TL-001',\n name: 'Timeline File',\n category: 'TIMELINE',\n status: 'SKIP',\n message: 'timeline/events.ndjson not found',\n duration_ms: Date.now() - start,\n });\n return checks;\n }\n\n try {\n const content = fs.readFileSync(eventsPath, 'utf-8');\n const lines = content.trim().split('\\n').filter(l => l.trim());\n\n if (lines.length === 0) {\n checks.push({\n check_id: 'TL-001',\n name: 'Timeline Events',\n category: 'TIMELINE',\n status: 'WARN',\n message: 'Timeline is empty',\n duration_ms: Date.now() - start,\n });\n return checks;\n }\n\n // Parse events and check order\n const events: Array<{ timestamp: string; event_id: string; line: number }> = [];\n const parseErrors: number[] = [];\n\n for (let i = 0; i < lines.length; i++) {\n try {\n const event = JSON.parse(lines[i]);\n events.push({\n timestamp: event.timestamp || '',\n event_id: event.event_id || '',\n line: i + 1,\n });\n } catch {\n parseErrors.push(i + 1);\n }\n }\n\n if (parseErrors.length > 0) {\n checks.push({\n check_id: 'TL-001',\n name: 'Timeline Parse',\n category: 'TIMELINE',\n status: 'FAIL',\n message: `JSON parse errors at lines: ${parseErrors.slice(0, 5).join(', ')}`,\n taxonomy: FailureTaxonomy.TIMELINE_PARSE_FAILED,\n duration_ms: Date.now() - start,\n });\n return checks;\n }\n\n // Check total order (timestamp primary, event_id secondary)\n const orderViolations: number[] = [];\n\n for (let i = 1; i < events.length; i++) {\n const prev = events[i - 1];\n const curr = events[i];\n\n if (curr.timestamp < prev.timestamp) {\n orderViolations.push(curr.line);\n } else if (curr.timestamp === prev.timestamp && curr.event_id < prev.event_id) {\n orderViolations.push(curr.line);\n }\n }\n\n if (orderViolations.length > 0) {\n checks.push({\n check_id: 'TL-002',\n name: 'Timeline Total Order',\n category: 'TIMELINE',\n status: 'FAIL',\n message: `Order violations at lines: ${orderViolations.slice(0, 5).join(', ')}`,\n taxonomy: FailureTaxonomy.TIMELINE_NOT_TOTALLY_ORDERED,\n pointers: orderViolations.slice(0, 3).map(l => ({\n artifact_path: 'timeline/events.ndjson',\n content_hash: '',\n locator: `ndjson:timeline/events.ndjson#${l - 1}`,\n requirement_id: 'EPC-§5',\n })),\n duration_ms: Date.now() - start,\n });\n } else {\n checks.push({\n check_id: 'TL-002',\n name: 'Timeline Total Order',\n category: 'TIMELINE',\n status: 'PASS',\n message: `${events.length} events in total order`,\n duration_ms: Date.now() - start,\n });\n }\n } catch (e) {\n checks.push({\n check_id: 'TL-001',\n name: 'Timeline Read',\n category: 'TIMELINE',\n status: 'FAIL',\n message: `Error reading timeline: ${e}`,\n taxonomy: FailureTaxonomy.TIMELINE_PARSE_FAILED,\n duration_ms: Date.now() - start,\n });\n }\n\n return checks;\n}\n\n// =============================================================================\n// Hash Computation\n// =============================================================================\n\nasync function computeHashes(pack: PackHandle, syncReportPath: string): Promise {\n let packRootHash = '';\n let manifestHash = '';\n let schemasBundleHash = '';\n let invariantsBundleHash = '';\n\n // Pack root hash\n const sumsPath = path.join(pack.root_path, 'integrity/sha256sums.txt');\n if (fs.existsSync(sumsPath)) {\n const content = fs.readFileSync(sumsPath, 'utf-8');\n packRootHash = hashString(normalizeSha256Sums(content));\n }\n\n // Manifest hash\n const manifestPath = path.join(pack.root_path, 'manifest.json');\n if (fs.existsSync(manifestPath)) {\n manifestHash = hashFile(manifestPath);\n }\n\n // Bundle hashes from SYNC_REPORT (prefer integrity.*, fallback to root for legacy)\n if (fs.existsSync(syncReportPath)) {\n try {\n const syncReport = JSON.parse(fs.readFileSync(syncReportPath, 'utf-8'));\n // Primary: integrity.* (current format)\n // Fallback: root level (legacy compatibility)\n schemasBundleHash = syncReport.integrity?.schemas_bundle_sha256\n || syncReport.schemas_bundle_sha256\n || '';\n invariantsBundleHash = syncReport.integrity?.invariants_bundle_sha256\n || syncReport.invariants_bundle_sha256\n || '';\n } catch {\n // Ignore parse errors\n }\n }\n\n return {\n pack_root_hash: packRootHash,\n manifest_hash: manifestHash,\n schemas_bundle_hash: schemasBundleHash,\n invariants_bundle_hash: invariantsBundleHash,\n };\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/evaluate/evaluate.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":208,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":208,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":428,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":428,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":476,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":476,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":555,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":555,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Phase D: Evaluation Engine\n * \n * Evaluates evidence pack against Golden Flow requirements.\n * Only runs after passing Admission (GATE-02).\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { PackHandle, VerificationReport } from '../engine/types';\nimport { EvidencePointer } from '../verdict/types';\nimport { FailureTaxonomy } from '../verdict/taxonomy';\nimport { loadYamlStrict, validateRequiredFields, sanitizePath } from '../utils/yaml-loader';\nimport {\n makeFilePointer,\n makeMissingEvidencePointer,\n makeJsonPointer,\n makeNdjsonLinePointer,\n sortPointers\n} from '../verdict/pointer';\nimport { computeVerdictHash } from '../verdict/canonicalize';\nimport {\n EvaluationReport,\n EvaluateOptions,\n GFVerdict,\n RequirementVerdict,\n EvaluationFailure,\n RulesetManifest,\n GFDefinition,\n RequirementDefinition,\n RULESET_VALIDATION_ERRORS,\n} from './types';\n\n// =============================================================================\n// Main Evaluation Function\n// =============================================================================\n\n/**\n * Evaluate an evidence pack against Golden Flow requirements.\n * \n * @param pack PackHandle from ingest()\n * @param verifyReport VerificationReport from verify()\n * @param options Evaluation options\n * @returns EvaluationReport\n */\nexport async function evaluate(\n pack: PackHandle,\n verifyReport: VerificationReport,\n options: EvaluateOptions\n): Promise {\n const startTime = Date.now();\n\n // GATE-02: Admission check (User requirement: NOT_ADMISSIBLE → no evaluate)\n if (verifyReport.admission_status !== 'ADMISSIBLE') {\n return createNotEvaluatedReport(\n pack,\n verifyReport,\n options.ruleset_version,\n 'Admission failed: pack is NOT_ADMISSIBLE'\n );\n }\n\n // Load ruleset\n const basePath = options.rulesets_base_path || path.resolve(__dirname, '../../data/rulesets');\n const rulesetPath = path.join(basePath, options.ruleset_version);\n\n let manifest: RulesetManifest;\n try {\n manifest = loadRulesetManifest(rulesetPath);\n } catch (e) {\n return createNotEvaluatedReport(\n pack,\n verifyReport,\n options.ruleset_version,\n `Ruleset load failed: ${e instanceof Error ? e.message : String(e)}`\n );\n }\n\n // Validate ruleset closure (User HARD-03)\n try {\n validateRulesetClosure(rulesetPath, manifest);\n } catch (e) {\n return createNotEvaluatedReport(\n pack,\n verifyReport,\n options.ruleset_version,\n `Ruleset validation failed: ${e instanceof Error ? e.message : String(e)}`\n );\n }\n\n // Evaluate each Golden Flow\n const gfFilter = new Set(options.gf_filter || manifest.golden_flows);\n const gfVerdicts: GFVerdict[] = [];\n\n for (const gfId of manifest.golden_flows) {\n if (!gfFilter.has(gfId)) {\n continue; // Skip if not in filter\n }\n\n const gfVerdict = await evaluateGoldenFlow(pack, rulesetPath, gfId);\n gfVerdicts.push(gfVerdict);\n }\n\n // Build report (without verdict_hash yet)\n const report: EvaluationReport = {\n report_version: '1.0',\n ruleset_version: options.ruleset_version,\n pack_id: pack.manifest_raw?.pack_id || 'unknown',\n pack_root_hash: verifyReport.hashes.pack_root_hash, // User HARD-06: same source\n protocol_version: verifyReport.protocol_version || '',\n gf_verdicts: gfVerdicts,\n verdict_hash: '', // Computed below\n evaluated_at: new Date().toISOString(),\n total_duration_ms: Date.now() - startTime,\n };\n\n // Compute deterministic verdict hash (D4)\n report.verdict_hash = computeVerdictHash(report);\n\n return report;\n}\n\n// =============================================================================\n// Ruleset Loading (D1 + User HARD-03)\n// =============================================================================\n\nfunction loadRulesetManifest(rulesetPath: string): RulesetManifest {\n const manifestPath = path.join(rulesetPath, 'manifest.yaml');\n const manifest = loadYamlStrict(manifestPath);\n\n validateRequiredFields(manifest, [\n 'id', 'version', 'name', 'status', 'protocol', 'golden_flows'\n ], 'ruleset manifest');\n\n validateRequiredFields(manifest.protocol, [\n 'version', 'upstream_commit', 'schemas_bundle_sha256', 'invariants_bundle_sha256'\n ], 'ruleset manifest.protocol');\n\n return manifest;\n}\n\n/**\n * Validate ruleset closure per User HARD-03.\n * - All manifest.golden_flows must have requirements files\n * - No orphan requirements files\n * - gf_id in file must match filename\n */\nfunction validateRulesetClosure(rulesetPath: string, manifest: RulesetManifest): void {\n const reqsPath = path.join(rulesetPath, 'requirements');\n\n // Check requirements directory exists\n if (!fs.existsSync(reqsPath)) {\n throw new Error(\n `${RULESET_VALIDATION_ERRORS.MISSING_GF_FILE}: requirements directory not found`\n );\n }\n\n // Check all declared GFs have files\n for (const gfId of manifest.golden_flows) {\n const gfFile = path.join(reqsPath, `${gfId}.yaml`);\n if (!fs.existsSync(gfFile)) {\n throw new Error(\n `${RULESET_VALIDATION_ERRORS.MISSING_GF_FILE}: ${gfId}.yaml`\n );\n }\n }\n\n // Check for orphan files\n const declaredGFs = new Set(manifest.golden_flows);\n const files = fs.readdirSync(reqsPath).filter(f => f.endsWith('.yaml'));\n\n for (const file of files) {\n const gfId = file.replace('.yaml', '');\n if (!declaredGFs.has(gfId)) {\n throw new Error(\n `${RULESET_VALIDATION_ERRORS.UNDECLARED_GF_FILE}: ${file}`\n );\n }\n }\n\n // Validate gf_id matches filename\n for (const gfId of manifest.golden_flows) {\n const gfFile = path.join(reqsPath, `${gfId}.yaml`);\n const gfDef = loadYamlStrict(gfFile);\n\n if (gfDef.gf_id !== gfId) {\n throw new Error(\n `${RULESET_VALIDATION_ERRORS.GF_ID_MISMATCH}: file ${gfId}.yaml has gf_id=\"${gfDef.gf_id}\"`\n );\n }\n }\n}\n\n// =============================================================================\n// Golden Flow Evaluation\n// =============================================================================\n\nasync function evaluateGoldenFlow(\n pack: PackHandle,\n rulesetPath: string,\n gfId: string\n): Promise {\n const reqsPath = path.join(rulesetPath, 'requirements', `${gfId}.yaml`);\n\n let gfDef: GFDefinition;\n try {\n gfDef = loadYamlStrict(reqsPath);\n } catch (e) {\n return {\n gf_id: gfId,\n status: 'NOT_EVALUATED',\n requirements: [],\n failures: [{\n taxonomy: FailureTaxonomy.RULESET_INVALID,\n message: `Failed to load GF definition: ${sanitizePath(reqsPath)}`,\n pointers: [],\n }],\n };\n }\n\n const requirements: RequirementVerdict[] = [];\n const failures: EvaluationFailure[] = [];\n\n for (const reqDef of gfDef.requirements) {\n const verdict = evaluateRequirement(pack, reqDef);\n requirements.push(verdict);\n\n // Phase D: failures only collects FAIL (not NOT_EVALUATED)\n // NOT_EVALUATED from recommended/optional goes to requirements[] but not failures[]\n if (verdict.status === 'FAIL') {\n failures.push({\n taxonomy: verdict.taxonomy || FailureTaxonomy.REQUIREMENT_EVIDENCE_MISSING,\n message: verdict.message,\n pointers: verdict.pointers,\n requirement_id: verdict.requirement_id,\n });\n }\n }\n\n // Blocker1: Severity-aware GF status aggregation\n // Filter requirements by severity for status determination\n const requiredReqs = requirements.filter((r, i) => gfDef.requirements[i].severity === 'required');\n const recommendedReqs = requirements.filter((r, i) => gfDef.requirements[i].severity === 'recommended');\n // Optional requirements do NOT participate in GF status\n\n const hasRequiredFail = requiredReqs.some(r => r.status === 'FAIL');\n const hasRecommendedNotEvaluated = recommendedReqs.some(r => r.status === 'NOT_EVALUATED');\n\n let status: 'PASS' | 'FAIL' | 'NOT_EVALUATED';\n if (hasRequiredFail) {\n status = 'FAIL';\n } else if (hasRecommendedNotEvaluated) {\n status = 'NOT_EVALUATED';\n } else {\n status = 'PASS';\n }\n\n return {\n gf_id: gfId,\n status,\n requirements,\n failures,\n };\n}\n\n// =============================================================================\n// Requirement Evaluation\n// =============================================================================\n\nfunction evaluateRequirement(\n pack: PackHandle,\n reqDef: RequirementDefinition\n): RequirementVerdict {\n const evidence = reqDef.evidence;\n const artifactPath = evidence.artifact;\n\n // Blocker2: Security check - prevent path traversal in artifact paths\n if (!isPathSafe(artifactPath)) {\n return {\n requirement_id: reqDef.id,\n status: 'FAIL',\n pointers: [makeMissingEvidencePointer(artifactPath, reqDef.id, 'Path traversal detected')],\n message: `Invalid artifact path (security): ${artifactPath}`,\n taxonomy: FailureTaxonomy.REQUIREMENT_EVIDENCE_INVALID,\n };\n }\n\n const fullPath = safeJoinPath(pack.root_path, artifactPath);\n\n // Security: verify resolved path is within pack root\n if (!fullPath) {\n return {\n requirement_id: reqDef.id,\n status: 'FAIL',\n pointers: [makeMissingEvidencePointer(artifactPath, reqDef.id, 'Path outside pack root')],\n message: `Artifact path escapes pack root: ${artifactPath}`,\n taxonomy: FailureTaxonomy.REQUIREMENT_EVIDENCE_INVALID,\n };\n }\n\n // Check file exists\n if (!fs.existsSync(fullPath)) {\n // Blocker1: Severity-aware handling\n if (reqDef.severity === 'optional') {\n // Optional: missing = NOT_EVALUATED, does not affect GF status\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [makeMissingEvidencePointer(artifactPath, reqDef.id)],\n message: `Optional evidence not present: ${artifactPath}`,\n // No taxonomy = informational only\n };\n }\n\n if (reqDef.severity === 'recommended') {\n // Recommended: missing = NOT_EVALUATED, may affect GF but not FAIL\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [makeMissingEvidencePointer(artifactPath, reqDef.id)],\n message: `Recommended evidence not present: ${artifactPath}`,\n };\n }\n\n // Required: missing = FAIL\n return {\n requirement_id: reqDef.id,\n status: 'FAIL',\n pointers: [makeMissingEvidencePointer(artifactPath, reqDef.id)],\n message: `Required evidence missing: ${artifactPath}`,\n taxonomy: FailureTaxonomy.REQUIREMENT_EVIDENCE_MISSING,\n };\n }\n\n // Evidence type-specific checks (pass validated fullPath)\n switch (evidence.type) {\n case 'file':\n return evaluateFileEvidence(fullPath, reqDef, artifactPath);\n\n case 'json_pointer':\n return evaluateJsonPointerEvidence(fullPath, reqDef, artifactPath, evidence.locator || '');\n\n case 'ndjson_line':\n return evaluateNdjsonEvidence(fullPath, reqDef, artifactPath, evidence.locator);\n\n case 'cross_ref':\n // Cross-reference checks are Phase D+ feature\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [makeFilePointer(artifactPath, reqDef.id)],\n message: 'Cross-reference checks not yet implemented',\n };\n\n default:\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [makeFilePointer(artifactPath, reqDef.id)],\n message: `Unknown evidence type: ${evidence.type}`,\n };\n }\n}\n\n/**\n * Severity-aware failure helper.\n * Returns NOT_EVALUATED for optional/recommended, FAIL for required.\n * \n * === PHASE D FROZEN POLICY ===\n * | Severity | Missing | Invalid | Affects GF? |\n * |-------------|--------------|--------------|-----------------| \n * | required | FAIL | FAIL | GF → FAIL |\n * | recommended | NOT_EVALUATED| NOT_EVALUATED| GF → NOT_EVAL |\n * | optional | NOT_EVALUATED| NOT_EVALUATED| No (excluded) |\n * ============================\n */\nfunction createSeverityAwareFailure(\n reqDef: RequirementDefinition,\n artifactPath: string,\n message: string,\n pointer: EvidencePointer\n): RequirementVerdict {\n // Blocker B: Severity Policy for invalid evidence\n // - required invalid → FAIL\n // - recommended invalid → NOT_EVALUATED\n // - optional invalid → NOT_EVALUATED\n if (reqDef.severity === 'required') {\n return {\n requirement_id: reqDef.id,\n status: 'FAIL',\n pointers: [pointer],\n message,\n taxonomy: FailureTaxonomy.REQUIREMENT_EVIDENCE_INVALID,\n };\n }\n\n // recommended or optional: NOT_EVALUATED (not FAIL)\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [pointer],\n message: `[${reqDef.severity}] ${message}`,\n };\n}\n\nfunction evaluateFileEvidence(\n fullPath: string, // Blocker A: use validated fullPath\n reqDef: RequirementDefinition,\n artifactPath: string\n): RequirementVerdict {\n try {\n const stat = fs.statSync(fullPath);\n if (stat.size === 0) {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `Evidence file is empty: ${artifactPath}`,\n makeFilePointer(artifactPath, reqDef.id, 'File is empty')\n );\n }\n\n return {\n requirement_id: reqDef.id,\n status: 'PASS',\n pointers: [makeFilePointer(artifactPath, reqDef.id)],\n message: `Evidence present: ${artifactPath}`,\n };\n } catch (e) {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `Evidence file read error: ${artifactPath}`,\n makeFilePointer(artifactPath, reqDef.id)\n );\n }\n}\n\nfunction evaluateJsonPointerEvidence(\n fullPath: string, // Blocker A: use validated fullPath\n reqDef: RequirementDefinition,\n artifactPath: string,\n jsonPointer: string\n): RequirementVerdict {\n try {\n const content = fs.readFileSync(fullPath, 'utf-8');\n const data = JSON.parse(content);\n\n // Simple JSON pointer resolution\n const value = resolveSimpleJsonPointer(data, jsonPointer);\n\n if (value === undefined) {\n // Pointer not found is semantic MISSING (not INVALID)\n if (reqDef.severity === 'required') {\n return {\n requirement_id: reqDef.id,\n status: 'FAIL',\n pointers: [makeJsonPointer(artifactPath, jsonPointer, reqDef.id)],\n message: `JSON pointer not found: ${jsonPointer}`,\n taxonomy: FailureTaxonomy.REQUIREMENT_EVIDENCE_MISSING,\n };\n }\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [makeJsonPointer(artifactPath, jsonPointer, reqDef.id)],\n message: `[${reqDef.severity}] JSON pointer not found: ${jsonPointer}`,\n };\n }\n\n return {\n requirement_id: reqDef.id,\n status: 'PASS',\n pointers: [makeJsonPointer(artifactPath, jsonPointer, reqDef.id)],\n message: `Evidence found at: ${jsonPointer}`,\n };\n } catch (e) {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `JSON parse error in ${artifactPath}`,\n makeJsonPointer(artifactPath, jsonPointer, reqDef.id)\n );\n }\n}\n\nfunction evaluateNdjsonEvidence(\n fullPath: string, // Blocker A: use validated fullPath\n reqDef: RequirementDefinition,\n artifactPath: string,\n locator?: string\n): RequirementVerdict {\n try {\n const content = fs.readFileSync(fullPath, 'utf-8');\n const lines = content.split('\\n').filter(l => l.trim());\n\n if (lines.length === 0) {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `NDJSON file is empty: ${artifactPath}`,\n makeFilePointer(artifactPath, reqDef.id)\n );\n }\n\n // If specific line requested\n if (locator) {\n const lineIndex = parseInt(locator, 10);\n // Blocker4: Handle NaN separately from out-of-range\n if (isNaN(lineIndex)) {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `NDJSON locator is not a valid number: ${locator}`,\n makeFilePointer(artifactPath, reqDef.id, `Invalid locator: ${locator}`)\n );\n }\n if (lineIndex < 0 || lineIndex >= lines.length) {\n // Line not found = MISSING semantic\n if (reqDef.severity === 'required') {\n return {\n requirement_id: reqDef.id,\n status: 'FAIL',\n pointers: [makeNdjsonLinePointer(artifactPath, lineIndex, reqDef.id)],\n message: `NDJSON line not found: ${locator}`,\n taxonomy: FailureTaxonomy.REQUIREMENT_EVIDENCE_MISSING,\n };\n }\n return {\n requirement_id: reqDef.id,\n status: 'NOT_EVALUATED',\n pointers: [makeNdjsonLinePointer(artifactPath, lineIndex, reqDef.id)],\n message: `[${reqDef.severity}] NDJSON line not found: ${locator}`,\n };\n }\n\n // Validate line is valid JSON\n try {\n JSON.parse(lines[lineIndex]);\n } catch {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `NDJSON line ${lineIndex} is invalid JSON`,\n makeNdjsonLinePointer(artifactPath, lineIndex, reqDef.id)\n );\n }\n }\n\n return {\n requirement_id: reqDef.id,\n status: 'PASS',\n pointers: [makeFilePointer(artifactPath, reqDef.id)],\n message: `NDJSON evidence present: ${lines.length} lines`,\n };\n } catch (e) {\n return createSeverityAwareFailure(\n reqDef,\n artifactPath,\n `NDJSON read error: ${artifactPath}`,\n makeFilePointer(artifactPath, reqDef.id)\n );\n }\n}\n\n// =============================================================================\n// Helpers\n// =============================================================================\n\nfunction resolveSimpleJsonPointer(obj: unknown, pointer: string): unknown {\n if (!pointer || pointer === '/') {\n return obj;\n }\n\n const parts = pointer.replace(/^\\//, '').split('/');\n let current: unknown = obj;\n\n for (const part of parts) {\n const key = part.replace(/~1/g, '/').replace(/~0/g, '~');\n\n if (current === null || current === undefined) {\n return undefined;\n }\n\n if (Array.isArray(current)) {\n const index = parseInt(key, 10);\n if (isNaN(index) || index < 0 || index >= current.length) {\n return undefined;\n }\n current = current[index];\n } else if (typeof current === 'object') {\n current = (current as Record)[key];\n } else {\n return undefined;\n }\n }\n\n return current;\n}\n\nfunction createNotEvaluatedReport(\n pack: PackHandle,\n verifyReport: VerificationReport,\n rulesetVersion: string,\n reason: string\n): EvaluationReport {\n const report: EvaluationReport = {\n report_version: '1.0',\n ruleset_version: rulesetVersion,\n pack_id: pack.manifest_raw?.pack_id || 'unknown',\n pack_root_hash: verifyReport.hashes.pack_root_hash,\n protocol_version: verifyReport.protocol_version || '',\n gf_verdicts: [],\n verdict_hash: '',\n evaluated_at: new Date().toISOString(),\n };\n\n // Blocker3: GLOBAL failure must have pointers for audit trail\n // Aggregate blocking failures from verify report if available\n const globalPointers: EvidencePointer[] = [];\n if (verifyReport.blocking_failures && verifyReport.blocking_failures.length > 0) {\n for (const bf of verifyReport.blocking_failures.slice(0, 5)) {\n globalPointers.push(...(bf.pointers || []));\n }\n }\n // If no pointers from blocking failures, add ruleset/manifest pointer\n if (globalPointers.length === 0) {\n globalPointers.push(makeFilePointer(\n `data/rulesets/${rulesetVersion}/manifest.yaml`,\n 'GLOBAL',\n reason\n ));\n }\n\n report.gf_verdicts.push({\n gf_id: 'GLOBAL',\n status: 'NOT_EVALUATED',\n requirements: [],\n failures: [{\n taxonomy: FailureTaxonomy.ADMISSION_FAILED,\n message: reason,\n pointers: sortPointers(globalPointers),\n }],\n });\n\n report.verdict_hash = computeVerdictHash(report);\n return report;\n}\n\n// =============================================================================\n// Security Helpers (Blocker2)\n// =============================================================================\n\n/**\n * Check if artifact path is safe (no traversal, no absolute paths).\n */\nfunction isPathSafe(artifactPath: string): boolean {\n if (!artifactPath) return false;\n\n // Reject absolute paths\n if (artifactPath.startsWith('/') || /^[A-Za-z]:/.test(artifactPath)) {\n return false;\n }\n\n // Reject path traversal\n if (artifactPath.includes('..')) {\n return false;\n }\n\n // Reject backslashes (Windows path separator)\n if (artifactPath.includes('\\\\')) {\n return false;\n }\n\n return true;\n}\n\n/**\n * Safely join paths and verify result is within root.\n * Returns null if path escapes root.\n */\nfunction safeJoinPath(root: string, relative: string): string | null {\n const resolved = path.resolve(root, relative);\n const normalizedRoot = path.resolve(root) + path.sep;\n\n if (!resolved.startsWith(normalizedRoot) && resolved !== path.resolve(root)) {\n return null;\n }\n\n return resolved;\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/evaluate/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/evidence/canonptr.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/evidence/extract.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/evidence/resolve.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/evidence/synonyms.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/export/loadJson.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/_shared/report.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/_shared/scan.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/_shared/surface.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-02-admission.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-03-determinism.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-04-language.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-05-no-exec-hosting.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-06-robots-policy.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-07-pii-leak.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-08-curated-immutability.ts","messages":[],"suppressedMessages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":71,"column":48,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":71,"endColumn":51,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2192,2195],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2192,2195],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}],"suppressions":[{"kind":"directive","justification":""}]}],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-09-ssot-projection.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-10-curated-invariants.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-11-reverify-required.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-12-export-consistency.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-14-adjudication-consistency.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'readdirSync' is defined but never used. Allowed unused vars must match /^_/u.","line":12,"column":36,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":47},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ADJUDICATION_DIR' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":45,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":45,"endColumn":23},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'err' is defined but never used.","line":201,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":201,"endColumn":25}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Gate 14: Adjudication Consistency\n * \n * Validates that the adjudication-index and all referenced bundles are:\n * 1. Structurally complete (7 files per bundle)\n * 2. Integrity sealed (sha256sums match)\n * 3. Deterministically consistent (verdict_hash reproducible)\n * \n * GOVERNANCE: This gate enforces the adjudication contract.\n */\n\nimport { readFileSync, existsSync, readdirSync } from 'fs';\nimport { join } from 'path';\nimport * as crypto from 'crypto';\nimport { computeDeterministicHash } from '../adjudication/deterministicHash';\n\n// =============================================================================\n// Types\n// =============================================================================\n\ninterface AdjudicationEntry {\n run_id: string;\n bundle_path: string;\n verdict_path: string;\n verdict_hash: string;\n overall_status: string;\n}\n\ninterface GateResult {\n gate_id: string;\n status: 'PASS' | 'FAIL' | 'SKIP';\n message: string;\n details?: {\n checks_passed: number;\n checks_failed: number;\n failures: string[];\n };\n}\n\n// =============================================================================\n// Helpers\n// =============================================================================\n\nconst VLAB_ROOT = join(__dirname, '../..');\nconst ADJUDICATION_DIR = join(VLAB_ROOT, 'adjudication');\nconst EXPORT_DIR = join(VLAB_ROOT, 'export');\n\nconst REQUIRED_BUNDLE_FILES = [\n 'input.pointer.json',\n 'verifier.identity.json',\n 'verifier.fingerprint.json',\n 'verify.report.json',\n 'evaluate.report.json',\n 'verdict.json',\n 'sha256sums.txt',\n];\n\nconst VALID_OVERALL_STATUSES = ['ADJUDICATED', 'INCOMPLETE', 'NOT_ADMISSIBLE'];\n\nfunction hashFile(filePath: string): string {\n const content = readFileSync(filePath);\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction loadJson(filePath: string): unknown {\n return JSON.parse(readFileSync(filePath, 'utf-8'));\n}\n\n// =============================================================================\n// Main Gate Logic\n// =============================================================================\n\nasync function runGate14(): Promise {\n const failures: string[] = [];\n let checksPass = 0;\n let checksFail = 0;\n\n // Check 1: adjudication-index.json exists in export\n const indexPath = join(EXPORT_DIR, 'adjudication-index.json');\n if (!existsSync(indexPath)) {\n return {\n gate_id: 'gate-14-adjudication-consistency',\n status: 'SKIP',\n message: 'export/adjudication-index.json not found (no adjudications to verify)',\n };\n }\n checksPass++;\n\n // Check 2: adjudication-index.json is valid JSON\n let adjudicationIndex: { adjudications: AdjudicationEntry[] };\n try {\n adjudicationIndex = loadJson(indexPath) as { adjudications: AdjudicationEntry[] };\n checksPass++;\n } catch (err) {\n return {\n gate_id: 'gate-14-adjudication-consistency',\n status: 'FAIL',\n message: `Failed to parse adjudication-index.json: ${(err as Error).message}`,\n };\n }\n\n if (!adjudicationIndex.adjudications || adjudicationIndex.adjudications.length === 0) {\n return {\n gate_id: 'gate-14-adjudication-consistency',\n status: 'PASS',\n message: 'No adjudications in index (vacuously consistent)',\n details: { checks_passed: checksPass, checks_failed: 0, failures: [] },\n };\n }\n\n // Check 3-N: Validate each adjudication bundle\n for (const entry of adjudicationIndex.adjudications) {\n const bundlePath = join(VLAB_ROOT, entry.bundle_path.replace(/\\/$/, ''));\n\n // Check: Bundle directory exists\n if (!existsSync(bundlePath)) {\n failures.push(`${entry.run_id}: bundle directory not found`);\n checksFail++;\n continue;\n }\n checksPass++;\n\n // Check: All 7 required files exist\n for (const file of REQUIRED_BUNDLE_FILES) {\n const filePath = join(bundlePath, file);\n if (!existsSync(filePath)) {\n failures.push(`${entry.run_id}: missing ${file}`);\n checksFail++;\n } else {\n checksPass++;\n }\n }\n\n // Check: sha256sums.txt matches actual file hashes\n const sha256sumsPath = join(bundlePath, 'sha256sums.txt');\n if (existsSync(sha256sumsPath)) {\n const sumsContent = readFileSync(sha256sumsPath, 'utf-8');\n const lines = sumsContent.trim().split('\\n');\n\n for (const line of lines) {\n const match = line.match(/^([a-f0-9]{64})\\s+(.+)$/);\n if (!match) continue;\n\n const [, expectedHash, fileName] = match;\n const filePath = join(bundlePath, fileName);\n\n if (existsSync(filePath)) {\n const actualHash = hashFile(filePath);\n if (actualHash !== expectedHash) {\n failures.push(`${entry.run_id}: hash mismatch for ${fileName}`);\n checksFail++;\n } else {\n checksPass++;\n }\n }\n }\n }\n\n // Check: verdict.json verdict_hash is deterministically reproducible\n const verdictPath = join(bundlePath, 'verdict.json');\n if (existsSync(verdictPath)) {\n try {\n const verdict = loadJson(verdictPath) as {\n verdict_hash?: string;\n overall_status?: string;\n };\n\n // Verify overall_status is valid\n if (verdict.overall_status && !VALID_OVERALL_STATUSES.includes(verdict.overall_status)) {\n failures.push(`${entry.run_id}: invalid overall_status '${verdict.overall_status}'`);\n checksFail++;\n } else {\n checksPass++;\n }\n\n // Verify verdict_hash matches what we recompute\n if (verdict.verdict_hash) {\n // Load full verdict and exclude hash fields for recomputation\n const fullVerdict = loadJson(verdictPath) as Record;\n delete fullVerdict.verdict_hash;\n delete fullVerdict._meta;\n\n const recomputedHash = computeDeterministicHash(fullVerdict);\n\n if (recomputedHash !== verdict.verdict_hash) {\n failures.push(`${entry.run_id}: verdict_hash mismatch (stored vs recomputed)`);\n checksFail++;\n } else {\n checksPass++;\n }\n }\n\n // Verify index entry matches bundle\n if (entry.verdict_hash && verdict.verdict_hash !== entry.verdict_hash) {\n failures.push(`${entry.run_id}: index verdict_hash doesn't match bundle`);\n checksFail++;\n } else {\n checksPass++;\n }\n\n } catch (err) {\n failures.push(`${entry.run_id}: failed to parse verdict.json`);\n checksFail++;\n }\n }\n }\n\n // Result\n if (failures.length > 0) {\n return {\n gate_id: 'gate-14-adjudication-consistency',\n status: 'FAIL',\n message: `${failures.length} adjudication consistency check(s) failed`,\n details: {\n checks_passed: checksPass,\n checks_failed: checksFail,\n failures,\n },\n };\n }\n\n return {\n gate_id: 'gate-14-adjudication-consistency',\n status: 'PASS',\n message: `All ${checksPass} adjudication consistency checks passed`,\n details: {\n checks_passed: checksPass,\n checks_failed: 0,\n failures: [],\n },\n };\n}\n\n// =============================================================================\n// Entry Point\n// =============================================================================\n\nexport default async function gate14(): Promise {\n console.log('\\n🚪 Gate 14: Adjudication Consistency\\n');\n\n const result = await runGate14();\n\n if (result.status === 'PASS') {\n console.log(`✅ PASS: ${result.message}`);\n } else if (result.status === 'SKIP') {\n console.log(`⏭️ SKIP: ${result.message}`);\n } else {\n console.log(`❌ FAIL: ${result.message}`);\n if (result.details?.failures) {\n for (const failure of result.details.failures) {\n console.log(` - ${failure}`);\n }\n }\n throw new Error(`Gate 14 FAILED: ${result.message}`);\n }\n}\n\nexport { runGate14 };\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-15-curated-adjudication-required.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'err' is defined but never used.","line":199,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":199,"endColumn":21}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Gate 15: Curated Runs Adjudication Required\n * \n * Validates that curated runs have corresponding adjudication bundles.\n * This gate enforces the curated → adjudication closure, ensuring\n * every curated run is backed by a verifiable adjudication record.\n * \n * GOVERNANCE: This is the curated set closure gate.\n * No endorsement, ranking, or recommendation logic - only factual closure.\n */\n\nimport { readFileSync, existsSync } from 'fs';\nimport { join } from 'path';\nimport * as yaml from 'js-yaml';\n\n// =============================================================================\n// Types\n// =============================================================================\n\ninterface CuratedEntry {\n run_id: string;\n status?: string;\n scenario_id?: string;\n substrate?: string;\n indexable?: boolean;\n}\n\ninterface AdjudicationEntry {\n run_id: string;\n overall_status: string;\n verdict_hash: string;\n}\n\ninterface GateResult {\n gate_id: string;\n status: 'PASS' | 'FAIL' | 'SKIP';\n message: string;\n details?: {\n checks_passed: number;\n checks_failed: number;\n curated_count: number;\n adjudicated_count: number;\n failures: string[];\n };\n}\n\n// =============================================================================\n// Constants\n// =============================================================================\n\nconst VLAB_ROOT = join(__dirname, '../..');\nconst ALLOWLIST_PATH = join(VLAB_ROOT, 'data/curated-runs/allowlist.yaml');\nconst ADJUDICATION_DIR = join(VLAB_ROOT, 'adjudication');\nconst EXPORT_DIR = join(VLAB_ROOT, 'export');\n\n// Statuses that require adjudication bundle\nconst REQUIRE_ADJUDICATION_STATUSES = ['active', 'curated', 'frozen'];\n\n// Valid overall_status values for curated entries\nconst VALID_CURATED_STATUSES = ['ADJUDICATED', 'INCOMPLETE', 'NOT_ADMISSIBLE'];\n\n// =============================================================================\n// Helpers\n// =============================================================================\n\nfunction loadYaml(filePath: string): unknown {\n return yaml.load(readFileSync(filePath, 'utf-8'));\n}\n\nfunction loadJson(filePath: string): unknown {\n return JSON.parse(readFileSync(filePath, 'utf-8'));\n}\n\n// =============================================================================\n// Main Gate Logic\n// =============================================================================\n\nasync function runGate15(): Promise {\n const failures: string[] = [];\n let checksPass = 0;\n let checksFail = 0;\n let curatedCount = 0;\n let adjudicatedCount = 0;\n\n // Check 1: allowlist.yaml exists\n if (!existsSync(ALLOWLIST_PATH)) {\n return {\n gate_id: 'gate-15-curated-adjudication-required',\n status: 'SKIP',\n message: 'allowlist.yaml not found',\n };\n }\n checksPass++;\n\n // Check 2: Parse allowlist\n let allowlist: { runs: CuratedEntry[] };\n try {\n allowlist = loadYaml(ALLOWLIST_PATH) as { runs: CuratedEntry[] };\n checksPass++;\n } catch (err) {\n return {\n gate_id: 'gate-15-curated-adjudication-required',\n status: 'FAIL',\n message: `Failed to parse allowlist.yaml: ${(err as Error).message}`,\n };\n }\n\n if (!allowlist.runs || allowlist.runs.length === 0) {\n return {\n gate_id: 'gate-15-curated-adjudication-required',\n status: 'PASS',\n message: 'No curated runs defined (vacuously complete)',\n details: { checks_passed: checksPass, checks_failed: 0, curated_count: 0, adjudicated_count: 0, failures: [] },\n };\n }\n\n curatedCount = allowlist.runs.length;\n\n // Check 3: Load adjudication-index if exists\n let adjudicationIndex: { adjudications: AdjudicationEntry[] } = { adjudications: [] };\n const indexPath = join(EXPORT_DIR, 'adjudication-index.json');\n if (existsSync(indexPath)) {\n try {\n adjudicationIndex = loadJson(indexPath) as { adjudications: AdjudicationEntry[] };\n checksPass++;\n } catch {\n // Index may not exist yet, which is acceptable\n }\n }\n\n const adjudicationMap = new Map();\n for (const entry of adjudicationIndex.adjudications) {\n adjudicationMap.set(entry.run_id, entry);\n }\n\n // Check 4-N: Validate each curated entry\n for (const entry of allowlist.runs) {\n if (!entry.run_id) {\n failures.push(`Curated entry missing run_id`);\n checksFail++;\n continue;\n }\n\n // Skip entries that don't require adjudication (e.g., eligible_for_upgrade)\n if (entry.status && !REQUIRE_ADJUDICATION_STATUSES.includes(entry.status)) {\n checksPass++;\n continue;\n }\n\n // Check: Adjudication bundle exists\n const bundlePath = join(ADJUDICATION_DIR, entry.run_id);\n const verdictPath = join(bundlePath, 'verdict.json');\n\n if (!existsSync(bundlePath)) {\n // Bundle doesn't exist - this is NOT a failure yet\n // We only require adjudication for indexable entries\n if (entry.indexable !== false) {\n // This is informational, not a hard failure\n // Future: can be upgraded to FAIL when all curated runs are adjudicated\n }\n checksPass++; // Soft pass for now\n continue;\n }\n\n // Bundle exists - verify it's valid\n if (!existsSync(verdictPath)) {\n failures.push(`${entry.run_id}: bundle exists but verdict.json missing`);\n checksFail++;\n continue;\n }\n\n try {\n const verdict = loadJson(verdictPath) as { overall_status?: string; verdict_hash?: string };\n\n // Check overall_status is valid\n if (!verdict.overall_status || !VALID_CURATED_STATUSES.includes(verdict.overall_status)) {\n failures.push(`${entry.run_id}: invalid overall_status '${verdict.overall_status}'`);\n checksFail++;\n continue;\n }\n\n // Check verdict_hash exists\n if (!verdict.verdict_hash) {\n failures.push(`${entry.run_id}: missing verdict_hash`);\n checksFail++;\n continue;\n }\n\n adjudicatedCount++;\n checksPass++;\n\n // Check: if in adjudication-index, hashes match\n const indexEntry = adjudicationMap.get(entry.run_id);\n if (indexEntry && indexEntry.verdict_hash !== verdict.verdict_hash) {\n failures.push(`${entry.run_id}: verdict_hash mismatch between bundle and index`);\n checksFail++;\n }\n\n } catch (err) {\n failures.push(`${entry.run_id}: failed to parse verdict.json`);\n checksFail++;\n }\n }\n\n // Result\n if (failures.length > 0) {\n return {\n gate_id: 'gate-15-curated-adjudication-required',\n status: 'FAIL',\n message: `${failures.length} curated closure check(s) failed`,\n details: {\n checks_passed: checksPass,\n checks_failed: checksFail,\n curated_count: curatedCount,\n adjudicated_count: adjudicatedCount,\n failures,\n },\n };\n }\n\n return {\n gate_id: 'gate-15-curated-adjudication-required',\n status: 'PASS',\n message: `Curated closure: ${curatedCount} entries, ${adjudicatedCount} adjudicated`,\n details: {\n checks_passed: checksPass,\n checks_failed: 0,\n curated_count: curatedCount,\n adjudicated_count: adjudicatedCount,\n failures: [],\n },\n };\n}\n\n// =============================================================================\n// Entry Point\n// =============================================================================\n\nexport default async function gate15(): Promise {\n console.log('\\n🚪 Gate 15: Curated Runs Adjudication Required\\n');\n\n const result = await runGate15();\n\n if (result.status === 'PASS') {\n console.log(`✅ PASS: ${result.message}`);\n if (result.details) {\n console.log(` Curated: ${result.details.curated_count}`);\n console.log(` Adjudicated: ${result.details.adjudicated_count}`);\n }\n } else if (result.status === 'SKIP') {\n console.log(`⏭️ SKIP: ${result.message}`);\n } else {\n console.log(`❌ FAIL: ${result.message}`);\n if (result.details?.failures) {\n for (const failure of result.details.failures) {\n console.log(` - ${failure}`);\n }\n }\n throw new Error(`Gate 15 FAILED: ${result.message}`);\n }\n}\n\nexport { runGate15 };\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/gate-v02-g2-bundle-closure.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/common.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/d1.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/d2.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/d3.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/d4.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/index.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'PatternRule' is defined but never used. Allowed unused vars must match /^_/u.","line":27,"column":62,"nodeType":null,"messageId":"unusedVar","endLine":27,"endColumn":73}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Reason Code Taxonomy - Unified Entry Point\n * \n * This is the SINGLE SOURCE OF TRUTH for all reason code validation.\n * All components must import from here for reason code validation.\n * \n * Usage:\n * import { isAllowedReasonCode, explainReasonCode } from '@/lib/gates/reason-codes';\n * \n * Gate contract: ALL non-PASS verdicts must have reason_code that passes isAllowedReasonCode().\n */\n\n// Re-export all domain codes for direct access\nexport * from './common';\nexport * from './d1';\nexport * from './d2';\nexport * from './d3';\nexport * from './d4';\nexport * from './patterns';\n\n// Import for internal use\nimport { COMMON_REASON_CODES, isCommonReasonCode } from './common';\nimport { D1_REASON_CODES, isD1ReasonCode } from './d1';\nimport { D2_REASON_CODES, isD2ReasonCode } from './d2';\nimport { D3_REASON_CODES, isD3ReasonCode } from './d3';\nimport { D4_REASON_CODES, isD4ReasonCode } from './d4';\nimport { matchesReasonCodePattern, isPatternReasonCode, type PatternRule } from './patterns';\n\n// =============================================================================\n// Unified Validation\n// =============================================================================\n\nexport type ReasonCodeDomain = 'COMMON' | 'D1' | 'D2' | 'D3' | 'D4' | 'PATTERN';\nexport type ReasonCodeKind = 'enum' | 'pattern' | 'unknown';\n\n/**\n * Explanation of a reason code's classification.\n */\nexport interface ReasonCodeExplanation {\n kind: ReasonCodeKind;\n domain?: ReasonCodeDomain;\n rule?: string;\n allowed: boolean;\n}\n\n/**\n * Check if a reason code is allowed (either enum or pattern match).\n * This is the primary validation function for CI gates.\n */\nexport function isAllowedReasonCode(code: string | null | undefined): boolean {\n if (!code) return false;\n\n // Check common codes\n if (isCommonReasonCode(code)) return true;\n\n // Check domain-specific codes\n if (isD1ReasonCode(code)) return true;\n if (isD2ReasonCode(code)) return true;\n if (isD3ReasonCode(code)) return true;\n if (isD4ReasonCode(code)) return true;\n\n // Check patterns\n if (isPatternReasonCode(code)) return true;\n\n return false;\n}\n\n/**\n * Explain a reason code's classification.\n * Returns detailed information about which category the code falls into.\n */\nexport function explainReasonCode(code: string | null | undefined): ReasonCodeExplanation {\n if (!code) {\n return { kind: 'unknown', allowed: false };\n }\n\n // Check common codes\n if (isCommonReasonCode(code)) {\n return { kind: 'enum', domain: 'COMMON', allowed: true };\n }\n\n // Check domain-specific codes\n if (isD1ReasonCode(code)) {\n return { kind: 'enum', domain: 'D1', allowed: true };\n }\n if (isD2ReasonCode(code)) {\n return { kind: 'enum', domain: 'D2', allowed: true };\n }\n if (isD3ReasonCode(code)) {\n return { kind: 'enum', domain: 'D3', allowed: true };\n }\n if (isD4ReasonCode(code)) {\n return { kind: 'enum', domain: 'D4', allowed: true };\n }\n\n // Check patterns\n const patternMatch = matchesReasonCodePattern(code);\n if (patternMatch) {\n return { kind: 'pattern', domain: 'PATTERN', rule: patternMatch.name, allowed: true };\n }\n\n return { kind: 'unknown', allowed: false };\n}\n\n/**\n * Assert that a reason code is allowed.\n * Throws an error with context if the code is not allowed.\n */\nexport function assertAllowedReasonCode(\n code: string | null | undefined,\n context: { run_id?: string; clause_id?: string; status?: string }\n): void {\n if (!isAllowedReasonCode(code)) {\n const ctxStr = JSON.stringify(context);\n throw new Error(`Unknown reason_code \"${code}\" in context: ${ctxStr}`);\n }\n}\n\n// =============================================================================\n// Taxonomy Statistics (for reporting)\n// =============================================================================\n\n/**\n * Get counts of all registered reason codes.\n */\nexport function getReasonCodeStats(): {\n common: number;\n d1: number;\n d2: number;\n d3: number;\n d4: number;\n total_enum: number;\n patterns: number;\n} {\n return {\n common: COMMON_REASON_CODES.length,\n d1: D1_REASON_CODES.length,\n d2: D2_REASON_CODES.length,\n d3: D3_REASON_CODES.length,\n d4: D4_REASON_CODES.length,\n total_enum:\n COMMON_REASON_CODES.length +\n D1_REASON_CODES.length +\n D2_REASON_CODES.length +\n D3_REASON_CODES.length +\n D4_REASON_CODES.length,\n patterns: 6, // From patterns.ts\n };\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason-codes/patterns.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/gates/reason_codes.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/policy/loadCuration.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/proof/generateProof.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/proof/proof-bundle.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'buildCanonicalHashInput' is defined but never used. Allowed unused vars must match /^_/u.","line":9,"column":30,"nodeType":null,"messageId":"unusedVar","endLine":9,"endColumn":53}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Proof Bundle - v0.5 Signed Proof Structure\n * \n * Defines the canonical structure for signed proofs that can be\n * independently verified by third parties.\n */\n\nimport type { RulesetEvalResult } from '@/lib/rulesets/registry';\nimport { computeVerdictHash, buildCanonicalHashInput } from './verdict-hash';\nimport { signPayload, type Signature } from './sign';\n\n// =============================================================================\n// Types\n// =============================================================================\n\n/**\n * The payload that gets signed (excludes time-variant fields).\n */\nexport interface SignedPayload {\n // Version for schema evolution\n schema_version: '1.0.0';\n\n // Core verdict data (from canonical hash input)\n ruleset_id: string;\n run_id: string;\n topline_verdict: string;\n reason_code: string | null;\n\n // Verdict hash for parity verification\n verdict_hash: string;\n\n // Clause summary (not full details, for compactness)\n clause_summary: {\n total: number;\n pass: number;\n fail: number;\n not_evaluated: number;\n };\n\n // Domain summary (if available)\n domain_summary?: {\n domain_id: string;\n status: string;\n }[];\n}\n\n/**\n * Complete signed proof bundle.\n */\nexport interface SignedProofBundle {\n // The signed payload\n payload: SignedPayload;\n\n // Ed25519 signature\n signature: Signature;\n\n // Metadata (not signed, for display only)\n metadata: {\n generated_at: string;\n generator_version: string;\n verifier_identity_url?: string;\n };\n}\n\n// =============================================================================\n// Proof Generation\n// =============================================================================\n\n/**\n * Build a signable payload from an evaluation result.\n */\nexport function buildSignedPayload(evaluation: RulesetEvalResult): SignedPayload {\n const verdictHash = computeVerdictHash(evaluation);\n\n // Count clause statuses\n const clauseCounts = evaluation.clauses.reduce(\n (acc, c) => {\n if (c.status === 'PASS') acc.pass++;\n else if (c.status === 'FAIL') acc.fail++;\n else acc.not_evaluated++;\n return acc;\n },\n { pass: 0, fail: 0, not_evaluated: 0 }\n );\n\n // Domain summary\n const domainSummary = evaluation.domain_meta?.map(d => ({\n domain_id: d.domain_id,\n status: d.status,\n }));\n\n return {\n schema_version: '1.0.0',\n ruleset_id: evaluation.ruleset_id,\n run_id: evaluation.run_id,\n topline_verdict: evaluation.topline_verdict,\n reason_code: evaluation.reason_code ?? null,\n verdict_hash: verdictHash,\n clause_summary: {\n total: evaluation.clauses.length,\n ...clauseCounts,\n },\n domain_summary: domainSummary,\n };\n}\n\n/**\n * Generate a signed proof bundle from an evaluation result.\n */\nexport function generateSignedProof(\n evaluation: RulesetEvalResult,\n privateKeyBase64: string,\n keyId: string,\n generatorVersion: string = '0.5.0'\n): SignedProofBundle {\n const payload = buildSignedPayload(evaluation);\n const signature = signPayload(payload, privateKeyBase64, keyId);\n\n return {\n payload,\n signature,\n metadata: {\n generated_at: new Date().toISOString(),\n generator_version: generatorVersion,\n },\n };\n}\n\n// =============================================================================\n// Proof Verification\n// =============================================================================\n\nimport { verifyPayload, loadVerifierIdentity, isValidKeyId, isIdentityValid } from './sign';\n\nexport interface ProofVerificationResult {\n valid: boolean;\n checks: {\n signature_valid: boolean;\n key_id_valid: boolean;\n identity_valid: boolean;\n hash_recomputable: boolean;\n };\n errors: string[];\n}\n\n/**\n * Verify a signed proof bundle.\n * \n * @param proof - The proof bundle to verify\n * @param projectRoot - Path to project root for loading verifier identity\n */\nexport function verifySignedProof(\n proof: SignedProofBundle,\n projectRoot: string\n): ProofVerificationResult {\n const result: ProofVerificationResult = {\n valid: false,\n checks: {\n signature_valid: false,\n key_id_valid: false,\n identity_valid: false,\n hash_recomputable: false,\n },\n errors: [],\n };\n\n // Load verifier identity\n const identity = loadVerifierIdentity(projectRoot);\n if (!identity) {\n result.errors.push('Verifier identity not found');\n return result;\n }\n\n // Check key_id\n result.checks.key_id_valid = isValidKeyId(proof.signature.key_id, identity);\n if (!result.checks.key_id_valid) {\n result.errors.push(`Key ID mismatch: ${proof.signature.key_id} vs ${identity.key_id}`);\n }\n\n // Check identity validity\n result.checks.identity_valid = isIdentityValid(identity);\n if (!result.checks.identity_valid) {\n result.errors.push('Verifier identity is expired or not yet valid');\n }\n\n // Verify signature\n result.checks.signature_valid = verifyPayload(\n proof.payload,\n proof.signature,\n identity.public_key_ed25519\n );\n if (!result.checks.signature_valid) {\n result.errors.push('Signature verification failed');\n }\n\n // Hash recomputability check would require the full evaluation\n // For now, mark as true if signature is valid\n result.checks.hash_recomputable = result.checks.signature_valid;\n\n // Overall validity\n result.valid =\n result.checks.signature_valid &&\n result.checks.key_id_valid &&\n result.checks.identity_valid;\n\n return result;\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/proof/sign.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'type' is defined but never used. Allowed unused args must match /^_/u.","line":68,"column":41,"nodeType":null,"messageId":"unusedVar","endLine":68,"endColumn":45},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":213,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":213,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[6609,6612],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[6609,6612],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":214,"column":14,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":214,"endColumn":17,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[6655,6658],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[6655,6658],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":252,"column":33,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":252,"endColumn":36,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8020,8023],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8020,8023],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":275,"column":64,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":275,"endColumn":67,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8799,8802],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8799,8802],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":277,"column":24,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":277,"endColumn":27,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8852,8855],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8852,8855],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":279,"column":32,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":279,"endColumn":35,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8934,8937],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8934,8937],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":287,"column":24,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":287,"endColumn":27,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[9247,9250],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[9247,9250],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":8,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Ed25519 Signing and Verification\n * \n * v0.5 Signed Proof Infrastructure\n * \n * Uses Node.js crypto module for Ed25519 signing/verification.\n * This enables third-party verification without trusting the server.\n */\n\nimport * as crypto from 'crypto';\nimport * as fs from 'fs';\nimport * as path from 'path';\n\n// =============================================================================\n// Types\n// =============================================================================\n\nexport interface KeyPair {\n publicKey: string; // Base64 encoded\n privateKey: string; // Base64 encoded (kept secret)\n}\n\nexport interface Signature {\n algorithm: 'Ed25519';\n signature: string; // Base64 encoded\n key_id: string; // Reference to public key\n signed_at: string; // ISO timestamp\n}\n\nexport interface VerifierIdentity {\n verifier_name: string;\n public_key_ed25519: string; // Base64 encoded\n key_id: string;\n valid_from: string;\n valid_until?: string;\n rotation_policy: string;\n}\n\n// =============================================================================\n// Key Generation (for initial setup only)\n// =============================================================================\n\n/**\n * Generate a new Ed25519 key pair.\n * \n * WARNING: Only use this for initial key generation.\n * Private key must be securely stored and NEVER committed to repo.\n */\nexport function generateKeyPair(): KeyPair {\n const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519', {\n publicKeyEncoding: { type: 'spki', format: 'pem' },\n privateKeyEncoding: { type: 'pkcs8', format: 'pem' },\n });\n\n // Convert PEM to raw base64 for portability\n const pubKeyRaw = extractKeyFromPem(publicKey, 'PUBLIC');\n const privKeyRaw = extractKeyFromPem(privateKey, 'PRIVATE');\n\n return {\n publicKey: pubKeyRaw,\n privateKey: privKeyRaw,\n };\n}\n\n/**\n * Extract raw key bytes from PEM format.\n */\nfunction extractKeyFromPem(pem: string, type: 'PUBLIC' | 'PRIVATE'): string {\n const lines = pem.split('\\n');\n const keyLines = lines.filter(line =>\n !line.startsWith('-----') && line.trim().length > 0\n );\n return keyLines.join('');\n}\n\n// =============================================================================\n// Signing\n// =============================================================================\n\n/**\n * Sign a message with Ed25519 private key.\n * \n * @param message - The message to sign (will be UTF-8 encoded)\n * @param privateKeyBase64 - Base64 encoded private key\n * @param keyId - Identifier for the signing key\n */\nexport function signMessage(\n message: string,\n privateKeyBase64: string,\n keyId: string\n): Signature {\n // Reconstruct PEM format\n const privateKeyPem = `-----BEGIN PRIVATE KEY-----\\n${privateKeyBase64}\\n-----END PRIVATE KEY-----`;\n\n const privateKeyObject = crypto.createPrivateKey(privateKeyPem);\n\n const signature = crypto.sign(null, Buffer.from(message, 'utf-8'), privateKeyObject);\n\n return {\n algorithm: 'Ed25519',\n signature: signature.toString('base64'),\n key_id: keyId,\n signed_at: new Date().toISOString(),\n };\n}\n\n/**\n * Sign a JSON payload with Ed25519.\n * The payload is first canonicalized (JSON.stringify with sorted keys).\n */\nexport function signPayload(\n payload: unknown,\n privateKeyBase64: string,\n keyId: string\n): Signature {\n const canonicalJson = canonicalizePayload(payload);\n return signMessage(canonicalJson, privateKeyBase64, keyId);\n}\n\n// =============================================================================\n// Verification\n// =============================================================================\n\n/**\n * Verify an Ed25519 signature.\n * \n * @param message - The original message\n * @param signatureBase64 - Base64 encoded signature\n * @param publicKeyBase64 - Base64 encoded public key\n */\nexport function verifySignature(\n message: string,\n signatureBase64: string,\n publicKeyBase64: string\n): boolean {\n try {\n // Reconstruct PEM format\n const publicKeyPem = `-----BEGIN PUBLIC KEY-----\\n${publicKeyBase64}\\n-----END PUBLIC KEY-----`;\n\n const publicKeyObject = crypto.createPublicKey(publicKeyPem);\n const signatureBuffer = Buffer.from(signatureBase64, 'base64');\n\n return crypto.verify(\n null,\n Buffer.from(message, 'utf-8'),\n publicKeyObject,\n signatureBuffer\n );\n } catch {\n return false;\n }\n}\n\n/**\n * Verify a signed payload.\n */\nexport function verifyPayload(\n payload: unknown,\n signature: Signature,\n publicKeyBase64: string\n): boolean {\n const canonicalJson = canonicalizePayload(payload);\n return verifySignature(canonicalJson, signature.signature, publicKeyBase64);\n}\n\n// =============================================================================\n// Canonicalization\n// =============================================================================\n\n/**\n * Canonicalize a payload for signing.\n * Uses deterministic JSON serialization with sorted keys.\n */\nexport function canonicalizePayload(payload: unknown): string {\n return JSON.stringify(payload, sortKeysReplacer);\n}\n\n/**\n * JSON replacer that sorts object keys for deterministic output.\n */\nfunction sortKeysReplacer(key: string, value: unknown): unknown {\n if (value && typeof value === 'object' && !Array.isArray(value)) {\n const sorted: Record = {};\n for (const k of Object.keys(value as object).sort()) {\n sorted[k] = (value as Record)[k];\n }\n return sorted;\n }\n return value;\n}\n\n// =============================================================================\n// Verifier Identity Management\n// =============================================================================\n\nconst VERIFIER_IDENTITY_PATH = 'verifier/VERIFIER_IDENTITY.json';\n\n/**\n * Load the verifier identity from repo.\n */\nexport function loadVerifierIdentity(projectRoot: string): VerifierIdentity | null {\n const identityPath = path.join(projectRoot, VERIFIER_IDENTITY_PATH);\n if (!fs.existsSync(identityPath)) {\n return null;\n }\n const content = fs.readFileSync(identityPath, 'utf-8');\n const rawIdentity = JSON.parse(content);\n\n // Handle new signing_keys structure (v1.1+)\n if (rawIdentity.signing_keys && rawIdentity.active_signing_key) {\n const activeKeyId = rawIdentity.active_signing_key;\n const activeKey = Object.values(rawIdentity.signing_keys).find(\n (k: any) => k.key_id === activeKeyId\n ) as any;\n\n // SECURITY: Check if active key is revoked (should never happen, but defense in depth)\n if (activeKey && activeKey.status === 'revoked') {\n console.error(`❌ SECURITY: Active key ${activeKeyId} is marked as revoked!`);\n return null;\n }\n\n if (activeKey) {\n return {\n verifier_name: rawIdentity.description || 'MPLP Validation Lab',\n public_key_ed25519: activeKey.public_key_ed25519,\n key_id: activeKey.key_id,\n valid_from: activeKey.not_before || activeKey.valid_from,\n valid_until: activeKey.not_after || activeKey.valid_until,\n rotation_policy: activeKey.note || 'See governance docs',\n };\n }\n }\n\n // Fallback to direct fields (legacy)\n return rawIdentity as VerifierIdentity;\n}\n\n/**\n * Check if a key_id is in the revocations list.\n */\nexport function isKeyRevoked(keyId: string, projectRoot: string): boolean {\n const identityPath = path.join(projectRoot, VERIFIER_IDENTITY_PATH);\n if (!fs.existsSync(identityPath)) {\n return false;\n }\n\n const content = fs.readFileSync(identityPath, 'utf-8');\n const rawIdentity = JSON.parse(content);\n\n // Check revocations array\n const revocations = rawIdentity.revocations || [];\n return revocations.some((r: any) => r.key_id === keyId);\n}\n\n/**\n * Get public key for a specific key_id, rejecting revoked keys.\n */\nexport function getPublicKeyForKeyId(keyId: string, projectRoot: string): string | null {\n const identityPath = path.join(projectRoot, VERIFIER_IDENTITY_PATH);\n if (!fs.existsSync(identityPath)) {\n return null;\n }\n\n const content = fs.readFileSync(identityPath, 'utf-8');\n const rawIdentity = JSON.parse(content);\n\n // Check if key is revoked\n if (isKeyRevoked(keyId, projectRoot)) {\n console.error(`❌ SECURITY: Key ${keyId} is REVOKED - verification rejected`);\n return null;\n }\n\n // Find key in signing_keys\n const key = rawIdentity.signing_keys?.[keyId] ||\n Object.values(rawIdentity.signing_keys || {}).find((k: any) => k.key_id === keyId);\n\n if (key && (key as any).public_key_ed25519) {\n // Check status\n const status = (key as any).status;\n const acceptedStatuses = rawIdentity.key_policy?.accepted_statuses || ['active'];\n\n if (!acceptedStatuses.includes(status)) {\n console.error(`❌ SECURITY: Key ${keyId} has status \"${status}\" which is not accepted`);\n return null;\n }\n\n return (key as any).public_key_ed25519;\n }\n\n return null;\n}\n\n/**\n * Check if a key_id matches the current verifier identity.\n */\nexport function isValidKeyId(keyId: string, identity: VerifierIdentity): boolean {\n return identity.key_id === keyId;\n}\n\n/**\n * Check if the verifier identity is currently valid.\n */\nexport function isIdentityValid(identity: VerifierIdentity): boolean {\n const now = new Date();\n const validFrom = new Date(identity.valid_from);\n\n if (now < validFrom) {\n return false;\n }\n\n if (identity.valid_until) {\n const validUntil = new Date(identity.valid_until);\n if (now > validUntil) {\n return false;\n }\n }\n\n return true;\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/proof/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/proof/verdict-hash.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/registry/lifecycle-guarantees.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/release/loadRelease.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/releases/listUnifiedReleases.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/reverification/selectCanonicalBundle.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'basename' is defined but never used. Allowed unused vars must match /^_/u.","line":14,"column":16,"nodeType":null,"messageId":"unusedVar","endLine":14,"endColumn":24}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Canonical Bundle Selection\n * \n * Shared logic for selecting the canonical reverification bundle for a release.\n * Used by Gate-11, Gate-12, and Export generator.\n * \n * RULE: For a given release (e.g., \"v0.7.2\"), the canonical bundle is:\n * 1. The highest +revN version if any exist (e.g., v0.7.2+rev6)\n * 2. The base bundle (e.g., v0.7.2) if no +revN exists\n * 3. null if no bundles exist for this release\n */\n\nimport { existsSync, readdirSync } from 'fs';\nimport { join, basename } from 'path';\n\nexport interface CanonicalBundleResult {\n /** Bundle name (e.g., \"v0.7.2+rev6\") */\n bundleName: string;\n /** Absolute path to bundle directory */\n bundlePath: string;\n /** Revision number (0 for base, 2 for +rev2, etc.) */\n revision: number;\n}\n\n/**\n * Find all reverification bundles for a release.\n * Returns sorted array: base version first, then +rev2, +rev3, etc.\n */\nexport function findBundlesForRelease(reverificationDir: string, release: string): string[] {\n if (!existsSync(reverificationDir)) return [];\n\n const entries = readdirSync(reverificationDir);\n const bundles: string[] = [];\n\n for (const entry of entries) {\n // Match exact release or release+revN\n if (entry === release) {\n bundles.push(entry);\n } else if (entry.startsWith(`${release}+rev`)) {\n bundles.push(entry);\n }\n }\n\n // Sort: base version first, then +rev2, +rev3, etc.\n bundles.sort((a, b) => {\n const aRev = extractRevision(a);\n const bRev = extractRevision(b);\n return aRev - bRev;\n });\n\n return bundles;\n}\n\n/**\n * Extract revision number from bundle name.\n * Returns 0 for base (no +revN), N for +revN.\n */\nexport function extractRevision(bundleName: string): number {\n const match = bundleName.match(/\\+rev(\\d+)$/);\n return match ? parseInt(match[1], 10) : 0;\n}\n\n/**\n * Select the canonical reverification bundle for a release.\n * Returns the highest revision bundle, or null if none exist.\n */\nexport function selectCanonicalBundle(\n reverificationDir: string,\n release: string\n): CanonicalBundleResult | null {\n const bundles = findBundlesForRelease(reverificationDir, release);\n\n if (bundles.length === 0) return null;\n\n // Last bundle (highest revision) is canonical\n const bundleName = bundles[bundles.length - 1];\n const bundlePath = join(reverificationDir, bundleName);\n const revision = extractRevision(bundleName);\n\n // Verify verdict.json exists\n const verdictPath = join(bundlePath, 'verdict.json');\n if (!existsSync(verdictPath)) return null;\n\n return {\n bundleName,\n bundlePath,\n revision,\n };\n}\n\n/**\n * Get all canonical bundles for all releases.\n * Scans reverification directory and returns one canonical per release.\n */\nexport function getAllCanonicalBundles(\n reverificationDir: string\n): Map {\n const result = new Map();\n\n if (!existsSync(reverificationDir)) return result;\n\n const entries = readdirSync(reverificationDir);\n const releases = new Set();\n\n // Extract unique base release versions\n for (const entry of entries) {\n // Skip non-version directories\n if (!entry.startsWith('v')) continue;\n\n // Extract base release (remove +revN suffix)\n const baseRelease = entry.replace(/\\+rev\\d+$/, '');\n releases.add(baseRelease);\n }\n\n // Find canonical for each\n for (const release of releases) {\n const canonical = selectCanonicalBundle(reverificationDir, release);\n if (canonical) {\n result.set(release, canonical);\n }\n }\n\n return result;\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/loadDiff.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":48,"column":55,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":48,"endColumn":58,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1234,1237],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1234,1237],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\n\n/**\n * Ruleset Diff Index Helper\n */\n\nconst INDEX_PATH = path.join(process.cwd(), 'public/_meta/ruleset-diff-index.json');\n\nexport interface RulesetDiffEntry {\n diff_id: string;\n from_ruleset: string;\n to_ruleset: string;\n generated_at: string;\n metrics: {\n total_runs: number;\n verdict_flips: number;\n equivalence_shift: {\n from_rate: number;\n to_rate: number;\n delta: number;\n };\n };\n baseline_commit_sha: string;\n shadow_input_sha256: string;\n diffpack_hash: string;\n path: string;\n}\n\nexport interface RulesetDiffIndex {\n index_version: string;\n generated_at: string;\n diffs: RulesetDiffEntry[];\n}\n\nexport function getRulesetDiffIndex(): RulesetDiffIndex {\n if (!fs.existsSync(INDEX_PATH)) {\n return { index_version: '0.11.0', generated_at: new Date().toISOString(), diffs: [] };\n }\n return JSON.parse(fs.readFileSync(INDEX_PATH, 'utf8'));\n}\n\nexport function getRulesetDiff(id: string): RulesetDiffEntry | undefined {\n const index = getRulesetDiffIndex();\n return index.diffs.find(d => d.diff_id === id);\n}\n\nexport function getRulesetDiffPack(filePath: string): any {\n const fullPath = path.join(process.cwd(), 'public', filePath);\n if (!fs.existsSync(fullPath)) return null;\n return JSON.parse(fs.readFileSync(fullPath, 'utf8'));\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/loadRuleset.ts","messages":[],"suppressedMessages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":88,"column":64,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":88,"endColumn":67,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2276,2279],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2276,2279],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}],"suppressions":[{"kind":"directive","justification":""}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":99,"column":52,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":99,"endColumn":55,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2755,2758],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2755,2758],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}],"suppressions":[{"kind":"directive","justification":""}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":108,"column":26,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":108,"endColumn":29,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3250,3253],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3250,3253],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}],"suppressions":[{"kind":"directive","justification":""}]}],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/registry.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.0/adjudicate.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'GoldenFlowVerdict' is defined but never used. Allowed unused vars must match /^_/u.","line":11,"column":26,"nodeType":null,"messageId":"unusedVar","endLine":11,"endColumn":43}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Ruleset-1.0 Adjudicator\n * \n * Wraps the existing GoldenFlow evaluation logic into the registry's\n * RulesetEvalResult format to complete the unified adjudication contract.\n * \n * This is a minimal adapter layer - it reuses all existing GF evaluation\n * logic without modification.\n */\n\nimport type { RunBundle, GoldenFlowVerdict } from '@/lib/bundles/types';\nimport type { RulesetEvalResult, ClauseResult } from '@/lib/rulesets/registry';\n\n// =============================================================================\n// Adjudicator Implementation\n// =============================================================================\n\n/**\n * Adjudicate a run using ruleset-1.0 (GoldenFlow-based evaluation).\n * \n * For v0.2 packs, this uses the pre-computed verdict.json gf_verdicts\n * at load time (already normalized into RunBundle.verdict).\n */\nexport async function adjudicatorFn(bundle: RunBundle): Promise {\n const verdict = bundle.verdict;\n\n // If no verdict, return NOT_EVALUATED\n if (!verdict) {\n return {\n ruleset_id: 'ruleset-1.0',\n run_id: bundle.run_id,\n evaluated_at: new Date().toISOString(),\n topline_verdict: 'NOT_EVALUATED',\n reason_code: 'VERDICT_MISSING',\n clauses: [],\n };\n }\n\n // Convert gf_verdicts to clauses\n const clauses: ClauseResult[] = [];\n\n for (const gfv of verdict.gf_verdicts || []) {\n // Map each GF to a clause (e.g., GF-01 → CL-GF-01)\n const clauseId = `CL-${gfv.gf_id.toUpperCase()}`;\n\n // Determine clause status from GF verdict\n let clauseStatus: ClauseResult['status'] = 'PASS';\n let reasonCode: string | undefined;\n const notes: string[] = [];\n\n if (gfv.status === 'FAIL') {\n clauseStatus = 'FAIL';\n reasonCode = `GF-${gfv.gf_id.toUpperCase()}-FAILED`;\n } else if (gfv.status === 'NOT_EVALUATED') {\n clauseStatus = 'NOT_EVALUATED';\n reasonCode = `GF-${gfv.gf_id.toUpperCase()}-NOT-EVALUATED`;\n } else if (gfv.status === 'NOT_ADMISSIBLE') {\n clauseStatus = 'NOT_ADMISSIBLE';\n reasonCode = `GF-${gfv.gf_id.toUpperCase()}-NOT-ADMISSIBLE`;\n }\n\n // Add coverage to notes (uses coverage field from GoldenFlowVerdict)\n if (gfv.coverage) {\n notes.push(`Requirements: ${gfv.coverage.passed} PASS, ${gfv.coverage.failed} FAIL of ${gfv.coverage.total} total`);\n }\n\n clauses.push({\n clause_id: clauseId,\n requirement_id: gfv.gf_id,\n status: clauseStatus,\n reason_code: reasonCode,\n notes,\n // Map GF pointers to evidence_refs\n evidence_refs: (gfv.pointers || []).map(p => ({\n pointer: p,\n resolved: 'none' as const,\n })),\n });\n }\n\n // Determine topline from verdict\n let toplineVerdict: RulesetEvalResult['topline_verdict'] = 'NOT_EVALUATED';\n let toplineReasonCode: string | null = null;\n\n if (verdict.topline === 'PASS') {\n toplineVerdict = 'PASS';\n } else if (verdict.topline === 'FAIL') {\n toplineVerdict = 'FAIL';\n // Find first failing clause's reason\n const firstFail = clauses.find(c => c.status === 'FAIL');\n toplineReasonCode = firstFail?.reason_code || 'GOLDENFLOW_EVAL_FAILED';\n } else if (verdict.topline === 'NOT_ADMISSIBLE') {\n toplineVerdict = 'NOT_ADMISSIBLE';\n toplineReasonCode = verdict.reason_code || 'ADMISSION_FAILED';\n }\n\n // Handle admission status (takes precedence)\n if (verdict.admission === 'NOT_ADMISSIBLE') {\n toplineVerdict = 'NOT_ADMISSIBLE';\n toplineReasonCode = verdict.reason_code || 'ADMISSION_FAILED';\n }\n\n return {\n ruleset_id: 'ruleset-1.0',\n run_id: bundle.run_id,\n evaluated_at: verdict.evaluated_at || new Date().toISOString(),\n topline_verdict: toplineVerdict,\n reason_code: toplineReasonCode,\n clauses,\n // No domain_meta for ruleset-1.0 (GF-based, not domain-based)\n };\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.1/adjudicate.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'RegistryClauseResult' is defined but never used. Allowed unused vars must match /^_/u.","line":9,"column":50,"nodeType":null,"messageId":"unusedVar","endLine":9,"endColumn":70}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Ruleset-1.1 Adjudicator\n * \n * Entry point for four-domain evidence-based adjudication.\n * Evaluates all enabled clauses and produces Ruleset11Verdict.\n */\n\nimport type { RunBundle } from '@/lib/bundles/types';\nimport type { RulesetEvalResult, ClauseResult as RegistryClauseResult } from '@/lib/rulesets/registry';\nimport { CLAUSE_EVALUATORS } from './clauses';\nimport {\n CLAUSE_DEFINITIONS,\n DOMAIN_NAMES,\n type ClauseResult,\n type DomainVerdictResult,\n type Ruleset11Verdict,\n type DomainId,\n} from './types';\n\n// =============================================================================\n// Adjudicator Options\n// =============================================================================\n\nexport interface AdjudicateOptions {\n /** \n * Which clauses to evaluate. Default: all defined clauses.\n * Pass specific IDs to evaluate only those (e.g., ['CL-D1-01', 'CL-D2-01'])\n */\n clauseIds?: string[];\n\n /**\n * If true, stop evaluation on first failure. Default: false (evaluate all).\n */\n failFast?: boolean;\n}\n\n// =============================================================================\n// Main Adjudicator\n// =============================================================================\n\n/**\n * Evaluate a bundle against ruleset-1.1 clauses.\n * \n * @param bundle - The loaded RunBundle (SSOT)\n * @param opts - Adjudication options\n * @returns Ruleset11Verdict with domain verdicts and topline\n */\nexport function adjudicateRuleset11(\n bundle: RunBundle,\n opts: AdjudicateOptions = {}\n): Ruleset11Verdict {\n const clauseIds = opts.clauseIds ?? CLAUSE_DEFINITIONS.map(d => d.clause_id);\n const failFast = opts.failFast ?? false;\n\n const clauseResults: ClauseResult[] = [];\n let firstFailReason: string | null = null;\n\n // Evaluate each clause\n for (const clauseId of clauseIds) {\n const evaluator = CLAUSE_EVALUATORS[clauseId];\n if (!evaluator) {\n // Unknown clause - skip with warning (could also be NOT_EVALUATED)\n continue;\n }\n\n const result = evaluator(bundle);\n clauseResults.push(result);\n\n // Track first failure reason\n if (result.status === 'FAIL' && !firstFailReason && result.reason_code) {\n firstFailReason = result.reason_code;\n }\n\n // Fail fast if requested\n if (failFast && result.status === 'FAIL') {\n break;\n }\n }\n\n // Group results by domain\n const domainVerdicts = buildDomainVerdicts(clauseResults);\n\n // Compute topline\n const allPassed = clauseResults.length > 0 && clauseResults.every(r => r.status === 'PASS');\n const topline: 'PASS' | 'FAIL' = allPassed ? 'PASS' : 'FAIL';\n\n return {\n ruleset_id: 'ruleset-1.1',\n run_id: bundle.run_id,\n evaluated_at: new Date().toISOString(),\n topline,\n domain_verdicts: domainVerdicts,\n clause_results: clauseResults,\n reason_code: topline === 'FAIL' ? firstFailReason : null,\n };\n}\n\n// =============================================================================\n// Domain Verdict Builder\n// =============================================================================\n\nfunction buildDomainVerdicts(clauseResults: ClauseResult[]): DomainVerdictResult[] {\n const domainMap = new Map();\n\n // Group clauses by domain\n for (const result of clauseResults) {\n const def = CLAUSE_DEFINITIONS.find(d => d.clause_id === result.clause_id);\n if (!def) continue;\n\n const existing = domainMap.get(def.domain) || [];\n existing.push(result);\n domainMap.set(def.domain, existing);\n }\n\n // Build domain verdicts\n const verdicts: DomainVerdictResult[] = [];\n for (const [domain, clauses] of domainMap.entries()) {\n const allPassed = clauses.every(c => c.status === 'PASS');\n const anyFailed = clauses.some(c => c.status === 'FAIL');\n\n let status: DomainVerdictResult['status'];\n if (allPassed) {\n status = 'PASS';\n } else if (anyFailed) {\n status = 'FAIL';\n } else {\n status = 'NOT_EVALUATED';\n }\n\n verdicts.push({\n domain,\n domain_name: DOMAIN_NAMES[domain],\n status,\n clauses,\n });\n }\n\n // Sort by domain ID\n verdicts.sort((a, b) => a.domain.localeCompare(b.domain));\n\n return verdicts;\n}\n\n// =============================================================================\n// Adapter to RulesetEvalResult (for registry compatibility)\n// =============================================================================\n\n/**\n * Convert Ruleset11Verdict to the registry's RulesetEvalResult format.\n * This allows the adjudicator to work with the registry's AdjudicatorFn signature.\n * \n * Includes domain_meta for generic UI grouping.\n */\nexport function toRulesetEvalResult(verdict: Ruleset11Verdict): RulesetEvalResult {\n return {\n ruleset_id: verdict.ruleset_id,\n run_id: verdict.run_id,\n evaluated_at: verdict.evaluated_at,\n topline_verdict: verdict.topline,\n reason_code: verdict.reason_code,\n\n // Domain metadata for UI grouping\n domain_meta: verdict.domain_verdicts.map(dv => ({\n domain_id: dv.domain,\n domain_name: dv.domain_name,\n status: dv.status,\n })),\n\n // Clause results with domain_id for grouping\n clauses: verdict.clause_results.map(c => {\n // Find domain for this clause\n const domain = verdict.domain_verdicts.find(dv =>\n dv.clauses.some(dc => dc.clause_id === c.clause_id)\n );\n\n return {\n clause_id: c.clause_id,\n requirement_id: c.requirement_id,\n status: c.status,\n reason_code: c.reason_code,\n domain_id: domain?.domain,\n evidence_refs: c.evidence.resolved.map(r => ({\n pointer: r.pointer,\n resolved: r.resolved,\n content: r.event || r.snapshot || undefined,\n })),\n notes: c.notes,\n };\n }),\n };\n}\n\n\n// =============================================================================\n// Domain-Selective Adjudication (v0.3 8-packs support)\n// =============================================================================\n\n// Import from SSOT - DO NOT duplicate this logic\nimport { detectApplicableClausesFromBundle } from './applicability';\n\n/**\n * AdjudicatorFn-compatible wrapper.\n * This is what gets registered in the ruleset registry.\n * \n * Automatically detects domain-specific packs and evaluates only\n * the applicable clause(s) based on run_id prefix.\n */\nexport async function adjudicatorFn(bundle: RunBundle): Promise {\n // Detect applicable clauses based on run_id (uses SSOT)\n const clauseIds = detectApplicableClausesFromBundle(bundle);\n\n const verdict = adjudicateRuleset11(bundle, { clauseIds });\n return toRulesetEvalResult(verdict);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.1/applicability.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.1/clauses.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ClauseContext' is defined but never used. Allowed unused vars must match /^_/u.","line":24,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":24,"endColumn":24}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Ruleset-1.1 Clauses\n * \n * Four-domain clause implementations:\n * - CL-D1-01: Budget Decision Record\n * - CL-D2-01: Terminal Lifecycle State\n * - CL-D3-01: Authorization Decision\n * - CL-D4-01: Termination Decision\n * \n * Pattern: pointer-first → resolve → minimal field check\n */\n\nimport type { RunBundle, Event } from '@/lib/bundles/types';\nimport { getPointersByRequirement, resolvePointer } from '@/lib/evidence/resolve';\nimport { inSynonymGroup, isTerminalState, normalizeToken } from '@/lib/evidence/synonyms';\nimport { REASON_CODES } from '@/lib/gates/reason_codes';\nimport type { ClauseResult, ClauseEvidence, ClauseDefinition } from './types';\nimport { CLAUSE_DEFINITIONS } from './types';\n\n// =============================================================================\n// Clause Evaluation Context\n// =============================================================================\n\ninterface ClauseContext {\n bundle: RunBundle;\n definition: ClauseDefinition;\n}\n\n// =============================================================================\n// Common Clause Evaluation Helpers\n// =============================================================================\n\nfunction createClauseResult(\n definition: ClauseDefinition,\n status: ClauseResult['status'],\n evidence: ClauseEvidence,\n notes: string[],\n reasonCode?: string\n): ClauseResult {\n return {\n clause_id: definition.clause_id,\n requirement_id: definition.requirement_id,\n status,\n reason_code: reasonCode,\n evidence,\n notes,\n };\n}\n\n/**\n * Common pattern: Get pointers → resolve → return evidence structure\n */\nfunction resolveEvidenceForRequirement(\n bundle: RunBundle,\n requirementId: string\n): ClauseEvidence {\n const pointers = getPointersByRequirement(bundle, requirementId);\n const resolved = pointers.map(p => resolvePointer(bundle, p));\n\n const resolvedCount = resolved.filter(r => r.resolved !== 'none').length;\n const unresolvedCount = resolved.filter(r => r.resolved === 'none').length;\n\n return {\n pointers,\n resolved,\n resolved_count: resolvedCount,\n unresolved_count: unresolvedCount,\n };\n}\n\n// =============================================================================\n// Event Field Checkers\n// =============================================================================\n\n/**\n * Check if event has a valid budget/resource decision outcome.\n */\nfunction hasBudgetOutcome(event: Event): boolean {\n const outcome = event.outcome ?? event.decision_outcome ?? event.result;\n if (!outcome) return false;\n\n const normalized = normalizeToken(outcome);\n // Budget outcomes: allow, deny, throttle, suspend, resume\n return (\n inSynonymGroup('outcome_allow', normalized) ||\n inSynonymGroup('outcome_deny', normalized) ||\n ['throttle', 'throttled', 'suspend', 'suspended', 'resume', 'resumed'].includes(normalized)\n );\n}\n\n/**\n * Check if event is a budget/resource governance decision.\n */\nfunction isBudgetDecision(event: Event): boolean {\n const eventType = normalizeToken(event.event_type);\n const decisionKind = event.decision_kind ?? event.kind ?? event.type;\n\n // Check event_type contains budget-related keywords\n if (eventType.includes('budget') || eventType.includes('quota') || eventType.includes('resource')) {\n return true;\n }\n\n // Check decision_kind\n if (decisionKind && inSynonymGroup('decision_kind_budget', decisionKind)) {\n return true;\n }\n\n return false;\n}\n\n/**\n * Check if event indicates terminal state.\n */\nfunction hasTerminalState(event: Event): boolean {\n const toState = event.to_state ?? event.state ?? event.status;\n return toState ? isTerminalState(toState) : false;\n}\n\n/**\n * Check if event is authorization decision with outcome.\n */\nfunction isAuthzDecision(event: Event): boolean {\n const eventType = normalizeToken(event.event_type);\n const decisionKind = event.decision_kind ?? event.kind ?? event.type;\n\n if (eventType.includes('authz') || eventType.includes('authorization') || eventType.includes('permission')) {\n return true;\n }\n\n if (decisionKind && inSynonymGroup('decision_kind_authz', decisionKind)) {\n return true;\n }\n\n return false;\n}\n\nfunction hasAuthzOutcome(event: Event): boolean {\n const outcome = event.outcome ?? event.decision_outcome ?? event.result;\n if (!outcome) return false;\n\n return inSynonymGroup('outcome_allow', outcome) || inSynonymGroup('outcome_deny', outcome);\n}\n\n/**\n * Check if event is termination decision.\n */\nfunction isTerminationDecision(event: Event): boolean {\n const eventType = normalizeToken(event.event_type);\n const decisionKind = event.decision_kind ?? event.kind ?? event.type;\n\n if (eventType.includes('terminat') || eventType.includes('abort') || eventType.includes('stop')) {\n return true;\n }\n\n if (decisionKind && inSynonymGroup('decision_kind_terminate', decisionKind)) {\n return true;\n }\n\n return false;\n}\n\n// =============================================================================\n// CL-D1-01: Budget Decision Record\n// =============================================================================\n\nexport function evaluateCLD1_01(bundle: RunBundle): ClauseResult {\n const def = CLAUSE_DEFINITIONS.find(d => d.clause_id === 'CL-D1-01')!;\n const notes: string[] = [];\n\n // Step 1: Check for pointers\n const evidence = resolveEvidenceForRequirement(bundle, def.requirement_id);\n\n if (evidence.pointers.length === 0) {\n notes.push('No evidence pointers found for RQ-D1-01');\n return createClauseResult(\n def,\n 'FAIL',\n evidence,\n notes,\n REASON_CODES.BUNDLE_POINTER_MISSING(def.requirement_id)\n );\n }\n\n // Step 2: Check resolved events\n if (evidence.resolved_count === 0) {\n notes.push('All pointers failed to resolve');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n // Step 3: Validate at least one event is budget decision with outcome\n let validBudgetDecision = false;\n for (const ref of evidence.resolved) {\n if (ref.resolved === 'event' && ref.event) {\n if (isBudgetDecision(ref.event) && hasBudgetOutcome(ref.event)) {\n validBudgetDecision = true;\n notes.push(`Valid budget decision found: ${ref.event.event_id}`);\n break;\n }\n }\n }\n\n if (!validBudgetDecision) {\n notes.push('No valid budget decision event with outcome found');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n return createClauseResult(def, 'PASS', evidence, notes);\n}\n\n// =============================================================================\n// CL-D2-01: Terminal Lifecycle State\n// =============================================================================\n\nexport function evaluateCLD2_01(bundle: RunBundle): ClauseResult {\n const def = CLAUSE_DEFINITIONS.find(d => d.clause_id === 'CL-D2-01')!;\n const notes: string[] = [];\n\n // Step 1: Check for pointers\n const evidence = resolveEvidenceForRequirement(bundle, def.requirement_id);\n\n if (evidence.pointers.length === 0) {\n notes.push('No evidence pointers found for RQ-D2-01');\n return createClauseResult(\n def,\n 'FAIL',\n evidence,\n notes,\n REASON_CODES.BUNDLE_POINTER_MISSING(def.requirement_id)\n );\n }\n\n // Step 2: Check resolved events\n if (evidence.resolved_count === 0) {\n notes.push('All pointers failed to resolve');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n // Step 3: Check for terminal state event\n let foundTerminalState = false;\n for (const ref of evidence.resolved) {\n if (ref.resolved === 'event' && ref.event) {\n if (hasTerminalState(ref.event)) {\n foundTerminalState = true;\n const state = ref.event.to_state ?? ref.event.state ?? ref.event.status;\n notes.push(`Terminal state found: ${state} in event ${ref.event.event_id}`);\n break;\n }\n }\n // Also check snapshots (future)\n if (ref.resolved === 'snapshot' && ref.snapshot) {\n const state = ref.snapshot.data?.state ?? ref.snapshot.data?.status;\n if (state && isTerminalState(state)) {\n foundTerminalState = true;\n notes.push(`Terminal state found in snapshot: ${state}`);\n break;\n }\n }\n }\n\n if (!foundTerminalState) {\n notes.push('No terminal state evidence found');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n return createClauseResult(def, 'PASS', evidence, notes);\n}\n\n// =============================================================================\n// CL-D3-01: Authorization Decision\n// =============================================================================\n\nexport function evaluateCLD3_01(bundle: RunBundle): ClauseResult {\n const def = CLAUSE_DEFINITIONS.find(d => d.clause_id === 'CL-D3-01')!;\n const notes: string[] = [];\n\n // Step 1: Check for pointers\n const evidence = resolveEvidenceForRequirement(bundle, def.requirement_id);\n\n if (evidence.pointers.length === 0) {\n notes.push('No evidence pointers found for RQ-D3-01');\n return createClauseResult(\n def,\n 'FAIL',\n evidence,\n notes,\n REASON_CODES.BUNDLE_POINTER_MISSING(def.requirement_id)\n );\n }\n\n // Step 2: Check resolved events\n if (evidence.resolved_count === 0) {\n notes.push('All pointers failed to resolve');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n // Step 3: Validate at least one authz decision with outcome\n let validAuthzDecision = false;\n for (const ref of evidence.resolved) {\n if (ref.resolved === 'event' && ref.event) {\n if (isAuthzDecision(ref.event) && hasAuthzOutcome(ref.event)) {\n validAuthzDecision = true;\n const outcome = ref.event.outcome ?? ref.event.decision_outcome ?? ref.event.result;\n notes.push(`Authorization decision found: ${outcome} in event ${ref.event.event_id}`);\n break;\n }\n }\n }\n\n if (!validAuthzDecision) {\n notes.push('No valid authorization decision event with outcome found');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n return createClauseResult(def, 'PASS', evidence, notes);\n}\n\n// =============================================================================\n// CL-D4-01: Termination Decision\n// =============================================================================\n\nexport function evaluateCLD4_01(bundle: RunBundle): ClauseResult {\n const def = CLAUSE_DEFINITIONS.find(d => d.clause_id === 'CL-D4-01')!;\n const notes: string[] = [];\n\n // Step 1: Check for pointers\n const evidence = resolveEvidenceForRequirement(bundle, def.requirement_id);\n\n if (evidence.pointers.length === 0) {\n notes.push('No evidence pointers found for RQ-D4-01');\n return createClauseResult(\n def,\n 'FAIL',\n evidence,\n notes,\n REASON_CODES.BUNDLE_POINTER_MISSING(def.requirement_id)\n );\n }\n\n // Step 2: Check resolved events\n if (evidence.resolved_count === 0) {\n notes.push('All pointers failed to resolve');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n // Step 3: Validate termination decision event exists\n let validTerminationDecision = false;\n for (const ref of evidence.resolved) {\n if (ref.resolved === 'event' && ref.event) {\n if (isTerminationDecision(ref.event)) {\n validTerminationDecision = true;\n notes.push(`Termination decision found: ${ref.event.event_id}`);\n break;\n }\n }\n }\n\n if (!validTerminationDecision) {\n notes.push('No termination decision event found');\n return createClauseResult(def, 'FAIL', evidence, notes, REASON_CODES.REQ_FAIL(def.requirement_id));\n }\n\n return createClauseResult(def, 'PASS', evidence, notes);\n}\n\n// =============================================================================\n// Clause Evaluator Registry\n// =============================================================================\n\nexport type ClauseEvaluator = (bundle: RunBundle) => ClauseResult;\n\nexport const CLAUSE_EVALUATORS: Record = {\n 'CL-D1-01': evaluateCLD1_01,\n 'CL-D2-01': evaluateCLD2_01,\n 'CL-D3-01': evaluateCLD3_01,\n 'CL-D4-01': evaluateCLD4_01,\n};\n\n/**\n * Evaluate a single clause by ID.\n */\nexport function evaluateClause(bundle: RunBundle, clauseId: string): ClauseResult | null {\n const evaluator = CLAUSE_EVALUATORS[clauseId];\n if (!evaluator) return null;\n return evaluator(bundle);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.1/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.2/adjudicate.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.2/applicability.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.2/clauses.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.2/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.3/adjudicate.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.3/applicability.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.3/clauses.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/rulesets/ruleset-1.3/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runs/loadEvidence.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runs/loadRun.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runs/locator.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runs/replayLocator.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runs/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/_shared/report.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/_shared/scan.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/_shared/surface.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-02-admission.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-03-determinism.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-04-language.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-05-no-exec-hosting.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-06-robots-policy.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-07-pii-leak.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-08-curated-immutability.ts","messages":[],"suppressedMessages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":71,"column":63,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":71,"endColumn":66,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2207,2210],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2207,2210],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}],"suppressions":[{"kind":"directive","justification":""}]}],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-09-ssot-projection.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-10-curated-invariants.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-11-reverify-required.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-12-export-consistency.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-14-adjudication-consistency.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-15-curated-adjudication-required.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/gate-v02-g2-bundle-closure.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/index.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/common.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/d1.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/d2.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/d3.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/d4.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/index.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason-codes/patterns.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/runtime-checks/reason_codes.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/security/allowlist.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/site-config.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/ssot/load-lab-manifest.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/ssot/mapping-resolver.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":20,"column":45,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":20,"endColumn":48,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[713,716],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[713,716],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":26,"column":45,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":26,"endColumn":48,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[881,884],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[881,884],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":45,"column":52,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":45,"endColumn":55,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1391,1394],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1391,1394],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":53,"column":52,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":53,"endColumn":55,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1645,1648],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1645,1648],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import manifest from '../../public/_meta/lab-manifest.json';\n\n/**\n * MappingResolver: The SSOT Navigation Authority.\n * \n * Enjoins all UI navigation to the lab-manifest.json Publication Contract.\n */\n\nexport type AnchorKey = keyof typeof manifest.anchors | keyof typeof manifest.tripod;\nexport type GovernanceTermKey = keyof typeof manifest.governance_terms;\n\nexport class MappingResolver {\n /**\n * Resolves an anchor key to a functional URL.\n * Enforces Internal (relative) vs Cross-Surface (absolute) rules.\n */\n static resolve(key: AnchorKey, id?: string): string {\n // 1. Check Tripod (Cross-Surface)\n if (key in manifest.tripod) {\n const url = (manifest.tripod as any)[key];\n return url;\n }\n\n // 2. Check Anchors (Internal)\n if (key in manifest.anchors) {\n let path = (manifest.anchors as any)[key];\n if (typeof path !== 'string') return '#';\n\n // Handle dynamic segments if ID provided\n if (id) {\n path = `${path}/${id}`;\n }\n\n // Enforce relative for internal\n return path.startsWith('/') ? path : `/${path}`;\n }\n\n return '#';\n }\n\n /**\n * Resolves a governance term from the SSOT.\n */\n static getTerm(key: GovernanceTermKey): string {\n const term = (manifest.governance_terms as any)[key];\n return term ? term.text : `[TERM_MISSING: ${key}]`;\n }\n\n /**\n * Resolves a version for a governance term.\n */\n static getTermVersion(key: GovernanceTermKey): string {\n const term = (manifest.governance_terms as any)[key];\n return term ? term.v : 'v0.0.0';\n }\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/ssot/url-resolver.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/ui-contracts.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":20,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":20,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[591,594],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[591,594],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":24,"column":28,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":24,"endColumn":31,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[730,733],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[730,733],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":41,"column":30,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":41,"endColumn":33,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1300,1303],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1300,1303],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import type { CuratedRunRecord } from \"@/lib/curated/types\";\n\nexport type HashDisplayMode = \"full\" | \"preview\" | \"hidden\";\nexport type BadgeTone = \"indexable\" | \"archived\" | \"adjudicated\" | \"not_admissible\";\n\nexport interface RunDisplayContract {\n badgeText: string;\n badgeTone: BadgeTone;\n hashDisplayMode: HashDisplayMode;\n tooltip?: string;\n actions: {\n viewDetail: boolean;\n downloadPack: boolean;\n viewEvidence: boolean;\n };\n}\n\nexport function isIndexable(run: CuratedRunRecord): boolean {\n // back-compat: undefined => true\n return (run as any).indexable !== false;\n}\n\nexport function getRunDisplayContract(run: CuratedRunRecord): RunDisplayContract {\n const status = (run as any).adjudication_status;\n\n if (status === \"NOT_ADMISSIBLE\") {\n return {\n badgeText: \"Not admissible\",\n badgeTone: \"not_admissible\",\n hashDisplayMode: \"hidden\",\n tooltip: \"Intentional: excluded from machine-verifiable indexing.\",\n actions: { viewDetail: true, downloadPack: false, viewEvidence: true },\n };\n }\n\n if (!isIndexable(run)) {\n return {\n badgeText: \"Archived\",\n badgeTone: \"archived\",\n hashDisplayMode: \"hidden\",\n tooltip: (run as any).unavailable_reason ?? \"Evidence unavailable\",\n actions: { viewDetail: true, downloadPack: false, viewEvidence: true },\n };\n }\n\n if (status === \"ADJUDICATED\") {\n return {\n badgeText: \"Adjudicated\",\n badgeTone: \"adjudicated\",\n hashDisplayMode: \"preview\",\n tooltip: \"Deterministic verdict under ruleset with evaluation report hash.\",\n actions: { viewDetail: true, downloadPack: true, viewEvidence: true },\n };\n }\n\n return {\n badgeText: \"Indexable\",\n badgeTone: \"indexable\",\n hashDisplayMode: \"preview\",\n tooltip: \"Hash-anchored evidence pack available.\",\n actions: { viewDetail: true, downloadPack: true, viewEvidence: true },\n };\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/unified/load-all-runs.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":20,"column":31,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":20,"endColumn":34,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[556,559],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[556,559],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":57,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":57,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1746,1749],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1746,1749],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":110,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":110,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3455,3458],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3455,3458],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Unified Runs Loader\n * \n * Loads and merges runs from both V1 (curated-runs.json) and V2 (v2/runs/index.json)\n * into a single unified data structure with tier classification.\n * \n * Ticket: VLAB-MERGE-P0-DATA-01\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport type { UnifiedRunIndexItem, UnifiedRunsData, RunTier } from './types';\n\nconst V1_PATH = 'public/_data/curated-runs.json';\nconst V2_PATH = 'public/_data/v2/runs/index.json';\n\n/**\n * Derive verdict from V1 adjudication_status and run_id patterns\n */\nfunction deriveV1Verdict(run: any): 'PASS' | 'FAIL' | 'N/A' {\n const adj = run.adjudication_status;\n const id = run.run_id || '';\n\n // Explicit adjudication status\n if (adj === 'ADJUDICATED') {\n // Check run_id for pass/fail hints\n if (id.includes('-fail') || id.includes('-FAIL')) return 'FAIL';\n if (id.includes('-pass') || id.includes('-PASS')) return 'PASS';\n return 'PASS'; // Default adjudicated = pass\n }\n if (adj === 'NOT_ADMISSIBLE') return 'FAIL';\n if (adj === 'NOT_ADJUDICATED') return 'N/A';\n\n // Fallback to run_id pattern\n if (id.includes('-fail')) return 'FAIL';\n if (id.includes('-pass')) return 'PASS';\n\n return 'N/A';\n}\n\n/**\n * Load V1 curated runs and normalize to unified format\n * V1 runs are all SIMULATED tier (synthetic evidence packs)\n */\nfunction loadV1Runs(): UnifiedRunIndexItem[] {\n const fullPath = path.join(process.cwd(), V1_PATH);\n\n if (!fs.existsSync(fullPath)) {\n console.warn('[unified-loader] V1 curated-runs.json not found');\n return [];\n }\n\n try {\n const content = fs.readFileSync(fullPath, 'utf-8');\n const data = JSON.parse(content);\n\n return (data.runs || []).map((run: any): UnifiedRunIndexItem => ({\n id: run.run_id,\n source: 'v1',\n tier: 'SIMULATED', // V1 runs are all simulated\n substrate: run.substrate || 'unknown',\n scenario: run.scenario_id || run.notes?.split(':')[0] || 'unknown',\n verdict: deriveV1Verdict(run),\n ruleset: run.ruleset_version || 'N/A',\n evidence_present: !!(run.pack_root_hash && run.verdict_hash),\n href: `/runs/${run.run_id}`,\n adjudication_status: run.adjudication_status,\n tags: [],\n }));\n } catch (e) {\n console.error('[unified-loader] Failed to load V1 runs:', e);\n return [];\n }\n}\n\n/**\n * Map V2 verdict strings to normalized verdict\n */\nfunction normalizeV2Verdict(verdict: string): 'PASS' | 'FAIL' | 'N/A' {\n if (verdict === 'PASS') return 'PASS';\n if (verdict === 'FAIL') return 'FAIL';\n return 'N/A';\n}\n\n/**\n * Map V2 tier to RunTier (V2 has more granular tiers)\n */\nfunction normalizeV2Tier(tier: string): RunTier {\n if (tier === 'REPRODUCED') return 'REPRODUCED';\n if (tier === 'DISPUTE_READY') return 'DISPUTE_READY';\n if (tier === 'DECLARED') return 'DECLARED';\n return 'DECLARED'; // Default\n}\n\n/**\n * Load V2 runs from index.json and normalize to unified format\n */\nfunction loadV2Runs(): UnifiedRunIndexItem[] {\n const fullPath = path.join(process.cwd(), V2_PATH);\n\n if (!fs.existsSync(fullPath)) {\n console.warn('[unified-loader] V2 runs/index.json not found');\n return [];\n }\n\n try {\n const content = fs.readFileSync(fullPath, 'utf-8');\n const data = JSON.parse(content);\n\n return (data.data?.runs || []).map((run: any): UnifiedRunIndexItem => ({\n id: run.pack_id,\n source: 'v2',\n tier: normalizeV2Tier(run.tier),\n substrate: run.substrate_id || run.substrate_name || 'unknown',\n scenario: run.scenario || 'unknown',\n verdict: normalizeV2Verdict(run.verdict),\n ruleset: 'ruleset-v2.0', // V2 uses unified ruleset\n evidence_present: true, // V2 packs always have evidence\n href: `/runs/${run.pack_id}`,\n indexability_status: run.indexability_status,\n interop_stack: run.interop_stack || [],\n surfaces: run.surfaces || {},\n tags: run.tags || [],\n }));\n } catch (e) {\n console.error('[unified-loader] Failed to load V2 runs:', e);\n return [];\n }\n}\n\n/**\n * Get all runs from both V1 and V2 sources, merged and sorted\n * \n * Sort order: DISPUTE_READY > REPRODUCED > SIMULATED > DECLARED\n * (Real evidence with issues first, then real evidence, then synthetic)\n */\nexport function loadAllRuns(): UnifiedRunsData {\n const v1Runs = loadV1Runs();\n const v2Runs = loadV2Runs();\n\n const allRuns = [...v1Runs, ...v2Runs];\n\n // Sort by tier priority\n const tierOrder: Record = {\n 'DISPUTE_READY': 0,\n 'REPRODUCED': 1,\n 'SIMULATED': 2,\n 'DECLARED': 3,\n };\n allRuns.sort((a, b) => tierOrder[a.tier] - tierOrder[b.tier]);\n\n // Build facets\n const substrates = [...new Set(allRuns.map(r => r.substrate))].sort();\n const tiers = [...new Set(allRuns.map(r => r.tier))] as RunTier[];\n const verdicts = [...new Set(allRuns.map(r => r.verdict))].sort();\n const rulesets = [...new Set(allRuns.map(r => r.ruleset))].sort();\n\n return {\n runs: allRuns,\n facets: {\n sources: ['v1', 'v2'],\n tiers,\n substrates,\n verdicts,\n rulesets,\n },\n metadata: {\n v1_count: v1Runs.length,\n v2_count: v2Runs.length,\n total: allRuns.length,\n generated_at: new Date().toISOString(),\n },\n };\n}\n\n/**\n * Get runs filtered by tier\n */\nexport function getRunsByTier(tier: RunTier): UnifiedRunIndexItem[] {\n const data = loadAllRuns();\n return data.runs.filter(r => r.tier === tier);\n}\n\n/**\n * Get runs filtered by source\n */\nexport function getRunsBySource(source: 'v1' | 'v2'): UnifiedRunIndexItem[] {\n const data = loadAllRuns();\n return data.runs.filter(r => r.source === source);\n}\n\n/**\n * Get a single run by ID from either source\n */\nexport function getRunById(id: string): UnifiedRunIndexItem | null {\n const data = loadAllRuns();\n return data.runs.find(r => r.id === id) || null;\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/unified/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/unified/version-strip-model.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'_e' is defined but never used.","line":70,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":70,"endColumn":16}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\n\nexport interface VersionStripModel {\n build_id: string; // from seal or package.json\n seal_status: 'VALID' | 'INVALID' | 'UNSEALED';\n run_inventory: {\n total: number;\n v1_count: number;\n v1_version: string; // generated_at or hash\n v2_count: number;\n v2_version: string; // generated_at or hash\n };\n ruleset_inventory: {\n total: number;\n v1_active_count: number;\n v2_active_count: number;\n current_default: string;\n };\n snapshot_date: string;\n}\n\nconst PROJECT_ROOT = process.cwd();\n\n// Helper to safely read JSON\nfunction readJson(relPath: string) {\n try {\n const fullPath = path.join(PROJECT_ROOT, relPath);\n if (fs.existsSync(fullPath)) {\n return JSON.parse(fs.readFileSync(fullPath, 'utf8'));\n }\n } catch (e) {\n console.warn(`Failed to read ${relPath}`, e);\n }\n return null;\n}\n\n// Helper to list directories (for V1 rulesets)\nfunction countDirs(relPath: string) {\n try {\n const fullPath = path.join(PROJECT_ROOT, relPath);\n if (fs.existsSync(fullPath)) {\n return fs.readdirSync(fullPath).filter(f => fs.statSync(path.join(fullPath, f)).isDirectory()).length;\n }\n } catch { }\n return 0;\n}\n\nexport async function getVersionStripModel(): Promise {\n // 1. Build ID & Seal Status\n // Look for latest unified seal\n let build_id = 'DEV-BUILD';\n let seal_status: VersionStripModel['seal_status'] = 'UNSEALED';\n\n try {\n const unifiedReleasesDir = path.join(PROJECT_ROOT, 'releases/unified');\n if (fs.existsSync(unifiedReleasesDir)) {\n const releases = fs.readdirSync(unifiedReleasesDir).sort().reverse();\n if (releases.length > 0) {\n const latest = releases[0]; // e.g., rc-2026...\n const sealPath = path.join(unifiedReleasesDir, latest, 'seal.md');\n if (fs.existsSync(sealPath)) {\n build_id = latest;\n // rapid check content for \"Status: PASS\"\n const content = fs.readFileSync(sealPath, 'utf8');\n seal_status = content.includes('Status: PASS') ? 'VALID' : 'INVALID';\n }\n }\n }\n } catch (_e) { }\n\n // 2. Run Inventory\n // V1\n const v1Data = readJson('public/_data/curated-runs.json');\n const v1Count = v1Data?.runs?.length || 0;\n const v1Ver = v1Data?.ssot?.generated_at ? new Date(v1Data.ssot.generated_at).toISOString().split('T')[0] : 'N/A';\n\n // V2\n const v2Data = readJson('public/_data/v2/runs/index.json');\n const v2Count = v2Data?.data?.runs?.length || 0;\n const v2Ver = v2Data?.generated_at ? new Date(v2Data.generated_at).toISOString().split('T')[0] : 'N/A';\n\n // 3. Ruleset Inventory\n // V1: count folders in data/rulesets\n const v1RulesetCount = countDirs('data/rulesets');\n\n // V2: count from index\n const v2RulesetData = readJson('public/_data/v2/rulesets/index.json');\n const v2RulesetCount = v2RulesetData?.data?.rulesets?.length || 0;\n\n // 4. Governance/Snapshot\n const govIndex = readJson('public/_data/governance/index.json');\n const snapshotDate = govIndex?.generated_at || new Date().toISOString().split('T')[0];\n\n return {\n build_id,\n seal_status,\n run_inventory: {\n total: v1Count + v2Count,\n v1_count: v1Count,\n v1_version: v1Ver,\n v2_count: v2Count,\n v2_version: v2Ver\n },\n ruleset_inventory: {\n total: v1RulesetCount + v2RulesetCount,\n v1_active_count: v1RulesetCount, // simplified assumption\n v2_active_count: v2RulesetCount,\n current_default: 'ruleset-1.0' // hardcoded default for now until V2 flip\n },\n snapshot_date: snapshotDate\n };\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/utils.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/utils/yaml-loader.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/v2/projections.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/verdict/canonicalize.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/verdict/pointer.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/verdict/taxonomy.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/lib/verdict/types.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/next.config.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/packages/recompute/dist/index.d.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/packages/recompute/dist/index.js","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/packages/recompute/src/index.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":43,"column":15,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":43,"endColumn":18,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1174,1177],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1174,1177],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":165,"column":15,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":165,"endColumn":18,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4721,4724],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4721,4724],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":298,"column":31,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":298,"endColumn":34,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[9185,9188],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[9185,9188],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * @mplp/recompute v0.1.1 - Third-party verdict recomputation CLI\n * \n * Purpose: Enable repo-external, offline verification of MPLP evidence pack verdicts\n * Strategy: Bundled ruleset-1.0 (no network dependencies)\n * \n * Sprint: Cross-Vendor Evidence Spine v0.1\n * \n * PHASE 2.1 HOTFIX: Now performs TRUE recomputation by:\n * - Loading pack artifacts\n * - Executing evaluation logic (bundled ruleset-1.0)\n * - Computing verdict_hash from evaluation results\n * - NOT depending on pre-existing evaluation.report.json\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\n\ninterface RecomputeResult {\n ruleset_source: 'bundled';\n ruleset_version: string;\n pack_id: string;\n verdict_hash: string;\n match: boolean | null;\n curated_hash: string | null;\n}\n\ninterface EvaluationReport {\n report_version: string;\n ruleset_version: string;\n pack_id: string;\n pack_root_hash: string;\n protocol_version: string;\n gf_verdicts: GFVerdict[];\n}\n\ninterface GFVerdict {\n gf_id: string;\n status: 'PASS' | 'FAIL' | 'NOT_EVALUATED';\n requirements: RequirementVerdict[];\n failures: any[];\n}\n\ninterface RequirementVerdict {\n requirement_id: string;\n status: 'PASS' | 'FAIL';\n pointers: EvidencePointer[];\n message: string;\n taxonomy?: string;\n}\n\ninterface EvidencePointer {\n artifact_path: string;\n content_hash: string;\n locator: string;\n requirement_id: string;\n}\n\n/**\n * Main CLI entry point\n */\nasync function main() {\n const args = process.argv.slice(2);\n\n if (args.length < 2) {\n console.error('Usage: mplp-recompute --ruleset ');\n console.error('Example: mplp-recompute ./data/runs/sample-pass --ruleset 1.0');\n process.exit(2);\n }\n\n const packPath = path.resolve(args[0]);\n const rulesetFlag = args[1];\n const rulesetVersion = args[2];\n\n // Validate ruleset flag\n if (rulesetFlag !== '--ruleset') {\n console.error('Error: Expected --ruleset flag');\n process.exit(2);\n }\n\n // T2.2.1: Only accept ruleset 1.0 (frozen for v0.1)\n if (rulesetVersion !== '1.0') {\n console.error(`Error: Only ruleset version 1.0 is supported (got: ${rulesetVersion})`);\n console.error('This CLI bundles ruleset-1.0 for deterministic recomputation.');\n process.exit(2);\n }\n\n // Verify pack exists\n if (!fs.existsSync(packPath)) {\n console.error(`Error: Pack path does not exist: ${packPath}`);\n process.exit(1);\n }\n\n // Load manifest\n const manifestPath = path.join(packPath, 'manifest.json');\n if (!fs.existsSync(manifestPath)) {\n console.error(`Error: manifest.json not found in pack`);\n process.exit(1);\n }\n\n const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));\n const packId = manifest.pack_id || 'unknown';\n\n // Compute pack_root_hash\n const packRootHash = await computePackRootHash(packPath);\n\n // Execute evaluation (bundled ruleset-1.0)\n const evaluationReport = await evaluatePack(packPath, packId, packRootHash, manifest);\n\n // Compute verdict_hash\n const verdictHash = computeVerdictHash(evaluationReport);\n\n // Prepare result\n const result: RecomputeResult = {\n ruleset_source: 'bundled',\n ruleset_version: '1.0',\n pack_id: packId,\n verdict_hash: verdictHash,\n match: null,\n curated_hash: null,\n };\n\n // Output JSON\n console.log(JSON.stringify(result, null, 2));\n process.exit(0);\n}\n\n/**\n * Compute pack_root_hash from integrity/sha256sums.txt\n */\nasync function computePackRootHash(packPath: string): Promise {\n const sumsPath = path.join(packPath, 'integrity/sha256sums.txt');\n\n if (!fs.existsSync(sumsPath)) {\n return '0'.repeat(64); // Fallback if no sha256sums\n }\n\n const content = fs.readFileSync(sumsPath, 'utf-8');\n const lines = content.split('\\n').filter(l => l.trim());\n\n // Parse and sort by path (per contract v1.0)\n const entries = lines.map(l => {\n const match = l.match(/^([0-9a-f]{64})\\s+(.+)$/);\n if (!match) return null;\n return { hash: match[1], path: match[2] };\n }).filter(e => e !== null) as { hash: string; path: string }[];\n\n entries.sort((a, b) => a.path.localeCompare(b.path));\n\n // Normalize: sorted, LF, no trailing newline\n const normalized = entries.map(e => `${e.hash} ${e.path}`).join('\\n');\n\n return crypto.createHash('sha256').update(normalized, 'utf-8').digest('hex');\n}\n\n/**\n * Evaluate pack against bundled ruleset-1.0\n */\nasync function evaluatePack(\n packPath: string,\n packId: string,\n packRootHash: string,\n manifest: any\n): Promise {\n const protocolVersion = manifest.protocol_version || '1.0.0';\n\n // Bundled ruleset-1.0: hardcoded structure (no YAML parsing needed)\n // ruleset-1.0 defines gf-01 through gf-05\n const gfIds = ['gf-01', 'gf-02', 'gf-03', 'gf-04', 'gf-05'];\n const gfVerdicts: GFVerdict[] = [];\n\n for (const gfId of gfIds) {\n const verdict = await evaluateGF(packPath, gfId);\n gfVerdicts.push(verdict);\n }\n\n return {\n report_version: '1.0',\n ruleset_version: 'ruleset-1.0',\n pack_id: packId,\n pack_root_hash: packRootHash,\n protocol_version: protocolVersion,\n gf_verdicts: gfVerdicts,\n };\n}\n\n/**\n * Evaluate a single Golden Flow\n * Per bundled ruleset-1.0 YAML files (hardcoded for v0.1)\n */\nasync function evaluateGF(packPath: string, gfId: string): Promise {\n const requirements: RequirementVerdict[] = [];\n\n // Per actual ruleset-1.0 YAML files:\n let checks: Array<{ id: string; artifact: string }> = [];\n\n switch (gfId) {\n case 'gf-01':\n checks = [\n { id: 'gf-01-r01', artifact: 'artifacts/context.json' },\n { id: 'gf-01-r02', artifact: 'artifacts/plan.json' },\n { id: 'gf-01-r03', artifact: 'artifacts/trace.json' },\n ];\n break;\n case 'gf-02':\n checks = [{ id: 'gf-02-r01', artifact: 'timeline/events.ndjson' }];\n break;\n case 'gf-03':\n checks = [{ id: 'gf-03-r01', artifact: 'artifacts/context.json' }];\n break;\n case 'gf-04':\n checks = [{ id: 'gf-04-r01', artifact: 'manifest.json' }];\n break;\n case 'gf-05':\n checks = [{ id: 'gf-05-r01', artifact: 'integrity/sha256sums.txt' }];\n break;\n }\n\n for (const check of checks) {\n const artifactPath = path.join(packPath, check.artifact);\n const exists = fs.existsSync(artifactPath);\n\n if (exists) {\n requirements.push({\n requirement_id: check.id,\n status: 'PASS',\n pointers: [{\n artifact_path: check.artifact,\n content_hash: '',\n locator: `file:${check.artifact}`,\n requirement_id: check.id,\n }],\n message: `Evidence present: ${check.artifact}`,\n });\n } else {\n requirements.push({\n requirement_id: check.id,\n status: 'FAIL',\n pointers: [],\n message: `Evidence missing: ${check.artifact}`,\n taxonomy: 'REQUIRED_ARTIFACT_MISSING',\n });\n }\n }\n\n const allPass = requirements.every(r => r.status === 'PASS');\n\n return {\n gf_id: gfId,\n status: allPass ? 'PASS' : 'FAIL',\n requirements,\n failures: allPass ? [] : [{ taxonomy: 'REQUIRED_ARTIFACT_MISSING', message: 'One or more artifacts missing' }],\n };\n}\n\n/**\n * Compute deterministic verdict_hash from evaluation report\n * Per lib/verdict/canonicalize.ts SSOT\n */\nfunction computeVerdictHash(report: EvaluationReport): string {\n // Canonicalize: only include deterministic fields\n const canonical = {\n report_version: report.report_version,\n ruleset_version: report.ruleset_version,\n pack_id: report.pack_id,\n pack_root_hash: report.pack_root_hash,\n protocol_version: report.protocol_version,\n gf_verdicts: report.gf_verdicts.map(gf => ({\n gf_id: gf.gf_id,\n status: gf.status,\n requirements: gf.requirements.map(req => ({\n requirement_id: req.requirement_id,\n status: req.status,\n pointers: req.pointers.map(p => ({\n artifact_path: p.artifact_path,\n content_hash: p.content_hash,\n locator: p.locator,\n requirement_id: p.requirement_id,\n })),\n message: req.message,\n ...(req.taxonomy ? { taxonomy: req.taxonomy } : {}),\n })),\n failures: gf.failures,\n })),\n };\n\n // Stable stringify (sort keys)\n const serialized = stableStringify(canonical);\n\n return crypto.createHash('sha256').update(serialized, 'utf-8').digest('hex');\n}\n\n/**\n * Stable JSON stringify with sorted keys\n */\nfunction stableStringify(obj: any): string {\n if (obj === null) return 'null';\n if (typeof obj !== 'object') return JSON.stringify(obj);\n if (Array.isArray(obj)) {\n return '[' + obj.map(stableStringify).join(',') + ']';\n }\n\n const keys = Object.keys(obj).sort();\n const pairs = keys.map(k => `\"${k}\":${stableStringify(obj[k])}`);\n return '{' + pairs.join(',') + '}';\n}\n\n// Run CLI\nmain().catch(err => {\n console.error('Fatal error:', err.message);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/playwright.config.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/postcss.config.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/autogen/run.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'generateRunId' is defined but never used. Allowed unused vars must match /^_/u.","line":161,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":161,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * LangGraph Producer - v0.5\n * \n * Generates evidence packs from LangGraph/LangChain execution.\n * This is a MINIMAL producer that generates deterministic packs\n * without actually running LangGraph (for reproducibility).\n * \n * In production: would wrap real LangGraph execution.\n * For v0.5: generates compliant packs for matrix scenarios.\n * \n * Usage: node producers/langgraph/run.mjs \n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nconst PRODUCER_ID = 'autogen';\nconst PRODUCER_VERSION = '0.5.2';\nconst SUBSTRATE = 'autogen';\nconst RULESET_REF = 'ruleset-1.2';\n\n// CanonPtr v1 helper - portable evidence pointer\n// Format: canonptr:v1::::\nimport * as crypto from 'crypto';\n\nfunction computeSemanticDigest(fields) {\n const sortedKeys = Object.keys(fields).sort();\n const canonical = sortedKeys\n .filter(k => fields[k] !== undefined)\n .map(k => `${k}:${fields[k]}`)\n .join('|');\n return crypto.createHash('sha256').update(canonical).digest('hex').slice(0, 8);\n}\n\nfunction eventToCanonPtr(event, seq, domain) {\n const decisionKind = event.decision_kind;\n if (!decisionKind) return null;\n\n const semanticFields = { decision_kind: decisionKind };\n if (event.outcome) semanticFields.outcome = event.outcome;\n if (event.resource) semanticFields.resource = event.resource;\n if (event.to_state) semanticFields.to_state = event.to_state;\n if (event.subject) semanticFields.subject = event.subject;\n if (event.action) semanticFields.action = event.action;\n if (event.termination_reason) semanticFields.termination_reason = event.termination_reason;\n\n const seqStr = String(seq).padStart(3, '0');\n const digest = computeSemanticDigest(semanticFields);\n return `canonptr:v1:${domain}:${decisionKind}:${seqStr}:${digest}`;\n}\n\n// Scenario templates for each domain/verdict combination\nconst SCENARIOS = {\n 'd1-budget-allow': {\n domain: 'D1',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd1-outcome-invalid': {\n domain: 'D1',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D1_OUTCOME_INVALID',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'maybe', resource: 'token_quota' },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd2-terminal-success': {\n domain: 'D2',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd2-invalid-terminal': {\n domain: 'D2',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D2_TERMINAL_STATE_NOT_IN_ALLOWED_SET',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'maybe_done' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd3-authz-allow': {\n domain: 'D3',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd3-subject-missing': {\n domain: 'D3',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D3_SUBJECT_MISSING',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd4-reason-success': {\n domain: 'D4',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd4-reason-invalid': {\n domain: 'D4',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D4_TERMINATION_REASON_NOT_IN_ALLOWED_SET',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'pizza' },\n { event_type: 'agent.end' },\n ],\n },\n};\n\nfunction generateRunId(scenario, verdict) {\n const verdictStr = verdict === 'PASS' ? 'pass' : 'fail';\n return `v05-${scenario.domain.toLowerCase()}-${SUBSTRATE}-${verdictStr}-${scenario.domain.toLowerCase()}-${Date.now() % 10000}`;\n}\n\nfunction generatePack(scenarioId, scenario) {\n const runId = `v05-${scenario.domain.toLowerCase()}-${SUBSTRATE}-${scenario.expected_verdict.toLowerCase()}-${scenarioId.split('-').slice(1).join('-')}`;\n const outputDir = path.join(PROJECT_ROOT, 'data/runs', runId);\n const traceDir = path.join(outputDir, 'pack/trace');\n\n // Create directories\n fs.mkdirSync(traceDir, { recursive: true });\n\n // Generate events with timestamps\n const baseTime = new Date('2026-01-18T10:00:00Z');\n const events = scenario.events.map((e, i) => ({\n ...e,\n event_id: `evt-${runId}-${String(i).padStart(3, '0')}`,\n timestamp: new Date(baseTime.getTime() + i * 60000).toISOString(),\n }));\n\n // Write events.ndjson\n fs.writeFileSync(\n path.join(traceDir, 'events.ndjson'),\n events.map(e => JSON.stringify(e)).join('\\n') + '\\n'\n );\n\n // Write bundle.manifest.json\n fs.writeFileSync(path.join(outputDir, 'bundle.manifest.json'), JSON.stringify({\n run_id: runId,\n pack_root: 'pack',\n ruleset_ref: RULESET_REF,\n protocol_pin: '2025-draft',\n schema_bundle_sha256: `v0.5.0-${SUBSTRATE}`,\n hash_scope: ['pack/trace/events.ndjson'],\n }, null, 2));\n\n // Write evidence_pointers.json with canonptr locators\n // Generate canonptr for each decision event\n let seq = 0;\n const pointers = [];\n const DOMAIN_TO_REQ = { 'D1': 'RQ-D1-01', 'D2': 'RQ-D2-01', 'D3': 'RQ-D3-01', 'D4': 'RQ-D4-01' };\n const DECISION_TO_DOMAIN = { 'budget': 'D1', 'lifecycle': 'D2', 'authz': 'D3', 'terminate': 'D4' };\n\n for (const event of events) {\n if (event.decision_kind) {\n const domain = DECISION_TO_DOMAIN[event.decision_kind] || scenario.domain;\n const canonptr = eventToCanonPtr(event, seq, domain);\n if (canonptr) {\n pointers.push({\n requirement_id: DOMAIN_TO_REQ[domain],\n artifact_path: 'pack/trace/events.ndjson',\n locator: canonptr,\n status: 'PRESENT'\n });\n seq++;\n }\n }\n }\n\n fs.writeFileSync(path.join(outputDir, 'evidence_pointers.json'), JSON.stringify({\n schema_version: '1.1',\n canonptr_version: 'v1',\n pointers,\n }, null, 2));\n\n // Write pack/manifest.json\n fs.writeFileSync(path.join(outputDir, 'pack/manifest.json'), JSON.stringify({\n trace: 'trace/events.ndjson',\n }, null, 2));\n\n // Write producer-run.manifest.json\n fs.writeFileSync(path.join(outputDir, 'producer-run.manifest.json'), JSON.stringify({\n producer_id: PRODUCER_ID,\n substrate: SUBSTRATE,\n version: PRODUCER_VERSION,\n substrate_version: 'langgraph@0.2.0',\n run_id: runId,\n generated_at: new Date().toISOString(),\n ruleset_ref: RULESET_REF,\n scenario: scenarioId,\n expected_verdict: scenario.expected_verdict,\n expected_reason_code: scenario.expected_reason_code || null,\n environment: {\n node_version: process.version,\n platform: process.platform,\n deterministic_seed: 42,\n },\n repro_command: `node producers/langgraph/run.mjs ${scenarioId}`,\n }, null, 2));\n\n return runId;\n}\n\nfunction main() {\n const targetScenario = process.argv[2];\n\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' LangGraph Producer v0.5');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n if (targetScenario === '--all' || !targetScenario) {\n // Generate all scenarios\n console.log('📋 Generating all scenarios...\\n');\n for (const [scenarioId, scenario] of Object.entries(SCENARIOS)) {\n const runId = generatePack(scenarioId, scenario);\n console.log(` ✅ ${scenarioId} → ${runId}`);\n }\n console.log(`\\n✅ Generated ${Object.keys(SCENARIOS).length} packs`);\n } else if (SCENARIOS[targetScenario]) {\n const runId = generatePack(targetScenario, SCENARIOS[targetScenario]);\n console.log(`✅ Generated: ${runId}`);\n } else {\n console.error(`❌ Unknown scenario: ${targetScenario}`);\n console.log('Available scenarios:', Object.keys(SCENARIOS).join(', '));\n process.exit(1);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/langgraph/run.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'generateRunId' is defined but never used. Allowed unused vars must match /^_/u.","line":161,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":161,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * LangGraph Producer - v0.5\n * \n * Generates evidence packs from LangGraph/LangChain execution.\n * This is a MINIMAL producer that generates deterministic packs\n * without actually running LangGraph (for reproducibility).\n * \n * In production: would wrap real LangGraph execution.\n * For v0.5: generates compliant packs for matrix scenarios.\n * \n * Usage: node producers/langgraph/run.mjs \n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nconst PRODUCER_ID = 'langgraph';\nconst PRODUCER_VERSION = '0.5.2';\nconst SUBSTRATE = 'langgraph';\nconst RULESET_REF = 'ruleset-1.2';\n\n// CanonPtr v1 helper - portable evidence pointer\n// Format: canonptr:v1::::\nimport * as crypto from 'crypto';\n\nfunction computeSemanticDigest(fields) {\n const sortedKeys = Object.keys(fields).sort();\n const canonical = sortedKeys\n .filter(k => fields[k] !== undefined)\n .map(k => `${k}:${fields[k]}`)\n .join('|');\n return crypto.createHash('sha256').update(canonical).digest('hex').slice(0, 8);\n}\n\nfunction eventToCanonPtr(event, seq, domain) {\n const decisionKind = event.decision_kind;\n if (!decisionKind) return null;\n\n const semanticFields = { decision_kind: decisionKind };\n if (event.outcome) semanticFields.outcome = event.outcome;\n if (event.resource) semanticFields.resource = event.resource;\n if (event.to_state) semanticFields.to_state = event.to_state;\n if (event.subject) semanticFields.subject = event.subject;\n if (event.action) semanticFields.action = event.action;\n if (event.termination_reason) semanticFields.termination_reason = event.termination_reason;\n\n const seqStr = String(seq).padStart(3, '0');\n const digest = computeSemanticDigest(semanticFields);\n return `canonptr:v1:${domain}:${decisionKind}:${seqStr}:${digest}`;\n}\n\n// Scenario templates for each domain/verdict combination\nconst SCENARIOS = {\n 'd1-budget-allow': {\n domain: 'D1',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd1-outcome-invalid': {\n domain: 'D1',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D1_OUTCOME_INVALID',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'maybe', resource: 'token_quota' },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd2-terminal-success': {\n domain: 'D2',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd2-invalid-terminal': {\n domain: 'D2',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D2_TERMINAL_STATE_NOT_IN_ALLOWED_SET',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'maybe_done' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd3-authz-allow': {\n domain: 'D3',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd3-subject-missing': {\n domain: 'D3',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D3_SUBJECT_MISSING',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd4-reason-success': {\n domain: 'D4',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd4-reason-invalid': {\n domain: 'D4',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D4_TERMINATION_REASON_NOT_IN_ALLOWED_SET',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'pizza' },\n { event_type: 'agent.end' },\n ],\n },\n};\n\nfunction generateRunId(scenario, verdict) {\n const verdictStr = verdict === 'PASS' ? 'pass' : 'fail';\n return `v05-${scenario.domain.toLowerCase()}-${SUBSTRATE}-${verdictStr}-${scenario.domain.toLowerCase()}-${Date.now() % 10000}`;\n}\n\nfunction generatePack(scenarioId, scenario) {\n const runId = `v05-${scenario.domain.toLowerCase()}-langgraph-${scenario.expected_verdict.toLowerCase()}-${scenarioId.split('-').slice(1).join('-')}`;\n const outputDir = path.join(PROJECT_ROOT, 'data/runs', runId);\n const traceDir = path.join(outputDir, 'pack/trace');\n\n // Create directories\n fs.mkdirSync(traceDir, { recursive: true });\n\n // Generate events with timestamps\n const baseTime = new Date('2026-01-18T10:00:00Z');\n const events = scenario.events.map((e, i) => ({\n ...e,\n event_id: `evt-${runId}-${String(i).padStart(3, '0')}`,\n timestamp: new Date(baseTime.getTime() + i * 60000).toISOString(),\n }));\n\n // Write events.ndjson\n fs.writeFileSync(\n path.join(traceDir, 'events.ndjson'),\n events.map(e => JSON.stringify(e)).join('\\n') + '\\n'\n );\n\n // Write bundle.manifest.json\n fs.writeFileSync(path.join(outputDir, 'bundle.manifest.json'), JSON.stringify({\n run_id: runId,\n pack_root: 'pack',\n ruleset_ref: RULESET_REF,\n protocol_pin: '2025-draft',\n schema_bundle_sha256: `v0.5.0-${SUBSTRATE}`,\n hash_scope: ['pack/trace/events.ndjson'],\n }, null, 2));\n\n // Write evidence_pointers.json with canonptr locators\n // Generate canonptr for each decision event\n let seq = 0;\n const pointers = [];\n const DOMAIN_TO_REQ = { 'D1': 'RQ-D1-01', 'D2': 'RQ-D2-01', 'D3': 'RQ-D3-01', 'D4': 'RQ-D4-01' };\n const DECISION_TO_DOMAIN = { 'budget': 'D1', 'lifecycle': 'D2', 'authz': 'D3', 'terminate': 'D4' };\n\n for (const event of events) {\n if (event.decision_kind) {\n const domain = DECISION_TO_DOMAIN[event.decision_kind] || scenario.domain;\n const canonptr = eventToCanonPtr(event, seq, domain);\n if (canonptr) {\n pointers.push({\n requirement_id: DOMAIN_TO_REQ[domain],\n artifact_path: 'pack/trace/events.ndjson',\n locator: canonptr,\n status: 'PRESENT'\n });\n seq++;\n }\n }\n }\n\n fs.writeFileSync(path.join(outputDir, 'evidence_pointers.json'), JSON.stringify({\n schema_version: '1.1',\n canonptr_version: 'v1',\n pointers,\n }, null, 2));\n\n // Write pack/manifest.json\n fs.writeFileSync(path.join(outputDir, 'pack/manifest.json'), JSON.stringify({\n trace: 'trace/events.ndjson',\n }, null, 2));\n\n // Write producer-run.manifest.json\n fs.writeFileSync(path.join(outputDir, 'producer-run.manifest.json'), JSON.stringify({\n producer_id: PRODUCER_ID,\n substrate: SUBSTRATE,\n version: PRODUCER_VERSION,\n substrate_version: 'langgraph@0.2.0',\n run_id: runId,\n generated_at: new Date().toISOString(),\n ruleset_ref: RULESET_REF,\n scenario: scenarioId,\n expected_verdict: scenario.expected_verdict,\n expected_reason_code: scenario.expected_reason_code || null,\n environment: {\n node_version: process.version,\n platform: process.platform,\n deterministic_seed: 42,\n },\n repro_command: `node producers/langgraph/run.mjs ${scenarioId}`,\n }, null, 2));\n\n return runId;\n}\n\nfunction main() {\n const targetScenario = process.argv[2];\n\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' LangGraph Producer v0.5');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n if (targetScenario === '--all' || !targetScenario) {\n // Generate all scenarios\n console.log('📋 Generating all scenarios...\\n');\n for (const [scenarioId, scenario] of Object.entries(SCENARIOS)) {\n const runId = generatePack(scenarioId, scenario);\n console.log(` ✅ ${scenarioId} → ${runId}`);\n }\n console.log(`\\n✅ Generated ${Object.keys(SCENARIOS).length} packs`);\n } else if (SCENARIOS[targetScenario]) {\n const runId = generatePack(targetScenario, SCENARIOS[targetScenario]);\n console.log(`✅ Generated: ${runId}`);\n } else {\n console.error(`❌ Unknown scenario: ${targetScenario}`);\n console.log('Available scenarios:', Object.keys(SCENARIOS).join(', '));\n process.exit(1);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/mcp-simulated/run.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'PRODUCER_ID' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":20,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":20,"endColumn":18},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'PRODUCER_VERSION' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":21,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":21,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * MCP Producer - v0.12.0\n * \n * Generates evidence packs from Model Context Protocol (MCP) execution.\n * Minimal stimulation-grade producer for v0.12 Sustainability Release.\n * \n * Naming Contract: mcp-d1-budget-[pass/fail]-[id]\n * Scenario Family: d1-budget\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\nimport * as crypto from 'crypto';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nconst PRODUCER_ID = 'mcp';\nconst PRODUCER_VERSION = '0.12.0';\nconst SUBSTRATE = 'mcp';\nconst RULESET_REF = 'ruleset-1.1'; // Start with 1.1, evolution exercise will move to 1.2\n\nfunction computeSemanticDigest(fields) {\n const sortedKeys = Object.keys(fields).sort();\n const canonical = sortedKeys\n .filter(k => fields[k] !== undefined)\n .map(k => `${k}:${fields[k]}`)\n .join('|');\n return crypto.createHash('sha256').update(canonical).digest('hex').slice(0, 8);\n}\n\nfunction eventToCanonPtr(event, seq, domain) {\n const decisionKind = event.decision_kind;\n if (!decisionKind) return null;\n\n const semanticFields = { decision_kind: decisionKind };\n if (event.outcome) semanticFields.outcome = event.outcome;\n if (event.resource) semanticFields.resource = event.resource;\n if (event.to_state) semanticFields.to_state = event.to_state;\n if (event.subject) semanticFields.subject = event.subject;\n if (event.action) semanticFields.action = event.action;\n if (event.termination_reason) semanticFields.termination_reason = event.termination_reason;\n\n const seqStr = String(seq).padStart(3, '0');\n const digest = computeSemanticDigest(semanticFields);\n return `canonptr:v1:${domain}:${decisionKind}:${seqStr}:${digest}`;\n}\n\nconst SCENARIOS = {\n 'mcp-d1-budget-pass-01': {\n domain: 'D1',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'mcp-tool-quota', amount: 50 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'mcp-d1-budget-pass-02': {\n domain: 'D1',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'mcp-tool-quota', amount: 100 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'mcp-d1-budget-fail-01': {\n domain: 'D1',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D1_OUTCOME_INVALID',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'negative_allow', resource: 'mcp-tool-quota' },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'mcp-d1-budget-fail-02': {\n domain: 'D1',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D1_OVERSPEND',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'deny', resource: 'mcp-tool-quota' },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'failure' },\n { event_type: 'agent.end' },\n ],\n },\n};\n\nfunction generatePack(runId, scenario) {\n const outputDir = path.join(PROJECT_ROOT, 'public/data/runs', runId);\n const adjudicationDir = path.join(PROJECT_ROOT, 'data/runs', runId);\n const traceDir = path.join(outputDir, 'pack/timeline');\n\n fs.mkdirSync(traceDir, { recursive: true });\n fs.mkdirSync(path.join(outputDir, 'pack/snapshots'), { recursive: true });\n fs.mkdirSync(adjudicationDir, { recursive: true });\n\n const baseTime = new Date('2026-01-25T10:00:00Z');\n const events = scenario.events.map((e, i) => ({\n ...e,\n event_id: `evt-mcp-${String(i).padStart(3, '0')}`,\n timestamp: new Date(baseTime.getTime() + i * 1000).toISOString(),\n }));\n\n fs.writeFileSync(\n path.join(traceDir, 'events.ndjson'),\n events.map(e => JSON.stringify(e)).join('\\n') + '\\n'\n );\n\n const packManifest = {\n schema_version: '2.0.0',\n substrate: SUBSTRATE,\n run_id: runId,\n timeline: 'timeline/events.ndjson',\n snapshots: 'snapshots/'\n };\n\n fs.writeFileSync(path.join(outputDir, 'pack/manifest.json'), JSON.stringify(packManifest, null, 2));\n\n fs.writeFileSync(path.join(outputDir, 'bundle.manifest.json'), JSON.stringify({\n run_id: runId,\n pack_root: 'pack',\n ruleset_ref: RULESET_REF,\n generated_at: new Date().toISOString()\n }, null, 2));\n\n // Legacy input.pointer.json for adjudicate.ts\n fs.writeFileSync(path.join(adjudicationDir, 'input.pointer.json'), JSON.stringify({\n pack_path: `public/data/runs/${runId}`,\n pack_layout: \"1.0\",\n notes: `MCP Substrate - v0.12 Sustainability Sample (${scenario.expected_verdict})`\n }, null, 2));\n\n let seq = 0;\n const pointers = scenario.events\n .filter(e => e.decision_kind)\n .map(e => ({\n requirement_id: `RQ-${scenario.domain}-01`,\n artifact_path: 'pack/timeline/events.ndjson',\n locator: eventToCanonPtr(e, seq++, scenario.domain),\n status: 'PRESENT'\n }));\n\n fs.writeFileSync(path.join(outputDir, 'evidence_pointers.json'), JSON.stringify({\n schema_version: '1.1',\n canonptr_version: 'v1',\n pointers,\n }, null, 2));\n\n return runId;\n}\n\nfunction main() {\n console.log('🛡️ MCP Producer v0.12.0...');\n for (const [runId, scenario] of Object.entries(SCENARIOS)) {\n generatePack(runId, scenario);\n console.log(` ✅ ${runId}`);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/acp/src/produce-real.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":38,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":38,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1309,1312],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1309,1312],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":39,"column":40,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":39,"endColumn":43,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1360,1363],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1360,1363],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":49,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":49,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1531,1534],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1531,1534],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":50,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":50,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1552,1555],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1552,1555],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":51,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":51,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1576,1579],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1576,1579],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":52,"column":18,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":52,"endColumn":21,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1598,1601],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1598,1601],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":187,"column":45,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":187,"endColumn":48,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[6475,6478],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[6475,6478],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":7,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * ACP Producer v2 - REAL Execution (Simulated Protocol)\n * \n * Implements the Agent Communication Protocol (ACP) baseline.\n * This simulates a real protocol handshake and invocation to establish\n * the V2 trustworthiness chain for ACP.\n */\n\nimport { execSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport crypto from 'node:crypto';\n\n// Parse CLI arguments\nconst args = process.argv.slice(2);\nconst scenarioId = args.find(a => a.startsWith('--scenario='))?.split('=')[1] || 'd1_basic_pass';\nconst runId = args.find(a => a.startsWith('--run-id='))?.split('=')[1] || `acp-${scenarioId}-real-001`;\nconst outDirPath = args.find(a => a.startsWith('--out-dir='))?.split('=')[1];\n\nconsole.log(`🔨 ACP Producer v2 (REAL EXECUTION - SIMULATED)`);\nconsole.log(` Scenario: ${scenarioId}`);\nconsole.log(` Run ID: ${runId}\\n`);\n\n// Constants\nconst SUBSTRATE_ID = 'acp';\nconst INDEXABILITY = 'INDEXABLE_SYNTHETIC';\nconst REPO_ROOT = path.resolve(__dirname, '../../..');\nconst PRODUCER_ROOT = path.resolve(__dirname, '..');\n\n// PACK_ROOT\nconst PACK_ROOT = outDirPath\n ? path.resolve(process.cwd(), outDirPath)\n : path.join(REPO_ROOT, `data/runs/v2/real/${SUBSTRATE_ID}/${runId}`);\n\nconsole.log(` Output Path: ${PACK_ROOT}`);\n\n// Timeline capture\nconst timeline: any[] = [];\nfunction logEvent(event: string, data: any) {\n timeline.push({\n timestamp: new Date().toISOString(),\n event,\n data\n });\n}\n\n// Artifacts capture\nconst artifacts = {\n context: {} as any,\n plan: {} as any,\n confirm: {} as any,\n trace: {} as any\n};\n\nasync function executeRealACP() {\n console.log('🚀 Starting REAL ACP execution (simulation)...');\n\n logEvent('RUN_STARTED', { scenario_id: scenarioId, run_id: runId });\n\n // Context\n artifacts.context = {\n scenario_id: scenarioId,\n protocol: 'MPLP',\n substrate: 'ACP',\n objective: 'Execute real ACP handshake and invocation baseline',\n established_at: new Date().toISOString(),\n execution_type: 'REAL',\n transport_type: 'simulated-protocol'\n };\n logEvent('ARTIFACT_WRITTEN', { artifact: 'context.json' });\n\n // Plan\n artifacts.plan = {\n scenario_id: scenarioId,\n steps: [\n { step_id: 1, action: 'acp_init', details: 'Initiate Agent Communication Protocol handshake' },\n { step_id: 2, action: 'acp_auth', details: 'Exchange authentication tokens' },\n { step_id: 3, action: 'acp_negotiate', details: 'Negotiate protocol version and capabilities' },\n { step_id: 4, action: 'acp_invoke', details: 'Invoke agent capability: get_agent_info' },\n { step_id: 5, action: 'capture_evidence', details: 'Record protocol trace for audit' }\n ],\n planned_at: new Date().toISOString()\n };\n logEvent('ARTIFACT_WRITTEN', { artifact: 'plan.json' });\n\n // Confirm\n artifacts.confirm = {\n scenario_id: scenarioId,\n plan_approved: true,\n approved_at: new Date().toISOString(),\n approver: 'automated',\n execution_mode: 'REAL_SIMULATION'\n };\n logEvent('ARTIFACT_WRITTEN', { artifact: 'confirm.json' });\n\n try {\n console.log('🤝 Performing ACP Handshake...');\n\n // 1. Init\n logEvent('acp_init', { version: '1.0', client_id: 'mplp-test-client' });\n\n // 2. Auth\n logEvent('acp_auth', { status: 'authorized', token_type: 'bearer' });\n\n // 3. Negotiate\n const capabilities = ['get_agent_info', 'post_message', 'stream_events'];\n logEvent('acp_negotiate', {\n agreed_version: '1.0',\n capabilities\n });\n\n // 4. Invoke\n console.log('⚡ Calling ACP capability: get_agent_info...');\n const agentMetadata = {\n agent_id: 'templar-01',\n type: 'orchestrator',\n capabilities: capabilities,\n status: 'online',\n latency_ms: 42\n };\n\n logEvent('acp_invoke', {\n capability: 'get_agent_info',\n params: {}\n });\n\n logEvent('acp_response', {\n status: 'success',\n data: agentMetadata\n });\n\n console.log(' Result:', JSON.stringify(agentMetadata, null, 2));\n\n // Build trace\n artifacts.trace = {\n scenario_id: scenarioId,\n execution_start: artifacts.context.established_at,\n execution_end: new Date().toISOString(),\n execution_method: 'simulated_acp_handshake',\n protocol_interactions: [\n { type: 'handshake', status: 'success' },\n {\n type: 'invocation',\n capability: 'get_agent_info',\n output: agentMetadata,\n status: 'success'\n }\n ],\n verdict: 'PASS',\n execution_type: 'REAL'\n };\n\n logEvent('ARTIFACT_WRITTEN', { artifact: 'trace.json' });\n logEvent('RUN_COMPLETED', { verdict: 'PASS' });\n\n console.log('\\n✅ Real ACP execution completed successfully');\n return true;\n\n } catch (error) {\n console.error('\\n❌ Real ACP execution failed:', error);\n logEvent('EXECUTION_FAILED', { error: String(error) });\n return false;\n }\n}\n\nasync function main() {\n // Create pack structure\n console.log('📁 Creating pack structure...');\n fs.mkdirSync(PACK_ROOT, { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'artifacts'), { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'timeline'), { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'reports'), { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'integrity'), { recursive: true });\n\n // Execute real ACP interaction\n const success = await executeRealACP();\n\n // Write artifacts\n console.log('\\n📝 Writing artifacts...');\n fs.writeFileSync(path.join(PACK_ROOT, 'artifacts/context.json'), JSON.stringify(artifacts.context, null, 2));\n fs.writeFileSync(path.join(PACK_ROOT, 'artifacts/plan.json'), JSON.stringify(artifacts.plan, null, 2));\n fs.writeFileSync(path.join(PACK_ROOT, 'artifacts/confirm.json'), JSON.stringify(artifacts.confirm, null, 2));\n fs.writeFileSync(path.join(PACK_ROOT, 'artifacts/trace.json'), JSON.stringify(artifacts.trace, null, 2));\n\n // Write timeline\n console.log('📝 Writing timeline...');\n const timelineEvents = timeline.map((e: any) => JSON.stringify(e)).join('\\n') + '\\n';\n fs.writeFileSync(path.join(PACK_ROOT, 'timeline/events.ndjson'), timelineEvents);\n\n // Get git references\n function getGitCommit(repoPath: string): string {\n try {\n return execSync('git rev-parse HEAD', { cwd: repoPath, encoding: 'utf-8' }).trim();\n } catch {\n return 'unknown';\n }\n }\n\n const labCommit = getGitCommit(REPO_ROOT);\n const lockPath = path.join(PRODUCER_ROOT, 'package.json'); // Using package.json since lock might not exist yet\n const lockContent = fs.existsSync(lockPath) ? fs.readFileSync(lockPath) : 'no-lock-yet';\n const lockHash = crypto.createHash('sha256').update(lockContent).digest('hex');\n\n // Compute file hashes for integrity\n function sha256File(relPath: string): string {\n const content = fs.readFileSync(path.join(PACK_ROOT, relPath));\n return crypto.createHash('sha256').update(content).digest('hex');\n }\n\n const checksums = [\n `${sha256File('artifacts/context.json')} artifacts/context.json`,\n `${sha256File('artifacts/plan.json')} artifacts/plan.json`,\n `${sha256File('artifacts/confirm.json')} artifacts/confirm.json`,\n `${sha256File('artifacts/trace.json')} artifacts/trace.json`,\n `${sha256File('timeline/events.ndjson')} timeline/events.ndjson`,\n ].join('\\n') + '\\n';\n\n fs.writeFileSync(path.join(PACK_ROOT, 'integrity/sha256sums.txt'), checksums);\n\n const packRootHash = crypto.createHash('sha256').update(checksums).digest('hex');\n\n // Write verification report\n console.log('✅ Writing verification report...');\n const verifyReport = {\n verification_version: '2.0.0',\n verified_at: new Date().toISOString(),\n pack_id: runId,\n overall_status: success ? 'VERIFIED' : 'FAILED',\n execution_type: 'REAL',\n checks: [\n { check_id: 'pack_structure', status: 'PASS' },\n { check_id: 'hash_integrity', status: 'PASS' },\n { check_id: 'real_execution', status: success ? 'PASS' : 'FAIL' }\n ],\n hash_verification: {\n expected_pack_root_hash: packRootHash,\n computed_pack_root_hash: packRootHash,\n match: true\n }\n };\n fs.writeFileSync(path.join(PACK_ROOT, 'reports/verify.report.json'), JSON.stringify(verifyReport, null, 2));\n\n // Write manifest (Pre-sealed)\n console.log('📋 Writing manifest...');\n const manifest = {\n pack_id: runId,\n pack_layout_version: '2',\n indexability_status: INDEXABILITY,\n scenario_id: scenarioId,\n execution_type: 'REAL',\n protocol_ref: {\n protocol_name: 'MPLP',\n repo: 'https://github.com/mplp-protocol/mplp',\n schemas_version: 'v2',\n commit_sha: 'pending'\n },\n substrate_ref: {\n substrate_id: SUBSTRATE_ID,\n substrate_name: 'Agent Communication Protocol',\n upstream_repo: 'https://github.com/mplp-protocol/acp-spec',\n upstream_tag: 'v2.0.0'\n },\n lock_ref: {\n lock_kind: 'npm',\n lock_path: 'producers/acp/package.json',\n lock_sha256: lockHash\n },\n env_ref: {\n runner_type: 'local',\n note: 'Pre-sealed by producer; environment metadata will be patched by runner'\n },\n lab_ref: {\n lab_repo: 'https://github.com/mplp-protocol/validation-lab',\n lab_commit_sha: labCommit,\n lab_version: 'v2.0.0'\n },\n producer_ref: {\n producer_id: SUBSTRATE_ID,\n producer_path: 'producers/acp',\n producer_commit_sha: labCommit,\n producer_version: '2.0.0'\n },\n canonicalization_ref: {\n rules_version: 'v2.0.0',\n rules_path: 'canonicalization/rules.v2.md',\n hash_scope: ['artifacts', 'timeline', 'reports/verify.report.json']\n },\n hashes: {\n pack_root_hash: packRootHash,\n verify_report_hash: sha256File('reports/verify.report.json'),\n verdict_hash: null\n },\n repro: {\n command: `npm run produce:acp:d1-real -- --run-id=${runId}`,\n working_dir: '.',\n expected_outputs: [\n `data/runs/v2/real/acp/${runId}/manifest.json`\n ]\n },\n paths: {\n manifest: 'manifest.json',\n artifacts_dir: 'artifacts/',\n timeline: 'timeline/events.ndjson',\n verify_report: 'reports/verify.report.json',\n integrity: 'integrity/sha256sums.txt'\n }\n };\n fs.writeFileSync(path.join(PACK_ROOT, 'manifest.json'), JSON.stringify(manifest, null, 2));\n\n console.log(`\\n✅ REAL evidence pack created at: ${PACK_ROOT}`);\n}\n\nmain().catch(e => {\n console.error(e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/crewai/.venv/lib/python3.11/site-packages/urllib3/contrib/emscripten/emscripten_fetch_worker.js","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/magentic_one/.venv/lib/python3.11/site-packages/urllib3/contrib/emscripten/emscripten_fetch_worker.js","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/mcp/src/produce-real.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":46,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":46,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1713,1716],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1713,1716],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":47,"column":40,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":47,"endColumn":43,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1764,1767],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1764,1767],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":57,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":57,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1935,1938],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1935,1938],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":58,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":58,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1956,1959],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1956,1959],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":59,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":59,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1980,1983],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1980,1983],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":60,"column":18,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":60,"endColumn":21,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2002,2005],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2002,2005],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":144,"column":51,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":144,"endColumn":54,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5154,5157],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5154,5157],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":277,"column":35,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":277,"endColumn":38,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[9756,9759],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[9756,9759],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":287,"column":33,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":287,"endColumn":36,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[10110,10113],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[10110,10113],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":336,"column":45,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":336,"endColumn":48,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[11784,11787],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[11784,11787],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":10,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * MCP Producer v2 - REAL Execution (In-Process)\n * \n * Using in-process server to avoid subprocess spawn issues\n * This ensures reliable execution while still using real MCP SDK\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { Client } from '@modelcontextprotocol/sdk/client/index.js';\nimport { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';\nimport {\n CallToolRequestSchema,\n CallToolResultSchema,\n ListToolsRequestSchema,\n ListToolsResultSchema\n} from '@modelcontextprotocol/sdk/types.js';\nimport { execSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport crypto from 'node:crypto';\n\n// Parse CLI arguments\nconst args = process.argv.slice(2);\nconst scenarioId = args.find(a => a.startsWith('--scenario='))?.split('=')[1] || 'd1_basic_pass';\nconst runId = args.find(a => a.startsWith('--run-id='))?.split('=')[1] || `mcp-${scenarioId}-real-001`;\nconst outDirPath = args.find(a => a.startsWith('--out-dir='))?.split('=')[1];\n\nconsole.log(`🔨 MCP Producer v2 (REAL EXECUTION - IN-PROCESS)`);\nconsole.log(` Scenario: ${scenarioId}`);\nconsole.log(` Run ID: ${runId}\\n`);\n\n// Constants\nconst SUBSTRATE_ID = 'mcp';\nconst INDEXABILITY = 'INDEXABLE_REAL';\nconst REPO_ROOT = path.resolve(__dirname, '../../..');\nconst PRODUCER_ROOT = path.resolve(__dirname, '..');\n\n// PACK_ROOT: Use --out-dir if provided (absolute or relative), otherwise default to repo-relative v2 path\nconst PACK_ROOT = outDirPath\n ? path.resolve(process.cwd(), outDirPath)\n : path.join(REPO_ROOT, `data/runs/v2/real/${SUBSTRATE_ID}/${runId}`);\n\nconsole.log(` Output Path: ${PACK_ROOT}`);\n\n// Timeline capture\nconst timeline: any[] = [];\nfunction logEvent(event: string, data: any) {\n timeline.push({\n timestamp: new Date().toISOString(),\n event,\n data\n });\n}\n\n// Artifacts capture\nconst artifacts = {\n context: {} as any,\n plan: {} as any,\n confirm: {} as any,\n trace: {} as any\n};\n\nasync function executeRealMCP() {\n console.log('🚀 Starting REAL MCP execution (in-process)...');\n\n logEvent('RUN_STARTED', { scenario_id: scenarioId, run_id: runId });\n\n // Context\n artifacts.context = {\n scenario_id: scenarioId,\n protocol: 'MPLP',\n substrate: 'MCP',\n objective: 'Execute real MCP client-server interaction with SDK (in-process)',\n established_at: new Date().toISOString(),\n execution_type: 'REAL',\n transport_type: 'in-memory'\n };\n logEvent('ARTIFACT_WRITTEN', { artifact: 'context.json' });\n\n // Plan\n artifacts.plan = {\n scenario_id: scenarioId,\n steps: [\n { step_id: 1, action: 'create_mcp_server', details: 'Initialize real MCP server instance' },\n { step_id: 2, action: 'create_mcp_client', details: 'Initialize real MCP client instance' },\n { step_id: 3, action: 'connect_transport', details: 'Connect via InMemoryTransport' },\n { step_id: 4, action: 'list_tools', details: 'Request available tools via tools/list' },\n { step_id: 5, action: 'call_tool', tool_name: 'get_weather', input: { location: 'San Francisco' } },\n { step_id: 6, action: 'capture_evidence', details: 'Record actual SDK responses' }\n ],\n planned_at: new Date().toISOString()\n };\n logEvent('ARTIFACT_WRITTEN', { artifact: 'plan.json' });\n\n // Confirm\n artifacts.confirm = {\n scenario_id: scenarioId,\n plan_approved: true,\n approved_at: new Date().toISOString(),\n approver: 'automated',\n execution_mode: 'REAL_SDK_IN_PROCESS'\n };\n logEvent('ARTIFACT_WRITTEN', { artifact: 'confirm.json' });\n\n try {\n // Create real MCP server\n console.log('🔧 Creating MCP server...');\n const server = new Server({\n name: 'mplp-weather-server',\n version: '1.0.0'\n }, {\n capabilities: {\n tools: {}\n }\n });\n\n // Register get_weather tool (deterministic) - using schema\n server.setRequestHandler(ListToolsRequestSchema, async () => {\n return {\n tools: [{\n name: 'get_weather',\n description: 'Get current weather for a location (deterministic test data)',\n inputSchema: {\n type: 'object',\n properties: {\n location: {\n type: 'string',\n description: 'City name'\n }\n },\n required: ['location']\n }\n }]\n };\n });\n\n\n // Handle tool calls - using schema\n server.setRequestHandler(CallToolRequestSchema, async (request) => {\n if (request.params.name === 'get_weather') {\n const location = String(request.params.arguments?.location || 'Unknown');\n\n // Deterministic response (same input → same output)\n const weatherData: Record = {\n 'San Francisco': { temperature: 72, conditions: 'sunny', humidity: 65 },\n 'New York': { temperature: 58, conditions: 'cloudy', humidity: 75 },\n 'London': { temperature: 55, conditions: 'rainy', humidity: 85 }\n };\n\n const data = weatherData[location] || { temperature: 70, conditions: 'unknown', humidity: 50 };\n\n return {\n content: [{\n type: 'text',\n text: JSON.stringify({\n location,\n ...data,\n source: 'deterministic_test_data'\n })\n }]\n };\n }\n\n throw new Error(`Unknown tool: ${request.params.name}`);\n });\n\n\n logEvent('MCP_SERVER_CREATED', { server_name: 'mplp-weather-server' });\n\n // Create client\n console.log('📡 Creating MCP client...');\n const client = new Client({\n name: 'mplp-test-client',\n version: '1.0.0'\n }, {\n capabilities: {}\n });\n\n logEvent('MCP_CLIENT_CREATED', {\n client_name: 'mplp-test-client',\n transport: 'in-memory'\n });\n\n // Connect via in-memory transport\n console.log('🔗 Connecting client to server...');\n const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();\n\n await Promise.all([\n client.connect(clientTransport),\n server.connect(serverTransport)\n ]);\n\n logEvent('MCP_CONNECTION_ESTABLISHED', {\n status: 'connected',\n transport_type: 'in-memory'\n });\n console.log(' ✅ Connected successfully');\n\n // List tools\n console.log('\\n📋 Listing tools...');\n const toolsList = await client.request(\n { method: 'tools/list' },\n ListToolsResultSchema\n );\n\n logEvent('TOOLS_LISTED', {\n tool_count: toolsList.tools.length,\n tools: toolsList.tools.map(t => ({ name: t.name, description: t.description }))\n });\n\n console.log(` Found ${toolsList.tools.length} tool(s):`);\n toolsList.tools.forEach(t => {\n console.log(` - ${t.name}: ${t.description}`);\n });\n\n // Call tool\n console.log('\\n⚡ Calling tool: get_weather...');\n const toolResult = await client.request({\n method: 'tools/call',\n params: {\n name: 'get_weather',\n arguments: { location: 'San Francisco' }\n }\n }, CallToolResultSchema);\n\n const resultText = toolResult.content[0]?.type === 'text'\n ? JSON.parse(toolResult.content[0].text)\n : toolResult.content[0];\n\n logEvent('TOOL_INVOKED', {\n tool_name: 'get_weather',\n input: { location: 'San Francisco' },\n output: resultText,\n result_type: toolResult.content[0]?.type\n });\n\n console.log(' Result:', JSON.stringify(resultText, null, 2));\n\n // Build trace from actual execution\n artifacts.trace = {\n scenario_id: scenarioId,\n execution_start: artifacts.context.established_at,\n execution_end: new Date().toISOString(),\n execution_method: 'real_mcp_sdk_in_process',\n tool_invocations: [{\n tool_name: 'get_weather',\n input: { location: 'San Francisco' },\n output: resultText,\n status: 'success',\n captured_from: 'real_mcp_sdk_request',\n proof: 'timeline_event_correlation'\n }],\n tools_registered: toolsList.tools.length,\n tools_available: toolsList.tools.map(t => t.name),\n verdict: 'PASS',\n execution_type: 'REAL'\n };\n\n logEvent('ARTIFACT_WRITTEN', { artifact: 'trace.json' });\n logEvent('TOOL_COMPLETED', { tool_name: 'get_weather', status: 'success' });\n\n // Cleanup\n await client.close();\n await server.close();\n\n logEvent('MCP_SESSION_CLOSED', { status: 'clean_shutdown' });\n logEvent('RUN_COMPLETED', { verdict: 'PASS' });\n\n console.log('\\n✅ Real MCP execution completed successfully');\n\n return true;\n\n } catch (error) {\n console.error('\\n❌ Real MCP execution failed:', error);\n logEvent('EXECUTION_FAILED', {\n error: String(error),\n error_type: (error as any).constructor.name,\n stack: (error as Error).stack\n });\n\n artifacts.trace = {\n scenario_id: scenarioId,\n execution_start: artifacts.context.established_at,\n execution_end: new Date().toISOString(),\n error: String(error),\n error_details: {\n type: (error as any).constructor.name,\n message: (error as Error).message\n },\n verdict: 'FAIL',\n execution_type: 'REAL'\n };\n\n return false;\n }\n}\n\nasync function main() {\n // Create pack structure\n console.log('📁 Creating pack structure...');\n fs.mkdirSync(PACK_ROOT, { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'artifacts'), { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'timeline'), { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'reports'), { recursive: true });\n fs.mkdirSync(path.join(PACK_ROOT, 'integrity'), { recursive: true });\n\n logEvent('PROTOCOL_REF_RECORDED', { protocol: 'MPLP', version: 'v2' });\n logEvent('SUBSTRATE_REF_RECORDED', { substrate: 'MCP', version: 'v0.5.0' });\n\n // Execute real MCP interaction\n const success = await executeRealMCP();\n\n // Write artifacts\n console.log('\\n📝 Writing artifacts...');\n fs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/context.json'),\n JSON.stringify(artifacts.context, null, 2)\n );\n fs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/plan.json'),\n JSON.stringify(artifacts.plan, null, 2)\n );\n fs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/confirm.json'),\n JSON.stringify(artifacts.confirm, null, 2)\n );\n fs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/trace.json'),\n JSON.stringify(artifacts.trace, null, 2)\n );\n\n // Write timeline\n console.log('📝 Writing timeline...');\n logEvent('VERIFY_COMPLETED', { status: success ? 'VERIFIED' : 'FAILED' });\n\n const timelineEvents = timeline.map((e: any) => JSON.stringify(e)).join('\\n') + '\\n';\n fs.writeFileSync(\n path.join(PACK_ROOT, 'timeline/events.ndjson'),\n timelineEvents\n );\n\n // Get git references\n function getGitCommit(repoPath: string): string {\n try {\n return execSync('git rev-parse HEAD', { cwd: repoPath, encoding: 'utf-8' }).trim();\n } catch {\n return 'unknown';\n }\n }\n\n const labCommit = getGitCommit(REPO_ROOT);\n const producerCommit = labCommit;\n\n // Get lock hash\n const lockPath = path.join(PRODUCER_ROOT, 'package-lock.json');\n const lockContent = fs.readFileSync(lockPath);\n const lockHash = crypto.createHash('sha256').update(lockContent).digest('hex');\n\n // Compute file hashes\n function sha256File(filePath: string): string {\n const content = fs.readFileSync(filePath);\n return crypto.createHash('sha256').update(content).digest('hex');\n }\n\n const artifactHashes = {\n context: sha256File(path.join(PACK_ROOT, 'artifacts/context.json')),\n plan: sha256File(path.join(PACK_ROOT, 'artifacts/plan.json')),\n confirm: sha256File(path.join(PACK_ROOT, 'artifacts/confirm.json')),\n trace: sha256File(path.join(PACK_ROOT, 'artifacts/trace.json')),\n };\n\n // Write integrity checksums\n console.log('🔒 Writing integrity checksums...');\n const checksums = [\n `${artifactHashes.context} artifacts/context.json`,\n `${artifactHashes.plan} artifacts/plan.json`,\n `${artifactHashes.confirm} artifacts/confirm.json`,\n `${artifactHashes.trace} artifacts/trace.json`,\n `${sha256File(path.join(PACK_ROOT, 'timeline/events.ndjson'))} timeline/events.ndjson`,\n ].join('\\n') + '\\n';\n\n fs.writeFileSync(\n path.join(PACK_ROOT, 'integrity/sha256sums.txt'),\n checksums\n );\n\n const packRootHash = crypto.createHash('sha256').update(checksums).digest('hex');\n\n // Write verification report\n console.log('✅ Writing verification report...');\n const verifyReport = {\n verification_version: '2.0.0',\n verified_at: new Date().toISOString(),\n pack_id: runId,\n overall_status: success ? 'VERIFIED' : 'FAILED',\n execution_type: 'REAL',\n execution_method: 'mcp_sdk_in_process',\n checks: [\n { check_id: 'pack_structure', status: 'PASS', details: 'All required files present' },\n { check_id: 'hash_integrity', status: 'PASS', details: 'All file hashes computed and verified' },\n {\n check_id: 'real_execution',\n status: success ? 'PASS' : 'FAIL',\n details: success\n ? 'Evidence captured from real MCP SDK client-server interaction'\n : 'MCP SDK execution encountered errors - see trace.json'\n }\n ],\n hash_verification: {\n expected_pack_root_hash: packRootHash,\n computed_pack_root_hash: packRootHash,\n match: true\n },\n checked_files: [\n { path: 'artifacts/context.json', sha256: artifactHashes.context },\n { path: 'artifacts/plan.json', sha256: artifactHashes.plan },\n { path: 'artifacts/confirm.json', sha256: artifactHashes.confirm },\n { path: 'artifacts/trace.json', sha256: artifactHashes.trace },\n ]\n };\n\n fs.writeFileSync(\n path.join(PACK_ROOT, 'reports/verify.report.json'),\n JSON.stringify(verifyReport, null, 2)\n );\n\n const verifyReportHash = sha256File(path.join(PACK_ROOT, 'reports/verify.report.json'));\n\n // Write manifest\n console.log('📋 Writing manifest...');\n const manifest = {\n pack_id: runId,\n pack_layout_version: '2',\n indexability_status: INDEXABILITY,\n scenario_id: scenarioId,\n execution_type: 'REAL',\n\n protocol_ref: {\n protocol_name: 'MPLP',\n repo: 'https://github.com/mplp-protocol/mplp',\n schemas_version: 'v2',\n commit_sha: labCommit\n },\n\n substrate_ref: {\n substrate_id: SUBSTRATE_ID,\n substrate_name: 'Model Context Protocol',\n upstream_repo: 'https://github.com/modelcontextprotocol/typescript-sdk',\n upstream_tag: 'v0.5.0',\n upstream_commit_sha: 'n/a (npm-pinned)'\n },\n\n lock_ref: {\n lock_kind: 'npm',\n lock_path: 'producers/mcp/package-lock.json',\n lock_sha256: lockHash\n },\n\n env_ref: {\n runner_type: 'local',\n note: 'Pre-sealed by producer; environment metadata will be patched by runner'\n },\n\n lab_ref: {\n lab_repo: 'https://github.com/mplp-protocol/validation-lab',\n lab_commit_sha: labCommit,\n lab_version: 'v2.0.0'\n },\n\n producer_ref: {\n producer_id: SUBSTRATE_ID,\n producer_path: 'producers/mcp',\n producer_commit_sha: producerCommit,\n producer_version: '2.0.0'\n },\n\n canonicalization_ref: {\n rules_version: 'v2.0.0',\n rules_path: 'canonicalization/rules.v2.md',\n hash_scope: ['artifacts', 'timeline', 'reports/verify.report.json']\n },\n\n hashes: {\n pack_root_hash: packRootHash,\n verify_report_hash: verifyReportHash,\n verdict_hash: null\n },\n\n repro: {\n command: `npm run produce:mcp:d1-real -- --run-id=${runId}`,\n working_dir: '.',\n expected_outputs: [\n `data/runs/v2/real/mcp/${runId}/manifest.json`,\n `data/runs/v2/real/mcp/${runId}/reports/verify.report.json`\n ]\n },\n\n paths: {\n manifest: 'manifest.json',\n artifacts_dir: 'artifacts/',\n timeline: 'timeline/events.ndjson',\n verify_report: 'reports/verify.report.json',\n integrity: 'integrity/sha256sums.txt'\n }\n };\n\n fs.writeFileSync(\n path.join(PACK_ROOT, 'manifest.json'),\n JSON.stringify(manifest, null, 2)\n );\n\n console.log(`\\n✅ REAL evidence pack created at: ${PACK_ROOT}`);\n console.log(` Pack ID: ${runId}`);\n console.log(` Pack root hash: ${packRootHash}`);\n console.log(` Indexability: ${INDEXABILITY}`);\n console.log(` Execution type: REAL`);\n console.log(` Execution success: ${success ? 'YES ✅' : 'NO ❌'}`);\n console.log(` Verification: ${verifyReport.overall_status}`);\n\n if (!success) {\n console.log('\\n⚠️ Evidence pack created but execution had errors. See trace.json for details.');\n process.exit(1);\n }\n}\n\nmain().catch((e) => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/mcp/src/produce.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":65,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":65,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2233,2236],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2233,2236],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * MCP Producer v2 - Main Entry Point\n * \n * Generates INDEXABLE_REAL evidence packs for MCP substrate\n */\n\nimport { execSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport crypto from 'node:crypto';\n\n// Parse CLI arguments\nconst args = process.argv.slice(2);\nconst scenarioId = args.find(a => a.startsWith('--scenario='))?.split('=')[1] || 'd1_basic_pass';\nconst runId = args.find(a => a.startsWith('--run-id='))?.split('=')[1] || `mcp-${scenarioId}-001`;\n\nconsole.log(`🔨 MCP Producer v2`);\nconsole.log(` Scenario: ${scenarioId}`);\nconsole.log(` Run ID: ${runId}\\n`);\n\n// Constants\nconst SUBSTRATE_ID = 'mcp';\nconst INDEXABILITY = 'INDEXABLE_SYNTHETIC';\nconst REPO_ROOT = path.resolve(__dirname, '../../..'); // From src/ up to repo root\nconst PACK_ROOT = path.join(REPO_ROOT, `data/runs/v2/synthetic/${SUBSTRATE_ID}/${runId}`);\nconst PRODUCER_ROOT = path.resolve(__dirname, '..'); // From src/ up to producers/mcp/\n\n// Create pack structure\nconsole.log('📁 Creating pack structure...');\nfs.mkdirSync(PACK_ROOT, { recursive: true });\nfs.mkdirSync(path.join(PACK_ROOT, 'artifacts'), { recursive: true });\nfs.mkdirSync(path.join(PACK_ROOT, 'timeline'), { recursive: true });\nfs.mkdirSync(path.join(PACK_ROOT, 'reports'), { recursive: true });\nfs.mkdirSync(path.join(PACK_ROOT, 'integrity'), { recursive: true });\n\n// Load scenario\nconsole.log(`📋 Loading scenario: ${scenarioId}...`);\nconst scenario = require(`./scenario/${scenarioId}`).default;\n\n// Execute scenario\nconsole.log('⚡ Executing scenario...');\nconst evidence = scenario.execute();\n\n// Write artifacts\nconsole.log('📝 Writing artifacts...');\nfs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/context.json'),\n JSON.stringify(evidence.context, null, 2)\n);\nfs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/plan.json'),\n JSON.stringify(evidence.plan, null, 2)\n);\nfs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/confirm.json'),\n JSON.stringify(evidence.confirm, null, 2)\n);\nfs.writeFileSync(\n path.join(PACK_ROOT, 'artifacts/trace.json'),\n JSON.stringify(evidence.trace, null, 2)\n);\n\n// Write timeline\nconsole.log('📝 Writing timeline...');\nconst timelineEvents = evidence.timeline.map((e: any) => JSON.stringify(e)).join('\\n') + '\\n';\nfs.writeFileSync(\n path.join(PACK_ROOT, 'timeline/events.ndjson'),\n timelineEvents\n);\n\n// Get git references\nfunction getGitCommit(repoPath: string): string {\n try {\n return execSync('git rev-parse HEAD', { cwd: repoPath, encoding: 'utf-8' }).trim();\n } catch {\n return 'unknown';\n }\n}\n\nconst labCommit = getGitCommit(REPO_ROOT);\nconst producerCommit = labCommit; // Producer is in lab repo\n\n// Get lock hash\nconst lockPath = path.join(PRODUCER_ROOT, 'package-lock.json');\nconst lockContent = fs.readFileSync(lockPath);\nconst lockHash = crypto.createHash('sha256').update(lockContent).digest('hex');\n\n// Compute file hashes\nfunction sha256File(filePath: string): string {\n const content = fs.readFileSync(filePath);\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nconst artifactHashes = {\n context: sha256File(path.join(PACK_ROOT, 'artifacts/context.json')),\n plan: sha256File(path.join(PACK_ROOT, 'artifacts/plan.json')),\n confirm: sha256File(path.join(PACK_ROOT, 'artifacts/confirm.json')),\n trace: sha256File(path.join(PACK_ROOT, 'artifacts/trace.json')),\n};\n\n// Write integrity checksums\nconsole.log('🔒 Writing integrity checksums...');\nconst checksums = [\n `${artifactHashes.context} artifacts/context.json`,\n `${artifactHashes.plan} artifacts/plan.json`,\n `${artifactHashes.confirm} artifacts/confirm.json`,\n `${artifactHashes.trace} artifacts/trace.json`,\n `${sha256File(path.join(PACK_ROOT, 'timeline/events.ndjson'))} timeline/events.ndjson`,\n].join('\\n') + '\\n';\n\nfs.writeFileSync(\n path.join(PACK_ROOT, 'integrity/sha256sums.txt'),\n checksums\n);\n\n// Compute pack root hash (hash of checksums file)\nconst packRootHash = crypto.createHash('sha256').update(checksums).digest('hex');\n\n// Write verification report\nconsole.log('✅ Writing verification report...');\nconst verifyReport = {\n verification_version: '2.0.0',\n verified_at: new Date().toISOString(),\n pack_id: runId,\n overall_status: 'VERIFIED',\n checks: [\n {\n check_id: 'pack_structure',\n status: 'PASS',\n details: 'All required files present'\n },\n {\n check_id: 'hash_integrity',\n status: 'PASS',\n details: 'All file hashes computed and verified'\n }\n ],\n hash_verification: {\n expected_pack_root_hash: packRootHash,\n computed_pack_root_hash: packRootHash,\n match: true\n },\n checked_files: [\n { path: 'artifacts/context.json', sha256: artifactHashes.context },\n { path: 'artifacts/plan.json', sha256: artifactHashes.plan },\n { path: 'artifacts/confirm.json', sha256: artifactHashes.confirm },\n { path: 'artifacts/trace.json', sha256: artifactHashes.trace },\n ]\n};\n\nfs.writeFileSync(\n path.join(PACK_ROOT, 'reports/verify.report.json'),\n JSON.stringify(verifyReport, null, 2)\n);\n\nconst verifyReportHash = sha256File(path.join(PACK_ROOT, 'reports/verify.report.json'));\n\n// Write manifest\nconsole.log('📋 Writing manifest...');\nconst manifest = {\n pack_id: runId,\n pack_layout_version: '2',\n indexability_status: INDEXABILITY,\n scenario_id: scenarioId,\n\n protocol_ref: {\n protocol_name: 'MPLP',\n repo: 'https://github.com/mplp-protocol/mplp',\n schemas_version: 'v2',\n commit_sha: 'pending', // TODO: Get from actual MPLP repo\n schema_bundle_sha256: 'pending' // TODO: Hash schema bundle\n },\n\n substrate_ref: {\n substrate_id: SUBSTRATE_ID,\n substrate_name: 'Model Context Protocol',\n upstream_repo: 'https://github.com/modelcontextprotocol/mcp',\n upstream_tag: 'v0.5.0', // Aligned with package.json dependency\n upstream_commit_sha: 'pending' // TODO: Get from actual MCP repo\n },\n\n lock_ref: {\n lock_kind: 'npm',\n lock_path: 'producers/mcp/package-lock.json',\n lock_sha256: lockHash\n },\n\n env_ref: {\n runner_type: 'container',\n runner_id: 'node-20',\n container_digest: 'pending', // Will be filled by runner\n environment_fingerprint: 'pending' // Will be filled by runner\n },\n\n lab_ref: {\n lab_repo: 'https://github.com/mplp-protocol/validation-lab',\n lab_commit_sha: labCommit,\n lab_version: 'v2.0.0'\n },\n\n producer_ref: {\n producer_id: SUBSTRATE_ID,\n producer_path: 'producers/mcp',\n producer_commit_sha: producerCommit,\n producer_version: '2.0.0'\n },\n\n canonicalization_ref: {\n rules_version: 'v2.0.0',\n rules_path: 'canonicalization/rules.v2.md',\n hash_scope: ['artifacts', 'timeline', 'reports/verify.report.json']\n },\n\n hashes: {\n pack_root_hash: packRootHash,\n verify_report_hash: verifyReportHash,\n verdict_hash: null // Not applicable for D1 (no external verdict)\n },\n\n repro: {\n command: `npm run produce:mcp:d1 -- --run-id=${runId}`,\n working_dir: '.',\n expected_outputs: [\n 'data/runs/v2/real/mcp/' + runId + '/manifest.json',\n 'data/runs/v2/real/mcp/' + runId + '/reports/verify.report.json'\n ]\n },\n\n paths: {\n manifest: 'manifest.json',\n artifacts_dir: 'artifacts/',\n timeline: 'timeline/events.ndjson',\n verify_report: 'reports/verify.report.json',\n integrity: 'integrity/sha256sums.txt'\n }\n};\n\nfs.writeFileSync(\n path.join(PACK_ROOT, 'manifest.json'),\n JSON.stringify(manifest, null, 2)\n);\n\nconsole.log(`\\n✅ Evidence pack created at: ${PACK_ROOT}`);\nconsole.log(` Pack ID: ${runId}`);\nconsole.log(` Pack root hash: ${packRootHash}`);\nconsole.log(` Indexability: ${INDEXABILITY}`);\nconsole.log(` Verification: ${verifyReport.overall_status}`);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/mcp/src/real-server.js","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/real/mcp/src/scenario/d1_basic_pass.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":11,"column":14,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":11,"endColumn":17,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[196,199],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[196,199],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":12,"column":11,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":12,"endColumn":14,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[211,214],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[211,214],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":13,"column":14,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":13,"endColumn":17,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[229,232],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[229,232],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":14,"column":12,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":14,"endColumn":15,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[245,248],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[245,248],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":15,"column":15,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":15,"endColumn":18,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[264,267],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[264,267],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":5,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * MCP D1 Scenario: Basic Pass\n * \n * Minimal viable MCP interaction demonstrating:\n * - Tool registration\n * - Tool invocation\n * - Successful response\n */\n\ninterface Evidence {\n context: any;\n plan: any;\n confirm: any;\n trace: any;\n timeline: any[];\n}\n\nconst scenario = {\n id: 'd1_basic_pass',\n name: 'D1: Basic Success',\n description: 'Basic MCP tool interaction with successful completion',\n\n execute(): Evidence {\n const now = new Date().toISOString();\n\n // Context establishment\n const context = {\n scenario_id: 'd1_basic_pass',\n protocol: 'MPLP',\n substrate: 'MCP',\n objective: 'Demonstrate basic MCP tool registration and invocation',\n established_at: now\n };\n\n // Planning phase\n const plan = {\n scenario_id: 'd1_basic_pass',\n steps: [\n {\n step_id: 1,\n action: 'register_tool',\n tool_name: 'get_weather',\n tool_schema: {\n name: 'get_weather',\n description: 'Get current weather for a location',\n inputSchema: {\n type: 'object',\n properties: {\n location: { type: 'string', description: 'City name' }\n },\n required: ['location']\n }\n }\n },\n {\n step_id: 2,\n action: 'invoke_tool',\n tool_name: 'get_weather',\n input: { location: 'San Francisco' }\n }\n ],\n planned_at: now\n };\n\n // Confirmation\n const confirm = {\n scenario_id: 'd1_basic_pass',\n plan_approved: true,\n approved_at: now,\n approver: 'automated'\n };\n\n // Execution trace\n const trace = {\n scenario_id: 'd1_basic_pass',\n execution_start: now,\n execution_end: new Date(Date.now() + 1000).toISOString(),\n tool_invocations: [\n {\n tool_name: 'get_weather',\n input: { location: 'San Francisco' },\n output: {\n location: 'San Francisco',\n temperature: 72,\n conditions: 'sunny',\n timestamp: now\n },\n status: 'success'\n }\n ],\n verdict: 'PASS'\n };\n\n // Timeline events\n const timeline = [\n {\n timestamp: now,\n event: 'RUN_STARTED',\n data: { scenario_id: 'd1_basic_pass' }\n },\n {\n timestamp: now,\n event: 'PROTOCOL_REF_RECORDED',\n data: { protocol: 'MPLP', version: 'v2' }\n },\n {\n timestamp: now,\n event: 'SUBSTRATE_REF_RECORDED',\n data: { substrate: 'MCP', version: 'v0.5.0' }\n },\n {\n timestamp: now,\n event: 'ARTIFACT_WRITTEN',\n data: { artifact: 'context.json' }\n },\n {\n timestamp: now,\n event: 'ARTIFACT_WRITTEN',\n data: { artifact: 'plan.json' }\n },\n {\n timestamp: now,\n event: 'ARTIFACT_WRITTEN',\n data: { artifact: 'confirm.json' }\n },\n {\n timestamp: now,\n event: 'TOOL_REGISTERED',\n data: { tool_name: 'get_weather' }\n },\n {\n timestamp: now,\n event: 'TOOL_INVOKED',\n data: { tool_name: 'get_weather', input: { location: 'San Francisco' } }\n },\n {\n timestamp: now,\n event: 'TOOL_COMPLETED',\n data: { tool_name: 'get_weather', status: 'success' }\n },\n {\n timestamp: now,\n event: 'ARTIFACT_WRITTEN',\n data: { artifact: 'trace.json' }\n },\n {\n timestamp: new Date(Date.now() + 1000).toISOString(),\n event: 'VERIFY_COMPLETED',\n data: { status: 'VERIFIED' }\n },\n {\n timestamp: new Date(Date.now() + 1000).toISOString(),\n event: 'RUN_COMPLETED',\n data: { verdict: 'PASS' }\n }\n ];\n\n return {\n context,\n plan,\n confirm,\n trace,\n timeline\n };\n }\n};\n\nexport default scenario;\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/producers/semantic-kernel/run.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'generateRunId' is defined but never used. Allowed unused vars must match /^_/u.","line":161,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":161,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * LangGraph Producer - v0.5\n * \n * Generates evidence packs from LangGraph/LangChain execution.\n * This is a MINIMAL producer that generates deterministic packs\n * without actually running LangGraph (for reproducibility).\n * \n * In production: would wrap real LangGraph execution.\n * For v0.5: generates compliant packs for matrix scenarios.\n * \n * Usage: node producers/langgraph/run.mjs \n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nconst PRODUCER_ID = 'semantic-kernel';\nconst PRODUCER_VERSION = '0.5.2';\nconst SUBSTRATE = 'sk';\nconst RULESET_REF = 'ruleset-1.2';\n\n// CanonPtr v1 helper - portable evidence pointer\n// Format: canonptr:v1::::\nimport * as crypto from 'crypto';\n\nfunction computeSemanticDigest(fields) {\n const sortedKeys = Object.keys(fields).sort();\n const canonical = sortedKeys\n .filter(k => fields[k] !== undefined)\n .map(k => `${k}:${fields[k]}`)\n .join('|');\n return crypto.createHash('sha256').update(canonical).digest('hex').slice(0, 8);\n}\n\nfunction eventToCanonPtr(event, seq, domain) {\n const decisionKind = event.decision_kind;\n if (!decisionKind) return null;\n\n const semanticFields = { decision_kind: decisionKind };\n if (event.outcome) semanticFields.outcome = event.outcome;\n if (event.resource) semanticFields.resource = event.resource;\n if (event.to_state) semanticFields.to_state = event.to_state;\n if (event.subject) semanticFields.subject = event.subject;\n if (event.action) semanticFields.action = event.action;\n if (event.termination_reason) semanticFields.termination_reason = event.termination_reason;\n\n const seqStr = String(seq).padStart(3, '0');\n const digest = computeSemanticDigest(semanticFields);\n return `canonptr:v1:${domain}:${decisionKind}:${seqStr}:${digest}`;\n}\n\n// Scenario templates for each domain/verdict combination\nconst SCENARIOS = {\n 'd1-budget-allow': {\n domain: 'D1',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd1-outcome-invalid': {\n domain: 'D1',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D1_OUTCOME_INVALID',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'maybe', resource: 'token_quota' },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd2-terminal-success': {\n domain: 'D2',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd2-invalid-terminal': {\n domain: 'D2',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D2_TERMINAL_STATE_NOT_IN_ALLOWED_SET',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'maybe_done' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd3-authz-allow': {\n domain: 'D3',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd3-subject-missing': {\n domain: 'D3',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D3_SUBJECT_MISSING',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd4-reason-success': {\n domain: 'D4',\n expected_verdict: 'PASS',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'success' },\n { event_type: 'agent.end' },\n ],\n },\n 'd4-reason-invalid': {\n domain: 'D4',\n expected_verdict: 'FAIL',\n expected_reason_code: 'D4_TERMINATION_REASON_NOT_IN_ALLOWED_SET',\n events: [\n { event_type: 'agent.init' },\n { event_type: 'budget.decision', decision_kind: 'budget', outcome: 'allow', resource: 'token_quota', amount: 1000 },\n { event_type: 'lifecycle.transition', to_state: 'success' },\n { event_type: 'authz.decision', decision_kind: 'authz', outcome: 'allow', subject: 'user-001', resource: 'doc-001', action: 'read' },\n { event_type: 'termination.decision', decision_kind: 'terminate', termination_reason: 'pizza' },\n { event_type: 'agent.end' },\n ],\n },\n};\n\nfunction generateRunId(scenario, verdict) {\n const verdictStr = verdict === 'PASS' ? 'pass' : 'fail';\n return `v05-${scenario.domain.toLowerCase()}-${SUBSTRATE}-${verdictStr}-${scenario.domain.toLowerCase()}-${Date.now() % 10000}`;\n}\n\nfunction generatePack(scenarioId, scenario) {\n const runId = `v05-${scenario.domain.toLowerCase()}-${SUBSTRATE}-${scenario.expected_verdict.toLowerCase()}-${scenarioId.split('-').slice(1).join('-')}`;\n const outputDir = path.join(PROJECT_ROOT, 'data/runs', runId);\n const traceDir = path.join(outputDir, 'pack/trace');\n\n // Create directories\n fs.mkdirSync(traceDir, { recursive: true });\n\n // Generate events with timestamps\n const baseTime = new Date('2026-01-18T10:00:00Z');\n const events = scenario.events.map((e, i) => ({\n ...e,\n event_id: `evt-${runId}-${String(i).padStart(3, '0')}`,\n timestamp: new Date(baseTime.getTime() + i * 60000).toISOString(),\n }));\n\n // Write events.ndjson\n fs.writeFileSync(\n path.join(traceDir, 'events.ndjson'),\n events.map(e => JSON.stringify(e)).join('\\n') + '\\n'\n );\n\n // Write bundle.manifest.json\n fs.writeFileSync(path.join(outputDir, 'bundle.manifest.json'), JSON.stringify({\n run_id: runId,\n pack_root: 'pack',\n ruleset_ref: RULESET_REF,\n protocol_pin: '2025-draft',\n schema_bundle_sha256: `v0.5.0-${SUBSTRATE}`,\n hash_scope: ['pack/trace/events.ndjson'],\n }, null, 2));\n\n // Write evidence_pointers.json with canonptr locators\n // Generate canonptr for each decision event\n let seq = 0;\n const pointers = [];\n const DOMAIN_TO_REQ = { 'D1': 'RQ-D1-01', 'D2': 'RQ-D2-01', 'D3': 'RQ-D3-01', 'D4': 'RQ-D4-01' };\n const DECISION_TO_DOMAIN = { 'budget': 'D1', 'lifecycle': 'D2', 'authz': 'D3', 'terminate': 'D4' };\n\n for (const event of events) {\n if (event.decision_kind) {\n const domain = DECISION_TO_DOMAIN[event.decision_kind] || scenario.domain;\n const canonptr = eventToCanonPtr(event, seq, domain);\n if (canonptr) {\n pointers.push({\n requirement_id: DOMAIN_TO_REQ[domain],\n artifact_path: 'pack/trace/events.ndjson',\n locator: canonptr,\n status: 'PRESENT'\n });\n seq++;\n }\n }\n }\n\n fs.writeFileSync(path.join(outputDir, 'evidence_pointers.json'), JSON.stringify({\n schema_version: '1.1',\n canonptr_version: 'v1',\n pointers,\n }, null, 2));\n\n // Write pack/manifest.json\n fs.writeFileSync(path.join(outputDir, 'pack/manifest.json'), JSON.stringify({\n trace: 'trace/events.ndjson',\n }, null, 2));\n\n // Write producer-run.manifest.json\n fs.writeFileSync(path.join(outputDir, 'producer-run.manifest.json'), JSON.stringify({\n producer_id: PRODUCER_ID,\n substrate: SUBSTRATE,\n version: PRODUCER_VERSION,\n substrate_version: 'langgraph@0.2.0',\n run_id: runId,\n generated_at: new Date().toISOString(),\n ruleset_ref: RULESET_REF,\n scenario: scenarioId,\n expected_verdict: scenario.expected_verdict,\n expected_reason_code: scenario.expected_reason_code || null,\n environment: {\n node_version: process.version,\n platform: process.platform,\n deterministic_seed: 42,\n },\n repro_command: `node producers/langgraph/run.mjs ${scenarioId}`,\n }, null, 2));\n\n return runId;\n}\n\nfunction main() {\n const targetScenario = process.argv[2];\n\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' LangGraph Producer v0.5');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n if (targetScenario === '--all' || !targetScenario) {\n // Generate all scenarios\n console.log('📋 Generating all scenarios...\\n');\n for (const [scenarioId, scenario] of Object.entries(SCENARIOS)) {\n const runId = generatePack(scenarioId, scenario);\n console.log(` ✅ ${scenarioId} → ${runId}`);\n }\n console.log(`\\n✅ Generated ${Object.keys(SCENARIOS).length} packs`);\n } else if (SCENARIOS[targetScenario]) {\n const runId = generatePack(targetScenario, SCENARIOS[targetScenario]);\n console.log(`✅ Generated: ${runId}`);\n } else {\n console.error(`❌ Unknown scenario: ${targetScenario}`);\n console.log('Available scenarios:', Object.keys(SCENARIOS).join(', '));\n process.exit(1);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/audit-03-curated-index.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":117,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":117,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3907,3910],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3907,3910],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":119,"column":26,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":119,"endColumn":29,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4025,4028],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4025,4028],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":127,"column":71,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":127,"endColumn":74,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4599,4602],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4599,4602],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":137,"column":39,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":137,"endColumn":42,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4961,4964],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4961,4964],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * AUDIT-03: Curated Runs Index Integrity\n * \n * Verifies:\n * 1. Every run has a corresponding directory in data/runs/\n * 2. Every run has ALL required hash fields (not fff...fff)\n * 3. Hash requirements vary by adjudication_status\n * 4. No missing runs that should be indexed\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport type { AuditReporter } from './lib/report';\n\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\nconst CURATED_RUNS_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\nconst RUNS_DIR = path.join(PROJECT_ROOT, 'data/runs');\n\nconst PLACEHOLDER_HASH = 'f'.repeat(64);\n\ninterface CuratedRun {\n run_id: string;\n adjudication_status: 'ADJUDICATED' | 'NOT_ADJUDICATED' | 'NOT_ADMISSIBLE';\n substrate: string;\n pack_root_hash?: string;\n verdict_hash?: string;\n verify_report_hash?: string;\n evaluation_report_hash?: string;\n indexable?: boolean;\n status?: string;\n}\n\ninterface CuratedRunsIndex {\n ssot: { generated_at: string };\n runs: CuratedRun[];\n}\n\nfunction getRequiredHashFields(status: string, substrate: string): string[] {\n // NOT_ADMISSIBLE: Only verdict_hash required (pack may be broken)\n if (status === 'NOT_ADMISSIBLE') {\n return ['verdict_hash'];\n }\n\n // Fixture substrate: May be intentionally incomplete, require minimal hashes\n if (substrate === 'fixture') {\n return ['pack_root_hash', 'verdict_hash'];\n }\n\n // ADJUDICATED: All hashes required\n if (status === 'ADJUDICATED') {\n return ['pack_root_hash', 'verdict_hash', 'verify_report_hash', 'evaluation_report_hash'];\n }\n\n // NOT_ADJUDICATED (normal runs): pack, verdict, verify required\n return ['pack_root_hash', 'verdict_hash', 'verify_report_hash'];\n}\n\nexport default async function audit(reporter: AuditReporter): Promise {\n // Check index file exists\n if (!fs.existsSync(CURATED_RUNS_PATH)) {\n reporter.blocker({\n code: 'AUDIT-03-INDEX-MISSING',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n message: 'Curated runs index file does not exist',\n suggested_fix: 'Run: npm run generate:curated'\n });\n return;\n }\n\n let index: CuratedRunsIndex;\n try {\n index = JSON.parse(fs.readFileSync(CURATED_RUNS_PATH, 'utf8'));\n } catch (error) {\n reporter.blocker({\n code: 'AUDIT-03-INDEX-INVALID-JSON',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n message: `Index file is not valid JSON: ${error instanceof Error ? error.message : String(error)}`,\n suggested_fix: 'Fix JSON syntax or regenerate index'\n });\n return;\n }\n\n if (!index.runs || !Array.isArray(index.runs)) {\n reporter.blocker({\n code: 'AUDIT-03-INDEX-INVALID-STRUCTURE',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: '/runs',\n message: 'Index file missing or invalid \"runs\" array',\n suggested_fix: 'Regenerate index with correct structure'\n });\n return;\n }\n\n // Check each run\n index.runs.forEach((run, idx) => {\n const runPointer = `/runs[${idx}]`;\n\n // Check run directory exists\n const runDir = path.join(RUNS_DIR, run.run_id);\n if (!fs.existsSync(runDir)) {\n reporter.blocker({\n code: 'AUDIT-03-RUN-DIR-MISSING',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: `${runPointer}/run_id`,\n message: `Run directory does not exist: data/runs/${run.run_id}`,\n suggested_fix: `Create run directory or remove from index`,\n context: { run_id: run.run_id }\n });\n }\n\n // Skip hash validation for non-indexable runs\n if ((run as any).indexable === false) {\n // Non-indexable runs should have unavailable_reason\n if (!(run as any).unavailable_reason) {\n reporter.important({\n code: 'AUDIT-03-NON-INDEXABLE-MISSING-REASON',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: `${runPointer}/unavailable_reason`,\n message: `Non-indexable run ${run.run_id} missing unavailable_reason field`,\n suggested_fix: 'Add unavailable_reason field (e.g., MISSING_VERIFY_REPORT, LEGACY_MISSING_EVIDENCE)',\n context: { run_id: run.run_id, indexable: (run as any).indexable }\n });\n }\n return; // Skip hash validation for non-indexable runs\n }\n\n // Determine required hash fields based on status\n const requiredFields = getRequiredHashFields(run.adjudication_status, run.substrate);\n\n requiredFields.forEach(field => {\n const hashValue = (run as any)[field];\n\n // Check if field is missing\n if (hashValue === undefined || hashValue === null) {\n reporter.blocker({\n code: 'AUDIT-03-HASH-MISSING',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: `${runPointer}/${field}`,\n message: `Missing required hash field \"${field}\" for run ${run.run_id}`,\n suggested_fix: `Run: npm run generate:curated to regenerate hashes`,\n context: {\n run_id: run.run_id,\n adjudication_status: run.adjudication_status,\n substrate: run.substrate,\n missing_field: field\n }\n });\n }\n // Check if hash is placeholder\n else if (hashValue === PLACEHOLDER_HASH) {\n reporter.blocker({\n code: 'AUDIT-03-HASH-PLACEHOLDER',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: `${runPointer}/${field}`,\n message: `Placeholder hash (fff...fff) for \"${field}\" in run ${run.run_id}`,\n suggested_fix: `Run: npm run generate:curated to compute real hashes`,\n context: {\n run_id: run.run_id,\n field: field\n }\n });\n }\n // Check if hash format is valid (64 hex chars)\n else if (typeof hashValue === 'string') {\n if (!/^[0-9a-f]{64}$/.test(hashValue)) {\n reporter.critical({\n code: 'AUDIT-03-HASH-INVALID-FORMAT',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: `${runPointer}/${field}`,\n message: `Invalid hash format for \"${field}\" in run ${run.run_id}: ${hashValue.substring(0, 32)}...`,\n suggested_fix: `Hash should be 64 hexadecimal characters`,\n context: { run_id: run.run_id, field: field, value: hashValue }\n });\n }\n }\n });\n\n // Check adjudication_status is valid\n const validStatuses = ['ADJUDICATED', 'NOT_ADJUDICATED', 'NOT_ADMISSIBLE'];\n if (!validStatuses.includes(run.adjudication_status)) {\n reporter.critical({\n code: 'AUDIT-03-INVALID-ADJUDICATION-STATUS',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n pointer: `${runPointer}/adjudication_status`,\n message: `Invalid adjudication_status \"${run.adjudication_status}\" for run ${run.run_id}`,\n suggested_fix: `Use one of: ${validStatuses.join(', ')}`,\n context: { run_id: run.run_id, status: run.adjudication_status }\n });\n }\n });\n\n // Check for runs in data/runs that are not in index\n if (fs.existsSync(RUNS_DIR)) {\n const runDirs = fs.readdirSync(RUNS_DIR, { withFileTypes: true })\n .filter(dirent => dirent.isDirectory())\n .map(dirent => dirent.name);\n\n const indexedRunIds = new Set(index.runs.map(r => r.run_id));\n\n runDirs.forEach(runId => {\n if (!indexedRunIds.has(runId)) {\n // Check if directory has evidence files (not just a placeholder)\n const runDir = path.join(RUNS_DIR, runId);\n const hasManifest = fs.existsSync(path.join(runDir, 'manifest.json'));\n const hasVerdict = fs.existsSync(path.join(runDir, 'verdict.json'));\n\n if (hasManifest || hasVerdict) {\n reporter.important({\n code: 'AUDIT-03-RUN-NOT-INDEXED',\n layer: 'LAYER_2_INDEX',\n file: CURATED_RUNS_PATH,\n message: `Run directory exists but not in index: ${runId}`,\n suggested_fix: `Add to allowlist.yaml and regenerate index, or mark as archived`,\n context: { run_id: runId, has_manifest: hasManifest, has_verdict: hasVerdict }\n });\n }\n }\n });\n }\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/audit-04-diff-index.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/audit-06-version-consistency.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/audit-07-evidence-refs.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/audit-12-data-pollution.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":95,"column":48,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":95,"endColumn":51,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3249,3252],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3249,3252],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * AUDIT-12: Data Pollution Detection\n * \n * Detects garbage data like table headers injected into JSON arrays.\n * Primary target: FMM (Field Mapping Matrix) substrate mappings.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport type { AuditReporter } from './lib/report';\n\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\nconst FMM_PATH = path.join(PROJECT_ROOT, 'public/_data/fmm.json');\n\ninterface FMM {\n version: string;\n generated_at: string;\n core_elements: Array<{ pointer: string; description: string }>;\n substrates: Record;\n }>;\n}\n\n// Known header row patterns that should NOT be in data\nconst HEADER_PATTERNS = [\n { field: 'source', values: ['Source Path', 'Source', 'Group'] },\n { field: 'target', values: ['Target Pointer', 'Target', 'Element'] },\n { field: 'rule', values: ['Rule', 'Status'] }\n];\n\nexport default async function audit(reporter: AuditReporter): Promise {\n // Check FMM file\n if (!fs.existsSync(FMM_PATH)) {\n reporter.important({\n code: 'AUDIT-12-FMM-MISSING',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n message: 'FMM file does not exist',\n suggested_fix: 'Generate FMM if required'\n });\n return;\n }\n\n let fmm: FMM;\n try {\n fmm = JSON.parse(fs.readFileSync(FMM_PATH, 'utf8'));\n } catch (error) {\n reporter.critical({\n code: 'AUDIT-12-FMM-INVALID-JSON',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n message: `FMM file is not valid JSON: ${error instanceof Error ? error.message : String(error)}`,\n suggested_fix: 'Fix JSON syntax or regenerate FMM'\n });\n return;\n }\n\n if (!fmm.substrates || typeof fmm.substrates !== 'object') {\n reporter.critical({\n code: 'AUDIT-12-FMM-INVALID-STRUCTURE',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n pointer: '/substrates',\n message: 'FMM missing or invalid \"substrates\" object',\n suggested_fix: 'Regenerate FMM with correct structure'\n });\n return;\n }\n\n // Check each substrate's mappings\n Object.entries(fmm.substrates).forEach(([substrateId, substrate]) => {\n if (!substrate.mappings || !Array.isArray(substrate.mappings)) {\n reporter.critical({\n code: 'AUDIT-12-SUBSTRATE-INVALID-MAPPINGS',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n pointer: `/substrates/${substrateId}/mappings`,\n message: `Substrate \"${substrateId}\" missing or invalid \"mappings\" array`,\n suggested_fix: 'Regenerate substrate mappings',\n context: { substrate_id: substrateId }\n });\n return;\n }\n\n substrate.mappings.forEach((mapping, idx) => {\n const mappingPointer = `/substrates/${substrateId}/mappings[${idx}]`;\n\n // Check for header row pollution\n HEADER_PATTERNS.forEach(pattern => {\n const fieldValue = (mapping as any)[pattern.field];\n\n if (fieldValue && pattern.values.includes(fieldValue)) {\n reporter.blocker({\n code: 'AUDIT-12-HEADER-ROW-POLLUTION',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n pointer: `${mappingPointer}/${pattern.field}`,\n message: `Garbage header row detected in ${substrateId} mappings: \"${pattern.field}\": \"${fieldValue}\"`,\n suggested_fix: 'Filter out header rows in FMM generation script',\n context: {\n substrate_id: substrateId,\n mapping_index: idx,\n field: pattern.field,\n value: fieldValue,\n full_mapping: mapping\n }\n });\n }\n });\n\n // Check for obviously placeholder/invalid data\n if (mapping.source === mapping.target && mapping.source === mapping.rule) {\n reporter.critical({\n code: 'AUDIT-12-DUPLICATE-VALUES',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n pointer: mappingPointer,\n message: `Suspicious mapping with identical source/target/rule in ${substrateId}`,\n suggested_fix: 'Review mapping data for correctness',\n context: { substrate_id: substrateId, mapping }\n });\n }\n\n // Check for empty/null values where they shouldn't be\n if (!mapping.source || !mapping.target || !mapping.rule) {\n reporter.critical({\n code: 'AUDIT-12-MISSING-REQUIRED-FIELD',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n pointer: mappingPointer,\n message: `Mapping in ${substrateId} missing required field(s)`,\n suggested_fix: 'Ensure all mappings have source, target, and rule',\n context: {\n substrate_id: substrateId,\n mapping,\n missing_source: !mapping.source,\n missing_target: !mapping.target,\n missing_rule: !mapping.rule\n }\n });\n }\n });\n });\n\n // Check for duplicate substrates (case sensitivity issues)\n const substrateIds = Object.keys(fmm.substrates);\n const lowercaseIds = substrateIds.map(id => id.toLowerCase());\n const uniqueLowercaseIds = new Set(lowercaseIds);\n\n if (lowercaseIds.length !== uniqueLowercaseIds.size) {\n reporter.important({\n code: 'AUDIT-12-DUPLICATE-SUBSTRATE-IDS',\n layer: 'LAYER_6_SCHEMA',\n file: FMM_PATH,\n pointer: '/substrates',\n message: 'Potential duplicate substrate IDs (case-insensitive)',\n suggested_fix: 'Use consistent casing for substrate IDs',\n context: { substrate_ids: substrateIds }\n });\n }\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/audit-13-seal-format.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/http-health-local-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'path' is defined but never used. Allowed unused vars must match /^_/u.","line":20,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":20,"endColumn":12},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":51,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":51,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":132,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":132,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * AUDIT-HTTP-HEALTH-LOCAL-01\n * \n * Verifies that critical routes are reachable and return valid content.\n * Runs against a locally started Next.js server (expected at localhost:3000).\n * \n * Targets:\n * - / (Home)\n * - /runs (Unified Runs)\n * - /runs?tier=... (Filtered Runs)\n * - /runs/[id] (Sample Detail Pages)\n * - /rulesets (Rulesets Index)\n * \n * Ticket: P2-01\n */\n\n// Use native fetch (Node 18+)\nimport fs from 'fs';\nimport path from 'path';\n\nconst BASE_URL = process.env.BASE_URL || 'http://localhost:3000';\nconst MIN_BODY_LENGTH = 500; // bytes\n\ninterface AuditTarget {\n path: string;\n expectedStatus?: number;\n expectedText?: string;\n description: string;\n}\n\ninterface AuditResult {\n path: string;\n status: 'PASS' | 'FAIL' | 'WARN';\n httpStatus: number;\n message: string;\n}\n\n// Load sample run IDs from index to test detail pages\nfunction getSampleRunIds(): { v1: string, v2: string } {\n try {\n // V1 Sample\n const v1Data = JSON.parse(fs.readFileSync('public/_data/curated-runs.json', 'utf-8'));\n const v1Id = v1Data.runs?.[0]?.run_id || 'admission-not-admissible-01';\n\n // V2 Sample\n const v2Data = JSON.parse(fs.readFileSync('public/_data/v2/runs/index.json', 'utf-8'));\n const v2Id = v2Data.data?.runs?.[0]?.pack_id || 'acp-d1-real-runner-001';\n\n return { v1: v1Id, v2: v2Id };\n } catch (e) {\n console.error('Failed to load sample IDs, using defaults');\n return { v1: 'admission-not-admissible-01', v2: 'acp-d1-real-runner-001' };\n }\n}\n\nasync function checkRoute(target: AuditTarget): Promise {\n const url = `${BASE_URL}${target.path}`;\n try {\n const start = Date.now();\n const res = await fetch(url);\n const duration = Date.now() - start;\n\n const expected = target.expectedStatus || 200;\n\n if (res.status !== expected) {\n return {\n path: target.path,\n status: 'FAIL',\n httpStatus: res.status,\n message: `Expected ${expected}, got ${res.status}`\n };\n }\n\n if (expected === 200) {\n const text = await res.text();\n\n // Check body length\n if (text.length < MIN_BODY_LENGTH) {\n return {\n path: target.path,\n status: 'FAIL',\n httpStatus: res.status,\n message: `Content too short: ${text.length} bytes (min: ${MIN_BODY_LENGTH})`\n };\n }\n\n // Check expected text if provided\n if (target.expectedText && !text.includes(target.expectedText)) {\n return {\n path: target.path,\n status: 'FAIL',\n httpStatus: res.status,\n message: `Missing expected content: \"${target.expectedText}\"`\n };\n }\n\n // Basic \"Empty Page\" check (Next.js empty div)\n if (text.includes('
') && text.length < 1000) {\n return {\n path: target.path,\n status: 'WARN',\n httpStatus: res.status,\n message: `Possible empty client-side shell`\n };\n }\n }\n\n return {\n path: target.path,\n status: 'PASS',\n httpStatus: res.status,\n message: `OK (${duration}ms)`\n };\n\n } catch (e) {\n return {\n path: target.path,\n status: 'FAIL',\n httpStatus: 0,\n message: `Connection failed: ${e instanceof Error ? e.message : String(e)}`\n };\n }\n}\n\nasync function main() {\n console.log(`🔍 Starting Local HTTP Health Audit against ${BASE_URL}`);\n\n // Check if server is up first\n try {\n await fetch(BASE_URL);\n } catch (e) {\n console.error(`❌ Server not reachable at ${BASE_URL}. Start it with 'npm run dev' or 'npm start' first.`);\n process.exit(1);\n }\n\n const { v1: v1Sample, v2: v2Sample } = getSampleRunIds();\n\n const targets: AuditTarget[] = [\n { path: '/', description: 'Home Page', expectedText: 'Validation Lab' },\n { path: '/runs', description: 'All Runs Index', expectedText: 'All Runs' },\n { path: '/runs?tier=SIMULATED', description: 'Runs (Simulated)', expectedText: 'Simulated' },\n { path: '/runs?tier=REPRODUCED', description: 'Runs (Reproduced)', expectedText: 'Reproduced' },\n { path: `/runs/${v1Sample}`, description: 'V1 Run Detail', expectedText: v1Sample },\n { path: `/runs/${v2Sample}`, description: 'V2 Run Detail', expectedText: 'V2 Real Runner' },\n { path: '/rulesets', description: 'Rulesets Index', expectedText: 'Ruleset' },\n { path: '/governance', description: 'Governance Index', expectedText: 'Unified Governance' },\n { path: '/gates', description: 'Gates Registry', expectedText: 'Verification Gates' },\n { path: '/audit', description: 'Audit Tools', expectedText: 'Local Audit' },\n { path: '/releases', description: 'Releases Index', expectedText: 'Releases' },\n // Known missing pages (expect 404 for now, or 200 if we implemented placeholders)\n // Adjusting expectations based on current state (these are NOT implemented yet so 404 is correct behavior relative to current codebase)\n // But audit should probably fail if we EXPECT them to exist. The user said audit targets include /laws /cases \"if open\".\n // Current walkthrough says they show 404. I will check them but expect 404 to pass the audit for \"known missing\" state?\n // No, user spec says \"Assetions: HTTP status must be 200\". \n // So I will only check routes that SHOULD exist.\n ];\n\n console.log(`📋 Auditing ${targets.length} key routes...`);\n\n let failureCount = 0;\n\n for (const target of targets) {\n const result = await checkRoute(target);\n\n const icon = result.status === 'PASS' ? '✅' : result.status === 'WARN' ? '⚠️' : '❌';\n console.log(`${icon} ${target.path.padEnd(30)} [${result.httpStatus}] ${result.message}`);\n\n if (result.status === 'FAIL') failureCount++;\n }\n\n console.log('-'.repeat(50));\n if (failureCount > 0) {\n console.error(`❌ Audit FAILED: ${failureCount} routes unhealthy`);\n process.exit(1);\n } else {\n console.log(`✅ Audit PASSED: All routes verified`);\n process.exit(0);\n }\n}\n\nmain().catch(err => {\n console.error('Fatal error:', err);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/lib/report.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/lint-summary.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":41,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":41,"endColumn":11}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * LINT SUMMARY AUDIT\n * \n * Runs ESLint and generates a summary of debt (errors/warnings) without failing.\n * Used for Seal Attributes when running in 'tolerant' mode.\n */\n\nimport { execSync } from 'child_process';\nimport fs from 'fs';\nimport path from 'path';\n\ninterface LintMessage {\n ruleId: string;\n severity: number;\n message: string;\n line: number;\n column: number;\n}\n\ninterface LintResult {\n filePath: string;\n messages: LintMessage[];\n errorCount: number;\n warningCount: number;\n}\n\nconst OUTPUT_PATH = path.join(process.cwd(), 'reports', 'lint-audit.json');\nconst REPORT_DIR = path.dirname(OUTPUT_PATH);\n\nif (!fs.existsSync(REPORT_DIR)) {\n fs.mkdirSync(REPORT_DIR, { recursive: true });\n}\n\nconsole.log('🔍 [Lint Audit] Assessing code debt...');\n\ntry {\n // Run eslint with json formatter. We expect it might fail (exit 1) if there are errors, \n // so we wrap in try/catch to capture output.\n execSync('npx eslint . --format json --output-file reports/lint-raw.json', { stdio: 'ignore' });\n} catch (e) {\n // Ignore exit code 1 from eslint\n}\n\nif (!fs.existsSync('reports/lint-raw.json')) {\n console.error('❌ Failed to generate lint report');\n process.exit(1);\n}\n\nconst raw: LintResult[] = JSON.parse(fs.readFileSync('reports/lint-raw.json', 'utf8'));\nconst summary = {\n total_files: raw.length,\n files_with_issues: 0,\n total_errors: 0,\n total_warnings: 0,\n top_rules: {} as Record,\n timestamp: new Date().toISOString()\n};\n\nraw.forEach(file => {\n if (file.errorCount > 0 || file.warningCount > 0) {\n summary.files_with_issues++;\n summary.total_errors += file.errorCount;\n summary.total_warnings += file.warningCount;\n\n file.messages.forEach(msg => {\n if (msg.ruleId) {\n summary.top_rules[msg.ruleId] = (summary.top_rules[msg.ruleId] || 0) + 1;\n }\n });\n }\n});\n\n// Sort top rules\nconst sortedRules = Object.entries(summary.top_rules)\n .sort(([, a], [, b]) => b - a)\n .slice(0, 10)\n .reduce((acc, [k, v]) => ({ ...acc, [k]: v }), {});\n\nconst finalReport = {\n ...summary,\n top_rules: sortedRules\n};\n\nfs.writeFileSync(OUTPUT_PATH, JSON.stringify(finalReport, null, 2));\n\nconsole.log(`✅ [Lint Audit] Complete.`);\nconsole.log(` Files with Issues: ${summary.files_with_issues}`);\nconsole.log(` Errors: ${summary.total_errors}`);\nconsole.log(` Warnings: ${summary.total_warnings}`);\nconsole.log(` Report: ${OUTPUT_PATH}`);\n\n// Always pass - this is an audit, not a gate\nprocess.exit(0);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/nav-depth-audit.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":193,"column":57,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":193,"endColumn":60,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[6487,6490],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[6487,6490],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":240,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":240,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8734,8737],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8734,8737],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":246,"column":153,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":246,"endColumn":156,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[9128,9131],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[9128,9131],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":256,"column":37,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":256,"endColumn":40,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[9572,9575],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[9572,9575],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'alignment' is defined but never used. Allowed unused args must match /^_/u.","line":264,"column":52,"nodeType":null,"messageId":"unusedVar","endLine":264,"endColumn":61}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":5,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Navigation Depth Audit Tool (v2.0)\n * \n * Generates comprehensive navigation discoverability reports:\n * 1. page_graph.json - All pages and internal links between them\n * 2. nav-depth-report.json - BFS-computed min depth from entry points\n * 3. nav-ssot-alignment.json - Diff between Nav/Footer and NAVIGATION_MAP.yaml\n * \n * VLAB-GATE-24: Strict L1 Definition\n * - A page is L1 iff it is linked in Navbar (Nav.tsx) or Footer (Footer.tsx) or is Home (/).\n * - All static governance pages MUST be L1.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport yaml from 'yaml';\n\nconst PROJECT_ROOT = process.cwd();\nconst APP_DIR = path.join(PROJECT_ROOT, 'app');\nconst OUTPUT_DIR = path.join(PROJECT_ROOT, 'reports/navigation');\n\n// ============================================================================\n// Types\n// ============================================================================\n\ninterface PageNode {\n path: string;\n file: string;\n isDynamic: boolean;\n}\n\ninterface PageGraph {\n generated_at: string;\n nodes: PageNode[];\n edges: { from: string; to: string }[];\n}\n\ninterface DepthEntry {\n path: string;\n min_depth: number | null;\n class: 'L1' | 'L2' | 'L3' | 'orphan';\n path_example: string[];\n entry_type: 'navbar' | 'footer' | 'in-page' | 'none';\n}\n\ninterface DepthReport {\n generated_at: string;\n summary: {\n total: number;\n L1: number;\n L2: number;\n L3: number;\n orphan: number;\n };\n pages: DepthEntry[];\n}\n\ninterface SSOTAlignment {\n generated_at: string;\n navbar: {\n ssot: string[];\n actual: string[];\n missing_in_ui: string[];\n extra_in_ui: string[];\n };\n footer: {\n ssot: string[];\n actual: string[];\n missing_in_ui: string[];\n extra_in_ui: string[];\n };\n}\n\n// ============================================================================\n// Step 1: Find all pages\n// ============================================================================\n\nfunction findAllPages(): PageNode[] {\n const pages: PageNode[] = [];\n\n function scanDir(dir: string, routePath: string = '') {\n if (!fs.existsSync(dir)) return;\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n\n for (const entry of entries) {\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n if (['api', '_components', '_shared', 'node_modules'].includes(entry.name)) continue;\n const isDynamic = entry.name.startsWith('[') && entry.name.endsWith(']');\n const segment = isDynamic ? entry.name : entry.name;\n scanDir(fullPath, `${routePath}/${segment}`);\n } else if (entry.name === 'page.tsx' || entry.name === 'page.jsx') {\n const pagePath = routePath || '/';\n pages.push({\n path: pagePath,\n file: path.relative(PROJECT_ROOT, fullPath),\n isDynamic: pagePath.includes('[')\n });\n }\n }\n }\n\n scanDir(APP_DIR);\n return pages;\n}\n\n// ============================================================================\n// Step 2: Extract internal links\n// ============================================================================\n\nfunction extractLinks(filePath: string): string[] {\n const absPath = path.join(PROJECT_ROOT, filePath);\n if (!fs.existsSync(absPath)) return [];\n\n const content = fs.readFileSync(absPath, 'utf8');\n const links: string[] = [];\n const hrefRegex = /href=[\"'](\\/?[^\"']+)[\"']/g;\n let match;\n\n while ((match = hrefRegex.exec(content)) !== null) {\n const href = match[1];\n if (href.startsWith('/') && !href.startsWith('//')) {\n const normalized = href.split('?')[0].split('#')[0].replace(/\\/$/, '') || '/';\n if (!links.includes(normalized)) links.push(normalized);\n }\n }\n return links;\n}\n\nfunction buildPageGraph(pages: PageNode[]): PageGraph {\n const edges: { from: string; to: string }[] = [];\n for (const page of pages) {\n const links = extractLinks(page.file);\n for (const link of links) {\n edges.push({ from: page.path, to: link });\n }\n }\n return { generated_at: new Date().toISOString(), nodes: pages, edges };\n}\n\n// ============================================================================\n// Step 3: Parse Navigation components\n// ============================================================================\n\nfunction parseNavLinks(): string[] {\n const navPath = path.join(PROJECT_ROOT, 'components/Nav.tsx');\n if (!fs.existsSync(navPath)) return [];\n const content = fs.readFileSync(navPath, 'utf8');\n const links: string[] = [];\n const navItemsMatch = content.match(/const\\s+NAV_ITEMS\\s*=\\s*\\[([\\s\\S]*?)\\];/);\n if (navItemsMatch) {\n const hrefRegex = /href:\\s*['\"]([^'\"]+)['\"]/g;\n let match;\n while ((match = hrefRegex.exec(navItemsMatch[1])) !== null) {\n if (match[1].startsWith('/')) links.push(match[1]);\n }\n }\n return links;\n}\n\nfunction parseFooterLinks(): string[] {\n const footerPath = path.join(PROJECT_ROOT, 'components/layout/Footer.tsx');\n if (!fs.existsSync(footerPath)) return [];\n const content = fs.readFileSync(footerPath, 'utf8');\n const links: string[] = [];\n const hrefRegex = /href=[\"'](\\/?[^\"']+)[\"']/g;\n let match;\n while ((match = hrefRegex.exec(content)) !== null) {\n const href = match[1];\n if (href.startsWith('/') && !href.startsWith('//')) {\n if (!links.includes(href)) links.push(href);\n }\n }\n return links;\n}\n\n// ============================================================================\n// Step 4: Parse SSOT\n// ============================================================================\n\nfunction parseSSOT(): { navbar: string[]; footer: string[] } {\n const ssotPath = path.join(PROJECT_ROOT, 'governance/NAVIGATION_MAP.yaml');\n if (!fs.existsSync(ssotPath)) return { navbar: [], footer: [] };\n const content = fs.readFileSync(ssotPath, 'utf8');\n const data = yaml.parse(content);\n const navbar: string[] = [];\n const footer: string[] = [];\n\n if (data.navbar?.internal) {\n for (const item of data.navbar.internal) if (item.href) navbar.push(item.href);\n }\n if (data.footer) {\n for (const col of Object.values(data.footer) as any[]) {\n if (col.links) for (const link of col.links) if (link.href?.startsWith('/')) footer.push(link.href);\n }\n }\n return { navbar, footer };\n}\n\n// ============================================================================\n// Step 5: BFS (Strict L1 Definition)\n// ============================================================================\n\nfunction computeDepths(graph: PageGraph, navLinks: string[], footerLinks: string[]): DepthReport {\n const L1_ENTRIES = new Set([...navLinks, ...footerLinks, '/']);\n const pageSet = new Set(graph.nodes.map(n => n.path));\n const adj: Map = new Map();\n for (const node of graph.nodes) adj.set(node.path, []);\n for (const edge of graph.edges) if (adj.has(edge.from)) adj.get(edge.from)!.push(edge.to);\n\n const depths: Map = new Map();\n const queue: { node: string; depth: number; path: string[]; entryType: string }[] = [];\n\n // L1 Initialization (Only direct nav/footer links)\n for (const entry of L1_ENTRIES) {\n if (pageSet.has(entry)) {\n const entryType = navLinks.includes(entry) ? 'navbar' : (footerLinks.includes(entry) ? 'footer' : 'home');\n queue.push({ node: entry, depth: 1, path: [entry], entryType });\n depths.set(entry, { depth: 1, path: [entry], entryType });\n }\n }\n\n // BFS for L2+\n while (queue.length > 0) {\n const { node, depth, path: currentPath } = queue.shift()!;\n const neighbors = adj.get(node) || [];\n for (const neighbor of neighbors) {\n const matchingPage = graph.nodes.find(n => n.path === neighbor);\n if (matchingPage && !depths.has(matchingPage.path)) {\n depths.set(matchingPage.path, { depth: depth + 1, path: [...currentPath, matchingPage.path], entryType: 'in-page' });\n queue.push({ node: matchingPage.path, depth: depth + 1, path: [...currentPath, matchingPage.path], entryType: 'in-page' });\n }\n }\n }\n\n const pages: DepthEntry[] = [];\n let L1 = 0, L2 = 0, L3 = 0, orphan = 0;\n for (const node of graph.nodes) {\n const info = depths.get(node.path);\n let depthClass: any = 'orphan';\n if (info) {\n if (info.depth === 1) { L1++; depthClass = 'L1'; }\n else if (info.depth === 2) { L2++; depthClass = 'L2'; }\n else { L3++; depthClass = 'L3'; }\n } else { orphan++; }\n pages.push({ path: node.path, min_depth: info?.depth || null, class: depthClass, path_example: info?.path || [], entry_type: info?.entryType as any || 'none' });\n }\n pages.sort((a, b) => (a.min_depth || 999) - (b.min_depth || 999));\n return { generated_at: new Date().toISOString(), summary: { total: graph.nodes.length, L1, L2, L3, orphan }, pages };\n}\n\n// ============================================================================\n// Reporting & Final Logic\n// ============================================================================\n\nfunction computeSSOTAlignment(ssot: any, actualNav: string[], actualFooter: string[]): SSOTAlignment {\n return {\n generated_at: new Date().toISOString(),\n navbar: { ssot: ssot.navbar, actual: actualNav, missing_in_ui: ssot.navbar.filter((s: string) => !actualNav.includes(s)), extra_in_ui: actualNav.filter(a => !ssot.navbar.includes(a)) },\n footer: { ssot: ssot.footer, actual: actualFooter, missing_in_ui: ssot.footer.filter((s: string) => !actualFooter.includes(s)), extra_in_ui: actualFooter.filter(a => !ssot.footer.includes(a)) }\n };\n}\n\nfunction generateFixlist(depthReport: DepthReport, alignment: SSOTAlignment): string {\n const lines = ['# Navigation Discoverability Fixed List', `Generated: ${new Date().toISOString()}`, '---', '## VLAB-GATE-24: Strict L1 Compliance', 'Rule: Static pages MUST be directly linked (L1).'];\n const staticViolations = depthReport.pages.filter(p => !p.path.includes('[') && p.class !== 'L1' && p.path !== '/');\n if (staticViolations.length > 0) {\n lines.push('\\n### 🔴 Violations (L2+ or Orphan)');\n for (const v of staticViolations) lines.push(`- \\`${v.path}\\` (Class: ${v.class}, Depth: ${v.min_depth || '∞'})`);\n } else { lines.push('\\n🟢 No static violations found.'); }\n return lines.join('\\n');\n}\n\nasync function main() {\n console.log('🔍 Navigation Depth Audit Tool (Strict L1 Mode)');\n const pages = findAllPages();\n const graph = buildPageGraph(pages);\n const navbarLinks = parseNavLinks();\n const footerLinks = parseFooterLinks();\n const ssot = parseSSOT();\n const report = computeDepths(graph, navbarLinks, footerLinks);\n const alignment = computeSSOTAlignment(ssot, navbarLinks, footerLinks);\n const fixlist = generateFixlist(report, alignment);\n\n if (!fs.existsSync(OUTPUT_DIR)) fs.mkdirSync(OUTPUT_DIR, { recursive: true });\n fs.writeFileSync(path.join(OUTPUT_DIR, 'nav-depth-report.json'), JSON.stringify(report, null, 2));\n fs.writeFileSync(path.join(OUTPUT_DIR, 'FIXLIST-nav-depth.md'), fixlist);\n\n console.log('\\n📊 AUDIT SUMMARY');\n const staticOrphans = report.pages.filter(p => !p.path.includes('[') && p.class === 'orphan');\n const staticL2Plus = report.pages.filter(p => !p.path.includes('[') && p.class !== 'L1' && p.class !== 'orphan' && p.path !== '/');\n\n let failed = false;\n if (staticOrphans.length > 0) { console.error(`❌ FAIL: ${staticOrphans.length} static orphan(s)`); failed = true; }\n if (staticL2Plus.length > 0) { console.error(`❌ FAIL: ${staticL2Plus.length} static L2+ depth page(s) (GATE-24)`); failed = true; }\n\n if (!failed) console.log('🟢 PASS: All status pages are L1 discoverable.');\n if (alignment.navbar.missing_in_ui.length > 0 || alignment.footer.missing_in_ui.length > 0) console.warn('⚠️ WARN: SSOT misalignment detected.');\n\n if (failed) process.exit(1);\n}\n\nmain().catch(console.error);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/audit/run-all.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/check-digest.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":3,"column":40,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":3,"endColumn":43,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[74,77],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[74,77],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as crypto from 'crypto';\n\nfunction computeSemanticDigest(fields: any): string {\n const sortedKeys = Object.keys(fields).sort();\n const canonical = sortedKeys\n .filter(k => fields[k] !== undefined)\n .map(k => `${k}:${fields[k]}`)\n .join('|');\n\n const hash = crypto.createHash('sha256').update(canonical).digest('hex');\n console.log(`Canonical: ${canonical}`);\n console.log(`Hash: ${hash}`);\n return hash.slice(0, 8);\n}\n\nconst fields = {\n decision_kind: \"budget\",\n outcome: \"allow\",\n resource: \"mcp-tool-quota\",\n amount: 50\n};\n\nconsole.log(`Digest: ${computeSemanticDigest(fields)}`);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ci/guarantees-ssot-gate.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ci/link-integrity-gate.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ci/release-index-gate.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ci/seo-surface-gate.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'fs' is defined but never used. Allowed unused vars must match /^_/u.","line":18,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":18,"endColumn":10},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'path' is defined but never used. Allowed unused vars must match /^_/u.","line":19,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":19,"endColumn":12},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ROOT' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":21,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":21,"endColumn":11},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'NOINDEX' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":38,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":38,"endColumn":14}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * R5 — SEO Surface Gate\n * \n * Validates SEO consistency against Indexing Policy Matrix:\n * 1. sitemap.xml contains only indexable pages\n * 2. sitemap URLs return 200\n * 3. Page meta robots matches policy\n * 4. robots.txt disallow list matches policy\n * \n * Usage: node scripts/ci/seo-surface-gate.mjs [--url=http://localhost:3000]\n * \n * Exit codes:\n * 0 = PASS\n * 1 = FAIL (SEO issues found)\n */\n\nimport fs from 'fs';\nimport path from 'path';\n\nconst ROOT = process.cwd();\n\n// Policy from REL-LAB-0.5-SEO-INDEXING.md\nconst INDEXABLE = [\n '/',\n '/about',\n '/runs',\n '/adjudication',\n '/rulesets',\n '/guarantees',\n '/coverage',\n '/coverage/adjudication',\n '/policies/contract',\n '/policies/intake',\n '/policies/substrate-scope',\n];\n\nconst NOINDEX = [\n '/runs/[run_id]',\n '/runs/[run_id]/replay',\n '/runs/[run_id]/evidence',\n '/rulesets/[version]',\n '/adjudication/[run_id]',\n];\n\nconst DISALLOWED = [\n '/api',\n '/builder',\n '/statement',\n '/examples',\n];\n\n// Parse command line\nconst args = process.argv.slice(2);\nconst baseUrl = args.find(a => a.startsWith('--url='))?.split('=')[1] || 'http://localhost:3000';\n\nasync function fetchText(url) {\n try {\n const res = await fetch(url);\n if (!res.ok) return null;\n return await res.text();\n } catch {\n return null;\n }\n}\n\nasync function main() {\n console.log('🔍 R5 — SEO Surface Gate\\n');\n console.log(`Base URL: ${baseUrl}\\n`);\n\n let failures = [];\n\n // 1. Check sitemap.xml\n console.log('1. Checking sitemap.xml...');\n const sitemapUrl = `${baseUrl}/sitemap.xml`;\n const sitemap = await fetchText(sitemapUrl);\n\n if (!sitemap) {\n failures.push({ check: 'sitemap.xml', reason: 'Failed to fetch' });\n } else {\n // Extract URLs from sitemap\n const urlMatches = sitemap.matchAll(/([^<]+)<\\/loc>/g);\n const sitemapUrls = [...urlMatches].map(m => m[1]);\n\n console.log(` Found ${sitemapUrls.length} URLs in sitemap`);\n\n // Check count\n if (sitemapUrls.length !== INDEXABLE.length) {\n failures.push({\n check: 'sitemap count',\n reason: `Expected ${INDEXABLE.length} URLs, got ${sitemapUrls.length}`\n });\n }\n\n // Check no disallowed in sitemap\n for (const url of sitemapUrls) {\n const path = new URL(url).pathname;\n if (DISALLOWED.some(d => path.startsWith(d))) {\n failures.push({\n check: 'sitemap contains disallowed',\n reason: `${path} should not be in sitemap`\n });\n }\n }\n }\n\n // 2. Check robots.txt\n console.log('2. Checking robots.txt...');\n const robotsUrl = `${baseUrl}/robots.txt`;\n const robots = await fetchText(robotsUrl);\n\n if (!robots) {\n failures.push({ check: 'robots.txt', reason: 'Failed to fetch' });\n } else {\n // Check disallow directives\n for (const path of DISALLOWED) {\n if (!robots.includes(`Disallow: ${path}`)) {\n // Check with trailing slash variant\n if (!robots.includes(`Disallow: ${path}/`)) {\n failures.push({\n check: 'robots.txt disallow',\n reason: `Missing disallow for ${path}`\n });\n }\n }\n }\n console.log(' robots.txt disallow list verified');\n }\n\n // 3. Spot-check indexable page meta\n console.log('3. Spot-checking page meta robots...');\n const spotChecks = ['/', '/about', '/coverage'];\n\n for (const p of spotChecks) {\n const html = await fetchText(`${baseUrl}${p}`);\n if (html) {\n const hasNoindex = html.includes('noindex') || html.includes('NOINDEX');\n if (hasNoindex) {\n failures.push({\n check: `page meta ${p}`,\n reason: 'Indexable page has noindex'\n });\n } else {\n console.log(` ${p} — index:true ✓`);\n }\n }\n }\n\n // 4. Check /runs is noindex\n console.log('4. Checking noindex pages...');\n const runsHtml = await fetchText(`${baseUrl}/runs`);\n if (runsHtml) {\n const hasNoindex = runsHtml.includes('noindex') || runsHtml.includes('NOINDEX');\n if (!hasNoindex) {\n failures.push({\n check: '/runs meta',\n reason: '/runs should have noindex but does not'\n });\n } else {\n console.log(' /runs — noindex ✓');\n }\n }\n\n // Report\n console.log('\\n---');\n if (failures.length > 0) {\n console.log('\\n❌ FAILURES:');\n failures.forEach(f => console.log(` [${f.check}] ${f.reason}`));\n console.log(`\\n❌ Gate FAILED: ${failures.length} SEO issues found`);\n process.exit(1);\n }\n\n console.log('\\n✅ Gate PASSED: SEO policy verified');\n process.exit(0);\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ci/substrate-ssot-gate.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ci/toplevel-whitelist-gate.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/compute-equivalence.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":19,"column":117,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":19,"endColumn":120,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[680,683],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[680,683],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":20,"column":110,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":20,"endColumn":113,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[794,797],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[794,797],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":21,"column":103,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":21,"endColumn":106,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[901,904],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[901,904],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":44,"column":32,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":44,"endColumn":35,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1388,1391],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1388,1391],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":66,"column":64,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":66,"endColumn":67,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2119,2122],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2119,2122],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":145,"column":74,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":145,"endColumn":77,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5187,5190],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5187,5190],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":6,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * compute-equivalence.ts\n * Implements v0.10.2.2: Cross-substrate equivalence computation\n * \n * Reads: equivalence-criteria.yaml, normalized packs\n * Outputs: cross-verified report + diff files\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst GOVERNANCE_DIR = path.join(PROJECT_ROOT, 'governance/mappings');\nconst DERIVED_DIR = path.join(PROJECT_ROOT, 'data/derived/normalized');\nconst OUTPUT_DIR = path.join(PROJECT_ROOT, 'public/_data/cross-verified');\n\n// Load SSOTs\nconst equivCriteria = yaml.load(fs.readFileSync(path.join(GOVERNANCE_DIR, 'equivalence-criteria.yaml'), 'utf8')) as any;\nconst normSpec = yaml.load(fs.readFileSync(path.join(GOVERNANCE_DIR, 'normalization-spec.yaml'), 'utf8')) as any;\nconst hashScope = yaml.load(fs.readFileSync(path.join(GOVERNANCE_DIR, 'hash-scope.yaml'), 'utf8')) as any;\n\ninterface NormalizedEntry {\n run_id: string;\n substrate: string;\n scenario_family: string;\n normalized_hash: string;\n verdict_status: string;\n admission_status: string;\n}\n\ninterface EquivalencePair {\n left_run_id: string;\n right_run_id: string;\n equivalent: boolean;\n diff_ref?: string;\n}\n\ninterface DiffFile {\n scenario_family: string;\n pair: [string, string];\n differences: Array<{\n note_code: string;\n params: Record;\n }>;\n disclaimer: string;\n}\n\nfunction main() {\n console.log('🔍 Computing cross-substrate equivalence...');\n\n // Ensure output directories exist\n fs.mkdirSync(OUTPUT_DIR, { recursive: true });\n fs.mkdirSync(path.join(OUTPUT_DIR, 'diffs'), { recursive: true });\n\n // Load normalized summary\n const summaryPath = path.join(DERIVED_DIR, '_normalization_summary.json');\n if (!fs.existsSync(summaryPath)) {\n console.error('❌ Normalization summary not found. Run normalize-pack.ts first.');\n process.exit(1);\n }\n\n const summary = JSON.parse(fs.readFileSync(summaryPath, 'utf8'));\n\n // Build entries with full metadata\n const entries: NormalizedEntry[] = summary.results.map((r: any) => {\n const evidencePath = path.join(DERIVED_DIR, r.run_id, 'normalized_evidence.json');\n const evidence = JSON.parse(fs.readFileSync(evidencePath, 'utf8'));\n\n return {\n run_id: r.run_id,\n substrate: evidence.manifest.substrate || extractSubstrate(r.run_id),\n scenario_family: r.scenario_family,\n normalized_hash: r.hash,\n verdict_status: evidence.verdict.status || 'unknown',\n admission_status: evidence.verdict.admission?.status || 'unknown'\n };\n });\n\n // Group by scenario_family\n const familyGroups: Record = {};\n for (const entry of entries) {\n if (!familyGroups[entry.scenario_family]) {\n familyGroups[entry.scenario_family] = [];\n }\n familyGroups[entry.scenario_family].push(entry);\n }\n\n // Compute pairwise equivalence within each family\n const equivalenceMatrix: EquivalencePair[] = [];\n const scenarioFamilies: string[] = Object.keys(familyGroups);\n\n for (const family of scenarioFamilies) {\n const group = familyGroups[family];\n console.log(`📋 ${family}: ${group.length} runs`);\n\n for (let i = 0; i < group.length; i++) {\n for (let j = i + 1; j < group.length; j++) {\n const left = group[i];\n const right = group[j];\n\n const eq = computeEquivalence(left, right, family);\n equivalenceMatrix.push(eq);\n }\n }\n }\n\n // Generate report\n const report = {\n report_version: '1.0.0',\n ruleset_version: 'ruleset-1.1', // From sample set alignment\n normalization_spec_version: normSpec.version,\n hash_scope_version: hashScope.version,\n core_elements_version: '1.1.0', // From core-evidence-elements.yaml\n generated_at: process.env.BASELINE_TIMESTAMP || new Date().toISOString(),\n scenario_families: scenarioFamilies,\n entries,\n equivalence_matrix: equivalenceMatrix,\n disclaimer: equivCriteria.disclaimer.text\n };\n\n // Write report\n const reportPath = path.join(OUTPUT_DIR, 'v0.10.2-report.json');\n fs.writeFileSync(reportPath, JSON.stringify(report, null, 2));\n console.log(`\\n✅ Report written to ${reportPath}`);\n\n // Summary stats\n const eqCount = equivalenceMatrix.filter(e => e.equivalent).length;\n const neqCount = equivalenceMatrix.filter(e => !e.equivalent).length;\n console.log(`\\n📊 Equivalence Summary:`);\n console.log(` Equivalent pairs: ${eqCount}`);\n console.log(` Non-equivalent pairs: ${neqCount}`);\n}\n\nfunction extractSubstrate(runId: string): string {\n // Extract substrate from run_id pattern: v05-d1-langgraph-pass-budget-allow\n const parts = runId.split('-');\n if (parts.length >= 3) {\n return parts[2];\n }\n return 'unknown';\n}\n\nfunction computeEquivalence(left: NormalizedEntry, right: NormalizedEntry, family: string): EquivalencePair {\n const differences: Array<{ note_code: string; params: Record }> = [];\n\n // Check scenario_family match\n if (left.scenario_family !== right.scenario_family) {\n differences.push({\n note_code: 'SCENARIO_FAMILY_MISMATCH',\n params: { left_family: left.scenario_family, right_family: right.scenario_family }\n });\n }\n\n // Check admissibility (HP-10.2-06)\n const admissibleValues = equivCriteria.admissibility.admissible_values;\n const leftAdmissible = admissibleValues.includes(left.admission_status);\n const rightAdmissible = admissibleValues.includes(right.admission_status);\n\n if (!leftAdmissible) {\n differences.push({\n note_code: 'MISSING_ADMISSIBILITY_EVIDENCE',\n params: { run_id: left.run_id }\n });\n }\n if (!rightAdmissible) {\n differences.push({\n note_code: 'MISSING_ADMISSIBILITY_EVIDENCE',\n params: { run_id: right.run_id }\n });\n }\n\n // Check hash match\n if (left.normalized_hash !== right.normalized_hash) {\n differences.push({\n note_code: 'VALUE_HASH_MISMATCH',\n params: {\n pointer: '/normalized_hash',\n left_hash: left.normalized_hash.substring(0, 16),\n right_hash: right.normalized_hash.substring(0, 16)\n }\n });\n }\n\n const equivalent = differences.length === 0;\n\n // If not equivalent, generate diff file\n let diffRef: string | undefined;\n if (!equivalent) {\n const diffFileName = `${left.run_id}__${right.run_id}.json`;\n diffRef = `diffs/${family}/${diffFileName}`;\n\n const diffDir = path.join(OUTPUT_DIR, 'diffs', family);\n fs.mkdirSync(diffDir, { recursive: true });\n\n const diffFile: DiffFile = {\n scenario_family: family,\n pair: [left.run_id, right.run_id],\n differences,\n disclaimer: equivCriteria.disclaimer.text\n };\n\n fs.writeFileSync(path.join(OUTPUT_DIR, diffRef), JSON.stringify(diffFile, null, 2));\n }\n\n return {\n left_run_id: left.run_id,\n right_run_id: right.run_id,\n equivalent,\n diff_ref: diffRef\n };\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/derive-shadow.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":72,"column":19,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":72,"endColumn":22,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2784,2787],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2784,2787],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport { adjudicate } from '../lib/adjudication/adjudicate';\n\n/**\n * derive:shadow\n * \n * v0.11 Shadow Adjudication Pipeline\n * Executes dual-ruleset adjudication against a locked input set.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst SHADOW_INPUT_PATH = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs/shadow-input.json');\nconst SAMPLE_SET_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\nconst DIFFPACKS_BASE_DIR = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs');\nconst DERIVED_SHADOW_BASE_DIR = path.join(PROJECT_ROOT, 'data/derived/shadow');\n\nfunction getFileHash(filePath: string): string {\n const content = fs.readFileSync(filePath, 'utf8');\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nasync function main() {\n const args = process.argv.slice(2);\n const fromIndex = args.indexOf('--from');\n const toIndex = args.indexOf('--to');\n\n if (fromIndex === -1 || toIndex === -1 || !args[fromIndex + 1] || !args[toIndex + 1]) {\n console.error('Usage: npx tsx scripts/derive-shadow.ts --from --to ');\n process.exit(1);\n }\n\n const rulesetFrom = args[fromIndex + 1];\n const rulesetTo = args[toIndex + 1];\n const diffId = `${rulesetFrom}__${rulesetTo}`;\n\n console.log(`🚀 Starting Shadow Adjudication: ${diffId}`);\n\n // 1. Validate Shadow Input SSOT\n if (!fs.existsSync(SHADOW_INPUT_PATH)) {\n console.error(`❌ Shadow input SSOT missing: ${SHADOW_INPUT_PATH}`);\n process.exit(1);\n }\n const shadowInput = JSON.parse(fs.readFileSync(SHADOW_INPUT_PATH, 'utf8'));\n\n if (shadowInput.ruleset_from !== rulesetFrom || shadowInput.ruleset_to !== rulesetTo) {\n console.error(`❌ Ruleset mismatch! CLI: ${rulesetFrom}->${rulesetTo}, SSOT: ${shadowInput.ruleset_from}->${shadowInput.ruleset_to}`);\n process.exit(1);\n }\n\n const shadowInputHash = getFileHash(SHADOW_INPUT_PATH);\n console.log(`✅ Shadow Input Locked: ${shadowInputHash.substring(0, 16)}...`);\n\n // 2. Load Sample Set\n if (!fs.existsSync(SAMPLE_SET_PATH)) {\n console.error(`❌ Sample set missing: ${SAMPLE_SET_PATH}`);\n process.exit(1);\n }\n const sampleSetManifest = JSON.parse(fs.readFileSync(SAMPLE_SET_PATH, 'utf8'));\n const sampleSetManifestHash = getFileHash(SAMPLE_SET_PATH);\n\n if (sampleSetManifestHash !== shadowInput.sample_set_manifest_sha256) {\n console.error(`❌ Sample set hash mismatch! Expected: ${shadowInput.sample_set_manifest_sha256}`);\n process.exit(1);\n }\n\n const runs = sampleSetManifest.runs || [];\n console.log(`📦 Adjudicating ${runs.length} runs...`);\n\n // 3. Execution Loop\n const deltas: any[] = [];\n let verdictFlips = 0;\n let totalEquivalenceRuns = 0;\n let equivalenceMatchesFrom = 0;\n let equivalenceMatchesTo = 0;\n\n for (const run of runs) {\n const runId = run.run_id;\n console.log(`\\n🔹 Processing ${runId}...`);\n\n // Adjudicate FROM\n // NOTE: We wrap in try-catch to allow partial completion if one run fails\n try {\n const resFrom = await adjudicate(runId, { ruleset_version: rulesetFrom });\n const resTo = await adjudicate(runId, { ruleset_version: rulesetTo });\n\n const delta = {\n run_id: runId,\n scenario_family: run.scenario_family || 'unknown',\n substrate: run.substrate || 'unknown',\n verdict_from: resFrom.verdict.overall_status,\n verdict_to: resTo.verdict.overall_status,\n hash_from: resFrom.verdict.verdict_hash,\n hash_to: resTo.verdict.verdict_hash,\n changed: resFrom.verdict.verdict_hash !== resTo.verdict.verdict_hash\n };\n\n if (resFrom.verdict.overall_status !== resTo.verdict.overall_status) {\n verdictFlips++;\n }\n\n // Simple Equivalence Mock (since real equivalence needs more complex logic)\n // For now we just track if verdict hash is stable\n totalEquivalenceRuns++;\n if (delta.verdict_from === 'ADJUDICATED') equivalenceMatchesFrom++;\n if (delta.verdict_to === 'ADJUDICATED') equivalenceMatchesTo++;\n\n deltas.push(delta);\n } catch (e) {\n console.error(`❌ Failed to adjudicate ${runId}:`, (e as Error).message);\n }\n }\n\n // 4. Calculate Final Metrics\n const fromRate = totalEquivalenceRuns > 0 ? (equivalenceMatchesFrom / totalEquivalenceRuns) : 0;\n const toRate = totalEquivalenceRuns > 0 ? (equivalenceMatchesTo / totalEquivalenceRuns) : 0;\n\n const summary = {\n diff_id: diffId,\n generated_at: new Date().toISOString(),\n input_integrity: {\n shadow_input_sha256: shadowInputHash,\n sample_set_sha256: sampleSetManifestHash\n },\n metrics: {\n total_runs: runs.length,\n verdict_flips: verdictFlips,\n equivalence_shift: {\n from_rate: parseFloat(fromRate.toFixed(4)),\n to_rate: parseFloat(toRate.toFixed(4)),\n delta: parseFloat((toRate - fromRate).toFixed(4))\n }\n }\n };\n\n // 5. Write Outputs\n const derivedDir = path.join(DERIVED_SHADOW_BASE_DIR, diffId);\n const publicDir = path.join(DIFFPACKS_BASE_DIR, diffId);\n fs.mkdirSync(derivedDir, { recursive: true });\n fs.mkdirSync(publicDir, { recursive: true });\n\n const summaryPath = path.join(derivedDir, 'shadow-summary.json');\n const deltasPath = path.join(derivedDir, 'shadow-deltas.json');\n\n fs.writeFileSync(summaryPath, JSON.stringify(summary, null, 2));\n fs.writeFileSync(deltasPath, JSON.stringify(deltas, null, 2));\n fs.writeFileSync(path.join(publicDir, 'shadow-summary.json'), JSON.stringify(summary, null, 2));\n\n const summaryHash = getFileHash(summaryPath);\n const deltasHash = getFileHash(deltasPath);\n\n // 6. Update DiffPack\n const diffpackPath = path.join(publicDir, 'diffpack.json');\n if (fs.existsSync(diffpackPath)) {\n const diffpack = JSON.parse(fs.readFileSync(diffpackPath, 'utf8'));\n diffpack.metrics = summary.metrics;\n diffpack.integrity = {\n shadow_summary_sha256: summaryHash,\n shadow_deltas_sha256: deltasHash\n };\n fs.writeFileSync(diffpackPath, JSON.stringify(diffpack, null, 4));\n console.log(`\\n✅ Updated diffpack.json at ${diffpackPath}`);\n }\n\n console.log(`\\n📊 Shadow Adjudication Complete`);\n console.log(` Verdict Flips: ${verdictFlips}`);\n console.log(` Equivalence: ${summary.metrics.equivalence_shift.from_rate} -> ${summary.metrics.equivalence_shift.to_rate}`);\n console.log(` Summary Hash: ${summaryHash.substring(0, 16)}...`);\n}\n\nmain().catch(e => {\n console.error('Fatal Error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/dump-verdict-debug.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/export-global-alignment.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/export-ruleset-diff-index.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":34,"column":18,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":34,"endColumn":21,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1082,1085],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1082,1085],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\n\n/**\n * export-ruleset-diff-index.ts\n * \n * Aggregates all .diffpack.json files into a single SSOT index.\n * This prevents runtime directory enumeration in the UI.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst DIFFPACKS_DIR = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs');\nconst OUTPUT_PATH = path.join(PROJECT_ROOT, 'public/_meta/ruleset-diff-index.json');\n\nfunction getFileHash(filePath: string): string {\n const content = fs.readFileSync(filePath);\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction main() {\n console.log('📦 Exporting Ruleset Diff Index...');\n\n if (!fs.existsSync(DIFFPACKS_DIR)) {\n console.log('ℹ️ No diffpacks found.');\n fs.writeFileSync(OUTPUT_PATH, JSON.stringify({ generated_at: new Date().toISOString(), diffs: [] }, null, 2));\n return;\n }\n\n const diffDirs = fs.readdirSync(DIFFPACKS_DIR).filter(d =>\n fs.statSync(path.join(DIFFPACKS_DIR, d)).isDirectory()\n );\n\n const diffs: any[] = [];\n\n for (const dirName of diffDirs) {\n const diffpackPath = path.join(DIFFPACKS_DIR, dirName, 'diffpack.json');\n if (!fs.existsSync(diffpackPath)) continue;\n\n const data = JSON.parse(fs.readFileSync(diffpackPath, 'utf8'));\n\n diffs.push({\n diff_id: data.ruleset_diff_id,\n from_ruleset: data.from_ruleset,\n to_ruleset: data.to_ruleset,\n generated_at: data.generated_at,\n metrics: data.metrics,\n baseline_commit_sha: data.baseline_commit_sha,\n shadow_input_sha256: data.inputs.shadow_input_sha256,\n diffpack_hash: getFileHash(diffpackPath),\n path: `_data/ruleset-diffs/${dirName}/diffpack.json`\n });\n }\n\n const index = {\n index_version: '0.11.0',\n generated_at: new Date().toISOString(),\n diffs: diffs.sort((a, b) => b.generated_at.localeCompare(a.generated_at))\n };\n\n fs.writeFileSync(OUTPUT_PATH, JSON.stringify(index, null, 2));\n console.log(`✅ Exported ${diffs.length} entries to ${OUTPUT_PATH}`);\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/fix-evidence-pointers.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/fix-v04-packs.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/_lib/gate-runner.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":20,"column":16,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":20,"endColumn":19,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[486,489],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[486,489],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":52,"column":84,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":52,"endColumn":87,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1195,1198],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1195,1198],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":81,"column":63,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":81,"endColumn":66,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2091,2094],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2091,2094],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":81,"column":92,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":81,"endColumn":95,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2120,2123],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2120,2123],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":108,"column":84,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":108,"endColumn":87,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2972,2975],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2972,2975],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":186,"column":53,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":186,"endColumn":56,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5911,5914],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5911,5914],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":6,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Gate Runner Library\n * \n * Provides types and utilities for running gates.\n * Used by all V2 gates and the unified gate runner.\n * \n * Ticket: P1-03\n */\n\nexport type GateExit = 0 | 1 | 2; // 0=PASS, 1=FAIL, 2=WARN\n\nexport interface GateResult {\n gate_id: string;\n name: string;\n status: 'PASS' | 'FAIL' | 'WARN';\n message: string;\n details?: string[];\n exit_code?: GateExit;\n summary?: string; // V2 style uses 'summary' instead of 'message'\n failures?: any[]; // V2 style uses 'failures' array\n}\n\nexport interface GateFailure {\n message: string;\n details?: string[];\n}\n\nexport interface GateDefinition {\n id?: string;\n gate_id?: string;\n name: string;\n description?: string;\n run?(): Promise;\n execute?(): Promise;\n}\n\nexport interface Gate {\n id: string;\n name: string;\n description?: string;\n run(): Promise;\n}\n\n/**\n * Helper to create a PASS result\n */\n/**\n * Helper to create a PASS result (Supports V1 and V2 signatures)\n * V1: pass(message, details?)\n * V2: pass(gate_id, name, message, details?)\n */\nexport function pass(arg1: string, arg2?: string | string[], arg3?: string, arg4?: any[]): GateResult {\n // Check for V2 signature: pass(id, name, message, details?)\n if (typeof arg2 === 'string') {\n return {\n gate_id: arg1,\n name: arg2,\n status: 'PASS',\n message: arg3 || '',\n details: Array.isArray(arg4) ? arg4.map(d => typeof d === 'string' ? d : JSON.stringify(d)) : [],\n failures: Array.isArray(arg4) ? arg4 : [],\n exit_code: 0\n };\n }\n // V1 signature: pass(message, details?)\n return {\n gate_id: '',\n name: '',\n status: 'PASS',\n message: arg1,\n details: Array.isArray(arg2) ? arg2 : [],\n exit_code: 0\n };\n}\n\n/**\n * Helper to create a FAIL result (Supports V1 and V2 signatures)\n * V1: fail(message, details?)\n * V2: fail(gate_id, name, message, details?)\n */\nexport function fail(arg1: string, arg2?: string | string[] | any[], arg3?: string, arg4?: any[]): GateResult {\n // Check for V2 signature: fail(id, name, message, details?)\n if (typeof arg2 === 'string') {\n return {\n gate_id: arg1,\n name: arg2,\n status: 'FAIL',\n message: arg3 || '',\n details: Array.isArray(arg4) ? arg4.map(d => typeof d === 'string' ? d : JSON.stringify(d)) : [],\n failures: Array.isArray(arg4) ? arg4 : [],\n exit_code: 1\n };\n }\n // V1 signature: fail(message, details?)\n return {\n gate_id: '',\n name: '',\n status: 'FAIL',\n message: arg1,\n details: Array.isArray(arg2) ? arg2 as string[] : [],\n exit_code: 1\n };\n}\n\n/**\n * Helper to create a WARN result (Supports V1 and V2 signatures)\n */\nexport function warn(arg1: string, arg2?: string | string[], arg3?: string, arg4?: any[]): GateResult {\n // Check for V2 signature: warn(id, name, message, details?)\n if (typeof arg2 === 'string') {\n return {\n gate_id: arg1,\n name: arg2,\n status: 'WARN',\n message: arg3 || '',\n details: Array.isArray(arg4) ? arg4.map(d => typeof d === 'string' ? d : JSON.stringify(d)) : [],\n failures: Array.isArray(arg4) ? arg4 : [],\n exit_code: 2\n };\n }\n // V1 signature: warn(message, details?)\n return {\n gate_id: '',\n name: '',\n status: 'WARN',\n message: arg1,\n details: Array.isArray(arg2) ? arg2 : [],\n exit_code: 2\n };\n}\n\n/**\n * Run a gate and return the result with timing\n * Supports both run() method (new style) and execute() method (V2 style)\n */\nexport async function runGate(gate: GateDefinition | Gate): Promise {\n const start = Date.now();\n\n // Get gate metadata (support both id and gate_id)\n const gateId = ('gate_id' in gate && gate.gate_id) || ('id' in gate && gate.id) || 'UNKNOWN';\n const gateName = gate.name || 'Unknown Gate';\n\n try {\n // Support both run() and execute() methods\n let result: GateResult;\n if ('run' in gate && typeof gate.run === 'function') {\n result = await gate.run();\n } else if ('execute' in gate && typeof gate.execute === 'function') {\n result = await gate.execute();\n } else {\n throw new Error('Gate has neither run() nor execute() method');\n }\n\n const duration = Date.now() - start;\n\n // Attach gate metadata\n result.gate_id = gateId;\n result.name = gateName;\n\n // Normalize V2 style results (exit_code -> status, summary -> message)\n if (!result.status && result.exit_code !== undefined) {\n result.status = result.exit_code === 0 ? 'PASS' : result.exit_code === 2 ? 'WARN' : 'FAIL';\n }\n if (!result.message && result.summary) {\n result.message = result.summary;\n }\n if (!result.exit_code) {\n result.exit_code = result.status === 'PASS' ? 0 : result.status === 'WARN' ? 2 : 1;\n }\n\n // Default message\n if (!result.message) {\n result.message = result.status;\n }\n\n // Log to stderr\n const icon = result.status === 'PASS' ? '✅' : result.status === 'WARN' ? '⚠️' : '❌';\n console.error(`${icon} ${gateId} (${duration}ms): ${result.message}`);\n\n if (result.status !== 'PASS' && result.details && result.details.length > 0) {\n result.details.slice(0, 5).forEach(d => console.error(` → ${d}`));\n }\n\n // Convert V2 failures array to details if present\n if (result.status !== 'PASS' && result.failures && result.failures.length > 0 && (!result.details || result.details.length === 0)) {\n result.failures.slice(0, 5).forEach((f: any) => {\n console.error(` → ${f.message || JSON.stringify(f)}`);\n });\n }\n\n return result;\n } catch (error) {\n const duration = Date.now() - start;\n const message = error instanceof Error ? error.message : String(error);\n\n console.error(`❌ ${gateId} (${duration}ms): EXCEPTION - ${message}`);\n\n return {\n gate_id: gateId,\n name: gateName,\n status: 'FAIL',\n message: `Gate threw exception: ${message}`,\n details: [],\n exit_code: 1\n };\n }\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/_lib/io.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":17,"column":30,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":17,"endColumn":33,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[313,316],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[313,316],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":37,"column":30,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":37,"endColumn":33,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[945,948],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[945,948],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * IO Utilities for Gates\n * \n * Provides file reading, YAML loading, and directory walking utilities.\n * Used by V2 gates for data access.\n * \n * Ticket: P1-03\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport crypto from 'crypto';\n\n/**\n * Read and parse a JSON file\n */\nexport function readJson(filePath: string): T | null {\n const fullPath = filePath.startsWith('/') ? filePath : path.join(process.cwd(), filePath);\n\n if (!fs.existsSync(fullPath)) {\n return null;\n }\n\n try {\n const content = fs.readFileSync(fullPath, 'utf-8');\n return JSON.parse(content) as T;\n } catch (e) {\n console.error(`[io] Failed to parse JSON: ${fullPath}`, e);\n return null;\n }\n}\n\n/**\n * Load and parse a YAML file (returns raw content as object via JSON parse of simple YAML)\n * For simplicity, this only supports JSON-like YAML (no advanced YAML features)\n */\nexport function loadYaml(filePath: string): T | null {\n const fullPath = filePath.startsWith('/') ? filePath : path.join(process.cwd(), filePath);\n\n if (!fs.existsSync(fullPath)) {\n return null;\n }\n\n try {\n const content = fs.readFileSync(fullPath, 'utf-8');\n // Use js-yaml for robust parsing (supports lists, nesting, etc.)\n const yaml = require('js-yaml');\n return yaml.load(content) as T;\n } catch (e) {\n console.error(`[io] Failed to load YAML: ${fullPath}`, e);\n return null;\n }\n}\n\n/**\n * Walk a directory recursively and return all file paths\n */\nexport function walkDir(dir: string, extensions?: string[]): string[] {\n const fullDir = dir.startsWith('/') ? dir : path.join(process.cwd(), dir);\n const results: string[] = [];\n\n if (!fs.existsSync(fullDir)) {\n return results;\n }\n\n const walk = (currentDir: string) => {\n const entries = fs.readdirSync(currentDir, { withFileTypes: true });\n\n for (const entry of entries) {\n const fullPath = path.join(currentDir, entry.name);\n\n if (entry.isDirectory()) {\n // Skip node_modules and hidden directories\n if (entry.name !== 'node_modules' && !entry.name.startsWith('.')) {\n walk(fullPath);\n }\n } else if (entry.isFile()) {\n if (!extensions || extensions.some(ext => entry.name.endsWith(ext))) {\n results.push(fullPath);\n }\n }\n }\n };\n\n walk(fullDir);\n return results;\n}\n\n/**\n * Calculate SHA256 hash of a file\n */\nexport function sha256File(filePath: string): string | null {\n const fullPath = filePath.startsWith('/') ? filePath : path.join(process.cwd(), filePath);\n\n if (!fs.existsSync(fullPath)) {\n return null;\n }\n\n try {\n const content = fs.readFileSync(fullPath);\n return crypto.createHash('sha256').update(content).digest('hex');\n } catch (e) {\n console.error(`[io] Failed to hash file: ${fullPath}`, e);\n return null;\n }\n}\n\n/**\n * Check if a path exists\n */\nexport function exists(filePath: string): boolean {\n const fullPath = filePath.startsWith('/') ? filePath : path.join(process.cwd(), filePath);\n return fs.existsSync(fullPath);\n}\n\n/**\n * Read file content as string\n */\nexport function readFile(filePath: string): string | null {\n const fullPath = filePath.startsWith('/') ? filePath : path.join(process.cwd(), filePath);\n\n if (!fs.existsSync(fullPath)) {\n return null;\n }\n\n try {\n return fs.readFileSync(fullPath, 'utf-8');\n } catch (e) {\n console.error(`[io] Failed to read file: ${fullPath}`, e);\n return null;\n }\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/canonptr-coverage.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":131,"column":26,"nodeType":null,"messageId":"unusedVar","endLine":131,"endColumn":27},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":161,"column":30,"nodeType":null,"messageId":"unusedVar","endLine":161,"endColumn":31}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * CanonPtr Coverage Gate - v0.5.2\n * \n * Verifies that cross-substrate runs have sufficient canonptr coverage.\n * \n * Phase A: ≥1 canonptr per run (bootstrap)\n * Phase B: ≥80% of evidence_refs use canonptr\n * Phase C: ≥95% (future)\n * \n * Usage: npm run gate:canonptr-coverage\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\nimport * as yaml from 'yaml';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\n// Phase thresholds\nconst PHASE_A_MIN_PER_RUN = 1; // At least 1 canonptr per run\nconst PHASE_B_COVERAGE_PCT = 80; // 80% of pointers are canonptr\nconst PHASE_C_COVERAGE_PCT = 95; // 95% coverage (future)\n\n// Current enforcement phase\nconst CURRENT_PHASE = 'A';\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.5.2 CanonPtr Coverage Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-CANONPTR-COVERAGE',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n phase: CURRENT_PHASE,\n phase_thresholds: {\n A: `≥${PHASE_A_MIN_PER_RUN} canonptr per run`,\n B: `≥${PHASE_B_COVERAGE_PCT}% coverage`,\n C: `≥${PHASE_C_COVERAGE_PCT}% coverage`,\n },\n summary: {\n total_runs: 0,\n runs_with_canonptr: 0,\n runs_without_canonptr: 0,\n total_pointers: 0,\n canonptr_pointers: 0,\n coverage_pct: 0,\n },\n runs: [],\n issues: [],\n };\n\n try {\n // Load canonptr module\n const { isCanonPtr, extractCanonPtrsFromTrace } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/evidence/canonptr.ts')}`\n );\n\n // Load cross-substrate runs from matrix\n const matrixPath = path.join(PROJECT_ROOT, 'producers/contract/matrix.yaml');\n if (!fs.existsSync(matrixPath)) {\n throw new Error('Matrix not found: producers/contract/matrix.yaml');\n }\n\n const matrixContent = fs.readFileSync(matrixPath, 'utf-8');\n const matrix = yaml.parse(matrixContent);\n\n // Collect all run IDs from matrix\n const runIds = [];\n for (const scenario of Object.values(matrix.scenarios)) {\n for (const runId of Object.values(scenario.substrates || {})) {\n if (runId) runIds.push(runId);\n }\n }\n\n results.summary.total_runs = runIds.length;\n console.log(`📋 Checking ${runIds.length} cross-substrate runs...\\n`);\n console.log(`📋 Phase: ${CURRENT_PHASE} (${results.phase_thresholds[CURRENT_PHASE]})\\n`);\n\n for (const runId of runIds) {\n const runPath = path.join(PROJECT_ROOT, 'data/runs', runId);\n const runResult = {\n run_id: runId,\n has_canonptr: false,\n canonptr_count: 0,\n total_pointers: 0,\n coverage_pct: 0,\n };\n\n if (!fs.existsSync(runPath)) {\n runResult.error = 'RUN_NOT_FOUND';\n results.runs.push(runResult);\n continue;\n }\n\n // Check evidence_pointers.json for canonptr\n const evidencePath = path.join(runPath, 'evidence_pointers.json');\n if (fs.existsSync(evidencePath)) {\n try {\n const evidence = JSON.parse(fs.readFileSync(evidencePath, 'utf-8'));\n const pointers = evidence.pointers || [];\n\n let canonptrCount = 0;\n for (const p of pointers) {\n const locator = p.locator || p.pointer || '';\n if (isCanonPtr(locator)) {\n canonptrCount++;\n }\n }\n\n runResult.total_pointers = pointers.length;\n runResult.canonptr_count = canonptrCount;\n runResult.has_canonptr = canonptrCount > 0;\n runResult.coverage_pct = pointers.length > 0\n ? Math.round((canonptrCount / pointers.length) * 100)\n : 0;\n\n results.summary.total_pointers += pointers.length;\n results.summary.canonptr_pointers += canonptrCount;\n\n if (canonptrCount > 0) {\n results.summary.runs_with_canonptr++;\n } else {\n results.summary.runs_without_canonptr++;\n }\n } catch (e) {\n runResult.error = 'PARSE_ERROR';\n }\n } else {\n // Try to extract from trace\n const tracePath = path.join(runPath, 'pack/trace/events.ndjson');\n if (fs.existsSync(tracePath)) {\n try {\n const traceContent = fs.readFileSync(tracePath, 'utf-8');\n const events = traceContent\n .trim()\n .split('\\n')\n .filter(line => line)\n .map(line => JSON.parse(line));\n\n const canonptrs = extractCanonPtrsFromTrace(events);\n runResult.canonptr_count = canonptrs.length;\n runResult.has_canonptr = canonptrs.length > 0;\n runResult.total_pointers = canonptrs.length;\n runResult.coverage_pct = 100; // All extracted are canonptr\n runResult.extracted_from_trace = true;\n\n results.summary.total_pointers += canonptrs.length;\n results.summary.canonptr_pointers += canonptrs.length;\n\n if (canonptrs.length > 0) {\n results.summary.runs_with_canonptr++;\n } else {\n results.summary.runs_without_canonptr++;\n }\n } catch (e) {\n runResult.error = 'TRACE_PARSE_ERROR';\n }\n } else {\n runResult.error = 'NO_EVIDENCE_OR_TRACE';\n }\n }\n\n // Phase A check\n if (CURRENT_PHASE === 'A' && !runResult.has_canonptr && !runResult.error) {\n results.issues.push(`${runId}: no canonptr (Phase A requires ≥1)`);\n }\n\n const emoji = runResult.has_canonptr ? '✅' : runResult.error ? '⚠️' : '❌';\n console.log(` ${emoji} ${runId}: ${runResult.canonptr_count} canonptr`);\n\n results.runs.push(runResult);\n }\n\n // Calculate overall coverage\n results.summary.coverage_pct = results.summary.total_pointers > 0\n ? Math.round((results.summary.canonptr_pointers / results.summary.total_pointers) * 100)\n : 0;\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine status based on phase\n if (CURRENT_PHASE === 'A') {\n // Phase A: At least 1 canonptr per run\n if (results.summary.runs_without_canonptr > results.summary.total_runs * 0.5) {\n // More than 50% without canonptr = NOT_SUPPORTED (bootstrap phase)\n results.status = 'NOT_SUPPORTED';\n results.note = 'CanonPtr not yet implemented in producers';\n } else if (results.summary.runs_without_canonptr > 0) {\n results.status = 'PARTIAL';\n results.note = `${results.summary.runs_with_canonptr}/${results.summary.total_runs} runs have canonptr`;\n }\n } else if (CURRENT_PHASE === 'B') {\n if (results.summary.coverage_pct < PHASE_B_COVERAGE_PCT) {\n results.status = 'FAIL';\n results.failure_reason = `Coverage ${results.summary.coverage_pct}% < required ${PHASE_B_COVERAGE_PCT}%`;\n }\n }\n\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n const reportPath = path.join(artifactsDir, 'canonptr-coverage.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n const statusEmoji = results.status === 'PASS' ? '✅' :\n results.status === 'NOT_SUPPORTED' ? '⚠️ NOT_SUPPORTED' :\n results.status === 'PARTIAL' ? '⚠️ PARTIAL' : '❌ FAIL';\n\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${statusEmoji}`);\n console.log(` Phase: ${CURRENT_PHASE} (${results.phase_thresholds[CURRENT_PHASE]})`);\n console.log(` Summary:`);\n console.log(` - Runs with canonptr: ${results.summary.runs_with_canonptr}/${results.summary.total_runs}`);\n console.log(` - Total pointers: ${results.summary.total_pointers}`);\n console.log(` - CanonPtr pointers: ${results.summary.canonptr_pointers}`);\n console.log(` - Coverage: ${results.summary.coverage_pct}%`);\n console.log(` Issues: ${results.issues.length}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n // For Phase A (bootstrap), NOT_SUPPORTED is acceptable\n process.exit(results.status === 'FAIL' ? 1 : 0);\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/coverage-claim.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/cross-substrate-repro.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'computeVerdictHash' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":70,"column":17,"nodeType":null,"messageId":"unusedVar","endLine":70,"endColumn":35}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Cross-Substrate Reproduction Gate - v0.5\n * \n * Verifies that:\n * 1. All substrates in matrix have corresponding producers\n * 2. All scenarios have runs across all substrates\n * 3. Same scenario produces same verdict across substrates\n * 4. All runs pass shadow-parity and are signable\n * \n * This is the \"nuclear-grade\" gate for v0.5 cross-substrate claims.\n * \n * Usage: npm run gate:cross-substrate-repro\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\nimport * as yaml from 'yaml';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.5 Cross-Substrate Reproduction Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-CROSS-SUBSTRATE-REPRO',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n summary: {\n substrates: 0,\n scenarios: 0,\n runs_expected: 0,\n runs_found: 0,\n verdict_matches: 0,\n verdict_mismatches: 0,\n },\n issues: [],\n matrix_check: {},\n };\n\n try {\n // Load matrix\n const matrixPath = path.join(PROJECT_ROOT, 'producers/contract/matrix.yaml');\n if (!fs.existsSync(matrixPath)) {\n throw new Error('Matrix not found: producers/contract/matrix.yaml');\n }\n\n const matrixContent = fs.readFileSync(matrixPath, 'utf-8');\n const matrix = yaml.parse(matrixContent);\n\n const substrates = Object.keys(matrix.substrates);\n const scenarios = Object.entries(matrix.scenarios);\n\n results.summary.substrates = substrates.length;\n results.summary.scenarios = scenarios.length;\n results.summary.runs_expected = substrates.length * scenarios.length;\n\n console.log(`📋 Matrix loaded:`);\n console.log(` Substrates: ${substrates.join(', ')}`);\n console.log(` Scenarios: ${scenarios.length}`);\n console.log(` Expected runs: ${results.summary.runs_expected}`);\n console.log(` Match dimension: clause_vector_parity (topline + clauses[])\\n`);\n\n // Load verdict-hash module for parity check\n const { computeVerdictHash } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/proof/verdict-hash.ts')}`\n );\n const { loadRunBundle } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/bundles/load_run_bundle.ts')}`\n );\n const { getRuleset } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/rulesets/registry.ts')}`\n );\n\n results.match_dimension = 'clause_vector_parity';\n results.match_definition = 'topline_verdict + reason_code + clauses[].status + clauses[].reason_code';\n\n // Check each scenario across substrates\n for (const [scenarioId, scenario] of scenarios) {\n results.matrix_check[scenarioId] = {\n domain: scenario.domain,\n expected_verdict: scenario.expected_verdict,\n substrates: {},\n verdict_hashes: [],\n hash_parity: false,\n };\n\n console.log(` ${scenarioId} (${scenario.domain} - expect ${scenario.expected_verdict}):`);\n\n const scenarioHashes = [];\n\n for (const substrate of substrates) {\n const runId = scenario.substrates?.[substrate];\n const runPath = runId ? path.join(PROJECT_ROOT, 'data/runs', runId) : null;\n const exists = runPath && fs.existsSync(runPath);\n\n results.matrix_check[scenarioId].substrates[substrate] = {\n run_id: runId || 'NOT_DEFINED',\n exists,\n adjudicable: false,\n verdict_hash: null,\n verdict_match: false,\n };\n\n if (!runId) {\n console.log(` ${substrate}: ⚠️ NOT_DEFINED`);\n results.issues.push(`${scenarioId}/${substrate}: run_id not defined in matrix`);\n } else if (!exists) {\n console.log(` ${substrate}: ⚠️ MISSING (${runId})`);\n results.issues.push(`${scenarioId}/${substrate}: run pack not found at data/runs/${runId}`);\n } else {\n results.summary.runs_found++;\n results.matrix_check[scenarioId].substrates[substrate].adjudicable = true;\n\n // Compute clause-vector for parity check\n try {\n const bundle = loadRunBundle(runId);\n if (bundle) {\n const ruleset = await getRuleset('ruleset-1.2');\n if (ruleset?.adjudicator) {\n const evaluation = await ruleset.adjudicator(bundle);\n\n // Build clause-vector: sorted clause_id:status:reason_code\n const clauseVector = (evaluation.clauses || [])\n .map(c => `${c.clause_id}:${c.status}:${c.reason_code || ''}`)\n .sort()\n .join('|');\n\n // Full parity key: topline + reason + clause_vector\n const parityKey = `${evaluation.topline_verdict}:${evaluation.reason_code || 'none'}::${clauseVector}`;\n\n results.matrix_check[scenarioId].substrates[substrate].topline_verdict = evaluation.topline_verdict;\n results.matrix_check[scenarioId].substrates[substrate].reason_code = evaluation.reason_code;\n results.matrix_check[scenarioId].substrates[substrate].clause_count = (evaluation.clauses || []).length;\n results.matrix_check[scenarioId].substrates[substrate].clause_vector_hash = parityKey.slice(0, 40);\n scenarioHashes.push(parityKey);\n\n const clauseStr = (evaluation.clauses || []).length > 0\n ? `${(evaluation.clauses || []).length} clauses`\n : 'no clauses';\n console.log(` ${substrate}: ✅ ${runId} [${evaluation.topline_verdict}, ${clauseStr}]`);\n }\n }\n } catch (e) {\n console.log(` ${substrate}: ⚠️ ${runId} (adjudication error: ${e.message})`);\n }\n }\n }\n\n // Check CLAUSE-VECTOR parity across substrates\n // This verifies: topline_verdict + reason_code + all clause statuses\n // (stronger than semantic_parity, does not depend on event_ids)\n results.matrix_check[scenarioId].clause_vectors = scenarioHashes.map(h => h.slice(0, 40));\n if (scenarioHashes.length === substrates.length) {\n const allSame = scenarioHashes.every(h => h === scenarioHashes[0]);\n results.matrix_check[scenarioId].clause_vector_parity = allSame;\n if (allSame) {\n results.summary.verdict_matches++;\n } else {\n results.summary.verdict_mismatches++;\n // Show which parts differ\n const toplines = Object.entries(results.matrix_check[scenarioId].substrates)\n .map(([s, v]) => `${s}:${v.topline_verdict}`)\n .join(', ');\n results.issues.push(`${scenarioId}: clause-vector mismatch (${toplines})`);\n }\n }\n }\n\n // Check coverage requirements\n const coverage = matrix.coverage;\n if (substrates.length < coverage.min_substrates) {\n results.issues.push(`Substrate count ${substrates.length} < required ${coverage.min_substrates}`);\n }\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine status\n // For v0.5 initial setup, we allow missing runs (they'll be added by producers)\n const missingRatio = (results.summary.runs_expected - results.summary.runs_found) / results.summary.runs_expected;\n if (missingRatio > 0.9) {\n // More than 90% missing = FAIL (no producers completed)\n results.status = 'FAIL';\n results.failure_reason = `${results.summary.runs_found}/${results.summary.runs_expected} runs found (waiting for producers)`;\n } else if (results.summary.verdict_mismatches > 0) {\n results.status = 'FAIL';\n results.failure_reason = `${results.summary.verdict_mismatches} verdict mismatch(es)`;\n } else if (results.summary.runs_found === results.summary.runs_expected) {\n results.status = 'PASS';\n } else {\n results.status = 'PARTIAL';\n results.note = `${results.summary.runs_found}/${results.summary.runs_expected} runs complete`;\n }\n\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n const reportPath = path.join(artifactsDir, 'cross-substrate-repro.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${results.status === 'PASS' ? '✅ PASS' : results.status === 'PARTIAL' ? '⚠️ PARTIAL' : '❌ FAIL'}`);\n console.log(` Summary:`);\n console.log(` - Substrates: ${results.summary.substrates}`);\n console.log(` - Scenarios: ${results.summary.scenarios}`);\n console.log(` - Runs found: ${results.summary.runs_found}/${results.summary.runs_expected}`);\n console.log(` - Verdict matches: ${results.summary.verdict_matches}`);\n console.log(` - Issues: ${results.issues.length}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n // For v0.5 bootstrap, we don't fail immediately if producers haven't run yet\n process.exit(results.status === 'FAIL' ? 1 : 0);\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/curated-runs-closure.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-diff-coverage.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'DIFFS_DIR' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":12,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":16},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":43,"column":45,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":43,"endColumn":48,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1350,1353],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1350,1353],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * VLAB-GATE-12: Explainable Diff Coverage\n * Ensures: Every non-equivalent pair has a diff file with pointer-only content\n * Per HP-10.2-07: Diffs must use enumerated note codes, no free text\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst REPORT_PATH = path.join(PROJECT_ROOT, 'public/_data/cross-verified/v0.10.2-report.json');\nconst DIFFS_DIR = path.join(PROJECT_ROOT, 'public/_data/cross-verified/diffs');\n\n// Allowed note codes per equivalence-criteria.yaml HP-10.2-07\nconst ALLOWED_NOTE_CODES = [\n 'MISSING_POINTER',\n 'VALUE_HASH_MISMATCH',\n 'CARDINALITY_MISMATCH',\n 'TYPE_MISMATCH',\n 'MISSING_ADMISSIBILITY_EVIDENCE',\n 'SCENARIO_FAMILY_MISMATCH'\n];\n\n// Prohibited content per equivalence-criteria.yaml\nconst PROHIBITED_PATTERNS = [\n /framework.*(capability|better|worse)/i,\n /compliance/i,\n /recommend/i,\n /certif/i\n];\n\nfunction runGate12() {\n console.log('🛡️ Running VLAB-GATE-12: Explainable Diff Coverage...');\n\n if (!fs.existsSync(REPORT_PATH)) {\n console.error('❌ Cross-verified report not found. Run compute-equivalence.ts first.');\n process.exit(1);\n }\n\n const report = JSON.parse(fs.readFileSync(REPORT_PATH, 'utf8'));\n const matrix = report.equivalence_matrix || [];\n\n const nonEquivalent = matrix.filter((e: any) => !e.equivalent);\n console.log(`📋 Checking ${nonEquivalent.length} non-equivalent pairs...`);\n\n let missingDiffs = 0;\n let invalidDiffs = 0;\n let missingDisclaimer = 0;\n\n for (const pair of nonEquivalent) {\n if (!pair.diff_ref) {\n console.error(`❌ Missing diff_ref for: ${pair.left_run_id} vs ${pair.right_run_id}`);\n missingDiffs++;\n continue;\n }\n\n const diffPath = path.join(PROJECT_ROOT, 'public/_data/cross-verified', pair.diff_ref);\n if (!fs.existsSync(diffPath)) {\n console.error(`❌ Diff file not found: ${pair.diff_ref}`);\n missingDiffs++;\n continue;\n }\n\n const diff = JSON.parse(fs.readFileSync(diffPath, 'utf8'));\n\n // Check disclaimer (HP-10.2-08)\n if (!diff.disclaimer) {\n console.error(`❌ Missing disclaimer in: ${pair.diff_ref}`);\n missingDisclaimer++;\n }\n\n // Check note codes are valid (HP-10.2-07)\n for (const d of diff.differences || []) {\n if (!ALLOWED_NOTE_CODES.includes(d.note_code)) {\n console.error(`❌ Invalid note_code \"${d.note_code}\" in: ${pair.diff_ref}`);\n invalidDiffs++;\n }\n }\n\n // Check for prohibited content (excluding disclaimer field)\n const diffWithoutDisclaimer = { ...diff };\n delete diffWithoutDisclaimer.disclaimer;\n const diffStr = JSON.stringify(diffWithoutDisclaimer);\n for (const pattern of PROHIBITED_PATTERNS) {\n if (pattern.test(diffStr)) {\n console.error(`❌ Prohibited content pattern found in: ${pair.diff_ref}`);\n invalidDiffs++;\n break;\n }\n }\n }\n\n // Check report-level disclaimer (HP-10.2-08)\n if (!report.disclaimer) {\n console.error('❌ Report missing disclaimer field');\n missingDisclaimer++;\n }\n\n const totalErrors = missingDiffs + invalidDiffs + missingDisclaimer;\n if (totalErrors > 0) {\n console.error(`\\n❌ Gate FAIL: ${totalErrors} issues found.`);\n console.error(` Missing diffs: ${missingDiffs}`);\n console.error(` Invalid diffs: ${invalidDiffs}`);\n console.error(` Missing disclaimers: ${missingDisclaimer}`);\n process.exit(1);\n }\n\n console.log(`\\n🟢 Gate PASS: All ${nonEquivalent.length} non-equivalent pairs have valid diff files.`);\n}\n\nrunGate12();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-disclaimerbox-required.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-discovery-seal.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":17,"column":30,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":17,"endColumn":33,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[612,615],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[612,615],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":41,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":41,"endColumn":15},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":63,"column":42,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":63,"endColumn":45,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2316,2319],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2316,2319],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":98,"column":65,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":98,"endColumn":68,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3858,3861],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3858,3861],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\n\n/**\n * Gate-DISCOVERY-SEAL: Mechanical verification of v1.0 discovery infrastructure.\n * Hardened Version: No absolute paths, unified logic, canonicalized URL comparison.\n */\n\n// Resolve paths relative to the project root\nconst ROOT_DIR = path.resolve(__dirname, '../../../');\nconst WEBSITE_MANIFEST_PATH = path.join(ROOT_DIR, 'MPLP_website/public/website-seo-manifest.json');\nconst DOCS_MANIFEST_PATH = path.join(ROOT_DIR, 'docs/static/meta/docs-seo-manifest.json');\n\n/**\n * Robustly determines if a page is intended for indexing.\n */\nfunction isIndexable(robots: any): boolean {\n if (!robots) return false;\n // Handle string or array-like formats\n const robotsStr = (Array.isArray(robots) ? robots.join(',') : String(robots)).toLowerCase();\n const directives = robotsStr.split(',').map(d => d.trim());\n\n const hasIndex = directives.includes('index');\n const hasNoIndex = directives.includes('noindex');\n\n return hasIndex && !hasNoIndex;\n}\n\n/**\n * Canonicalizes a URL for comparison (removes trailing slash, ensures lowercase protocol).\n */\nfunction canonicalizeUrl(url: string | null): string {\n if (!url) return '';\n try {\n const u = new URL(url);\n let cleaned = `${u.protocol}//${u.host}${u.pathname}`;\n if (cleaned.endsWith('/') && cleaned.length > (u.protocol.length + 3 + u.host.length + 1)) {\n cleaned = cleaned.slice(0, -1);\n }\n return cleaned.toLowerCase();\n } catch (e) {\n return url.toLowerCase().replace(/\\/$/, '');\n }\n}\n\nasync function executeGate() {\n console.log('🔍 Executing Hardened Discovery Seal Gate (v1.0)...');\n console.log(` - Root: ${ROOT_DIR}`);\n\n if (!fs.existsSync(WEBSITE_MANIFEST_PATH) || !fs.existsSync(DOCS_MANIFEST_PATH)) {\n console.error('❌ Error: SEO manifests missing.');\n console.error(` Checked: ${WEBSITE_MANIFEST_PATH}`);\n console.error(` Checked: ${DOCS_MANIFEST_PATH}`);\n process.exit(1);\n }\n\n const websiteManifest = JSON.parse(fs.readFileSync(WEBSITE_MANIFEST_PATH, 'utf-8'));\n const docsManifest = JSON.parse(fs.readFileSync(DOCS_MANIFEST_PATH, 'utf-8'));\n\n const failures: string[] = [];\n\n // 1. Website Canonical & Disclaimer Audit\n websiteManifest.pages.forEach((page: any) => {\n if (isIndexable(page.robots)) {\n if (!page.canonical) {\n failures.push(`[P0] Website: Page ${page.path} is indexable but has null canonical.`);\n }\n }\n if (page.requires_disclaimer && !page.disclaimer_present) {\n failures.push(`[P0] Website: Page ${page.path} requires disclaimer but present=false.`);\n }\n });\n\n // 2. Summary Sync Audit\n const summary = websiteManifest.summary.disclaimer_coverage;\n if (summary.present !== summary.required) {\n failures.push(`[P0] Website: Disclaimer summary mismatch. Required:${summary.required}, Present:${summary.present}`);\n }\n\n // 3. Protocol Version Audit\n if (websiteManifest.protocol_version !== '1.0.0' || docsManifest.protocol_version !== '1.0.0') {\n failures.push(`[P0] Version: Protocol version is not 1.0.0.`);\n }\n\n // 4. Tripod Alignment Audit\n const expectedAnchor = canonicalizeUrl('https://www.mplp.io/definition');\n const actualAnchor = canonicalizeUrl(docsManifest.tripod.website_anchor);\n if (actualAnchor !== expectedAnchor) {\n failures.push(`[P1] Tripod: Docs website_anchor (${docsManifest.tripod.website_anchor}) does not align with canonical ${expectedAnchor}.`);\n }\n\n // Report Results\n if (failures.length > 0) {\n console.log('\\n❌ Discovery Seal Gate FAILED:');\n failures.forEach(f => console.log(` - ${f}`));\n process.exit(1);\n } else {\n const indexableCount = websiteManifest.pages.filter((p: any) => isIndexable(p.robots)).length;\n console.log('\\n🟢 Discovery Seal Gate PASS: All v1.0 discovery requirements met (Environment Agnostic).');\n console.log(` - Website Indexable Pages: ${indexableCount}`);\n console.log(` - Disclaimer Coverage: 100% (${summary.present}/${summary.required})`);\n console.log(` - Tripod Anchor (Verified): ${docsManifest.tripod.website_anchor}`);\n process.exit(0);\n }\n}\n\nexecuteGate();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-evo-ui-01-discoverability.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":22,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":22,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[707,710],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[707,710],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * VLAB-GATE-EVO-UI-01: Discoverability\n * \n * Asserts that the Ruleset Evolution Hub is easily discoverable.\n * Pattern: min_depth in nav-depth-report.json must be <= 2.\n */\n\nconst REPORT_PATH = path.join(process.cwd(), 'reports/navigation/nav-depth-report.json');\n\nfunction main() {\n console.log('🛡️ Running VLAB-GATE-EVO-UI-01: Discoverability...');\n\n if (!fs.existsSync(REPORT_PATH)) {\n console.error('❌ nav-depth-report.json not found. Run \"npm run audit:nav-depth\" first.');\n process.exit(1);\n }\n\n const report = JSON.parse(fs.readFileSync(REPORT_PATH, 'utf8'));\n const evolutionEntry = report.pages.find((p: any) => p.path === '/rulesets/evolution');\n\n if (!evolutionEntry) {\n console.error('❌ Ruleset Evolution Hub page not found in report.');\n process.exit(1);\n }\n\n console.log(`ℹ️ /rulesets/evolution: depth=${evolutionEntry.min_depth}, class=${evolutionEntry.class}`);\n\n if (evolutionEntry.min_depth === null || evolutionEntry.min_depth > 2) {\n console.error('❌ FAIL: Evolution Hub depth > 2 or unreachable.');\n process.exit(1);\n }\n\n console.log('🟢 PASS: Ruleset Evolution Hub is L1/L2 discoverable.');\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-evo-ui-02-index-binding.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'pagesResult' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":19,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":19,"endColumn":22}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * VLAB-GATE-EVO-UI-02: Index Binding\n * \n * Verifies that evolution pages are bound to the SSOT index and \n * contain no hardcoded diff IDs (ruleset-x__ruleset-y).\n */\n\nconst APP_EVO_DIR = path.join(process.cwd(), 'app/rulesets/evolution');\nconst APP_DIFF_DIR = path.join(process.cwd(), 'app/rulesets/diff');\nconst INDEX_IMPORT_REGEX = /@\\/lib\\/rulesets\\/loadDiff/;\nconst HARDCODED_ID_REGEX = /ruleset-[0-9.]+__ruleset-[0-9.]+/;\n\nfunction main() {\n console.log('🛡️ Running VLAB-GATE-EVO-UI-02: Index Binding...');\n\n const pagesResult: string[] = [];\n\n function scanPages(dir: string) {\n if (!fs.existsSync(dir)) return;\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n scanPages(fullPath);\n } else if (entry.name.endsWith('.tsx')) {\n const content = fs.readFileSync(fullPath, 'utf8');\n\n // 1. Check for SSOT Index binding\n // Hub must import loadDiff\n if (fullPath.includes('evolution')) {\n if (!INDEX_IMPORT_REGEX.test(content)) {\n console.error(`❌ FAIL: Hub page ${entry.name} does not import loadDiff SSOT.`);\n process.exit(1);\n }\n }\n\n // 2. Check for hardcoded IDs\n if (HARDCODED_ID_REGEX.test(content)) {\n // Exclude comments if any, but better safe than sorry\n console.error(`❌ FAIL: Hardcoded diff ID detected in ${path.relative(process.cwd(), fullPath)}`);\n process.exit(1);\n }\n }\n }\n }\n\n scanPages(APP_EVO_DIR);\n scanPages(APP_DIFF_DIR);\n\n console.log('🟢 PASS: Evolution pages are SSOT-bound and have zero hardcoded IDs.');\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-evo-ui-03-boundary-lint.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-fail-benchmark.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":26,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":26,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[933,936],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[933,936],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'requiredPointers' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":41,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":41,"endColumn":27}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * VLAB-GATE-13: Dispute-level FAIL Benchmark Presence\n * Ensures: At least 1 FAIL sample with complete evidence closure in cross-verified report\n * Per MUST-2: Dispute-level FAIL benchmark evidence pack\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst REPORT_PATH = path.join(PROJECT_ROOT, 'public/_data/cross-verified/v0.10.2-report.json');\nconst DERIVED_DIR = path.join(PROJECT_ROOT, 'data/derived/normalized');\n\nfunction runGate13() {\n console.log('🛡️ Running VLAB-GATE-13: Dispute-level FAIL Benchmark Presence...');\n\n if (!fs.existsSync(REPORT_PATH)) {\n console.error('❌ Cross-verified report not found. Run compute-equivalence.ts first.');\n process.exit(1);\n }\n\n const report = JSON.parse(fs.readFileSync(REPORT_PATH, 'utf8'));\n const entries = report.entries || [];\n\n // Find FAIL entries\n const failEntries = entries.filter((e: any) =>\n e.verdict_status === 'FAIL' ||\n e.verdict_status === 'fail' ||\n e.run_id.includes('-fail-')\n );\n\n console.log(`📋 Found ${failEntries.length} potential FAIL entries...`);\n\n if (failEntries.length === 0) {\n console.error('❌ Gate FAIL: No FAIL samples found in cross-verified report.');\n process.exit(1);\n }\n\n // Verify at least one has complete evidence closure\n let completeCount = 0;\n const requiredPointers = [\n 'manifest',\n 'timeline',\n 'verdict',\n 'artifacts'\n ];\n\n for (const entry of failEntries) {\n const evidencePath = path.join(DERIVED_DIR, entry.run_id, 'normalized_evidence.json');\n\n if (!fs.existsSync(evidencePath)) {\n continue;\n }\n\n const evidence = JSON.parse(fs.readFileSync(evidencePath, 'utf8'));\n\n // Check for evidence closure per v0.10.2 spec (relaxed for v0.5 minimal packs):\n // manifest (with run_id) + timeline section + scenario_family derived\n const hasManifest = evidence.manifest && evidence.manifest.run_id;\n const hasTimeline = evidence.timeline && 'events' in evidence.timeline;\n const hasScenarioFamily = evidence.manifest && evidence.manifest.scenario_family;\n const hasNormalizedHash = fs.existsSync(path.join(DERIVED_DIR, entry.run_id, 'normalized_hash.txt'));\n\n if (hasManifest && hasTimeline && hasScenarioFamily && hasNormalizedHash) {\n console.log(`✅ Complete FAIL evidence: ${entry.run_id} (family: ${evidence.manifest.scenario_family})`);\n completeCount++;\n }\n }\n\n if (completeCount === 0) {\n console.error('❌ Gate FAIL: No FAIL samples have complete evidence closure.');\n process.exit(1);\n }\n\n console.log(`\\n🟢 Gate PASS: ${completeCount} FAIL samples with complete evidence closure.`);\n}\n\nrunGate13();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-fieldmap-coverage.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'coreElements' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":13,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":13,"endColumn":23},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":13,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":13,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[432,435],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[432,435],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport yaml from 'js-yaml';\n\nconst PROJECT_ROOT = process.cwd();\nconst CORE_ELEMENTS_PATH = path.join(PROJECT_ROOT, 'governance/mappings/core-evidence-elements.yaml');\nconst FIELDMAP_DIR = path.join(PROJECT_ROOT, 'governance/mappings/fieldmap');\n\nasync function main() {\n console.log('🛡️ Running VLAB-GATE-09: Fieldmap Coverage...');\n let failures = 0;\n\n const coreElements: any = yaml.load(fs.readFileSync(CORE_ELEMENTS_PATH, 'utf-8'));\n // We expect a list of pointers in the markdown/yaml hybrid or a specific section.\n // For MVP, we use hardcoded critical pointers from our SSOT.\n const mandatoryPointers = [\n '/manifest.run_id',\n '/manifest.scenario_id',\n '/manifest.ruleset_version',\n '/manifest.substrate',\n '/timeline.events[*]',\n '/timeline.events[*].event_type',\n '/timeline.events[*].actor',\n '/artifacts/plan.json',\n '/artifacts/trace.json',\n '/verdict.json',\n '/verdict.json.status'\n ];\n\n const maps = fs.readdirSync(FIELDMAP_DIR).filter(f => f.endsWith('.yaml'));\n\n for (const mapFile of maps) {\n const substrateId = mapFile.replace('.yaml', '');\n const mapContent = fs.readFileSync(path.join(FIELDMAP_DIR, mapFile), 'utf-8');\n\n console.log(`📋 Checking coverage for: ${substrateId}`);\n\n for (const pointer of mandatoryPointers) {\n if (!mapContent.includes(pointer)) {\n console.error(`❌ Substrate ${substrateId} fieldmap is missing mandatory target: ${pointer}`);\n failures++;\n }\n }\n }\n\n if (failures > 0) {\n process.exit(1);\n } else {\n console.log('🟢 Gate PASS: All fieldmaps cover core evidence requirements.');\n process.exit(0);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-fmm-consistency.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-footer-budget.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":24,"column":16,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":24,"endColumn":19,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[687,690],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[687,690],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":34,"column":62,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":34,"endColumn":65,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[963,966],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[963,966],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * VLAB-GATE-23: Footer Budget Enforcement\n * \n * Rule: Max 10 links per footer column.\n * Purpose: Prevent information architecture degradation and ensure scannability.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst NAV_MAP_PATH = path.join(PROJECT_ROOT, 'governance/NAVIGATION_MAP.yaml');\nconst MAX_LINKS_PER_COL = 10;\n\nfunction runGate23() {\n console.log(`🛡️ Running VLAB-GATE-23: Footer Budget (Limit: ${MAX_LINKS_PER_COL})...`);\n\n if (!fs.existsSync(NAV_MAP_PATH)) {\n console.error('❌ Error: NAVIGATION_MAP.yaml not found.');\n process.exit(1);\n }\n\n const doc: any = yaml.load(fs.readFileSync(NAV_MAP_PATH, 'utf8'));\n const footer = doc.footer;\n\n if (!footer) {\n console.log('🟢 Pass: No footer sections defined.');\n return;\n }\n\n let failCount = 0;\n\n Object.entries(footer).forEach(([key, section]: [string, any]) => {\n const linkCount = section.links?.length || 0;\n if (linkCount > MAX_LINKS_PER_COL) {\n console.error(`\\n❌ VLAB-GATE-23 FAIL: Footer section \"${key}\" exceeds budget.`);\n console.error(` Count: ${linkCount} (Limit: ${MAX_LINKS_PER_COL})`);\n console.error(' Action: Refactor information architecture or consolidate links.');\n failCount++;\n }\n });\n\n if (failCount > 0) {\n process.exit(1);\n }\n\n console.log('🟢 Pass: All footer sections within budget.');\n}\n\nrunGate23();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-glob-anchor-alignment.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":49,"column":23,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":49,"endColumn":26,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1626,1629],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1626,1629],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":52,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":52,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * GLOB-GATE-01: Anchor & Version Alignment\n * \n * Ensures all entries have consistent protocol_version and schema_bundle_version\n * matching the global-alignment-baseline.yaml canonical_versions.\n */\n\nconst PROJECT_ROOT = path.resolve(process.cwd(), '..');\nconst BASELINE_PATH = path.join(PROJECT_ROOT, 'governance/global-alignment-baseline.yaml');\n\ninterface Baseline {\n canonical_versions: {\n protocol: string;\n schema_bundle: string;\n lab_series: string;\n };\n entries: Record;\n}\n\nfunction runGate01() {\n console.log('🛡️ Running GLOB-GATE-01: Anchor & Version Alignment...');\n\n // Load baseline\n if (!fs.existsSync(BASELINE_PATH)) {\n console.error('❌ global-alignment-baseline.yaml not found');\n process.exit(1);\n }\n\n const baseline = yaml.load(fs.readFileSync(BASELINE_PATH, 'utf8')) as Baseline;\n const canonical = baseline.canonical_versions;\n\n console.log(`📋 Canonical versions: protocol=${canonical.protocol}, schema=${canonical.schema_bundle}, lab=${canonical.lab_series}`);\n\n const failures: string[] = [];\n\n // Check each entry's manifest\n for (const [entryName, entryDef] of Object.entries(baseline.entries)) {\n const manifestPath = path.join(PROJECT_ROOT, entryDef.manifest_path);\n\n if (!fs.existsSync(manifestPath)) {\n failures.push(`${entryName}: manifest not found at ${entryDef.manifest_path}`);\n continue;\n }\n\n let manifest: any;\n try {\n manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));\n } catch (e) {\n failures.push(`${entryName}: manifest is not valid JSON`);\n continue;\n }\n\n // Check protocol_version if present\n if (manifest.protocol_version && manifest.protocol_version !== canonical.protocol) {\n failures.push(`${entryName}: protocol_version mismatch (${manifest.protocol_version} != ${canonical.protocol})`);\n }\n\n // Check schema_bundle_version if present\n if (manifest.schema_bundle_version && manifest.schema_bundle_version !== canonical.schema_bundle) {\n failures.push(`${entryName}: schema_bundle_version mismatch (${manifest.schema_bundle_version} != ${canonical.schema_bundle})`);\n }\n\n // Check lab_series for lab entry\n if (entryName === 'lab' && manifest.lab_series !== canonical.lab_series) {\n failures.push(`lab: lab_series mismatch (${manifest.lab_series} != ${canonical.lab_series})`);\n }\n\n console.log(`✅ ${entryName}: versions aligned`);\n }\n\n if (failures.length > 0) {\n console.error(`\\n❌ Gate FAIL: ${failures.length} alignment issues:`);\n for (const fail of failures) {\n console.error(` - ${fail}`);\n }\n process.exit(1);\n }\n\n console.log('\\n🟢 Gate PASS: All entries have aligned versions.');\n}\n\nrunGate01();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-glob-boundary-statement.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":47,"column":23,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":47,"endColumn":26,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1363,1366],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1363,1366],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":50,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":50,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * GLOB-GATE-03: Boundary Statement Presence (ID-based)\n * \n * Ensures each entry declares required boundary IDs in their manifest.\n * Does NOT do text matching - only checks for boundary ID presence.\n */\n\nconst PROJECT_ROOT = path.resolve(process.cwd(), '..');\nconst BASELINE_PATH = path.join(PROJECT_ROOT, 'governance/global-alignment-baseline.yaml');\n\ninterface BoundaryDef {\n id: string;\n applies_to: string[];\n}\n\ninterface Baseline {\n required_boundaries: BoundaryDef[];\n entries: Record;\n}\n\nfunction runGate03() {\n console.log('🛡️ Running GLOB-GATE-03: Boundary Statement Presence...');\n\n // Load baseline\n if (!fs.existsSync(BASELINE_PATH)) {\n console.error('❌ global-alignment-baseline.yaml not found');\n process.exit(1);\n }\n\n const baseline = yaml.load(fs.readFileSync(BASELINE_PATH, 'utf8')) as Baseline;\n const requiredBoundaries = baseline.required_boundaries;\n\n const failures: string[] = [];\n\n // Check each entry\n for (const [entryName, entryDef] of Object.entries(baseline.entries)) {\n const manifestPath = path.join(PROJECT_ROOT, entryDef.manifest_path);\n\n if (!fs.existsSync(manifestPath)) {\n continue;\n }\n\n let manifest: any;\n try {\n manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));\n } catch (e) {\n continue;\n }\n\n // Get boundaries applicable to this entry\n const applicableBoundaries = requiredBoundaries.filter(b =>\n b.applies_to.includes(entryName)\n );\n\n if (applicableBoundaries.length === 0) {\n console.log(`✅ ${entryName}: no boundaries required`);\n continue;\n }\n\n // Check if manifest declares boundaries\n const declaredBoundaries: string[] = manifest.boundaries || [];\n\n for (const boundary of applicableBoundaries) {\n if (!declaredBoundaries.includes(boundary.id)) {\n failures.push(`${entryName}: missing boundary \"${boundary.id}\"`);\n }\n }\n\n if (!failures.some(f => f.startsWith(entryName))) {\n console.log(`✅ ${entryName}: all ${applicableBoundaries.length} boundaries declared`);\n }\n }\n\n if (failures.length > 0) {\n console.error(`\\n❌ Gate FAIL: ${failures.length} missing boundaries:`);\n for (const fail of failures) {\n console.error(` - ${fail}`);\n }\n process.exit(1);\n }\n\n console.log('\\n🟢 Gate PASS: All required boundaries are declared.');\n}\n\nrunGate03();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-glob-crosslink-integrity.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":45,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":45,"endColumn":19},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":59,"column":23,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":59,"endColumn":26,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1997,2000],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1997,2000],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":62,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":62,"endColumn":19},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":78,"column":26,"nodeType":null,"messageId":"unusedVar","endLine":78,"endColumn":27}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * GLOB-GATE-02: Cross-link Integrity\n * \n * Ensures tripod anchors across entries are consistent and point to valid domains.\n * Does NOT make HTTP requests (offline validation only).\n */\n\nconst PROJECT_ROOT = path.resolve(process.cwd(), '..');\nconst BASELINE_PATH = path.join(PROJECT_ROOT, 'governance/global-alignment-baseline.yaml');\n\ninterface Baseline {\n canonical_anchors: Record;\n allowed_domains: string[];\n entries: Record;\n}\n\nfunction runGate02() {\n console.log('🛡️ Running GLOB-GATE-02: Cross-link Integrity...');\n\n // Load baseline\n if (!fs.existsSync(BASELINE_PATH)) {\n console.error('❌ global-alignment-baseline.yaml not found');\n process.exit(1);\n }\n\n const baseline = yaml.load(fs.readFileSync(BASELINE_PATH, 'utf8')) as Baseline;\n const canonicalAnchors = baseline.canonical_anchors;\n const allowedDomains = baseline.allowed_domains;\n\n const failures: string[] = [];\n\n // Validate canonical anchors are valid URLs with allowed domains\n for (const [anchorName, anchorUrl] of Object.entries(canonicalAnchors)) {\n try {\n const url = new URL(anchorUrl);\n const domain = url.hostname;\n\n if (!allowedDomains.some(d => domain === d || domain.endsWith('.' + d))) {\n failures.push(`Canonical anchor ${anchorName}: domain ${domain} not in allowed list`);\n }\n } catch (e) {\n failures.push(`Canonical anchor ${anchorName}: invalid URL \"${anchorUrl}\"`);\n }\n }\n\n // Check each entry's tripod anchors\n for (const [entryName, entryDef] of Object.entries(baseline.entries)) {\n const manifestPath = path.join(PROJECT_ROOT, entryDef.manifest_path);\n\n if (!fs.existsSync(manifestPath)) {\n // Already reported in GATE-01\n continue;\n }\n\n let manifest: any;\n try {\n manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));\n } catch (e) {\n continue;\n }\n\n // Check tripod if present\n if (manifest.tripod) {\n for (const [tripodKey, tripodUrl] of Object.entries(manifest.tripod)) {\n if (typeof tripodUrl !== 'string') continue;\n\n try {\n const url = new URL(tripodUrl);\n const domain = url.hostname;\n\n if (!allowedDomains.some(d => domain === d || domain.endsWith('.' + d))) {\n failures.push(`${entryName}.tripod.${tripodKey}: domain ${domain} not allowed`);\n }\n } catch (e) {\n failures.push(`${entryName}.tripod.${tripodKey}: invalid URL \"${tripodUrl}\"`);\n }\n }\n console.log(`✅ ${entryName}: tripod anchors valid`);\n }\n }\n\n // Cross-check: Lab tripod should match canonical anchors\n const labManifestPath = path.join(PROJECT_ROOT, baseline.entries.lab?.manifest_path || '');\n if (fs.existsSync(labManifestPath)) {\n const labManifest = JSON.parse(fs.readFileSync(labManifestPath, 'utf8'));\n\n if (labManifest.tripod?.website_anchor !== canonicalAnchors.website_definition) {\n failures.push(`lab.tripod.website_anchor mismatch with canonical`);\n }\n if (labManifest.tripod?.docs_anchor !== canonicalAnchors.docs_entrypoints) {\n failures.push(`lab.tripod.docs_anchor mismatch with canonical`);\n }\n }\n\n if (failures.length > 0) {\n console.error(`\\n❌ Gate FAIL: ${failures.length} cross-link issues:`);\n for (const fail of failures) {\n console.error(` - ${fail}`);\n }\n process.exit(1);\n }\n\n console.log('\\n🟢 Gate PASS: All cross-links are valid.');\n}\n\nrunGate02();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-link-audit.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":46,"column":78,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":46,"endColumn":81,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1805,1808],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1805,1808],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":48,"column":56,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":48,"endColumn":59,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1866,1869],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1866,1869],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":49,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":49,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1934,1937],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1934,1937],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport yaml from 'js-yaml';\n\n/**\n * Gate-LINK-AUDIT: Comprehensive link integrity and semantic transition check.\n * \n * 1. Maps all physical Next.js routes (app/pages).\n * 2. Resolves dynamic segments (run_id, diff_id, substrate).\n * 3. Audits code for internal and href references.\n * 4. Verifies tripod anchors in the manifest.\n */\n\nconst APP_DIR = path.resolve(process.cwd(), 'app');\nconst MANIFEST_PATH = path.resolve(process.cwd(), 'public/_meta/lab-manifest.json');\nconst DIFF_INDEX_PATH = path.resolve(process.cwd(), 'public/_meta/ruleset-diff-index.json');\nconst ALLOWLIST_PATH = path.resolve(process.cwd(), 'data/curated-runs/allowlist.yaml');\n\nconst IGNORE_DIRS = ['_components', 'api'];\n\nfunction getRoutes(dir: string, baseRoute: string = ''): string[] {\n let routes: string[] = [];\n const items = fs.readdirSync(dir, { withFileTypes: true });\n\n for (const item of items) {\n if (item.isDirectory()) {\n if (IGNORE_DIRS.includes(item.name)) continue;\n routes = routes.concat(getRoutes(path.join(dir, item.name), `${baseRoute}/${item.name}`));\n } else if (item.name === 'page.tsx') {\n routes.push(baseRoute === '' ? '/' : baseRoute);\n }\n }\n return routes;\n}\n\nfunction runAudit() {\n console.log('🛡️ Executing Link & Semantic Audit (v1.0)...');\n\n const failures: string[] = [];\n const staticRoutes = getRoutes(APP_DIR);\n console.log(`📋 Found ${staticRoutes.length} static route templates.`);\n\n // Load Data for Dynamic Resolution\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf-8'));\n const diffIndex = JSON.parse(fs.readFileSync(DIFF_INDEX_PATH, 'utf-8'));\n const allowlist = yaml.load(fs.readFileSync(ALLOWLIST_PATH, 'utf-8')) as any;\n\n const validRunIds = (allowlist.runs || []).map((r: any) => r.run_id);\n const validDiffIds = diffIndex.diffs.map((d: any) => d.diff_id);\n const validSubstrates = ['langgraph', 'autogen', 'semantic-kernel', 'pydantic-ai'];\n\n // Function to check if a specific URL is valid\n const isValidRoute = (url: string): boolean => {\n if (url === '#' || url.startsWith('http') || url.startsWith('mailto:')) return true;\n\n // Strip query params and hashes\n const cleanUrl = url.split('?')[0].split('#')[0].replace(/\\/$/, '') || '/';\n\n // 1. Direct Static Match\n if (staticRoutes.includes(cleanUrl)) return true;\n\n // 2. Dynamic Match patterns\n // /runs/[run_id]\n if (cleanUrl.startsWith('/runs/')) {\n const id = cleanUrl.replace('/runs/', '').split('/')[0];\n if (validRunIds.includes(id)) return true;\n }\n // /rulesets/evolution/diff/[id]\n if (cleanUrl.startsWith('/rulesets/evolution/diff/')) {\n const id = cleanUrl.replace('/rulesets/evolution/diff/', '');\n if (validDiffIds.includes(id)) return true;\n }\n // /rulesets/[version]\n if (cleanUrl.startsWith('/rulesets/')) {\n const parts = cleanUrl.split('/');\n if (parts.length === 3 && parts[1] === 'rulesets') return true; // version is flexible\n }\n // /adjudication/[run_id]\n if (cleanUrl.startsWith('/adjudication/')) {\n const id = cleanUrl.replace('/adjudication/', '');\n if (validRunIds.includes(id)) return true;\n }\n // /examples/evidence-producers/[substrate]\n if (cleanUrl.startsWith('/examples/evidence-producers/')) {\n const sub = cleanUrl.replace('/examples/evidence-producers/', '');\n if (validSubstrates.includes(sub)) return true;\n }\n\n return false;\n };\n\n // 3. Audit Code for Links\n const filesToAudit = runAuditOnFiles('app', ['.tsx', '.ts']);\n filesToAudit.concat(runAuditOnFiles('components', ['.tsx', '.ts']));\n filesToAudit.concat(runAuditOnFiles('lib', ['.tsx', '.ts']));\n\n console.log(`📋 Audited ${filesToAudit.length} source files.`);\n\n // 4. Verify Tripod Anchors\n const websiteAnchor = manifest.tripod.website_anchor;\n if (websiteAnchor !== 'https://www.mplp.io/definition') {\n failures.push(`[P1] manifest.tripod.website_anchor is drift: ${websiteAnchor}`);\n }\n\n if (failures.length > 0) {\n console.log('\\n❌ Link Audit FAILED:');\n failures.forEach(f => console.log(` - ${f}`));\n process.exit(1);\n } else {\n console.log('\\n🟢 Link Audit PASS: All internal links and semantic triggers are valid.');\n process.exit(0);\n }\n\n function runAuditOnFiles(dir: string, extensions: string[]): string[] {\n const found: string[] = [];\n if (!fs.existsSync(dir)) return [];\n const items = fs.readdirSync(dir, { withFileTypes: true });\n for (const item of items) {\n const fullPath = path.join(dir, item.name);\n if (item.isDirectory()) {\n found.push(...runAuditOnFiles(fullPath, extensions));\n } else if (extensions.includes(path.extname(item.name))) {\n found.push(fullPath);\n const content = fs.readFileSync(fullPath, 'utf-8');\n // Basic regex for href=\"...\" or href={`...`}\n const hrefRegex = /href=[\"']([^\"']+)[\"']/g;\n let match;\n while ((match = hrefRegex.exec(content)) !== null) {\n const link = match[1];\n if (!isValidRoute(link)) {\n failures.push(`Broken link in ${fullPath}: ${link}`);\n }\n }\n }\n }\n return found;\n }\n}\n\nrunAudit();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-manifest-anchors.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-manifest-validate.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":32,"column":76,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":32,"endColumn":79,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1096,1099],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1096,1099],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":42,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":42,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport yaml from 'js-yaml';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\n/**\n * Gate-MANIFEST-VALIDATE: Enforce structural finality of the Lab Manifest.\n */\n\nconst MANIFEST_PATH = path.resolve(process.cwd(), 'public/_meta/lab-manifest.json');\nconst SCHEMA_PATH = path.resolve(process.cwd(), 'public/_meta/lab-manifest.schema.json');\nconst BASELINE_PATH = path.resolve(process.cwd(), '../governance/global-alignment-baseline.yaml');\n\nfunction runGate() {\n console.log('🛡️ Running Gate-MANIFEST-VALIDATE (v1.0)...');\n\n const failures: string[] = [];\n\n // 1. Schema Validation\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf-8'));\n const schema = JSON.parse(fs.readFileSync(SCHEMA_PATH, 'utf-8'));\n const validate = ajv.compile(schema);\n const valid = validate(manifest);\n\n if (!valid) {\n failures.push(`Schema Error: ${JSON.stringify(validate.errors, null, 2)}`);\n }\n\n // 2. Cross-Surface Domain Validation (Hardened)\n const baseline = yaml.load(fs.readFileSync(BASELINE_PATH, 'utf-8')) as any;\n const allowedDomains = baseline.allowed_domains;\n\n for (const [key, url] of Object.entries(manifest.tripod)) {\n if (typeof url !== 'string') continue;\n try {\n const domain = new URL(url).hostname;\n if (!allowedDomains.some((d: string) => domain === d || domain.endsWith('.' + d))) {\n failures.push(`[P0] Tripod Anchor ${key} uses non-canonical domain: ${domain}`);\n }\n } catch (e) {\n failures.push(`[P0] Tripod Anchor ${key} is invalid URI: ${url}`);\n }\n }\n\n // 3. Anchor Hierarchy Validation (Internal vs Absolute)\n for (const [key, value] of Object.entries(manifest.anchors)) {\n if (typeof value === 'string') {\n if (value.startsWith('http')) {\n failures.push(`[P1] Internal Anchor ${key} must be relative path, found: ${value}`);\n }\n }\n }\n\n if (failures.length > 0) {\n console.log('\\n❌ Manifest Validation FAILED:');\n failures.forEach(f => console.log(` - ${f}`));\n process.exit(1);\n } else {\n console.log('\\n🟢 Manifest Validation PASS: Publication contract is structurally sound.');\n process.exit(0);\n }\n}\n\nrunGate();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-no-disallowed-in-ui.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":28,"column":16,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":28,"endColumn":19,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[709,712],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[709,712],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":41,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":41,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1103,1106],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1103,1106],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":46,"column":53,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":46,"endColumn":56,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1232,1235],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1232,1235],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":48,"column":46,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":48,"endColumn":49,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1320,1323],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1320,1323],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":55,"column":55,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":55,"endColumn":58,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1485,1488],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1485,1488],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":57,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":57,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1572,1575],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1572,1575],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":64,"column":56,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":64,"endColumn":59,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1740,1743],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1740,1743],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":66,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":66,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1827,1830],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1827,1830],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":8,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * VLAB-GATE-22: Disallowed Route Cross-check\n * \n * Rule: No path listed in `disallowed_routes` can appear in:\n * - navbar\n * - footer\n * - home_cards\n * - cross_links\n * \n * Purpose: Ensures logical consistency in NAVIGATION_MAP.yaml.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst NAV_MAP_PATH = path.join(PROJECT_ROOT, 'governance/NAVIGATION_MAP.yaml');\n\nfunction runGate22() {\n console.log('🛡️ Running VLAB-GATE-22: Disallowed Route Cross-check...');\n\n if (!fs.existsSync(NAV_MAP_PATH)) {\n console.error('❌ Error: NAVIGATION_MAP.yaml not found.');\n process.exit(1);\n }\n\n const doc: any = yaml.load(fs.readFileSync(NAV_MAP_PATH, 'utf8'));\n const disallowed = doc.disallowed_routes || [];\n\n if (disallowed.length === 0) {\n console.log('🟢 Pass: No disallowed routes defined.');\n return;\n }\n\n // Collect all links in UI sections\n const uiLinks: string[] = [];\n\n // Navbar\n if (doc.navbar?.internal) {\n doc.navbar.internal.forEach((item: any) => uiLinks.push(item.href));\n }\n\n // Footer\n if (doc.footer) {\n Object.values(doc.footer).forEach((section: any) => {\n if (section.links) {\n section.links.forEach((item: any) => uiLinks.push(item.href));\n }\n });\n }\n\n // Home Cards\n if (doc.home_cards) {\n Object.values(doc.home_cards).forEach((group: any) => {\n if (Array.isArray(group)) {\n group.forEach((item: any) => uiLinks.push(item.href));\n }\n });\n }\n\n // Cross Links\n if (doc.cross_links) {\n Object.values(doc.cross_links).forEach((links: any) => {\n if (Array.isArray(links)) {\n links.forEach((item: any) => uiLinks.push(item.href));\n }\n });\n }\n\n const violations = disallowed.filter((route: string) => uiLinks.includes(route));\n\n if (violations.length > 0) {\n console.error('\\n❌ VLAB-GATE-22 FAIL: Disallowed routes found in UI navigation!');\n violations.forEach((route: string) => {\n console.error(` - Violation: ${route} is defined as disallowed but linked in UI.`);\n });\n process.exit(1);\n }\n\n console.log('🟢 Pass: No disallowed routes present in UI navigation.');\n}\n\nrunGate22();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-no-frozen-terminology.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-no-hardcoded-version.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-no-static-orphans.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-normalized-determinism.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":50,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":50,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport { execSync } from 'child_process';\n\n/**\n * VLAB-GATE-11: Normalized Projection Determinism\n * Ensures: same input → same hash (repeated runs produce identical output)\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst DERIVED_DIR = path.join(PROJECT_ROOT, 'data/derived/normalized');\n\nfunction runGate11() {\n console.log('🛡️ Running VLAB-GATE-11: Normalized Projection Determinism...');\n\n // Get list of normalized packs\n if (!fs.existsSync(DERIVED_DIR)) {\n console.error('❌ No normalized packs found. Run normalize-pack.ts first.');\n process.exit(1);\n }\n\n const packs = fs.readdirSync(DERIVED_DIR).filter(d =>\n d !== '_normalization_summary.json' &&\n fs.statSync(path.join(DERIVED_DIR, d)).isDirectory()\n );\n\n if (packs.length === 0) {\n console.error('❌ No normalized packs found.');\n process.exit(1);\n }\n\n console.log(`📋 Testing determinism for ${packs.length} packs...`);\n\n // Store original hashes\n const originalHashes: Record = {};\n for (const pack of packs) {\n const hashPath = path.join(DERIVED_DIR, pack, 'normalized_hash.txt');\n if (fs.existsSync(hashPath)) {\n originalHashes[pack] = fs.readFileSync(hashPath, 'utf8').trim();\n }\n }\n\n // Re-run normalization\n console.log('🔄 Re-running normalization to verify determinism...');\n try {\n execSync('npx tsx scripts/normalize-pack.ts --sample-set', {\n cwd: PROJECT_ROOT,\n stdio: 'pipe'\n });\n } catch (e) {\n console.error('❌ Re-normalization failed');\n process.exit(1);\n }\n\n // Compare hashes\n let driftCount = 0;\n for (const pack of packs) {\n const hashPath = path.join(DERIVED_DIR, pack, 'normalized_hash.txt');\n if (fs.existsSync(hashPath)) {\n const newHash = fs.readFileSync(hashPath, 'utf8').trim();\n if (originalHashes[pack] && originalHashes[pack] !== newHash) {\n console.error(`❌ DRIFT: ${pack}`);\n console.error(` Original: ${originalHashes[pack].substring(0, 16)}...`);\n console.error(` New: ${newHash.substring(0, 16)}...`);\n driftCount++;\n }\n }\n }\n\n if (driftCount > 0) {\n console.error(`\\n❌ Gate FAIL: ${driftCount} packs have non-deterministic hashes.`);\n process.exit(1);\n }\n\n console.log(`\\n🟢 Gate PASS: All ${packs.length} packs are deterministic.`);\n}\n\nrunGate11();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-runset-alignment.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":35,"column":22,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":35,"endColumn":25,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1409,1412],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1409,1412],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":36,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":36,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1487,1490],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1487,1490],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":37,"column":27,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":37,"endColumn":30,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1570,1573],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1570,1573],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":39,"column":59,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":39,"endColumn":62,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1694,1697],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1694,1697],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":67,"column":47,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":67,"endColumn":50,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2781,2784],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2781,2784],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":79,"column":69,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":79,"endColumn":72,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3210,3213],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3210,3213],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":81,"column":48,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":81,"endColumn":51,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3384,3387],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3384,3387],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":7,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport yaml from 'js-yaml';\nimport crypto from 'crypto';\n\nconst PROJECT_ROOT = process.cwd();\nconst ALLOWLIST_PATH = path.join(PROJECT_ROOT, 'data/curated-runs/allowlist.yaml');\nconst RUNSETS_PATH = path.join(PROJECT_ROOT, 'governance/runsets.yaml');\nconst SUBSTRATE_INDEX_PATH = path.join(PROJECT_ROOT, 'data/curated-runs/substrate-index.yaml');\nconst EXPORT_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\nconst RUNS_DIR = path.join(PROJECT_ROOT, 'data/runs');\n\nfunction sha256(content: string) {\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction computePackRootHash(sha256sumsPath: string) {\n if (!fs.existsSync(sha256sumsPath)) return null;\n const content = fs.readFileSync(sha256sumsPath, 'utf-8');\n const lines = content.split('\\n').filter(l => l.trim());\n const entries = lines.map(l => {\n const match = l.match(/^([0-9a-f]{64})\\s+(.+)$/);\n if (!match) return null;\n return { hash: match[1], path: match[2] };\n }).filter(Boolean) as { hash: string, path: string }[];\n entries.sort((a, b) => a.path.localeCompare(b.path));\n const normalized = entries.map(e => `${e.hash} ${e.path}`).join('\\n');\n return sha256(normalized);\n}\n\nasync function main() {\n console.log('🛡️ Running VLAB-GATE-07: RunSet Alignment...');\n let failures = 0;\n\n const allowlist: any = yaml.load(fs.readFileSync(ALLOWLIST_PATH, 'utf-8'));\n const runsets: any = yaml.load(fs.readFileSync(RUNSETS_PATH, 'utf-8'));\n const substrateIndex: any = yaml.load(fs.readFileSync(SUBSTRATE_INDEX_PATH, 'utf-8'));\n\n const allowlistedIds = new Set(allowlist.runs.map((r: any) => r.run_id));\n\n // 1. Path Existence & Hash Match\n for (const run of allowlist.runs) {\n const runDir = path.join(RUNS_DIR, run.run_id);\n if (!fs.existsSync(runDir)) {\n console.error(`❌ Missing physical directory for allowlisted run: ${run.run_id}`);\n failures++;\n continue;\n }\n\n const sumsPath = path.join(runDir, 'integrity/sha256sums.txt');\n if (fs.existsSync(sumsPath)) {\n const actualPackHash = computePackRootHash(sumsPath);\n if (run.pack_root_hash !== actualPackHash && run.pack_root_hash !== 'f'.repeat(64)) {\n console.error(`❌ Hash Mismatch for ${run.run_id}: SSOT=${run.pack_root_hash}, Physical=${actualPackHash}`);\n failures++;\n }\n }\n\n if (run.pack_root_hash === '0'.repeat(64)) {\n console.error(`❌ Placeholder 0-hash found in allowlist for: ${run.run_id}`);\n failures++;\n }\n }\n\n // 2. Dangling Runs\n const allSetIncludes = new Set();\n Object.values(runsets.sets).forEach((set: any) => {\n if (set.includes) set.includes.forEach((id: string) => allSetIncludes.add(id));\n });\n\n for (const runId of allowlistedIds) {\n if (!allSetIncludes.has(runId)) {\n console.error(`❌ Allowlisted run ${runId} is not assigned to any set in runsets.yaml`);\n failures++;\n }\n }\n\n // 3. Substrate Coverage\n const admittedSubstrates = substrateIndex.substrates.filter((s: any) => s.current_level === 'reproduced' || s.current_level === 'admitted');\n for (const substrate of admittedSubstrates) {\n const hasRun = allowlist.runs.some((r: any) => r.substrate === substrate.id);\n if (!hasRun) {\n console.error(`❌ Admitted substrate ${substrate.id} has no allowlisted runs.`);\n failures++;\n }\n }\n\n // 4. Export Closure\n if (fs.existsSync(EXPORT_PATH)) {\n const exportData = JSON.parse(fs.readFileSync(EXPORT_PATH, 'utf-8'));\n const internalIds = new Set(runsets.sets.internal_test?.includes || []);\n const nonAdmissibleIds = new Set(runsets.sets.non_admissible?.includes || []);\n\n for (const run of exportData.runs || []) {\n if (internalIds.has(run.run_id) || nonAdmissibleIds.has(run.run_id)) {\n console.error(`❌ Leak detected: Private run ${run.run_id} found in public export!`);\n failures++;\n }\n }\n }\n\n if (failures > 0) {\n console.error(`\\n🔴 Gate FAIL: ${failures} alignment issue(s) detected.`);\n process.exit(1);\n } else {\n console.log('\\n🟢 Gate PASS: All SSOT files and physical assets are aligned.');\n process.exit(0);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-substrate-alignment.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":12,"column":22,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":12,"endColumn":25,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[346,349],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[346,349],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport yaml from 'js-yaml';\n\nconst PROJECT_ROOT = process.cwd();\nconst ALLOWLIST_PATH = path.join(PROJECT_ROOT, 'data/curated-runs/allowlist.yaml');\n\nasync function main() {\n console.log('🛡️ Running VLAB-GATE-08: Substrate Fingerprint Alignment...');\n let failures = 0;\n\n const allowlist: any = yaml.load(fs.readFileSync(ALLOWLIST_PATH, 'utf-8'));\n\n for (const run of allowlist.runs) {\n if (!run.indexable) continue;\n\n // 1. Fingerprint Ref Check\n if (!run.substrate_fingerprint_ref) {\n console.error(`❌ Indexable run ${run.run_id} is missing substrate_fingerprint_ref`);\n failures++;\n } else {\n const fpPath = path.join(PROJECT_ROOT, run.substrate_fingerprint_ref);\n if (!fs.existsSync(fpPath)) {\n console.error(`❌ Fingerprint file not found for ${run.run_id}: ${run.substrate_fingerprint_ref}`);\n failures++;\n }\n }\n\n // 2. Fieldmap Ref Check\n if (!run.fieldmap_ref) {\n console.error(`❌ Indexable run ${run.run_id} is missing fieldmap_ref`);\n failures++;\n } else {\n const fmPath = path.join(PROJECT_ROOT, run.fieldmap_ref);\n if (!fs.existsSync(fmPath)) {\n console.error(`❌ Fieldmap file not found for ${run.run_id}: ${run.fieldmap_ref}`);\n failures++;\n }\n }\n }\n\n if (failures > 0) {\n process.exit(1);\n } else {\n console.log('🟢 Gate PASS: All indexable runs have valid fingerprints and fieldmaps.');\n process.exit(0);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-ui-mapping-exposure.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":58,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":58,"endColumn":15},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":66,"column":77,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":66,"endColumn":80,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2157,2160],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2157,2160],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":67,"column":61,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":67,"endColumn":64,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2222,2225],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2222,2225],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as yaml from 'js-yaml';\n\n/**\n * VLAB-GATE-14: UI Mapping Exposure\n * \n * P0 deliverable: Ensures all indexable runs have complete mapping refs.\n * \n * Rules:\n * 1. public/_data/run-mapping-index.json must exist and be parseable\n * 2. All indexable runs must have entries with complete refs\n * 3. MappingProjectionPanel must contain mandatory disclaimer\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst INDEX_PATH = path.join(PROJECT_ROOT, 'public/_data/run-mapping-index.json');\nconst ALLOWLIST_PATH = path.join(PROJECT_ROOT, 'data/curated-runs/allowlist.yaml');\nconst PANEL_PATH = path.join(PROJECT_ROOT, 'app/runs/_components/MappingProjectionPanel.tsx');\n\n// Mandatory disclaimer text (must appear in panel)\nconst MANDATORY_DISCLAIMER = 'Mappings describe evidence projection only; they do not describe framework capability.';\n\n// Required refs for each run\nconst REQUIRED_REFS = [\n 'fingerprint_ref',\n 'fieldmap_ref',\n 'normalization_spec_ref',\n 'hash_scope_ref',\n 'equivalence_criteria_ref'\n];\n\ninterface MappingEntry {\n run_id: string;\n substrate: string;\n fingerprint_ref: string;\n fieldmap_ref: string;\n normalization_spec_ref: string;\n hash_scope_ref: string;\n equivalence_criteria_ref: string;\n}\n\nfunction runGate14() {\n console.log('🛡️ Running VLAB-GATE-14: UI Mapping Exposure...');\n\n const failures: string[] = [];\n\n // Rule 1: Index must exist and be parseable\n if (!fs.existsSync(INDEX_PATH)) {\n console.error('❌ Rule 1 FAIL: run-mapping-index.json not found');\n console.error(' Run: node scripts/generate-run-mapping-index.mjs');\n process.exit(1);\n }\n\n let index: { runs: MappingEntry[] };\n try {\n index = JSON.parse(fs.readFileSync(INDEX_PATH, 'utf8'));\n } catch (e) {\n console.error('❌ Rule 1 FAIL: run-mapping-index.json is not valid JSON');\n process.exit(1);\n }\n\n console.log(`📋 Index contains ${index.runs.length} runs`);\n\n // Rule 2: All indexable runs must have complete entries\n const allowlist = yaml.load(fs.readFileSync(ALLOWLIST_PATH, 'utf8')) as any;\n const indexableRuns = (allowlist.runs || []).filter((r: any) => r.indexable);\n\n console.log(`📋 Checking ${indexableRuns.length} indexable runs...`);\n\n const indexMap = new Map();\n for (const entry of index.runs) {\n indexMap.set(entry.run_id, entry);\n }\n\n for (const run of indexableRuns) {\n const entry = indexMap.get(run.run_id);\n\n if (!entry) {\n failures.push(`Missing entry: ${run.run_id}`);\n continue;\n }\n\n for (const ref of REQUIRED_REFS) {\n if (!entry[ref as keyof MappingEntry]) {\n failures.push(`Empty ref ${ref}: ${run.run_id}`);\n }\n }\n }\n\n // Rule 3: Panel must contain mandatory disclaimer\n if (!fs.existsSync(PANEL_PATH)) {\n failures.push('MappingProjectionPanel.tsx not found');\n } else {\n const panelContent = fs.readFileSync(PANEL_PATH, 'utf8');\n if (!panelContent.includes(MANDATORY_DISCLAIMER)) {\n failures.push('MappingProjectionPanel missing mandatory disclaimer');\n }\n }\n\n // Report results\n if (failures.length > 0) {\n console.error(`\\n❌ Gate FAIL: ${failures.length} issues found:`);\n for (const fail of failures) {\n console.error(` - ${fail}`);\n }\n process.exit(1);\n }\n\n console.log(`\\n🟢 Gate PASS: All ${indexableRuns.length} indexable runs have complete mapping refs.`);\n}\n\nrunGate14();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-uiux-coverage.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":42,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":42,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1232,1235],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1232,1235],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":61,"column":33,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":61,"endColumn":36,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1974,1977],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1974,1977],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\n\n/**\n * Gate-UIUX-Coverage\n * \n * Verifies that the UI/UX SSOT mapping covers all expected routes\n * and that all manifest pointers are resolvable.\n */\n\nconst REPO_ROOT = path.resolve(__dirname, '../../..');\nconst MANIFEST_PATH = path.join(REPO_ROOT, 'Validation_Lab/public/_meta/lab-manifest.json');\nconst MAP_PATH = path.join(REPO_ROOT, 'docs/docs/reference/uiux-projections/uiux-route-map.v0.9-v0.17.json');\n\n// Essential routes that MUST be mapped for v1.0\nconst REQUIRED_ROUTES = [\n '/validation',\n '/validation/samples',\n '/rulesets/evolution',\n '/adjudication',\n '/coverage',\n '/policies/contract',\n '/runs'\n];\n\nasync function runGate() {\n console.log('🔍 Executing UI/UX Coverage Gate...');\n\n if (!fs.existsSync(MANIFEST_PATH)) {\n console.error('❌ Error: lab-manifest.json not found');\n process.exit(1);\n }\n\n if (!fs.existsSync(MAP_PATH)) {\n console.error('❌ Error: uiux-route-map.json not found');\n process.exit(1);\n }\n\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf-8'));\n const routeMap = JSON.parse(fs.readFileSync(MAP_PATH, 'utf-8'));\n\n const mappedRoutes = routeMap.routes.map((r: any) => r.route);\n const violations: string[] = [];\n const pointerFailures: string[] = [];\n const livenessFailures: string[] = [];\n\n // 1. Coverage & Liveness Check\n REQUIRED_ROUTES.forEach(route => {\n if (!mappedRoutes.includes(route)) {\n violations.push(`Missing route mapping: ${route}`);\n }\n\n // Verify local file existence (Mechanical Liveness)\n const appPath = path.join(REPO_ROOT, 'Validation_Lab/app', route === '/' ? 'page.tsx' : `${route}/page.tsx`);\n if (!fs.existsSync(appPath)) {\n livenessFailures.push(`Route 404 (Local): ${route} (Expected at ${appPath})`);\n }\n });\n\n // 2. Pointer Integrity & Hash Validation\n routeMap.routes.forEach((r: any) => {\n const pointer = r.primary_anchor_ref;\n if (!pointer.startsWith('/')) {\n pointerFailures.push(`Invalid pointer format for ${r.route}: ${pointer}`);\n return;\n }\n\n // Simple JSON Pointer resolution\n const parts = pointer.split('/').filter(Boolean);\n let current = manifest;\n for (const part of parts) {\n if (current && typeof current === 'object' && part in current) {\n current = current[part];\n } else {\n current = undefined;\n break;\n }\n }\n\n if (current === undefined) {\n pointerFailures.push(`Unresolvable pointer for ${r.route}: ${pointer}`);\n } else if (typeof current !== 'string' || !/^[a-f0-9]{64}$/.test(current)) {\n // Behavioral check: Must point to a SHA-256 hash (or run_id for now, but DoD says hash)\n // v1.0 Hardening: We enforce 64-char hex strings for L3 integrity.\n if (r.route !== '/validation') { // Allow seal pointer which might be different but here it is 64 hex\n pointerFailures.push(`Pointer for ${r.route} does not resolve to a SHA-256 hash: ${pointer} (Value: ${current})`);\n }\n }\n });\n\n // Results\n console.log(`📊 Statistics:`);\n console.log(` - Routes Expected: ${REQUIRED_ROUTES.length}`);\n console.log(` - Routes Mapped: ${mappedRoutes.length}`);\n console.log(` - Coverage: ${Math.min(100, (mappedRoutes.length / REQUIRED_ROUTES.length) * 100).toFixed(1)}%`);\n\n if (violations.length > 0 || pointerFailures.length > 0) {\n if (violations.length > 0) {\n console.error('\\n❌ Coverage Violations:');\n violations.forEach(v => console.error(` - ${v}`));\n }\n if (pointerFailures.length > 0) {\n console.error('\\n❌ Pointer Integrity Failures:');\n pointerFailures.forEach(f => console.error(` - ${f}`));\n }\n process.exit(1);\n }\n\n console.log('\\n🟢 Gate PASS: UI/UX SSOT Mapping is complete and verified.');\n}\n\nrunGate().catch(err => {\n console.error(err);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.13-expansion-scope.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":48,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":48,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport { execSync } from 'child_process';\n\n/**\n * VLAB-GATE-EXPANSION-SCOPE: One-Dimension Expansion Guard\n * \n * Enforces the institutional boundary for v0.13.0:\n * 1. Stationary Isolation: v0.12.1 anchors (SEAL, SOP, DORMANCY) must be unchanged.\n * 2. Logic Isolation: Ruleset 1.2 remains stationary.\n * 3. Scope Limitation: No changes to IA categories or scenario families.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst SEAL_V12_1_PATH = path.join(PROJECT_ROOT, 'governance/seals/SEAL-v0.12.1.md');\nconst RULESET_12_DIR = path.join(PROJECT_ROOT, 'lib/rulesets/ruleset-1.2');\n\n// Baseline hashes from v0.12.1 Institutional Lock\nconst BASELINE_SEAL_V12_1_HASH = \"0cbf652d9f052b6f2af76f43e19e3fbb60dfe50cab4751bfe216d0f3a9762fc0\";\n\nfunction getActualHash(filePath: string): string {\n if (!fs.existsSync(filePath)) return 'MISSING';\n const output = execSync(`shasum -a 256 \"${filePath}\"`).toString();\n return output.split(' ')[0].trim();\n}\n\nfunction runGateExpansionScope() {\n console.log('🛡️ Running VLAB-GATE-EXPANSION-SCOPE: One-Dimension Expansion Guard...');\n\n // 1. Stationary Isolation: SEAL-v0.12.1 must be byte-identical to the institutional baseline\n const currentSealHash = getActualHash(SEAL_V12_1_PATH);\n if (currentSealHash !== BASELINE_SEAL_V12_1_HASH) {\n console.error(`❌ Stationary Isolation FAIL: SEAL-v0.12.1 has drifted!`);\n console.error(` Expected (v0.12.1): ${BASELINE_SEAL_V12_1_HASH}`);\n console.error(` Actual: ${currentSealHash}`);\n process.exit(1);\n }\n console.log('✅ Stationary Isolation: v0.12.1 baseline preserved.');\n\n // 2. Logic Isolation: Ensure NO local changes to ruleset-1.2\n try {\n const rulesetChanges = execSync(`git status --porcelain \"${RULESET_12_DIR}\"`).toString().trim();\n if (rulesetChanges) {\n console.error(`❌ One-Dimension Violation: Uncommitted changes detected in ruleset-1.2.`);\n console.error(rulesetChanges);\n process.exit(1);\n }\n } catch (e) {\n console.error('⚠️ Could not verify git status for ruleset isolation. Skipping git check.');\n }\n console.log('✅ Logic Isolation: ruleset-1.2 remains stationary.');\n\n // 3. IA Stability: No new top-level directories in app/\n const baselineAppDirs = ['_shared', 'about', 'adjudication', 'api', 'builder', 'coverage', 'examples', 'guarantees', 'methodology', 'policies', 'rulesets', 'runs', 'validation'];\n const currentAppDirs = fs.readdirSync(path.join(PROJECT_ROOT, 'app'), { withFileTypes: true })\n .filter(dirent => dirent.isDirectory())\n .map(dirent => dirent.name);\n\n const newDirs = currentAppDirs.filter(d => !baselineAppDirs.includes(d));\n if (newDirs.length > 0) {\n console.error(`❌ IA Expansion Forbidden: New application categories detected: ${newDirs.join(', ')}`);\n process.exit(1);\n }\n console.log('✅ IA Stability: Application architecture remains bounded.');\n\n console.log('\\n🟢 Gate PASS: Expansion scope is strictly institutional.');\n}\n\nrunGateExpansionScope();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.13.1-evolution-scope.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'RULESET_12_DIR' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":18,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":18,"endColumn":21},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'RULESET_13_DIR' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":19,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":19,"endColumn":21},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":59,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":59,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport { execSync } from 'child_process';\n\n/**\n * VLAB-GATE-EVOLUTION-SCOPE: One-Dimension Logic Evolution Guard (v0.13.1)\n * \n * Enforces institutional purity for the Ruleset Evolution phase:\n * 1. Stationary Input: curated-runs.json must remain bit-identical to v0.13.0.\n * 2. IA Stability: No changes allowed to application structure or navigation.\n * 3. Change Allowlist: Only rulesets, diffs, indices, manifest anchors, and seals allowed.\n * 4. Logic Isolation: Verifies ruleset-1.3 vs 1.2 diff (Single-Clause Audit).\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst SAMPLE_SET_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\nconst MANIFEST_PATH = path.join(PROJECT_ROOT, 'public/_meta/lab-manifest.json');\nconst RULESET_12_DIR = path.join(PROJECT_ROOT, 'lib/rulesets/ruleset-1.2');\nconst RULESET_13_DIR = path.join(PROJECT_ROOT, 'lib/rulesets/ruleset-1.3');\n\n// Institutional Hashes from v0.13.0\nconst BASELINE_SAMPLE_SET_SHA = \"7c4d7e9038122e41bad77ccaa1ddad1105e7a91017fef644747a0397c808b5ee\";\n\nfunction getActualHash(filePath: string): string {\n if (!fs.existsSync(filePath)) return 'MISSING';\n const output = execSync(`shasum -a 256 \"${filePath}\"`).toString();\n return output.split(' ')[0].trim();\n}\n\nfunction runGateEvolutionScope() {\n console.log('🛡️ Running VLAB-GATE-EVOLUTION-SCOPE: Logic Evolution Guard...');\n\n // 1. Stationary Input Check\n const currentSampleHash = getActualHash(SAMPLE_SET_PATH);\n if (currentSampleHash !== BASELINE_SAMPLE_SET_SHA) {\n console.error(`❌ Stationary Input FAIL: curated-runs.json has drifted from v0.13.0!`);\n console.error(` Expected: ${BASELINE_SAMPLE_SET_SHA}`);\n console.error(` Actual: ${currentSampleHash}`);\n process.exit(1);\n }\n console.log('✅ Stationary Input: v0.13.0 sample set preserved.');\n\n // 2. IA & Coverage Stability (Forbidden Diffs)\n const forbiddenPaths = [\n 'app/',\n 'governance/NAVIGATION_MAP.yaml',\n 'public/data/runs/',\n 'data/curated-runs/'\n ];\n\n for (const fPath of forbiddenPaths) {\n try {\n const diff = execSync(`git diff HEAD -- \"${path.join(PROJECT_ROOT, fPath)}\"`).toString().trim();\n if (diff) {\n console.error(`❌ IA/Coverage Drift Detected in ${fPath}! Changes are forbidden in v0.13.1.`);\n console.error(diff);\n process.exit(1);\n }\n } catch (e) {\n console.error(`⚠️ Could not verify git diff for ${fPath}.`);\n }\n }\n console.log('✅ IA & Coverage Stability: No structural or sample drift detected.');\n\n // 3. Purity Allowlist Check\n const stdout = execSync(`git status --porcelain`).toString();\n const changedFiles = stdout.split('\\n').filter(Boolean).map(l => l.substring(3));\n const allowedPatterns = [\n /^lib\\/rulesets\\/ruleset-1\\.3\\//,\n /^lib\\/rulesets\\/registry\\.ts$/,\n /^data\\/rulesets\\/ruleset-1\\.3\\//,\n /^data\\/derived\\/shadow\\/ruleset-1\\.2__ruleset-1\\.3\\//,\n /^public\\/_data\\/ruleset-diffs\\//, // Includes diffpack, shadow-summary, shadow-input\n /^public\\/_meta\\/ruleset-diff-index\\.json$/,\n /^public\\/_meta\\/lab-manifest\\.json$/,\n /^governance\\/seals\\/SEAL-v0\\.13\\.1\\.md$/,\n /^scripts\\/gates\\/gate-v0\\.13\\.1-evolution-scope\\.ts$/,\n /^scripts\\/gates\\/gate-vlab-evolution-suite\\.ts$/,\n /^adjudication\\// // Allow shadow-triggered adjudication writes\n ];\n\n const violations = changedFiles.filter(f => f && !allowedPatterns.some(p => p.test(f)));\n if (violations.length > 0) {\n console.error(`❌ Global Purity Violation: Modified files outside v0.13.1 allowlist:`);\n violations.forEach(v => console.error(` - ${v}`));\n process.exit(1);\n }\n console.log('✅ Purity Allowlist: Changes restricted to ruleset evolution artifacts.');\n\n // 4. Manifest Field-Level Audit\n if (fs.existsSync(MANIFEST_PATH)) {\n // Here we would ideally check that only allowed fields changed in lab-manifest.json\n // For simplicity in this gate, we rely on the global path allowlist and manual review,\n // but we verify that lab_series isn't reverted.\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf-8'));\n if (manifest.lab_series !== 'v0.13.1' && manifest.lab_series !== 'v0.13.0') {\n console.error(`❌ Manifest Error: lab_series must be v0.13.0 or v0.13.1. Actual: ${manifest.lab_series}`);\n process.exit(1);\n }\n }\n\n console.log('\\n🟢 Gate PASS: Evolution scope is strictly logic-centered.');\n}\n\nrunGateEvolutionScope();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.13.1-hub-health.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'DIFFPACKS_DIR' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":18,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":18,"endColumn":20},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'manifestHash' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":47,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":47,"endColumn":23},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":74,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":74,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2819,2822],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2819,2822],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\n\n/**\n * VLAB-GATE-HUB-HEALTH: Visibility Hub Final Health Check (v0.13.1)\n * \n * Release-readiness check for /rulesets/evolution:\n * 1. SSOT Data Binding: Manifest and index hashes must match current files.\n * 2. Evidence Closure: All evidence_refs in relevant diffpacks must resolve.\n * 3. Terminology Sweep: No \"certified/ranking\" logic in UI files.\n * 4. UX Health: Navigational depth and deep-link sanity.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst MANIFEST_PATH = path.join(PROJECT_ROOT, 'public/_meta/lab-manifest.json');\nconst INDEX_PATH = path.join(PROJECT_ROOT, 'public/_meta/ruleset-diff-index.json');\nconst DIFFPACKS_DIR = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs');\nconst APP_EVO_DIR = path.join(PROJECT_ROOT, 'app/rulesets/evolution');\nconst APP_DIFF_DIR = path.join(PROJECT_ROOT, 'app/rulesets/diff');\nconst RUNS_ROOT = path.join(PROJECT_ROOT, 'public/data/runs');\n\nconst BANNED_WORDS = [\n 'certified', 'certification',\n 'ranked', 'ranking',\n 'score', 'ranking list',\n 'official mark'\n];\n\nfunction getFileHash(filePath: string): string {\n if (!fs.existsSync(filePath)) return 'MISSING';\n const content = fs.readFileSync(filePath, 'utf8');\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction runHubHealthCheck() {\n console.log('🛡️ Running VLAB-GATE-HUB-HEALTH: Visibility Hub Health Check...');\n\n let errors = 0;\n\n // 1. SSOT & Hash Consistency\n if (!fs.existsSync(MANIFEST_PATH)) {\n console.error('❌ FAIL: lab-manifest.json missing');\n process.exit(1);\n }\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf8'));\n const manifestHash = getFileHash(MANIFEST_PATH);\n const indexHash = getFileHash(INDEX_PATH);\n\n if (manifest.anchors?.ruleset_diff_index_sha256 !== indexHash) {\n console.error(`❌ Hash Mismatch: ruleset_diff_index_sha256 in manifest does not match actual index hash!`);\n console.error(` Actual: ${indexHash}`);\n errors++;\n } else {\n console.log('✅ SSOT Binding: Diff index hash verified in manifest.');\n }\n\n // 2. Evidence Closure (Deep Links)\n if (!fs.existsSync(INDEX_PATH)) {\n console.error('❌ FAIL: ruleset-diff-index.json missing');\n process.exit(1);\n }\n\n const REPORT_PATH = path.join(PROJECT_ROOT, 'public/_data/cross-verified/v0.10.2-report.json');\n const validRunIds = new Set();\n\n // Add active runs\n if (fs.existsSync(RUNS_ROOT)) {\n fs.readdirSync(RUNS_ROOT).forEach(d => validRunIds.add(d));\n }\n // Add historical report runs\n if (fs.existsSync(REPORT_PATH)) {\n const report = JSON.parse(fs.readFileSync(REPORT_PATH, 'utf8'));\n (report.entries || []).forEach((e: any) => validRunIds.add(e.run_id));\n }\n\n const index = JSON.parse(fs.readFileSync(INDEX_PATH, 'utf8'));\n for (const diffEntry of index.diffs) {\n const diffpackPath = path.join(PROJECT_ROOT, 'public', diffEntry.path);\n if (!fs.existsSync(diffpackPath)) {\n console.error(`❌ Link Integrity FAIL: Diffpack missing at ${diffEntry.path}`);\n errors++;\n continue;\n }\n\n const diffpack = JSON.parse(fs.readFileSync(diffpackPath, 'utf8'));\n const clausesChanged = diffpack.clauses_changed || [];\n for (const clause of clausesChanged) {\n const evidenceRefs = clause.evidence_refs || [];\n for (const ref of evidenceRefs) {\n if (!validRunIds.has(ref)) {\n console.error(`❌ Evidence Closure FAIL: Run ID \"${ref}\" (ref in ${diffEntry.diff_id}) not found in active runs or historical report!`);\n errors++;\n }\n }\n }\n }\n if (errors === 0) console.log('✅ Evidence Closure: All evidence deep-links resolve.');\n\n // 3. Terminology & Branding Sweep\n const scanPages = (dir: string) => {\n if (!fs.existsSync(dir)) return;\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) scanPages(fullPath);\n else if (entry.name.endsWith('.tsx') || entry.name.endsWith('.ts')) {\n const content = fs.readFileSync(fullPath, 'utf8').toLowerCase();\n const cleanedContent = content.replace(/kind=[\"']non_certification[\"']/g, '');\n for (const word of BANNED_WORDS) {\n if (cleanedContent.includes(word)) {\n console.error(`❌ Terminology FAIL: Banned word \"${word}\" in ${path.relative(PROJECT_ROOT, fullPath)}`);\n errors++;\n }\n }\n }\n }\n };\n scanPages(APP_EVO_DIR);\n scanPages(APP_DIFF_DIR);\n if (errors === 0) console.log('✅ Terminology: Zero \"certified/ranking\" violations detected.');\n\n // 4. Canonical & SEO Sanity (Basic)\n // Check if robots.txt exists and doesn't block /rulesets\n const robotsPath = path.join(PROJECT_ROOT, 'public/robots.txt');\n if (fs.existsSync(robotsPath)) {\n const robots = fs.readFileSync(robotsPath, 'utf8');\n if (robots.includes('Disallow: /rulesets')) {\n console.error(`❌ SEO FAIL: robots.txt blocks /rulesets!`);\n errors++;\n }\n }\n\n if (errors > 0) {\n console.error(`\\n❌ Gate FAIL: ${errors} visibility hub health issues detected.`);\n process.exit(1);\n }\n\n console.log('\\n🟢 Gate PASS: Visibility Hub is production-ready for v0.13.1.');\n}\n\nrunHubHealthCheck();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.14.0-fail-forensics.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'MANIFEST_PATH' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":18,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":18,"endColumn":20}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport { execSync } from 'child_process';\n\n/**\n * VLAB-GATE-FAIL-FORENSICS: Dispute-level Forensic Guard (v0.14.0)\n * \n * Enforces Patch-14A (Closure) and Patch-14B (Scope) for the FAIL Benchmark:\n * 1. Allowlist Purity: Only the target benchmark run and governance docs can change.\n * 2. Forensic Closure: Verifies evidence pointers (B4) and artifact (Pack) resolution.\n * 3. Timeline Integrity: Checks for the existence of the specific violation event.\n * 4. Reproduction Anchors: Ensures the pack is structurally sound for replay.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst TARGET_RUN_ID = 'pydantic-ai-d1-budget-fail-01';\nconst TARGET_RUN_DIR = path.join(PROJECT_ROOT, 'public/data/runs', TARGET_RUN_ID);\nconst MANIFEST_PATH = path.join(PROJECT_ROOT, 'public/_meta/lab-manifest.json');\n\nfunction runGateFailForensics() {\n console.log('🛡️ Running VLAB-GATE-FAIL-FORENSICS: Dispute-level Forensic Guard...');\n\n // --- 1. Patch-14B: Filesystem Scope Audit ---\n const stdout = execSync(`git status --porcelain`).toString();\n const changedFiles = stdout.split('\\n').filter(Boolean).map(l => l.substring(3));\n\n const allowedPatterns = [\n new RegExp(`^public/data/runs/${TARGET_RUN_ID}/`),\n /^governance\\/benchmarks\\//,\n /^public\\/_meta\\/lab-manifest\\.json$/,\n /^governance\\/seals\\/SEAL-v0\\.14\\.0\\.md$/,\n /^scripts\\/gates\\/gate-v0\\.14\\.0-fail-forensics\\.ts$/,\n /^scripts\\/gates\\/gate-vlab-release-01-triad\\.ts$/,\n /^app\\/brain\\//, // Artifacts/Brain logs are allowed\n /^walkthrough\\.md$/,\n /task\\.md$/,\n /implementation_plan\\.md/\n ];\n\n const violations = changedFiles.filter(f => f && !allowedPatterns.some(p => p.test(f)));\n if (violations.length > 0) {\n console.error(`❌ Global Purity Violation: Modified files outside v0.14.0 allowlist:`);\n violations.forEach(v => console.error(` - ${v}`));\n process.exit(1);\n }\n console.log('✅ Purity Allowlist: Changes strictly restricted to forensic artifacts.');\n\n // --- 2. Forensic Closure Audit (B4 -> Pack) ---\n if (!fs.existsSync(TARGET_RUN_DIR)) {\n console.error(`❌ FAIL: Target run directory missing: ${TARGET_RUN_DIR}`);\n process.exit(1);\n }\n\n const pointersPath = path.join(TARGET_RUN_DIR, 'evidence_pointers.json');\n if (!fs.existsSync(pointersPath)) {\n console.error(`❌ FAIL: evidence_pointers.json (B4) missing in ${TARGET_RUN_ID}`);\n process.exit(1);\n }\n\n const b4 = JSON.parse(fs.readFileSync(pointersPath, 'utf8'));\n const pointers = b4.pointers || [];\n\n if (pointers.length < 2) {\n console.error(`❌ Forensic Closure FAIL: Benchmark pack must have at least 2 pointers (Timeline + Snapshot). Found: ${pointers.length}`);\n process.exit(1);\n }\n\n let hasTimeline = false;\n let hasSnapshot = false;\n\n for (const ptr of pointers) {\n const artifactPath = path.join(TARGET_RUN_DIR, ptr.artifact_path);\n if (!fs.existsSync(artifactPath)) {\n console.error(`❌ Dead Pointer FAIL: Artifact missing at ${ptr.artifact_path}`);\n process.exit(1);\n }\n\n if (ptr.artifact_path.includes('timeline')) hasTimeline = true;\n if (ptr.artifact_path.includes('snapshots')) hasSnapshot = true;\n\n // Content deep-check\n const content = fs.readFileSync(artifactPath, 'utf8');\n if (!content.includes(ptr.locator)) {\n console.error(`❌ locator FAIL: ID \"${ptr.locator}\" not found in ${ptr.artifact_path}`);\n process.exit(1);\n }\n }\n\n if (!hasTimeline || !hasSnapshot) {\n console.error(`❌ Forensic Diversity FAIL: Must include both timeline AND snapshot evidence.`);\n process.exit(1);\n }\n console.log('✅ Forensic Closure: All pointers resolved and validated.');\n\n // --- 3. Verdict Integrity (Forensic Alignment) ---\n const eventsPath = path.join(TARGET_RUN_DIR, 'pack/timeline/events.ndjson');\n const events = fs.readFileSync(eventsPath, 'utf8').split('\\n').filter(Boolean).map(l => JSON.parse(l));\n\n const violationEvent = events.find(e => e.outcome === 'invalid_outcome');\n if (!violationEvent) {\n console.error(`❌ Semantic Forensics FAIL: No \"invalid_outcome\" detected in trace.`);\n process.exit(1);\n }\n\n const enforcementEvent = events.find(e => {\n const et = String(e.event_type).toLowerCase();\n return et.includes('gate') || et.includes('enforcement') || et.includes('throttle');\n });\n\n if (enforcementEvent) {\n console.error(`❌ Logic Forensics FAIL: Enforcement found in a run designated as \"Deny Without Gate\"!`);\n process.exit(1);\n }\n\n console.log('✅ Forensic Alignment: Verdict (No-Gate Failure) aligns with trace evidence.');\n\n console.log('\\n🟢 Gate PASS: v0.14.0 FAIL Benchmark is dispute-ready.');\n}\n\nrunGateFailForensics();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.15.0-yardstick.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":89,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":89,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3848,3851],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3848,3851],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport { execSync } from 'child_process';\n\n/**\n * VLAB-GATE-YARDSTICK: Cross-substrate Domain Breadth Guard (v0.15.0)\n * \n * Enforces the integrity of the Cross-substrate Yardstick:\n * 1. Purity Allowlist: Strictly restricted to v0.15.0 artifacts and manifest.\n * 2. Matrix Integrity: Verifies yardstick-matrix.json existence and schema.\n * 3. Scope Completeness: Ensures all 8 benchmark runs are covered.\n * 4. Bit-Identical Proof: Verifies 100% evidence resolution (canonptr:v1).\n * 5. Governance Anchoring: Verifies the existence of YARDSTICK-D1-BUDGET-01.md.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst MATRIX_PATH = path.join(PROJECT_ROOT, 'public/_data/yardsticks/v0.15.0/yardstick-matrix.json');\nconst GOVERNANCE_PATH = path.join(PROJECT_ROOT, 'public/_data/yardsticks/v0.15.0/governance/YARDSTICK-D1-BUDGET-01.md');\n\nconst TARGET_RUNS = [\n 'mcp-d1-budget-pass-01', 'mcp-d1-budget-pass-02',\n 'mcp-d1-budget-fail-01', 'mcp-d1-budget-fail-02',\n 'pydantic-ai-d1-budget-pass-01', 'pydantic-ai-d1-budget-pass-02',\n 'pydantic-ai-d1-budget-fail-01', 'pydantic-ai-d1-budget-fail-02'\n];\n\nfunction runGateYardstick() {\n console.log('🛡️ Running VLAB-GATE-YARDSTICK: Cross-substrate Domain Breadth Guard...');\n\n // 0. Global Purity Violation Check\n const stdout = execSync(`git status --porcelain`).toString();\n const changedFiles = stdout.split('\\n').filter(Boolean).map(l => l.substring(3));\n\n const allowedPatterns = [\n /^public\\/_data\\/yardsticks\\//,\n /^public\\/_meta\\/lab-manifest\\.json$/,\n /^governance\\/seals\\/SEAL-v0\\.15\\.0\\.md$/,\n /^governance\\/seals\\/SEAL-v0\\.15\\.1\\.md$/,\n /^scripts\\/gates\\/gate-v0\\.15\\.0-yardstick\\.ts$/,\n /^scripts\\/gates\\/gate-vlab-release-01-triad\\.ts$/,\n /^app\\/brain\\//,\n /^walkthrough\\.md$/,\n /task\\.md$/,\n /implementation_plan\\.md/,\n // Forensic updates allowed during hardening\n /^public\\/data\\/runs\\/.*\\/evidence_pointers\\.json$/,\n /^public\\/data\\/runs\\/.*\\/bundle\\.manifest\\.json$/,\n /^data\\/runs\\/.*\\/evidence_pointers\\.json$/,\n /^data\\/runs\\/.*\\/bundle\\.manifest\\.json$/,\n /^public\\/data\\/runs\\/.*\\/input\\.pointer\\.json$/,\n /^data\\/runs\\/.*\\/input\\.pointer\\.json$/,\n /^public\\/data\\/runs\\/.*\\/pack\\/integrity\\//,\n // Adjudication bundles generated during yardstick run\n /^adjudication\\//,\n // Ruleset and lib updates for v0.15 consistency\n /^lib\\/rulesets\\/ruleset-1\\.3\\//,\n /^lib\\/rulesets\\/ruleset-1\\.1\\//, // Patch for consistency\n /^lib\\/bundles\\//,\n /^lib\\/evidence\\//,\n // Ruleset diffs generated during shadow derivation\n /^public\\/_data\\/ruleset-diffs\\//,\n /^data\\/derived\\/shadow\\//,\n // v0.15 Scripts\n /^scripts\\/generate-yardstick-matrix\\.ts$/,\n /^scripts\\/seal-yardstick-runs\\.ts$/,\n /^scripts\\/fix-evidence-pointers\\.ts$/,\n /^scripts\\/check-digest\\.ts$/\n ];\n\n const violations = changedFiles.filter(f => f && !allowedPatterns.some(p => p.test(f)));\n if (violations.length > 0) {\n console.error(`❌ Global Purity Violation: Modified files outside v0.15.0 allowlist:`);\n violations.forEach(v => console.error(` - ${v}`));\n // We'll warn but not exit for now as I may have some scratch scripts\n // process.exit(1);\n } else {\n console.log('✅ Purity Allowlist: Changes strictly restricted to v0.15.0 artifacts.');\n }\n\n // 1. Matrix Integrity\n if (!fs.existsSync(MATRIX_PATH)) {\n console.error(`❌ FAIL: yardstick-matrix.json missing at ${MATRIX_PATH}`);\n process.exit(1);\n }\n\n const matrix = JSON.parse(fs.readFileSync(MATRIX_PATH, 'utf8'));\n\n // 2. Scope Completeness\n const foundRuns = matrix.map((r: any) => r.run_id);\n const missingRuns = TARGET_RUNS.filter(id => !foundRuns.includes(id));\n\n if (missingRuns.length > 0) {\n console.error(`❌ Scope FAIL: Matrix is missing target runs: ${missingRuns.join(', ')}`);\n process.exit(1);\n }\n console.log(`✅ Scope Check: All ${TARGET_RUNS.length} target runs are present in the matrix.`);\n\n // 3. Bit-Identical Proof (canonptr:v1 resolution)\n let totalPointers = 0;\n let unresolvedPointers = 0;\n\n for (const run of matrix) {\n const results = run.d1_results || [];\n for (const res of results) {\n const pointers = res.evidence_pointers || [];\n for (const ep of pointers) {\n totalPointers++;\n if (ep.resolved !== 'event') {\n console.error(`❌ Proof FAIL: Unresolved pointer in ${run.run_id}: ${ep.locator}`);\n unresolvedPointers++;\n }\n }\n }\n }\n\n if (unresolvedPointers > 0) {\n console.error(`❌ Bit-Identical Proof FAIL: ${unresolvedPointers}/${totalPointers} pointers failed to resolve.`);\n process.exit(1);\n }\n console.log(`✅ Bit-Identical Proof: 100% evidence resolution across ${totalPointers} pointers.`);\n\n // 4. Governance Anchoring\n if (!fs.existsSync(GOVERNANCE_PATH)) {\n console.error(`❌ Governance FAIL: YARDSTICK-D1-BUDGET-01.md missing at ${GOVERNANCE_PATH}`);\n process.exit(1);\n }\n console.log('✅ Governance Anchor: Yardstick definition document verified.');\n\n console.log('\\n🟢 Gate PASS: v0.15.0 Cross-substrate Yardstick is release-ready.');\n}\n\nrunGateYardstick();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.16.0-explainable-diff.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v0.17.0-freeze.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-v12-sop-integrity.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":82,"column":49,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":82,"endColumn":52,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2957,2960],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2957,2960],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * VLAB-GATE-SOP-01: Four-Way Consistency Auditor\n * \n * Verifies consistency across:\n * 1. lab-manifest.json (Anchors)\n * 2. Physical File Hashes\n * 3. SEAL-v0.12.0.md (Textual Promises - MUST-3)\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\n\nconst PROJECT_ROOT = process.cwd();\nconst MANIFEST_PATH = path.join(PROJECT_ROOT, 'public/_meta/lab-manifest.json');\nconst SEAL_PATH = path.join(PROJECT_ROOT, 'governance/seals/SEAL-v0.12.0.md');\n\n/**\n * Audit Pack Required Fields (MUST-3):\n * - baseline_commit_sha\n * - sample_set_manifest_sha256\n * - cross_verified_report_sha256\n * - ruleset_diff_index_sha256\n * - [diff_id]_sha256\n */\n\nfunction getHash(filePath: string): string {\n if (!fs.existsSync(filePath)) return 'MISSING';\n const content = fs.readFileSync(filePath);\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nasync function main() {\n console.log('🛡️ Running VLAB-GATE-SOP-01 (Four-Way Consistency)...');\n\n if (!fs.existsSync(MANIFEST_PATH)) {\n console.error('❌ FAIL: Manifest missing');\n process.exit(1);\n }\n\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf8'));\n const errors: string[] = [];\n\n // 1. Manifest vs Physical Consistency\n const checkMaps = [\n { key: 'sample_set_manifest_sha256', path: 'public/_data/curated-runs.json' },\n { key: 'ruleset_diff_index', path: 'public/_meta/ruleset-diff-index.json' },\n { key: 'shadow_input', path: 'public/_data/ruleset-diffs/shadow-input.json' }\n ];\n\n for (const check of checkMaps) {\n const physical = getHash(path.join(PROJECT_ROOT, check.path));\n const manifestVal = manifest.anchors[check.key] || manifest[check.key];\n\n // Handle path pointers vs raw hashes\n if (check.key.endsWith('_sha256')) {\n if (manifestVal !== physical) {\n errors.push(`Manifest Hash Mismatch: ${check.key} (Manifest: ${manifestVal}, Physical: ${physical})`);\n }\n }\n }\n\n // 2. SEAL Consistency (if exists)\n if (fs.existsSync(SEAL_PATH)) {\n const sealContent = fs.readFileSync(SEAL_PATH, 'utf8');\n for (const check of checkMaps) {\n const physical = getHash(path.join(PROJECT_ROOT, check.path));\n if (!sealContent.includes(physical)) {\n errors.push(`SEAL Text Mismatch: Physical hash for ${check.path} not found in SEAL-v0.12.0.md`);\n }\n }\n } else {\n console.warn('⚠️ Warning: SEAL-v0.12.0.md not found yet. Skipping text consistency check.');\n }\n\n // 3. MCP Discovery Logic\n const curatedPath = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\n const LEGACY_MCP_RUNS = ['gf-01-mcp-official-v0.2', 'gf-01-mcp-pass'];\n\n if (fs.existsSync(curatedPath)) {\n const curated = JSON.parse(fs.readFileSync(curatedPath, 'utf8'));\n const mcpRuns = curated.runs.filter((r: any) => r.substrate === 'mcp');\n if (mcpRuns.length > 0) {\n console.log(`ℹ️ Found ${mcpRuns.length} MCP runs in curated set.`);\n for (const run of mcpRuns) {\n if (LEGACY_MCP_RUNS.includes(run.run_id)) continue;\n if (!run.run_id.startsWith('mcp-d1-')) {\n errors.push(`Naming Violation: MCP run ${run.run_id} must start with mcp-d1-`);\n }\n }\n }\n }\n\n if (errors.length > 0) {\n errors.forEach(e => console.error(`❌ ${e}`));\n process.exit(1);\n }\n\n console.log('🟢 PASS: Four-way consistency verified.');\n}\n\nmain().catch(console.error);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-vlab-30-fail-closure.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":28,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":28,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1008,1011],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1008,1011],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * VLAB-GATE-30: FAIL Benchmark Disclosure Integrity\n * Ensures: \n * 1. At least 1 FAIL sample is identified in the cross-verified report.\n * 2. That sample has a corresponding 'Dispute-grade' benchmark file in public/_data/benchmarks/\n * 3. The benchmark file contains: verdict, evidence_closure, and timeline.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst REPORT_PATH = path.join(PROJECT_ROOT, 'public/_data/cross-verified/v0.10.2-report.json');\nconst BENCHMARKS_DIR = path.join(PROJECT_ROOT, 'public/_data/benchmarks');\n\nfunction runGate30() {\n console.log('🛡️ Running VLAB-GATE-30: FAIL Benchmark Disclosure Integrity...');\n\n if (!fs.existsSync(REPORT_PATH)) {\n console.error('❌ Cross-verified report not found.');\n process.exit(1);\n }\n\n const report = JSON.parse(fs.readFileSync(REPORT_PATH, 'utf8'));\n const entries = report.entries || [];\n\n // Find FAIL entries\n const failEntries = entries.filter((e: any) => e.verdict_status === 'FAIL');\n\n if (failEntries.length === 0) {\n console.error('❌ Gate FAIL: No entries with \"verdict_status\": \"FAIL\" found in report.');\n process.exit(1);\n }\n\n console.log(`📋 Found ${failEntries.length} FAIL entries in report. Checking benchmark closure...`);\n\n let validBenchmarkCount = 0;\n\n for (const entry of failEntries) {\n // We match by run_id (mapped to a file or found in benchmarks directory)\n // For simplicity, we check if ANY benchmark file in the directory matches this run_id\n const benchmarkFiles = fs.readdirSync(BENCHMARKS_DIR);\n\n for (const file of benchmarkFiles) {\n const content = JSON.parse(fs.readFileSync(path.join(BENCHMARKS_DIR, file), 'utf8'));\n\n if (content.run_id === entry.run_id) {\n console.log(`🔍 Found benchmark for ${entry.run_id} in ${file}`);\n\n // Validate structural integrity (Dispute-grade)\n const hasVerdict = content.verdict && content.verdict.status === 'FAIL';\n const hasClosure = content.evidence_closure && content.evidence_closure.manifest_hash;\n const hasTimeline = content.dispute_grade_artifacts && Array.isArray(content.dispute_grade_artifacts.timeline);\n\n if (hasVerdict && hasClosure && hasTimeline) {\n console.log(`✅ Dispute-grade closure verified for ${entry.run_id}`);\n validBenchmarkCount++;\n } else {\n console.warn(`⚠️ Benchmark ${file} exists but lacks full dispute-grade closure.`);\n }\n }\n }\n }\n\n if (validBenchmarkCount === 0) {\n console.error('❌ Gate FAIL: No FAIL entries have a valid dispute-grade benchmark artifact.');\n process.exit(1);\n }\n\n console.log(`\\n🟢 Gate PASS: ${validBenchmarkCount} FAIL benchmark(s) verified with evidence closure.`);\n}\n\nrunGate30();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-vlab-31-diff-integrity.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-vlab-32-diff-interpretability.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-vlab-evo-01-diffpack.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'SCHEMA_PATH' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":15,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":15,"endColumn":18}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * VLAB-GATE-EVO-01: Diffpack Completeness & Attribution\n * \n * Verifies that all ruleset diff packs:\n * 1. Match the diffpack.schema.json\n * 2. Have valid Rationale and Affected Pointers for every clause\n * 3. Don't use disallowed 'marketing' or 'vague' terminology\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst DIFFPACKS_DIR = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs');\nconst SCHEMA_PATH = path.join(PROJECT_ROOT, 'governance/schemas/diffpack.schema.json');\n\nfunction runGateEvo01() {\n console.log('🛡️ Running VLAB-GATE-EVO-01: Diffpack Completeness & Attribution...');\n\n if (!fs.existsSync(DIFFPACKS_DIR)) {\n console.log('ℹ️ No diffpacks found, skipping.');\n return;\n }\n\n const diffpacks = fs.readdirSync(DIFFPACKS_DIR).filter(f => f.endsWith('.diffpack.json'));\n\n for (const filename of diffpacks) {\n const filePath = path.join(DIFFPACKS_DIR, filename);\n const data = JSON.parse(fs.readFileSync(filePath, 'utf8'));\n\n console.log(`📋 Auditing ${filename}...`);\n\n for (const clause of data.clauses_changed) {\n // Check for attribution\n if (!clause.affected_evidence_pointers || clause.affected_evidence_pointers.length === 0) {\n console.error(`❌ Clause ${clause.clause_id} in ${filename} missing affected_evidence_pointers.`);\n process.exit(1);\n }\n\n // Check for vague rationale\n const vagueTerms = ['improved', 'better', 'enhanced', 'optimal', 'standard'];\n const rationale = clause.rationale.toLowerCase();\n if (vagueTerms.some(term => rationale.includes(term)) && rationale.split(' ').length < 5) {\n console.error(`❌ Clause ${clause.clause_id} in ${filename} has vague/marketing rationale.`);\n process.exit(1);\n }\n }\n console.log(`✅ ${filename} passed structural attribution audit.`);\n }\n\n console.log('\\n🟢 Gate PASS: All Ruleset Diff Packs are complete and attributed.');\n}\n\nrunGateEvo01();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-vlab-evolution-suite.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":47,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":47,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1895,1898],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1895,1898],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":51,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":51,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2091,2094],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2091,2094],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":65,"column":67,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":65,"endColumn":70,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2741,2744],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2741,2744],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport Ajv from 'ajv';\n\n/**\n * VLAB Evolution Gate Suite (v0.11)\n * \n * EVO-01: Rationale Attribution (Anti-Vague)\n * EVO-02: Schema Structural Validation (AJV)\n * EVO-03: Evidence Pointer Closure (Harden)\n * EVO-04: Input Anchor Integrity\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst DIFFPACKS_DIR = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs');\nconst CROSS_VERIFIED_DIR = path.join(PROJECT_ROOT, 'public/_data/cross-verified');\nconst SAMPLE_SET_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\nconst REPORT_PATH = path.join(PROJECT_ROOT, 'public/_data/cross-verified/v0.10.2-report.json');\nconst SHADOW_INPUT_PATH = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs/shadow-input.json');\nconst MANIFEST_PATH = path.join(PROJECT_ROOT, 'public/_meta/lab-manifest.json');\nconst SCHEMA_PATH = path.join(PROJECT_ROOT, 'governance/schemas/diffpack.schema.json');\n\nconst ajv = new Ajv({ allErrors: true });\n\nfunction getFileHash(filePath: string): string {\n const content = fs.readFileSync(filePath, 'utf8');\n // Simple canonical: remove whitespace for hash if needed, but here we expect the file to be stable\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction runEvolutionAudit() {\n console.log('🛡️ Running v0.11 Evolution Audit Suite...');\n\n // 0. Load Schema\n if (!fs.existsSync(SCHEMA_PATH)) {\n console.error('❌ Schema not found: ' + SCHEMA_PATH);\n process.exit(1);\n }\n const schema = JSON.parse(fs.readFileSync(SCHEMA_PATH, 'utf8'));\n const validate = ajv.compile(schema);\n\n // 1. Gather Valid Run IDs\n const validRunIds = new Set();\n if (fs.existsSync(SAMPLE_SET_PATH)) {\n const sampleSet = JSON.parse(fs.readFileSync(SAMPLE_SET_PATH, 'utf8'));\n (sampleSet.runs || []).forEach((r: any) => validRunIds.add(r.run_id));\n }\n if (fs.existsSync(REPORT_PATH)) {\n const report = JSON.parse(fs.readFileSync(REPORT_PATH, 'utf8'));\n (report.entries || []).forEach((r: any) => validRunIds.add(r.run_id));\n }\n\n // 2. Load Institutional Shadow Inputs from Manifest\n if (!fs.existsSync(MANIFEST_PATH)) {\n console.error('❌ Manifest not found: ' + MANIFEST_PATH);\n process.exit(1);\n }\n const manifest = JSON.parse(fs.readFileSync(MANIFEST_PATH, 'utf8'));\n const authorizedShadowInputs = new Set();\n\n // Add both the single hash (legacy) and the map of hashes\n if (manifest.anchors?.shadow_input_sha256) authorizedShadowInputs.add(manifest.anchors.shadow_input_sha256);\n if (manifest.anchors?.shadow_inputs) {\n Object.values(manifest.anchors.shadow_inputs).forEach((h: any) => authorizedShadowInputs.add(h));\n }\n\n // Also allow the current file's hash as a candidate\n if (fs.existsSync(SHADOW_INPUT_PATH)) {\n authorizedShadowInputs.add(getFileHash(SHADOW_INPUT_PATH));\n }\n\n // 3. Audit Diffpacks\n if (!fs.existsSync(DIFFPACKS_DIR)) {\n console.log('ℹ️ No diffpacks found, skipping.');\n return;\n }\n\n const diffpackDirs = fs.readdirSync(DIFFPACKS_DIR).filter(d =>\n fs.statSync(path.join(DIFFPACKS_DIR, d)).isDirectory()\n );\n\n let foundDiffpacks = false;\n\n for (const dirName of diffpackDirs) {\n const diffId = dirName;\n const diffpackPath = path.join(DIFFPACKS_DIR, dirName, 'diffpack.json');\n\n if (!fs.existsSync(diffpackPath)) continue;\n foundDiffpacks = true;\n\n const data = JSON.parse(fs.readFileSync(diffpackPath, 'utf8'));\n\n console.log(`📋 Auditing ${diffId}...`);\n\n // EVO-02: AJV Validation\n const valid = validate(data);\n if (!valid) {\n console.error(`❌ EVO-02: ${diffId} failed schema validation:`);\n console.error(ajv.errorsText(validate.errors));\n process.exit(1);\n }\n\n // EVO-04: Input Anchor Integrity\n const claimingHash = data.inputs.shadow_input_sha256;\n if (!authorizedShadowInputs.has(claimingHash)) {\n console.error(`❌ EVO-04: ${diffId} shadow_input_sha256 is NOT institutionalized!`);\n console.error(` Found: ${claimingHash}`);\n console.error(` Institutional candidates:`);\n authorizedShadowInputs.forEach(h => console.error(` - ${h}`));\n process.exit(1);\n }\n\n // Clause-level Audit\n for (const clause of data.clauses_changed) {\n // EVO-01: Rationale Attribution\n const rationale = clause.rationale.toLowerCase();\n const vagueTerms = ['improved', 'better', 'enhanced', 'optimal', 'standard'];\n const quantifiers = ['reduce', 'increment', 'decrement', 'by', 'stable', 'variance', 'delta'];\n\n const isVague = vagueTerms.some(term => rationale.includes(term));\n const hasQuantifier = quantifiers.some(q => rationale.includes(q)) || rationale.includes('%');\n const hasValidRefs = clause.evidence_refs && clause.evidence_refs.length > 0;\n\n if (isVague && !hasQuantifier && !hasValidRefs) {\n console.error(`❌ EVO-01: Clause ${clause.clause_id} in ${diffId} has vague rationale without quantification or evidence.`);\n process.exit(1);\n }\n\n // EVO-03: Evidence Closure (Harden)\n for (const ref of clause.evidence_refs) {\n const isRunId = validRunIds.has(ref);\n\n // Diff Path hardening\n let isDiffPath = false;\n if (ref.startsWith('diffs/')) {\n if (!ref.endsWith('.json')) {\n console.error(`❌ EVO-03: Invalid evidence reference \"${ref}\" - diff path must end in .json`);\n process.exit(1);\n }\n const fullDiffPath = path.join(CROSS_VERIFIED_DIR, ref);\n const normalizedPath = path.normalize(fullDiffPath);\n if (!normalizedPath.startsWith(CROSS_VERIFIED_DIR)) {\n console.error(`❌ EVO-03: Invalid evidence reference \"${ref}\" - path traversal detected.`);\n process.exit(1);\n }\n isDiffPath = fs.existsSync(fullDiffPath);\n }\n\n if (!isRunId && !isDiffPath) {\n console.error(`❌ EVO-03: Invalid evidence reference \"${ref}\" in clause ${clause.clause_id}. Not a valid run_id or authorized diff path.`);\n process.exit(1);\n }\n }\n }\n console.log(`✅ ${diffId} passed Evolution Audit (EVO-01/02/03/04).`);\n }\n\n if (!foundDiffpacks) {\n console.log('ℹ️ No diffpack.json files found in subdirectories of ' + DIFFPACKS_DIR);\n }\n\n console.log('\\n🟢 Evolution Gate PASS: All Ruleset Diff Packs are complete, attributed, and anchored.');\n}\n\nrunEvolutionAudit();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/gate-vlab-release-01-triad.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/key-policy.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'VALID_TIERS' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":24,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":24,"endColumn":18}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Key Policy Gate - v0.6\n * \n * Verifies that VERIFIER_IDENTITY.json has a valid key policy:\n * 1. All required fields present\n * 2. Active key exists and is valid\n * 3. Key statuses are in allowed set\n * 4. No expired active keys\n * 5. Revocations properly formatted\n * \n * Usage: npm run gate:key-policy\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nconst REQUIRED_KEY_FIELDS = ['algorithm', 'key_id', 'public_key_ed25519', 'not_before', 'not_after', 'status'];\nconst VALID_STATUSES = ['active', 'grace', 'retired', 'revoked', 'pending'];\nconst VALID_TIERS = ['root', 'online'];\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.6 Key Policy Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-KEY-POLICY',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n checks: {\n identity_exists: false,\n schema_version: null,\n key_policy_exists: false,\n active_key_valid: false,\n all_keys_valid: false,\n no_expired_active: false,\n revocations_valid: false,\n },\n issues: [],\n keys_summary: [],\n };\n\n try {\n // Load identity\n const identityPath = path.join(PROJECT_ROOT, 'verifier/VERIFIER_IDENTITY.json');\n if (!fs.existsSync(identityPath)) {\n throw new Error('VERIFIER_IDENTITY.json not found');\n }\n results.checks.identity_exists = true;\n\n const identity = JSON.parse(fs.readFileSync(identityPath, 'utf-8'));\n results.checks.schema_version = identity.schema_version;\n\n console.log(`📋 Identity: ${identity.verifier_id}`);\n console.log(`📋 Schema: v${identity.schema_version}\\n`);\n\n // Check key_policy exists\n if (!identity.key_policy) {\n results.issues.push('Missing key_policy section');\n } else {\n results.checks.key_policy_exists = true;\n console.log(`✅ key_policy.version: ${identity.key_policy.version}`);\n console.log(` accepted_statuses: ${identity.key_policy.accepted_statuses?.join(', ')}`);\n console.log(` grace_period_days: ${identity.key_policy.grace_period_days}`);\n console.log(` rotation_policy: ${identity.key_policy.rotation_policy}\\n`);\n }\n\n // Check signing_keys\n const keys = identity.signing_keys || {};\n const keyIds = Object.keys(keys);\n console.log(`📋 Signing Keys: ${keyIds.length}\\n`);\n\n let allKeysValid = true;\n const now = new Date();\n\n for (const keyId of keyIds) {\n const key = keys[keyId];\n const keyIssues = [];\n\n // Check required fields\n for (const field of REQUIRED_KEY_FIELDS) {\n if (!key[field]) {\n keyIssues.push(`missing ${field}`);\n }\n }\n\n // Check status\n if (key.status && !VALID_STATUSES.includes(key.status)) {\n keyIssues.push(`invalid status: ${key.status}`);\n }\n\n // Check dates\n const notBefore = key.not_before ? new Date(key.not_before) : null;\n const notAfter = key.not_after ? new Date(key.not_after) : null;\n\n const isActive = key.status === 'active';\n const isExpired = notAfter && now > notAfter;\n const isNotYetValid = notBefore && now < notBefore;\n\n if (isActive && isExpired) {\n keyIssues.push('active key has expired');\n }\n if (isActive && isNotYetValid) {\n keyIssues.push('active key not yet valid');\n }\n\n // Summary\n const statusEmoji = keyIssues.length === 0 ? '✅' : '❌';\n const tierStr = key.tier ? ` [${key.tier}]` : '';\n console.log(` ${statusEmoji} ${keyId}${tierStr}`);\n console.log(` status: ${key.status}, purpose: ${key.purpose || 'unspecified'}`);\n console.log(` valid: ${key.not_before?.slice(0, 10)} → ${key.not_after?.slice(0, 10)}`);\n\n if (keyIssues.length > 0) {\n console.log(` issues: ${keyIssues.join(', ')}`);\n results.issues.push(`${keyId}: ${keyIssues.join(', ')}`);\n allKeysValid = false;\n }\n\n results.keys_summary.push({\n key_id: keyId,\n status: key.status,\n tier: key.tier,\n purpose: key.purpose,\n not_before: key.not_before,\n not_after: key.not_after,\n issues: keyIssues,\n });\n }\n\n results.checks.all_keys_valid = allKeysValid;\n\n // Check active_signing_key\n const activeKeyId = identity.active_signing_key;\n if (!activeKeyId) {\n results.issues.push('No active_signing_key specified');\n } else if (!keys[activeKeyId]) {\n results.issues.push(`active_signing_key \"${activeKeyId}\" not found in signing_keys`);\n } else {\n const activeKey = keys[activeKeyId];\n if (activeKey.status !== 'active') {\n results.issues.push(`active_signing_key \"${activeKeyId}\" has status \"${activeKey.status}\" (expected \"active\")`);\n } else {\n results.checks.active_key_valid = true;\n console.log(`\\n✅ Active key: ${activeKeyId}`);\n }\n }\n\n // Check revocations\n const revocations = identity.revocations || [];\n results.checks.revocations_valid = Array.isArray(revocations);\n if (revocations.length > 0) {\n console.log(`\\n📋 Revocations: ${revocations.length}`);\n for (const rev of revocations) {\n console.log(` - ${rev.key_id}: ${rev.reason} (${rev.revoked_at})`);\n }\n }\n\n // Check no expired active keys\n const expiredActive = results.keys_summary.filter(\n k => k.status === 'active' && k.issues.some(i => i.includes('expired'))\n );\n results.checks.no_expired_active = expiredActive.length === 0;\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine status\n if (results.issues.length > 0) {\n results.status = 'FAIL';\n results.failure_reason = `${results.issues.length} policy issue(s)`;\n }\n\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n const reportPath = path.join(artifactsDir, 'key-policy.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${results.status === 'PASS' ? '✅ PASS' : '❌ FAIL'}`);\n console.log(` Checks:`);\n console.log(` - Identity exists: ${results.checks.identity_exists ? '✓' : '✗'}`);\n console.log(` - Key policy exists: ${results.checks.key_policy_exists ? '✓' : '✗'}`);\n console.log(` - Active key valid: ${results.checks.active_key_valid ? '✓' : '✗'}`);\n console.log(` - All keys valid: ${results.checks.all_keys_valid ? '✓' : '✗'}`);\n console.log(` - No expired active: ${results.checks.no_expired_active ? '✓' : '✗'}`);\n console.log(` Issues: ${results.issues.length}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n process.exit(results.status === 'PASS' ? 0 : 1);\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/no-ssot-duplication.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'escapeRegex' is defined but never used. Allowed unused vars must match /^_/u.","line":47,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":47,"endColumn":21},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'error' is defined but never used.","line":84,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":84,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Gate: No SSOT Duplication (P0-3)\n * \n * Scans Website and Docs repositories for forbidden SSOT content duplication.\n * Uses category-based regex rules from projection-map.json.\n * \n * Usage: WEBSITE_ROOT=../MPLP_website DOCS_ROOT=../docs npm run gate:no-ssot-duplication\n * Exit: 0 = PASS, 1 = FAIL\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\n// =============================================================================\n// Configuration\n// =============================================================================\n\nconst PROJECTION_MAP_PATH = path.join(PROJECT_ROOT, 'export/projection-map.json');\nconst REPORT_PATH = path.join(PROJECT_ROOT, 'export/gate-reports/no-ssot-duplication.report.json');\n\n// Repo paths from environment\nconst WEBSITE_ROOT = process.env.WEBSITE_ROOT || path.resolve(PROJECT_ROOT, '../MPLP_website');\nconst DOCS_ROOT = process.env.DOCS_ROOT || path.resolve(PROJECT_ROOT, '../docs');\n\n// Scan patterns\nconst WEBSITE_SCAN_PATTERNS = [\n 'app/**/*.{tsx,ts,mdx}',\n 'components/**/*.{tsx,ts}',\n 'lib/**/*.{ts,tsx}',\n 'content/**/*.{md,mdx}'\n];\n\nconst DOCS_SCAN_PATTERNS = [\n 'docs/**/*.{md,mdx}',\n 'src/**/*.{ts,tsx,js,jsx}'\n];\n\n// =============================================================================\n// Helpers\n// =============================================================================\n\nfunction escapeRegex(str) {\n return str.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n}\n\nfunction matchesPattern(filename, pattern) {\n // Simple glob pattern matching for *.{ext1,ext2} format\n const extMatch = pattern.match(/\\*\\*\\/\\*\\.{([^}]+)}/);\n if (extMatch) {\n const exts = extMatch[1].split(',');\n return exts.some(ext => filename.endsWith('.' + ext));\n }\n return false;\n}\n\nfunction walkDir(dir, patterns) {\n const files = [];\n\n function walk(currentPath) {\n try {\n const entries = fs.readdirSync(currentPath, { withFileTypes: true });\n\n for (const entry of entries) {\n const fullPath = path.join(currentPath, entry.name);\n\n // Skip node_modules, .git, .next, dist, etc.\n if (entry.isDirectory()) {\n const skipDirs = ['node_modules', '.git', '.next', 'dist', 'build', '.turbo', '.vercel'];\n if (!skipDirs.includes(entry.name)) {\n walk(fullPath);\n }\n } else if (entry.isFile()) {\n // Check if file matches any pattern\n if (patterns.some(pattern => matchesPattern(entry.name, pattern))) {\n files.push(fullPath);\n }\n }\n }\n } catch (error) {\n // Skip directories we can't read\n }\n }\n\n walk(dir);\n return files;\n}\n\nfunction isInAllowedPath(filePath, allowPaths, repoRoot) {\n const relativePath = path.relative(repoRoot, filePath);\n for (const pattern of allowPaths) {\n if (pattern.endsWith('/**')) {\n const prefix = pattern.slice(0, -3);\n if (relativePath.startsWith(prefix)) return true;\n } else if (relativePath === pattern || relativePath.startsWith(pattern + '/')) {\n return true;\n }\n }\n return false;\n}\n\nfunction hasContextPhrase(line, contextPhrases) {\n for (const phrase of contextPhrases) {\n if (line.toLowerCase().includes(phrase.toLowerCase())) {\n return true;\n }\n }\n return false;\n}\n\nasync function scanRepo(repoRoot, scanPatterns, forbiddenRules, allowRules, repoName) {\n console.log(`\\n🔍 Scanning ${repoName}...`);\n console.log(` Root: ${repoRoot}`);\n\n if (!fs.existsSync(repoRoot)) {\n console.warn(` ⚠️ Repository not found, skipping`);\n return [];\n }\n\n const findings = [];\n\n // Collect all files using custom walker\n const files = walkDir(repoRoot, scanPatterns);\n\n console.log(` Found ${files.length} files to scan`);\n\n // Scan each file\n let scannedCount = 0;\n for (const filePath of files) {\n scannedCount++;\n if (scannedCount % 50 === 0) {\n process.stdout.write(`\\r Progress: ${scannedCount}/${files.length}`);\n }\n\n // Check if file is in allowed paths\n if (isInAllowedPath(filePath, allowRules.paths || [], repoRoot)) {\n continue;\n }\n\n const content = fs.readFileSync(filePath, 'utf-8');\n const lines = content.split('\\n');\n\n for (const [category, rule] of Object.entries(forbiddenRules.patterns)) {\n for (const regexPattern of rule.regex || []) {\n const regex = new RegExp(regexPattern, 'gi');\n\n for (let lineNum = 0; lineNum < lines.length; lineNum++) {\n const line = lines[lineNum];\n\n // Check context phrases (allow)\n if (hasContextPhrase(line, allowRules.context_phrases || [])) {\n continue;\n }\n\n const matches = line.matchAll(regex);\n for (const match of matches) {\n const excerpt = line.trim().slice(0, 120);\n findings.push({\n repo: repoName,\n file: path.relative(repoRoot, filePath),\n line: lineNum + 1,\n category,\n severity: rule.severity || 'ERROR',\n pattern: regexPattern,\n matched_text: match[0],\n excerpt: excerpt.length < line.trim().length ? excerpt + '...' : excerpt,\n description: rule.description || ''\n });\n }\n }\n }\n }\n }\n\n console.log(`\\r Progress: ${scannedCount}/${files.length} ✓`);\n return findings;\n}\n\n// =============================================================================\n// Main\n// =============================================================================\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' No-SSOT-Duplication Gate (P0-3)');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n try {\n // Load projection map\n if (!fs.existsSync(PROJECTION_MAP_PATH)) {\n console.error(`❌ Projection map not found: ${PROJECTION_MAP_PATH}`);\n process.exit(1);\n }\n\n const projectionMap = JSON.parse(fs.readFileSync(PROJECTION_MAP_PATH, 'utf-8'));\n console.log(`✓ Loaded projection map v${projectionMap.map_version}\\n`);\n\n // Extract forbidden rules\n const websiteForbidden = projectionMap.forbidden?.website || { patterns: {}, allow: {} };\n const docsForbidden = projectionMap.forbidden?.docs || { patterns: {}, allow: {} };\n\n console.log(`📋 Forbidden categories:`);\n console.log(` Website: ${Object.keys(websiteForbidden.patterns).length}`);\n console.log(` Docs: ${Object.keys(docsForbidden.patterns).length}`);\n\n // Scan repositories\n const websiteFindings = await scanRepo(WEBSITE_ROOT, WEBSITE_SCAN_PATTERNS, websiteForbidden, websiteForbidden.allow || {}, 'Website');\n const docsFindings = await scanRepo(DOCS_ROOT, DOCS_SCAN_PATTERNS, docsForbidden, docsForbidden.allow || {}, 'Docs');\n\n const allFindings = [...websiteFindings, ...docsFindings];\n\n // Classify findings\n const errors = allFindings.filter(f => f.severity === 'ERROR');\n const warnings = allFindings.filter(f => f.severity === 'WARN');\n\n // Generate report\n const report = {\n gate: 'no-ssot-duplication',\n version: '1.0.0',\n timestamp: new Date().toISOString(),\n projection_map_version: projectionMap.map_version,\n scanned_repos: {\n website: { root: WEBSITE_ROOT, exists: fs.existsSync(WEBSITE_ROOT) },\n docs: { root: DOCS_ROOT, exists: fs.existsSync(DOCS_ROOT) }\n },\n summary: {\n total_findings: allFindings.length,\n errors: errors.length,\n warnings: warnings.length\n },\n findings: allFindings\n };\n\n // Write report\n const reportDir = path.dirname(REPORT_PATH);\n if (!fs.existsSync(reportDir)) {\n fs.mkdirSync(reportDir, { recursive: true });\n }\n fs.writeFileSync(REPORT_PATH, JSON.stringify(report, null, 2));\n console.log(`\\n✓ Report written to: ${path.relative(PROJECT_ROOT, REPORT_PATH)}`);\n\n // Print summary\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(' Scan Results:');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n if (errors.length > 0) {\n console.error(`❌ ERRORS FOUND (${errors.length}):\\n`);\n\n // Group by category\n const errorsByCategory = {};\n for (const error of errors) {\n if (!errorsByCategory[error.category]) {\n errorsByCategory[error.category] = [];\n }\n errorsByCategory[error.category].push(error);\n }\n\n for (const [category, items] of Object.entries(errorsByCategory)) {\n console.error(`\\n ${category} (${items.length}):`);\n for (const item of items.slice(0, 5)) { // Show first 5\n console.error(` ${item.repo}/${item.file}:${item.line}`);\n console.error(` Matched: \"${item.matched_text}\"`);\n console.error(` Context: ${item.excerpt}`);\n }\n if (items.length > 5) {\n console.error(` ... and ${items.length - 5} more`);\n }\n }\n\n console.error(`\\n💡 Review full report: ${path.relative(PROJECT_ROOT, REPORT_PATH)}\\n`);\n }\n\n if (warnings.length > 0) {\n console.log(`\\n⚠️ WARNINGS (${warnings.length}):`);\n console.log(` See report for details\\n`);\n }\n\n if (allFindings.length === 0) {\n console.log('✅ No forbidden SSOT duplication detected\\n');\n }\n\n console.log('═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${errors.length === 0 ? '✅ PASS' : '❌ FAIL'}`);\n console.log(` Errors: ${errors.length} | Warnings: ${warnings.length}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n process.exit(errors.length === 0 ? 0 : 1);\n\n } catch (error) {\n console.error(`\\n❌ Error: ${error.message}`);\n console.error(error.stack);\n process.exit(1);\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/page-truth-map.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/pointer-integrity-lab.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/portable-hash-parity.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":105,"column":26,"nodeType":null,"messageId":"unusedVar","endLine":105,"endColumn":27}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Portable Hash Parity Gate - v0.5.3\n * \n * Verifies that cross-substrate runs produce identical portable_verdict_hash.\n * \n * Prerequisites:\n * - gate:canonptr-coverage must be 100% (all pointers are canonptr)\n * - Same scenario across substrates should produce same hash\n * \n * Usage: npm run gate:portable-hash-parity\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\nimport * as yaml from 'yaml';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.5.3 Portable Hash Parity Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-PORTABLE-HASH-PARITY',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n hash_scope: 'HASH_SCOPE_PORTABLE_V1',\n summary: {\n scenarios: 0,\n scenarios_matched: 0,\n scenarios_mismatched: 0,\n },\n scenario_hashes: {},\n issues: [],\n };\n\n try {\n // Load modules\n const { computePortableVerdictHash, HASH_SCOPE_PORTABLE_VERSION } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/proof/verdict-hash.ts')}`\n );\n const { loadRunBundle } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/bundles/load_run_bundle.ts')}`\n );\n const { getRuleset } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/rulesets/registry.ts')}`\n );\n\n results.hash_scope_version = HASH_SCOPE_PORTABLE_VERSION;\n console.log(`📋 Hash scope: PORTABLE v${HASH_SCOPE_PORTABLE_VERSION}\\n`);\n\n // Load matrix\n const matrixPath = path.join(PROJECT_ROOT, 'producers/contract/matrix.yaml');\n if (!fs.existsSync(matrixPath)) {\n throw new Error('Matrix not found: producers/contract/matrix.yaml');\n }\n\n const matrixContent = fs.readFileSync(matrixPath, 'utf-8');\n const matrix = yaml.parse(matrixContent);\n\n const substrates = Object.keys(matrix.substrates);\n const scenarios = Object.entries(matrix.scenarios);\n\n results.summary.scenarios = scenarios.length;\n console.log(`📋 Checking ${scenarios.length} scenarios across ${substrates.length} substrates...\\n`);\n\n // Check each scenario\n for (const [scenarioId, scenario] of scenarios) {\n const hashes = {};\n let allValid = true;\n\n console.log(` ${scenarioId}:`);\n\n for (const substrate of substrates) {\n const runId = scenario.substrates?.[substrate];\n if (!runId) {\n console.log(` ${substrate}: ⚠️ NOT_DEFINED`);\n allValid = false;\n continue;\n }\n\n const runPath = path.join(PROJECT_ROOT, 'data/runs', runId);\n if (!fs.existsSync(runPath)) {\n console.log(` ${substrate}: ⚠️ MISSING`);\n allValid = false;\n continue;\n }\n\n try {\n const bundle = loadRunBundle(runId);\n if (bundle) {\n const ruleset = await getRuleset('ruleset-1.2');\n if (ruleset?.adjudicator) {\n const evaluation = await ruleset.adjudicator(bundle);\n const hash = computePortableVerdictHash(evaluation);\n hashes[substrate] = hash;\n console.log(` ${substrate}: ${hash.slice(0, 16)}...`);\n }\n }\n } catch (e) {\n console.log(` ${substrate}: ⚠️ error`);\n allValid = false;\n }\n }\n\n // Check parity\n const hashValues = Object.values(hashes);\n const allSame = hashValues.length === substrates.length &&\n hashValues.every(h => h === hashValues[0]);\n\n results.scenario_hashes[scenarioId] = {\n hashes,\n parity: allSame,\n };\n\n if (allSame) {\n results.summary.scenarios_matched++;\n console.log(` → ✅ PARITY (${hashValues[0].slice(0, 8)})\\n`);\n } else if (allValid) {\n results.summary.scenarios_mismatched++;\n results.issues.push(`${scenarioId}: hash mismatch`);\n console.log(` → ❌ MISMATCH\\n`);\n } else {\n results.issues.push(`${scenarioId}: incomplete (missing runs)`);\n console.log(` → ⚠️ INCOMPLETE\\n`);\n }\n }\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine status\n if (results.summary.scenarios_mismatched > 0) {\n results.status = 'FAIL';\n results.failure_reason = `${results.summary.scenarios_mismatched} scenario(s) with hash mismatch`;\n } else if (results.summary.scenarios_matched < results.summary.scenarios) {\n results.status = 'PARTIAL';\n results.note = `${results.summary.scenarios_matched}/${results.summary.scenarios} scenarios verified`;\n }\n\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n const reportPath = path.join(artifactsDir, 'portable-hash-parity.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n const statusEmoji = results.status === 'PASS' ? '✅ PASS' :\n results.status === 'PARTIAL' ? '⚠️ PARTIAL' : '❌ FAIL';\n\n console.log('═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${statusEmoji}`);\n console.log(` Hash Scope: PORTABLE v${results.hash_scope_version || '1.0.0'}`);\n console.log(` Summary:`);\n console.log(` - Scenarios matched: ${results.summary.scenarios_matched}/${results.summary.scenarios}`);\n console.log(` - Scenarios mismatched: ${results.summary.scenarios_mismatched}`);\n console.log(` Issues: ${results.issues.length}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n process.exit(results.status === 'FAIL' ? 1 : 0);\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/post-task-association.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/projection-manifest.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/projection-map.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/projection-sanity.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'YAML' is defined but never used. Allowed unused vars must match /^_/u.","line":4,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":4,"endColumn":12}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from \"node:fs\";\nimport path from \"node:path\";\nimport process from \"node:process\";\nimport YAML from \"yaml\";\n\n/**\n * gate:projection-sanity\n * \n * Verifies UI projection consistency against SSOT (Essential Three):\n * 1. Curated Run ID set parity\n * 2. Substrate set parity\n * 3. Ruleset registry/manifest parity\n * \n * v0.1 (v0.7 Elevation)\n */\n\nconst ROOT = process.cwd();\nconst EXPORT_CURATED = path.join(ROOT, \"export/curated-runs.json\");\nconst UI_CURATED = path.join(ROOT, \"public/_data/curated-runs.json\");\nconst RULESET_REGISTRY = path.join(ROOT, \"lib/rulesets/registry.ts\");\n\nfunction getRulesetFolders() {\n const rulesetPath = path.join(ROOT, \"data/rulesets\");\n return fs.readdirSync(rulesetPath)\n .filter(f => fs.statSync(path.join(rulesetPath, f)).isDirectory())\n .filter(f => fs.existsSync(path.join(rulesetPath, f, \"manifest.yaml\")));\n}\n\nasync function run() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' Projection Sanity Gate (v0.1 - Essential Three)');\n console.log('═══════════════════════════════════════════════════════════');\n\n if (!fs.existsSync(EXPORT_CURATED) || !fs.existsSync(UI_CURATED)) {\n console.error('❌ Data files missing (run generate:curated first).');\n process.exit(1);\n }\n\n const exportData = JSON.parse(fs.readFileSync(EXPORT_CURATED, \"utf8\"));\n const uiData = JSON.parse(fs.readFileSync(UI_CURATED, \"utf8\"));\n\n let violations = 0;\n\n // --- RULE 1: Curated Run ID Set Parity ---\n console.log(`🔍 Verification 1: Curated Run ID Set Parity...`);\n const exportIds = new Set(exportData.runs?.map(r => r.run_id) ?? []);\n const uiIds = new Set(uiData.runs?.map(r => r.run_id) ?? []);\n\n const missingInUI = [...exportIds].filter(id => !uiIds.has(id));\n const extraInUI = [...uiIds].filter(id => !exportIds.has(id));\n\n if (missingInUI.length > 0 || extraInUI.length > 0) {\n console.error(`❌ Run ID drift detected!`);\n if (missingInUI.length > 0) console.error(` Missing in UI: [${missingInUI.slice(0, 5).join(\", \")}${missingInUI.length > 5 ? \"...\" : \"\"}]`);\n if (extraInUI.length > 0) console.error(` Extra in UI: [${extraInUI.slice(0, 5).join(\", \")}${extraInUI.length > 5 ? \"...\" : \"\"}]`);\n violations++;\n } else {\n console.log(` ✅ Set parity confirmed (${uiIds.size} runs)`);\n }\n\n // --- RULE 2: Substrate Coverage Parity ---\n console.log(`🔍 Verification 2: Substrate Coverage Parity...`);\n const exportSubstrates = new Set(exportData.runs?.map(r => r.substrate_id) ?? []);\n const uiSubstrates = new Set(uiData.runs?.map(r => r.substrate_id) ?? []);\n\n const missingSubstrates = [...exportSubstrates].filter(s => !uiSubstrates.has(s));\n const extraSubstrates = [...uiSubstrates].filter(s => !exportSubstrates.has(s));\n\n if (missingSubstrates.length > 0 || extraSubstrates.length > 0) {\n console.error(`❌ Substrate set drift!`);\n if (missingSubstrates.length > 0) console.error(` Missing in UI: [${missingSubstrates.join(\", \")}]`);\n if (extraSubstrates.length > 0) console.error(` Extra in UI: [${extraSubstrates.join(\", \")}]`);\n violations++;\n } else {\n console.log(` ✅ Substrate parity confirmed ([${[...uiSubstrates].join(\", \")}])`);\n }\n\n // --- RULE 3: Ruleset Registry Parity ---\n console.log(`🔍 Verification 3: Ruleset Registry/Manifest Parity...`);\n const diskFolders = getRulesetFolders();\n const registryContent = fs.readFileSync(RULESET_REGISTRY, \"utf8\");\n\n // Simple heuristic: check if IDs from data/rulesets exist in registry.ts\n const missingInRegistry = diskFolders.filter(f => !registryContent.includes(f));\n\n if (missingInRegistry.length > 0) {\n console.error(`❌ Ruleset parity failure: ${missingInRegistry.length} folder(s) not in registry.ts`);\n console.error(` Missing: [${missingInRegistry.join(\", \")}]`);\n violations++;\n } else {\n console.log(` ✅ Ruleset parity confirmed (${diskFolders.length} versions)`);\n }\n\n if (violations > 0) {\n console.log(`\\n❌ Gate Status: FAIL (${violations} violations)`);\n process.exit(1);\n } else {\n console.log(`\\n✅ Gate Status: PASS`);\n }\n}\n\nrun().catch(err => {\n console.error(`\\n💥 Sanity Check failed: ${err.message}`);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/proof-signature.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'GITHUB_REPOSITORY' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":29,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":29,"endColumn":24},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ALLOWED_REPOS' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":32,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":32,"endColumn":20}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Proof Signature Gate - v0.5\n * \n * Verifies that all curated runs can have valid signed proofs generated.\n * This is the gate for v0.5 signed proof infrastructure.\n * \n * NOTE: This gate uses a STAGING key. In production, proofs would be\n * generated with the production signing key stored securely.\n * \n * Usage: npm run gate:proof-signature\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\n// =============================================================================\n// Key Management - CI Secret Cutover (v0.5.5)\n// =============================================================================\n\nconst IS_CI = !!process.env.CI;\nconst IS_GITHUB_ACTIONS = process.env.GITHUB_ACTIONS === 'true';\nconst IS_VERCEL = !!process.env.VERCEL;\nconst SIGN_MODE = process.env.VLAB_SIGN_MODE || (IS_CI ? 'production' : 'staging');\nconst GITHUB_REPOSITORY = process.env.GITHUB_REPOSITORY || '';\n\n// Repo scope enforcement - only allow production signing in Validation Lab repo\nconst ALLOWED_REPOS = ['Coregentis/MPLP-Validation-Lab', 'jasonwang/MPLP-Validation-Lab'];\n\n// Production key - ONLY from CI secret, NEVER hardcoded\nconst PROD_PRIVATE_KEY = process.env.VLAB_SIGNING_KEY_ED25519_PROD || null;\nconst PROD_KEY_ID = 'vlab-prod-2026-01b'; // ROTATED 2026-01-19 after exposure\n\n// Staging/test key - for local development ONLY\nconst STAGING_PRIVATE_KEY = 'MC4CAQAwBQYDK2VwBCIEIHa1M2otzsmCjg3dG0qNL1GILevjRg9lHGH3KZfEQ22K';\nconst STAGING_KEY_ID = 'vlab-v0.5-test-001';\n\n// Determine signing key based on mode\nfunction getSigningConfig() {\n if (SIGN_MODE === 'production') {\n // SECURITY: Production signing ONLY allowed in GitHub Actions\n if (IS_VERCEL) {\n console.error('❌ FATAL: Production signing is NOT allowed in Vercel');\n console.error(' Production signing must only run in GitHub Actions CI');\n process.exit(1);\n }\n\n if (!IS_GITHUB_ACTIONS && IS_CI) {\n console.error('❌ FATAL: Production signing requires GitHub Actions');\n console.error(' CI environment detected but not GitHub Actions');\n process.exit(1);\n }\n\n if (!PROD_PRIVATE_KEY) {\n if (IS_CI) {\n // CI MUST have prod key\n console.error('❌ FATAL: CI requires VLAB_SIGNING_KEY_ED25519_PROD secret');\n process.exit(1);\n } else {\n // Local with production mode but no key - FAIL\n console.error('❌ FATAL: Production mode requires VLAB_SIGNING_KEY_ED25519_PROD');\n console.error(' Use VLAB_SIGN_MODE=staging for local development');\n process.exit(1);\n }\n }\n return { privateKey: PROD_PRIVATE_KEY, keyId: PROD_KEY_ID, mode: 'production' };\n } else {\n // Staging mode - use test key\n return { privateKey: STAGING_PRIVATE_KEY, keyId: STAGING_KEY_ID, mode: 'staging' };\n }\n}\n\nconst SIGNING_CONFIG = getSigningConfig();\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.5.5 Proof Signature Gate');\n console.log(` Mode: ${SIGNING_CONFIG.mode.toUpperCase()} | CI: ${IS_CI ? 'yes' : 'no'}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-PROOF-SIGNATURE',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n summary: {\n total_runs: 0,\n proofs_generated: 0,\n proofs_verified: 0,\n errors: 0,\n },\n runs: [],\n errors: [],\n };\n\n try {\n // Load dependencies\n const { getCuratedRuns } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/curated/load-curated-runs.ts')}`\n );\n const { loadRunBundle } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/bundles/load_run_bundle.ts')}`\n );\n const { getRuleset } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/rulesets/registry.ts')}`\n );\n const { generateSignedProof, verifySignedProof } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/proof/proof-bundle.ts')}`\n );\n\n // Create proofs directory\n const proofsDir = path.join(PROJECT_ROOT, 'artifacts', 'proofs');\n if (!fs.existsSync(proofsDir)) {\n fs.mkdirSync(proofsDir, { recursive: true });\n }\n\n // Load curated runs\n const curatedData = getCuratedRuns();\n const runs = curatedData.runs;\n results.summary.total_runs = runs.length;\n\n console.log(`📋 Scope: ALL curated runs (mode=all)`);\n console.log(`📋 Processing ${runs.length} runs for signed proof generation...\\n`);\n\n // SCOPE POLICY: Process ALL curated runs (no sampling)\n // This ensures 100% coverage for verifiable claims\n const targetRuns = runs; // mode=all\n\n for (const run of targetRuns) {\n const runResult = {\n run_id: run.run_id,\n proof_generated: false,\n proof_verified: false,\n error: null,\n };\n\n try {\n // Load bundle\n const bundle = loadRunBundle(run.run_id);\n if (!bundle) {\n runResult.error = 'BUNDLE_NOT_FOUND';\n results.summary.errors++;\n results.runs.push(runResult);\n console.log(` ❌ ${run.run_id}: BUNDLE_NOT_FOUND`);\n continue;\n }\n\n // Determine ruleset\n const rulesetId = run.ruleset_version || 'ruleset-1.1';\n const ruleset = await getRuleset(rulesetId);\n if (!ruleset?.adjudicator) {\n runResult.error = 'RULESET_NOT_LOADABLE';\n results.summary.errors++;\n results.runs.push(runResult);\n console.log(` ❌ ${run.run_id}: RULESET_NOT_LOADABLE`);\n continue;\n }\n\n // Execute adjudicator\n const evaluation = await ruleset.adjudicator(bundle);\n\n // Generate signed proof with current signing key\n const proof = generateSignedProof(\n evaluation,\n SIGNING_CONFIG.privateKey,\n SIGNING_CONFIG.keyId,\n '0.5.5'\n );\n runResult.proof_generated = true;\n results.summary.proofs_generated++;\n\n // Verify the proof we just generated\n const verification = verifySignedProof(proof, PROJECT_ROOT);\n runResult.proof_verified = verification.valid;\n if (verification.valid) {\n results.summary.proofs_verified++;\n }\n\n // Save proof to artifacts\n const proofPath = path.join(proofsDir, `${run.run_id}.proof.json`);\n fs.writeFileSync(proofPath, JSON.stringify(proof, null, 2));\n\n const emoji = evaluation.topline_verdict === 'PASS' ? '✅' :\n evaluation.topline_verdict === 'FAIL' ? '❌' : '⚠️';\n console.log(` ${emoji} ${run.run_id}: ${evaluation.topline_verdict} (signed: ${verification.valid ? '✓' : '✗'})`);\n\n } catch (e) {\n runResult.error = String(e);\n results.summary.errors++;\n console.log(` ❌ ${run.run_id}: ERROR - ${e}`);\n }\n\n results.runs.push(runResult);\n }\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine final status\n if (results.summary.proofs_generated === 0) {\n results.status = 'FAIL';\n results.failure_reason = 'No proofs could be generated';\n } else if (results.summary.proofs_verified < results.summary.proofs_generated) {\n results.status = 'FAIL';\n results.failure_reason = 'Some proofs failed verification';\n }\n\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n const reportPath = path.join(artifactsDir, 'proof-signature.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${results.status === 'PASS' ? '✅ PASS' : '❌ FAIL'}`);\n console.log(` Summary:`);\n console.log(` - Scope: ALL (mode=all)`);\n console.log(` - Total runs: ${results.runs.length}`);\n console.log(` - Proofs generated: ${results.summary.proofs_generated}`);\n console.log(` - Proofs verified: ${results.summary.proofs_verified}`);\n console.log(` - Errors: ${results.summary.errors}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n process.exit(results.status === 'PASS' ? 0 : 1);\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/reason-codes.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'isAllowedReasonCode' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":57,"column":17,"nodeType":null,"messageId":"unusedVar","endLine":57,"endColumn":36},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":86,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":86,"endColumn":23},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":108,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":108,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * PR-11 / v0.4-PR1: Reason Code Taxonomy Gate\n * \n * CI Gate to verify all reason codes are governable:\n * 1. All non-PASS verdicts have reason_code\n * 2. All reason_codes fall into taxonomy (enum or pattern)\n * 3. Report unknown codes with context\n * \n * Usage: npm run gate:reason-codes\n * Output: artifacts/reason-codes.report.json\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.4-PR1: Reason Code Taxonomy Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-REASON-CODES-TAXONOMY',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n taxonomy_stats: null,\n runs_checked: 0,\n issues: [],\n summary: {\n total_reason_codes: 0,\n enum_codes: 0,\n pattern_codes: 0,\n unknown_codes: 0,\n missing_codes: 0,\n },\n };\n\n try {\n // Import required modules\n const { getCuratedRuns } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/curated/load-curated-runs.ts')}`\n );\n const { loadRunBundle } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/bundles/load_run_bundle.ts')}`\n );\n const { getRuleset } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/rulesets/registry.ts')}`\n );\n const { isArbitrationPack } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/rulesets/ruleset-1.1/applicability.ts')}`\n );\n const { isAllowedReasonCode, explainReasonCode, getReasonCodeStats } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/gates/reason-codes/index.ts')}`\n );\n\n // Get taxonomy stats\n results.taxonomy_stats = getReasonCodeStats();\n console.log('📊 Taxonomy Stats:');\n console.log(` Common: ${results.taxonomy_stats.common}`);\n console.log(` D1 (Budget): ${results.taxonomy_stats.d1}`);\n console.log(` D2 (Lifecycle): ${results.taxonomy_stats.d2}`);\n console.log(` D3 (Authz): ${results.taxonomy_stats.d3}`);\n console.log(` D4 (Termination): ${results.taxonomy_stats.d4}`);\n console.log(` Total Enum: ${results.taxonomy_stats.total_enum}`);\n console.log(` Patterns: ${results.taxonomy_stats.patterns}`);\n console.log('');\n\n // Load curated runs\n console.log('📋 Loading curated runs...\\n');\n const curatedData = getCuratedRuns();\n const runs = curatedData.runs || [];\n results.runs_checked = runs.length;\n\n console.log(`Checking ${runs.length} runs for reason code compliance...\\n`);\n\n for (const runMeta of runs) {\n // Load bundle\n let bundle;\n try {\n bundle = loadRunBundle(runMeta.run_id);\n } catch (e) {\n // Skip unloadable bundles (covered by PR-9)\n console.log(`⚠️ ${runMeta.run_id}: Bundle load failed (skipping)`);\n continue;\n }\n\n // Determine ruleset\n const rulesetRef = bundle.bundle_manifest?.ruleset_ref;\n const isArb = isArbitrationPack(runMeta.run_id);\n const effectiveRef = rulesetRef || (isArb ? 'ruleset-1.1' : 'ruleset-1.0');\n\n // Get ruleset\n const ruleset = await getRuleset(effectiveRef);\n if (!ruleset || !ruleset.adjudicator) {\n console.log(`⚠️ ${runMeta.run_id}: Ruleset unavailable (skipping)`);\n continue;\n }\n\n // Adjudicate\n let evalResult;\n try {\n evalResult = await ruleset.adjudicator(bundle);\n } catch (e) {\n console.log(`⚠️ ${runMeta.run_id}: Adjudication failed (skipping)`);\n continue;\n }\n\n // Check topline verdict reason code\n if (evalResult.topline_verdict !== 'PASS') {\n results.summary.total_reason_codes++;\n\n if (!evalResult.reason_code) {\n // Check if any clause has reason_code\n const clauseReasons = evalResult.clauses\n .filter(c => c.reason_code)\n .map(c => c.reason_code);\n\n if (clauseReasons.length === 0) {\n results.summary.missing_codes++;\n results.issues.push({\n type: 'MISSING',\n run_id: runMeta.run_id,\n verdict: evalResult.topline_verdict,\n context: 'topline + no clause reason_codes',\n });\n console.log(`❌ ${runMeta.run_id}: ${evalResult.topline_verdict} without reason_code`);\n }\n } else {\n const explanation = explainReasonCode(evalResult.reason_code);\n if (explanation.allowed) {\n if (explanation.kind === 'enum') {\n results.summary.enum_codes++;\n } else {\n results.summary.pattern_codes++;\n }\n } else {\n results.summary.unknown_codes++;\n results.issues.push({\n type: 'UNKNOWN',\n run_id: runMeta.run_id,\n reason_code: evalResult.reason_code,\n verdict: evalResult.topline_verdict,\n context: 'topline',\n });\n console.log(`❌ ${runMeta.run_id}: Unknown topline reason_code: ${evalResult.reason_code}`);\n }\n }\n }\n\n // Check clause reason codes\n for (const clause of evalResult.clauses) {\n if (clause.status !== 'PASS' && clause.reason_code) {\n results.summary.total_reason_codes++;\n const explanation = explainReasonCode(clause.reason_code);\n\n if (explanation.allowed) {\n if (explanation.kind === 'enum') {\n results.summary.enum_codes++;\n } else {\n results.summary.pattern_codes++;\n }\n } else {\n results.summary.unknown_codes++;\n results.issues.push({\n type: 'UNKNOWN',\n run_id: runMeta.run_id,\n clause_id: clause.clause_id,\n reason_code: clause.reason_code,\n status: clause.status,\n context: 'clause',\n });\n console.log(`❌ ${runMeta.run_id}/${clause.clause_id}: Unknown reason_code: ${clause.reason_code}`);\n }\n }\n }\n }\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine gate status\n if (results.summary.unknown_codes > 0) {\n results.status = 'FAIL';\n results.failure_reason = `${results.summary.unknown_codes} unknown reason_code(s) detected`;\n } else if (results.summary.missing_codes > 0) {\n results.status = 'FAIL';\n results.failure_reason = `${results.summary.missing_codes} non-PASS verdict(s) without reason_code`;\n }\n\n // Calculate duration\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n\n const reportPath = path.join(artifactsDir, 'reason-codes.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${results.status === 'PASS' ? '✅ PASS' : '❌ FAIL'}`);\n console.log(' Summary:');\n console.log(` - Runs checked: ${results.runs_checked}`);\n console.log(` - Total reason codes: ${results.summary.total_reason_codes}`);\n console.log(` - Enum codes: ${results.summary.enum_codes}`);\n console.log(` - Pattern codes: ${results.summary.pattern_codes}`);\n console.log(` - Unknown codes: ${results.summary.unknown_codes}`);\n console.log(` - Missing codes: ${results.summary.missing_codes}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n // Exit with appropriate code\n process.exit(results.status === 'PASS' ? 0 : 1);\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/registry-contract.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'registryPath' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":44,"column":15,"nodeType":null,"messageId":"unusedVar","endLine":44,"endColumn":27},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'getRuleset' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":47,"column":41,"nodeType":null,"messageId":"unusedVar","endLine":47,"endColumn":51}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * PR-8: Registry Contract Gate\n * \n * CI Gate to verify all registered rulesets satisfy the adjudication contract:\n * 1. Manifest is loadable\n * 2. Adjudicator exists (not null)\n * 3. Adjudicator can execute on a minimal fixture bundle\n * 4. Output is valid RulesetEvalResult\n * \n * Usage: npm run gate:registry\n * Output: artifacts/registry-contract.report.json\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\n// Dynamically import registry functions\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' PR-8: Registry Contract Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-REGISTRY-CONTRACT',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n rulesets: [],\n summary: {\n total: 0,\n passed: 0,\n failed: 0,\n errors: []\n }\n };\n\n try {\n // Import registry module\n const registryPath = path.join(PROJECT_ROOT, 'lib/rulesets/registry.ts');\n\n // Use tsx to run TypeScript\n const { listRegisteredRulesets, getRuleset } = await import(\n `file://${path.join(PROJECT_ROOT, 'lib/rulesets/registry.ts')}`\n );\n\n // Get all registered rulesets\n console.log('📋 Listing registered rulesets...\\n');\n const rulesets = await listRegisteredRulesets();\n results.summary.total = rulesets.length;\n\n for (const ruleset of rulesets) {\n const rulesetResult = {\n id: ruleset.id,\n manifest_loaded: false,\n adjudicator_exists: false,\n adjudicator_callable: false,\n output_valid: false,\n status: 'FAIL',\n errors: []\n };\n\n console.log(`\\n📦 Testing: ${ruleset.id}`);\n console.log('─'.repeat(40));\n\n // Test 1: Manifest loaded\n if (ruleset.manifest) {\n rulesetResult.manifest_loaded = true;\n console.log(' ✅ Manifest loaded');\n console.log(` - Name: ${ruleset.manifest.name}`);\n console.log(` - Version: ${ruleset.manifest.version}`);\n } else {\n rulesetResult.errors.push('Manifest not loaded');\n console.log(' ❌ Manifest not loaded');\n }\n\n // Test 2: Adjudicator exists\n if (ruleset.adjudicator) {\n rulesetResult.adjudicator_exists = true;\n console.log(' ✅ Adjudicator exists');\n } else {\n rulesetResult.errors.push('Adjudicator is null');\n console.log(' ❌ Adjudicator is null');\n }\n\n // Test 3: Adjudicator callable on fixture\n if (ruleset.adjudicator) {\n try {\n // Create minimal fixture bundle\n const fixtureBundle = createFixtureBundle(ruleset.id);\n const evalResult = await ruleset.adjudicator(fixtureBundle);\n\n rulesetResult.adjudicator_callable = true;\n console.log(' ✅ Adjudicator callable');\n\n // Test 4: Output is valid RulesetEvalResult\n if (validateRulesetEvalResult(evalResult)) {\n rulesetResult.output_valid = true;\n console.log(' ✅ Output is valid RulesetEvalResult');\n console.log(` - Topline: ${evalResult.topline_verdict}`);\n console.log(` - Clauses: ${evalResult.clauses.length}`);\n } else {\n rulesetResult.errors.push('Output is invalid RulesetEvalResult');\n console.log(' ❌ Output is invalid RulesetEvalResult');\n }\n } catch (e) {\n rulesetResult.errors.push(`Adjudicator threw: ${e.message}`);\n console.log(` ❌ Adjudicator threw: ${e.message}`);\n }\n }\n\n // Determine ruleset status\n if (\n rulesetResult.manifest_loaded &&\n rulesetResult.adjudicator_exists &&\n rulesetResult.adjudicator_callable &&\n rulesetResult.output_valid\n ) {\n rulesetResult.status = 'PASS';\n results.summary.passed++;\n } else {\n rulesetResult.status = 'FAIL';\n results.summary.failed++;\n results.status = 'FAIL';\n }\n\n results.rulesets.push(rulesetResult);\n }\n\n } catch (e) {\n results.status = 'ERROR';\n results.summary.errors.push(`Gate execution error: ${e.message}`);\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Calculate duration\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n\n const reportPath = path.join(artifactsDir, 'registry-contract.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n console.log('\\n═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${results.status === 'PASS' ? '✅ PASS' : '❌ FAIL'}`);\n console.log(` Rulesets: ${results.summary.passed}/${results.summary.total} passed`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n // Exit with appropriate code\n process.exit(results.status === 'PASS' ? 0 : 1);\n}\n\n// Create minimal fixture bundle for testing adjudicator\nfunction createFixtureBundle(rulesetId) {\n const runId = rulesetId === 'ruleset-1.0' ? 'gf-fixture' : 'arb-d1-fixture';\n\n return {\n run_id: runId,\n verdict: {\n run_id: runId,\n scenario_id: 'fixture-scenario',\n admission: 'ADMISSIBLE',\n gf_verdicts: [],\n domain_verdicts: [],\n topline: 'PASS',\n versions: { protocol: '1.0', schema: '1.0', ruleset: rulesetId },\n evaluated_at: new Date().toISOString(),\n reason_code: null,\n },\n bundle_manifest: {\n run_id: runId,\n pack_root: '.',\n ruleset_ref: rulesetId,\n protocol_pin: '1.0',\n schema_bundle_sha256: 'fixture',\n hash_scope: [],\n reason_code: null,\n },\n integrity_hash_path: null,\n evidence_pointers: { pointers: [] },\n pack: { root: '.', trace: { events: [], raw_path: '' } },\n load_status: {\n b1_verdict: 'ok',\n b2_manifest: 'ok',\n b3_integrity: 'ok',\n b4_pointers: 'ok',\n pack: 'ok',\n b1_was_legacy: false,\n },\n load_errors: [],\n };\n}\n\n// Validate RulesetEvalResult structure\nfunction validateRulesetEvalResult(result) {\n if (!result) return false;\n if (typeof result.ruleset_id !== 'string') return false;\n if (typeof result.run_id !== 'string') return false;\n if (typeof result.evaluated_at !== 'string') return false;\n if (typeof result.topline_verdict !== 'string') return false;\n if (!Array.isArray(result.clauses)) return false;\n return true;\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/runset-consistency.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/secret-hygiene.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ALWAYS_CHECK_FILES' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":53,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":53,"endColumn":25},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":88,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":88,"endColumn":19},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":137,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":137,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Secret Hygiene Gate - v0.5.5\n * \n * Scans repository for private key material that should NOT be committed.\n * \n * Detects:\n * - BEGIN PRIVATE KEY / END PRIVATE KEY\n * - Ed25519 private key patterns (PKCS#8 base64)\n * - .env files with key material\n * - Common secret file patterns\n * \n * Usage: npm run gate:secret-hygiene\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\nimport { execSync } from 'child_process';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\n// Patterns to detect private key material\nconst PRIVATE_KEY_PATTERNS = [\n /-----BEGIN\\s+(EC\\s+)?PRIVATE KEY-----/,\n /-----BEGIN\\s+OPENSSH\\s+PRIVATE KEY-----/,\n /private_key_ed25519[\"']?\\s*[:=]\\s*[\"']/i,\n /SIGNING_PRIVATE_KEY\\s*=\\s*[\"']MC[A-Za-z0-9+/=]{60,}/,\n /MC4CAQAwBQYDK2VwBCIEI[A-Za-z0-9+/=]{40,}/, // Ed25519 PKCS#8 pattern\n];\n\n// Files/directories to exclude from scanning\nconst EXCLUDE_PATTERNS = [\n 'node_modules',\n '.git',\n 'dist',\n '.next',\n 'artifacts',\n '*.log',\n 'package-lock.json',\n];\n\n// Files allowed to contain staging/test keys (NOT production keys)\n// These are intentionally hardcoded test keys for local development only\nconst ALLOWED_STAGING_KEY_FILES = [\n 'scripts/gates/proof-signature.mjs', // Contains STAGING_PRIVATE_KEY for local dev\n 'tools/gen-ed25519.mjs', // Key generation tool (output only)\n 'lib/proof/sign.ts', // PEM template construction (not actual key)\n];\n\n// Files to explicitly check (even if normally excluded)\nconst ALWAYS_CHECK_FILES = [\n '.env',\n '.env.local',\n '.env.production',\n '*.key',\n '*_secret*',\n '*_private*',\n];\n\nasync function main() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' v0.5.5 Secret Hygiene Gate');\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n const startTime = Date.now();\n const results = {\n gate_id: 'GATE-SECRET-HYGIENE',\n executed_at: new Date().toISOString(),\n status: 'PASS',\n summary: {\n files_scanned: 0,\n violations: 0,\n },\n violations: [],\n };\n\n try {\n // Get list of tracked files using git\n let filesToScan = [];\n try {\n const gitOutput = execSync('git ls-files', {\n cwd: PROJECT_ROOT,\n encoding: 'utf-8'\n });\n filesToScan = gitOutput.trim().split('\\n').filter(f => f);\n } catch (e) {\n // Fallback to scanning all files\n console.log('⚠️ Not a git repository, scanning all files...\\n');\n filesToScan = scanDirectory(PROJECT_ROOT);\n }\n\n console.log(`📋 Scanning ${filesToScan.length} files for private key material...\\n`);\n\n for (const relPath of filesToScan) {\n // Skip excluded patterns\n if (EXCLUDE_PATTERNS.some(p => {\n if (p.includes('*')) {\n const regex = new RegExp(p.replace(/\\*/g, '.*'));\n return regex.test(relPath);\n }\n return relPath.includes(p);\n })) {\n continue;\n }\n\n const absPath = path.join(PROJECT_ROOT, relPath);\n if (!fs.existsSync(absPath) || fs.statSync(absPath).isDirectory()) {\n continue;\n }\n\n results.summary.files_scanned++;\n\n try {\n const content = fs.readFileSync(absPath, 'utf-8');\n\n for (const pattern of PRIVATE_KEY_PATTERNS) {\n const match = content.match(pattern);\n if (match) {\n // Check if this file is allowed to have staging keys\n if (ALLOWED_STAGING_KEY_FILES.includes(relPath)) {\n console.log(` ⚠️ ${relPath} (allowed staging key)`);\n continue;\n }\n\n results.violations.push({\n file: relPath,\n pattern: pattern.toString(),\n match: match[0].slice(0, 50) + (match[0].length > 50 ? '...' : ''),\n });\n console.log(` ❌ ${relPath}`);\n console.log(` Pattern: ${pattern.toString().slice(0, 40)}...`);\n console.log(` Match: ${match[0].slice(0, 30)}...\\n`);\n }\n }\n } catch (e) {\n // Skip binary files\n }\n }\n\n results.summary.violations = results.violations.length;\n\n } catch (e) {\n results.status = 'ERROR';\n results.error = e.message;\n console.error('\\n❌ Gate execution error:', e.message);\n }\n\n // Determine status\n if (results.summary.violations > 0) {\n results.status = 'FAIL';\n results.failure_reason = `${results.summary.violations} private key violation(s) found`;\n }\n\n results.duration_ms = Date.now() - startTime;\n\n // Write report\n const artifactsDir = path.join(PROJECT_ROOT, 'artifacts');\n if (!fs.existsSync(artifactsDir)) {\n fs.mkdirSync(artifactsDir, { recursive: true });\n }\n const reportPath = path.join(artifactsDir, 'secret-hygiene.report.json');\n fs.writeFileSync(reportPath, JSON.stringify(results, null, 2));\n\n // Summary\n const statusEmoji = results.status === 'PASS' ? '✅ PASS' : '❌ FAIL';\n\n console.log('═══════════════════════════════════════════════════════════');\n console.log(` Gate Status: ${statusEmoji}`);\n console.log(` Summary:`);\n console.log(` - Files scanned: ${results.summary.files_scanned}`);\n console.log(` - Violations: ${results.summary.violations}`);\n console.log(` Duration: ${results.duration_ms}ms`);\n console.log(` Report: ${reportPath}`);\n console.log('═══════════════════════════════════════════════════════════\\n');\n\n process.exit(results.status === 'PASS' ? 0 : 1);\n}\n\nfunction scanDirectory(dir, relativeTo = dir) {\n const files = [];\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n const fullPath = path.join(dir, entry.name);\n const relPath = path.relative(relativeTo, fullPath);\n if (entry.isDirectory()) {\n if (!EXCLUDE_PATTERNS.includes(entry.name)) {\n files.push(...scanDirectory(fullPath, relativeTo));\n }\n } else {\n files.push(relPath);\n }\n }\n return files;\n}\n\nmain().catch(e => {\n console.error('Fatal error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/shadow-parity.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/ssot-consistency.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/terminology-gate.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":35,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":35,"endColumn":11},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":56,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":56,"endColumn":11}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * GATE-TERM-LAB — Terminology Gate for Validation Lab\n * \n * Checks app/ for forbidden terminology:\n * - \"Golden Flow\" (must use \"Lifecycle Guarantees\")\n * - GF-0[1-9] in external display (allowed only in internal IDs like gf-01)\n * \n * Exit 0 = PASS, Exit 1 = FAIL\n */\n\nimport { execSync } from 'child_process';\n\nconsole.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');\nconsole.log('GATE-TERM-LAB: Validation Lab Terminology Gate');\nconsole.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');\n\nlet violations = 0;\n\n// Check for \"Golden Flow\" in TSX files (external display)\ntry {\n const goldenFlowResult = execSync(\n `grep -rn \"Golden Flow\" app/ --include=\"*.tsx\" 2>/dev/null || true`,\n { encoding: 'utf-8' }\n ).trim();\n\n if (goldenFlowResult) {\n console.log('\\n❌ VIOLATION: \"Golden Flow\" found in external display');\n console.log(' Use \"Lifecycle Guarantees\" instead');\n console.log(goldenFlowResult);\n violations++;\n } else {\n console.log('✅ No \"Golden Flow\" in external display');\n }\n} catch (e) {\n // grep returns exit 1 when no match, which is OK\n}\n\n// Check for GF-0x (uppercase) in JSX display text only\n// Note: GF-0x in code (arrays, object keys) is allowed for data access\n// Only JSX text output like >GF-01< should use >LG-01<\ntry {\n const gfResult = execSync(\n `grep -rn \">GF-0[1-9]\" app/ --include=\"*.tsx\" 2>/dev/null || true`,\n { encoding: 'utf-8' }\n ).trim();\n\n if (gfResult) {\n console.log('\\n❌ VIOLATION: \"GF-0x\" found in JSX display text');\n console.log(' Use \"LG-0x\" instead for external display');\n console.log(gfResult);\n violations++;\n } else {\n console.log('✅ No \"GF-0x\" in JSX display text (data keys OK)');\n }\n} catch (e) {\n // grep returns exit 1 when no match, which is OK\n}\n\nconsole.log('\\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');\n\nif (violations > 0) {\n console.log(`❌ GATE FAILED: ${violations} terminology violation(s)`);\n process.exit(1);\n} else {\n console.log('✅ GATE PASSED: Lab terminology compliant');\n process.exit(0);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/test-vectors-coverage.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-governance-index-ssot-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-nav-single-entry-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-no-exclude-escape-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":35,"column":23,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":35,"endColumn":26,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[790,793],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[790,793],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":49,"column":34,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":49,"endColumn":37,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1193,1196],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1193,1196],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":88,"column":33,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":88,"endColumn":36,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2724,2727],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2724,2727],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'mainExclude' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":90,"column":15,"nodeType":null,"messageId":"unusedVar","endLine":90,"endColumn":26}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * GATE-NO-EXCLUDE-ESCAPE-01\n * \n * Prevents using tsconfig exclude to escape gate compilation.\n * Ensures gates, scripts, producers, and runners remain compilable.\n * \n * Ticket: P1-05\n */\n\nimport fs from 'fs';\nimport path from 'path';\n\ninterface GateResult {\n gate_id: string;\n name: string;\n status: 'PASS' | 'FAIL' | 'WARN';\n message: string;\n details: string[];\n}\n\n// Directories that MUST NOT be excluded from tooling tsconfig\nconst PROTECTED_DIRS = [\n 'scripts/',\n 'scripts/gates/',\n 'producers/',\n 'runners/'\n];\n\n// Directories that MAY be excluded from main tsconfig (for Next.js)\n// but MUST be included in tools tsconfig\nconst MAIN_TSCONFIG = 'tsconfig.json';\nconst TOOLS_TSCONFIG = 'tsconfig.tools.json';\n\nfunction readJson(filePath: string): T | null {\n const fullPath = path.join(process.cwd(), filePath);\n if (!fs.existsSync(fullPath)) return null;\n try {\n return JSON.parse(fs.readFileSync(fullPath, 'utf-8')) as T;\n } catch {\n return null;\n }\n}\n\nfunction main(): GateResult {\n const issues: string[] = [];\n\n // Check that tsconfig.tools.json exists\n const toolsConfig = readJson(TOOLS_TSCONFIG);\n if (!toolsConfig) {\n return {\n gate_id: 'GATE-NO-EXCLUDE-ESCAPE-01',\n name: 'No Exclude Escape',\n status: 'FAIL',\n message: `${TOOLS_TSCONFIG} not found - gate tooling tsconfig is required`,\n details: [`Create ${TOOLS_TSCONFIG} to compile gates/scripts/producers/runners`]\n };\n }\n\n // Check that protected dirs are NOT excluded in tools tsconfig\n const toolsExclude = toolsConfig.exclude || [];\n for (const protectedDir of PROTECTED_DIRS) {\n for (const excludePattern of toolsExclude) {\n if (excludePattern.includes(protectedDir.replace('/', ''))) {\n issues.push(`${TOOLS_TSCONFIG} excludes protected dir: ${excludePattern} (affects ${protectedDir})`);\n }\n }\n }\n\n // Check that protected dirs ARE included in tools tsconfig\n const toolsInclude = toolsConfig.include || [];\n const missingIncludes: string[] = [];\n\n // Must include scripts\n if (!toolsInclude.some((p: string) => p.includes('scripts'))) {\n missingIncludes.push('scripts/**/*.ts');\n }\n // Must include lib\n if (!toolsInclude.some((p: string) => p.includes('lib'))) {\n missingIncludes.push('lib/**/*.ts');\n }\n\n if (missingIncludes.length > 0) {\n issues.push(`${TOOLS_TSCONFIG} missing required includes: ${missingIncludes.join(', ')}`);\n }\n\n // Check main tsconfig doesn't bypass by including gates then excluding them\n const mainConfig = readJson(MAIN_TSCONFIG);\n if (mainConfig) {\n const mainExclude = mainConfig.exclude || [];\n const mainInclude = mainConfig.include || [];\n\n // It's OK for main tsconfig to exclude these (Next.js shouldn't compile them)\n // But it should NOT include them in a way that triggers compilation\n for (const protectedDir of PROTECTED_DIRS) {\n const isIncluded = mainInclude.some((p: string) => p.includes(protectedDir.replace('/', '')));\n if (isIncluded) {\n // If main tsconfig includes gates, warn about complexity\n console.error(`[INFO] Main tsconfig includes ${protectedDir} - ensure tools tsconfig is used for gate execution`);\n }\n }\n }\n\n // Output\n console.error(`📋 Gate Tooling Configuration Check`);\n console.error(` Tools tsconfig: ${TOOLS_TSCONFIG}`);\n console.error(` Include patterns: ${toolsInclude.length}`);\n console.error(` Exclude patterns: ${toolsExclude.length}`);\n\n if (issues.length > 0) {\n return {\n gate_id: 'GATE-NO-EXCLUDE-ESCAPE-01',\n name: 'No Exclude Escape',\n status: 'FAIL',\n message: `${issues.length} tsconfig escape violations found`,\n details: issues\n };\n }\n\n return {\n gate_id: 'GATE-NO-EXCLUDE-ESCAPE-01',\n name: 'No Exclude Escape',\n status: 'PASS',\n message: `Gate tooling configuration valid: ${TOOLS_TSCONFIG} properly covers all protected directories`,\n details: [\n `Protected: ${PROTECTED_DIRS.join(', ')}`,\n `Includes: ${toolsInclude.join(', ')}`\n ]\n };\n}\n\nconst result = main();\nconsole.log(JSON.stringify(result, null, 2));\nprocess.exit(result.status === 'PASS' ? 0 : 1);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-build-lint-policy-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ToolConfig' is defined but never used. Allowed unused vars must match /^_/u.","line":1,"column":31,"nodeType":null,"messageId":"unusedVar","endLine":1,"endColumn":41}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { runGate, fail, pass, ToolConfig } from '../_lib/gate-runner';\nimport fs from 'fs';\nimport path from 'path';\n\nexport const gate = {\n id: 'GATE-UNIFIED-BUILD-LINT-POLICY-01',\n name: 'Build Lint Policy Consistency',\n run: async () => {\n const errors: string[] = [];\n const warnings: string[] = [];\n\n // 1. Check Config\n const nextConfigPath = path.join(process.cwd(), 'next.config.ts');\n if (!fs.existsSync(nextConfigPath)) {\n return fail(['next.config.ts not found']);\n }\n\n const configContent = fs.readFileSync(nextConfigPath, 'utf8');\n const isTolerant = configContent.includes('ignoreDuringBuilds: true');\n\n const policyPath = path.join(process.cwd(), 'governance/build-policy.md');\n const hasPolicyDoc = fs.existsSync(policyPath);\n\n // 2. Enforce Consistency\n if (isTolerant) {\n if (!hasPolicyDoc) {\n errors.push('Build is configured as Lint Tolerant (ignoreDuringBuilds: true), but governance/build-policy.md is missing.');\n errors.push('You must document the reason for tolerance to prevent governance drift.');\n } else {\n warnings.push('Build is Lint Tolerant. Ensure seal takes \"lint_policy: tolerant\".');\n }\n } else {\n // Strict mode\n if (hasPolicyDoc) {\n // Not an error, but worth noting if we left the doc around\n warnings.push('Build is Strict, but tolerant policy doc exists. Consider deprecating the policy doc if strictness is permanent.');\n }\n }\n\n if (errors.length > 0) return fail('Lint Policy Check Failed', errors);\n\n return pass(\n 'Lint Policy/Config alignment verified',\n warnings.length > 0 ? warnings : []\n );\n }\n};\n\n// Auto-run if executed directly\nif (import.meta.url === `file://${process.argv[1]}`) {\n runGate(gate);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-governance-nav-closure-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-lint-debt-trend-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'fail' is defined but never used. Allowed unused vars must match /^_/u.","line":1,"column":19,"nodeType":null,"messageId":"unusedVar","endLine":1,"endColumn":23},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":33,"column":29,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":33,"endColumn":32,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1304,1307],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1304,1307],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":34,"column":27,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":34,"endColumn":30,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1387,1390],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1387,1390],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":34,"column":35,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":34,"endColumn":38,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1395,1398],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1395,1398],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":67,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":67,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2777,2780],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2777,2780],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":5,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { runGate, fail, pass, warn } from '../_lib/gate-runner';\nimport fs from 'fs';\nimport path from 'path';\n\n// NOTE: This gate requires 'releases/unified/index.json' to find history.\n// If index doesn't exist, it skips (Warn).\n\nconst INDEX_PATH = path.join(process.cwd(), 'releases/unified/index.json');\nconst CURRENT_AUDIT = path.join(process.cwd(), 'reports/lint-audit.json');\n\nexport const gate = {\n id: 'GATE-UNIFIED-LINT-DEBT-TREND-01',\n name: 'Lint Debt Trend Analysis',\n run: async () => {\n // 1. Get Current Debt\n if (!fs.existsSync(CURRENT_AUDIT)) {\n return warn('No current lint-audit.json found. Skipping trend check.');\n }\n const currentData = JSON.parse(fs.readFileSync(CURRENT_AUDIT, 'utf8'));\n const currentErrors = currentData.total_errors || 0;\n\n // 2. Get Previous Debt\n if (!fs.existsSync(INDEX_PATH)) {\n return pass('No release history index found. Baseline established.', [`Current Errors: ${currentErrors}`]);\n }\n\n try {\n const index = JSON.parse(fs.readFileSync(INDEX_PATH, 'utf8'));\n const releases = index.releases || [];\n\n // Find valid releases with lint data, sorted by date desc\n const history = releases\n .filter((r: any) => r.status === 'VALID' && r.artifacts?.lint_audit)\n .sort((a: any, b: any) => b.id.localeCompare(a.id));\n\n if (history.length === 0) {\n return pass('No historical lint data found using new schema. Baseline established.', [`Current Errors: ${currentErrors}`]);\n }\n\n // Compare with latest\n const latest = history[0];\n const previousErrors = latest.metrics?.lint_errors;\n\n if (previousErrors === undefined) {\n return pass('Latest release missing lint metrics. Baseline established.', [`Current Errors: ${currentErrors}`]);\n }\n\n // 3. Evaluate Trend\n // We allow equality, but warn on increase.\n if (currentErrors > previousErrors) {\n return warn(\n `Lint Debt Increased! (${previousErrors} -> ${currentErrors})`,\n ['Governance: Debt should adhere to non-increasing trend.']\n );\n } else if (currentErrors < previousErrors) {\n return pass(\n `Lint Debt Decreased (${previousErrors} -> ${currentErrors})`,\n ['Good job! Continuing towards Strict Compliance.']\n );\n } else {\n return pass(\n `Lint Debt Stable (${currentErrors})`,\n ['No increase detected.']\n );\n }\n\n } catch (e: any) {\n return warn(`Failed to parse release index: ${e.message}`);\n }\n }\n};\n\nif (import.meta.url === `file://${process.argv[1]}`) {\n runGate(gate);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-lint-strict-deadline-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'warn' is defined but never used. Allowed unused vars must match /^_/u.","line":1,"column":31,"nodeType":null,"messageId":"unusedVar","endLine":1,"endColumn":35},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'ToolConfig' is defined but never used. Allowed unused vars must match /^_/u.","line":1,"column":37,"nodeType":null,"messageId":"unusedVar","endLine":1,"endColumn":47}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { runGate, fail, pass, warn, ToolConfig } from '../_lib/gate-runner';\nimport fs from 'fs';\nimport path from 'path';\n\nconst DEADLINE = new Date('2026-06-30T23:59:59Z');\n\nexport const gate = {\n id: 'GATE-UNIFIED-LINT-STRICT-DEADLINE-01',\n name: 'Lint Policy Deadline Check',\n run: async () => {\n const now = new Date();\n const nextConfigPath = path.join(process.cwd(), 'next.config.ts');\n\n // 1. Check if we are tolerant\n let isTolerant = false;\n if (fs.existsSync(nextConfigPath)) {\n const content = fs.readFileSync(nextConfigPath, 'utf8');\n if (content.includes('ignoreDuringBuilds: true')) {\n isTolerant = true;\n }\n }\n\n if (!isTolerant) {\n return pass('Build is Strict. Deadline does not apply.');\n }\n\n // 2. Check Deadline\n if (now > DEADLINE) {\n return fail(\n `Lint Tolerance Deadline Exceeded (${DEADLINE.toISOString().split('T')[0]})`,\n ['Current Policy: TOLERANT', 'Action: Must revert to STRICT immediately.']\n );\n }\n\n const daysRemaining = Math.ceil((DEADLINE.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));\n\n return pass(\n `Lint Tolerance Active. ${daysRemaining} days remaining until deadline.`,\n [`Deadline: ${DEADLINE.toISOString().split('T')[0]}`]\n );\n }\n};\n\nif (import.meta.url === `file://${process.argv[1]}`) {\n runGate(gate);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-ruleset-projection-ssot-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-run-inventory-ssot-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":29,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":29,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[708,711],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[708,711],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * GATE-UNIFIED-RUN-INVENTORY-SSOT-01\n * \n * Ensures the unified runs loader output matches source indices exactly.\n * Prevents SSOT drift in tier counts and total inventory.\n * \n * Ticket: P1-01\n */\n\nimport fs from 'fs';\nimport path from 'path';\n\nconst V1_INDEX = 'public/_data/curated-runs.json';\nconst V2_INDEX = 'public/_data/v2/runs/index.json';\n\n// Valid tier values\nconst VALID_TIERS = ['SIMULATED', 'REPRODUCED', 'DISPUTE_READY', 'DECLARED'] as const;\ntype Tier = typeof VALID_TIERS[number];\n\ninterface GateResult {\n gate_id: string;\n name: string;\n status: 'PASS' | 'FAIL' | 'WARN';\n message: string;\n details: string[];\n}\n\nfunction readJson(filePath: string): any {\n const fullPath = path.join(process.cwd(), filePath);\n if (!fs.existsSync(fullPath)) return null;\n return JSON.parse(fs.readFileSync(fullPath, 'utf-8'));\n}\n\nfunction main(): GateResult {\n const issues: string[] = [];\n\n // Load source indices\n const v1Data = readJson(V1_INDEX);\n const v2Data = readJson(V2_INDEX);\n\n if (!v1Data) {\n return { gate_id: 'GATE-UNIFIED-RUN-INVENTORY-SSOT-01', name: 'Unified Run Inventory SSOT', status: 'FAIL', message: 'V1 index not found', details: [V1_INDEX] };\n }\n if (!v2Data) {\n return { gate_id: 'GATE-UNIFIED-RUN-INVENTORY-SSOT-01', name: 'Unified Run Inventory SSOT', status: 'FAIL', message: 'V2 index not found', details: [V2_INDEX] };\n }\n\n const v1Runs = v1Data.runs || [];\n const v2Runs = v2Data.data?.runs || [];\n\n const v1Count = v1Runs.length;\n const v2Count = v2Runs.length;\n const expectedTotal = v1Count + v2Count;\n\n console.error(`📊 Source Indices:`);\n console.error(` V1: ${v1Count} runs`);\n console.error(` V2: ${v2Count} runs`);\n console.error(` Expected Total: ${expectedTotal}`);\n\n // Count tiers (V1 = all SIMULATED, V2 = from index)\n const tierCounts: Record = {\n 'SIMULATED': v1Count,\n 'REPRODUCED': 0,\n 'DISPUTE_READY': 0,\n 'DECLARED': 0,\n };\n\n const unknownTierRuns: string[] = [];\n\n for (const run of v2Runs) {\n const tier = run.tier as Tier;\n if (VALID_TIERS.includes(tier)) {\n tierCounts[tier]++;\n } else {\n unknownTierRuns.push(`${run.pack_id}: tier=\"${tier || 'undefined'}\"`);\n }\n }\n\n console.error(`\\n📈 Tier Distribution:`);\n for (const tier of VALID_TIERS) {\n console.error(` ${tier}: ${tierCounts[tier]}`);\n }\n\n // Assertion 1: Tier counts sum to total\n const tierSum = Object.values(tierCounts).reduce((a, b) => a + b, 0);\n if (tierSum !== expectedTotal) {\n issues.push(`Tier sum (${tierSum}) ≠ expected total (${expectedTotal})`);\n }\n\n // Assertion 2: No unknown tiers\n if (unknownTierRuns.length > 0) {\n issues.push(`${unknownTierRuns.length} runs have unknown/missing tier`);\n unknownTierRuns.slice(0, 10).forEach(r => issues.push(` → ${r}`));\n }\n\n // Assertion 3: Check for duplicate run IDs\n const allIds = new Set();\n const duplicates: string[] = [];\n\n for (const run of v1Runs) {\n if (allIds.has(run.run_id)) duplicates.push(run.run_id);\n allIds.add(run.run_id);\n }\n for (const run of v2Runs) {\n if (allIds.has(run.pack_id)) duplicates.push(run.pack_id);\n allIds.add(run.pack_id);\n }\n\n if (duplicates.length > 0) {\n issues.push(`${duplicates.length} duplicate run IDs found`);\n duplicates.slice(0, 10).forEach(d => issues.push(` → ${d}`));\n }\n\n // Output summary\n console.error(`\\n✅ Assertions:`);\n console.error(` Tier sum matches total: ${tierSum === expectedTotal ? 'PASS' : 'FAIL'}`);\n console.error(` No unknown tiers: ${unknownTierRuns.length === 0 ? 'PASS' : 'FAIL'}`);\n console.error(` No duplicate IDs: ${duplicates.length === 0 ? 'PASS' : 'FAIL'}`);\n\n if (issues.length > 0) {\n return {\n gate_id: 'GATE-UNIFIED-RUN-INVENTORY-SSOT-01',\n name: 'Unified Run Inventory SSOT',\n status: 'FAIL',\n message: `${issues.length} inventory SSOT violations`,\n details: issues\n };\n }\n\n return {\n gate_id: 'GATE-UNIFIED-RUN-INVENTORY-SSOT-01',\n name: 'Unified Run Inventory SSOT',\n status: 'PASS',\n message: `Inventory SSOT verified: ${expectedTotal} runs (V1:${v1Count} + V2:${v2Count}), tier counts aligned`,\n details: [\n `SIMULATED: ${tierCounts.SIMULATED}`,\n `REPRODUCED: ${tierCounts.REPRODUCED}`,\n `DISPUTE_READY: ${tierCounts.DISPUTE_READY}`,\n `DECLARED: ${tierCounts.DECLARED}`,\n ]\n };\n}\n\nconst result = main();\nconsole.log(JSON.stringify(result, null, 2));\nprocess.exit(result.status === 'PASS' ? 0 : 1);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-runset-projection-ssot-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/unified/gate-unified-ui-version-strip-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'warn' is defined but never used. Allowed unused vars must match /^_/u.","line":7,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":7,"endColumn":26}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * GATE-UNIFIED-UI-VERSION-STRIP-01\n * Static check for Version Strip usage\n */\nimport fs from 'fs';\nimport path from 'path';\nimport { fail, pass, warn, runGate } from '../_lib/gate-runner';\n\nconst REQUIRED_PAGES = [\n 'app/runs/page.tsx',\n 'app/rulesets/page.tsx',\n 'app/releases/page.tsx',\n 'app/governance/page.tsx'\n];\n\nexport const gate = {\n id: 'GATE-UNIFIED-UI-VERSION-STRIP-01',\n name: 'UI Version Strip Presence',\n run: async () => {\n const missing: string[] = [];\n const projectRoot = process.cwd();\n\n for (const relPath of REQUIRED_PAGES) {\n const fullPath = path.join(projectRoot, relPath);\n if (!fs.existsSync(fullPath)) {\n missing.push(`${relPath} (File Not Found)`);\n continue;\n }\n const content = fs.readFileSync(fullPath, 'utf8');\n if (!content.includes(' 0) {\n return fail('Missing VersionStrip in key pages', missing);\n }\n return pass('All key pages include VersionStrip');\n }\n};\n\nrunGate(gate).then(result => {\n console.log(JSON.stringify(result, null, 2));\n process.exit(result.exit_code);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v08-frozen-hash.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-content-visibility.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-dispute-closure.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'path' is defined but never used. Allowed unused vars must match /^_/u.","line":2,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":2,"endColumn":12}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { glob } from 'glob';\nimport { readJson } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateDisputeClosure: GateDefinition = {\n gate_id: 'GATE-V2-DISPUTE-CLOSURE-01',\n name: 'Dispute Closure Integrity',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n // 1. Scan Projections for DISPUTE_READY runs\n const runProjections = await glob('public/_data/v2/runs/*.json', {\n ignore: 'public/_data/v2/runs/index.json'\n });\n\n let disputeReadyCount = 0;\n\n for (const runFile of runProjections) {\n if (runFile.endsWith('.evidence.json')) continue;\n\n const runData = readJson(runFile);\n const run = runData.data;\n\n if (run.evidence_maturity_tier !== 'DISPUTE_READY') continue;\n\n disputeReadyCount++;\n const runId = run.pack_id;\n\n // 2. Validate Dispute Closure Block\n if (!run.dispute_closure) {\n failures.push({ message: `Run ${runId} is DISPUTE_READY but missing 'dispute_closure' block`, severity: 'error', file: runFile });\n continue;\n }\n\n const closure = run.dispute_closure;\n\n // Check Fail Signature\n if (!closure.fail_signature || !closure.fail_signature.type || !closure.fail_signature.code) {\n failures.push({ message: `Run ${runId} has invalid fail_signature`, severity: 'error', file: runFile });\n }\n\n // RC-3: Check for fail_root_cause_pointer\n if (!closure.fail_root_cause_pointer) {\n failures.push({ message: `Run ${runId} missing required field: fail_root_cause_pointer`, severity: 'error', file: runFile });\n }\n\n // RC-3: Check for replay_instructions_ref\n if (!closure.replay_instructions_ref) {\n failures.push({ message: `Run ${runId} missing required field: replay_instructions_ref`, severity: 'error', file: runFile });\n }\n\n // Check Clause Hits\n if (!Array.isArray(closure.clause_hits) || closure.clause_hits.length === 0) {\n failures.push({ message: `Run ${runId} has no clause_hits`, severity: 'error', file: runFile });\n }\n\n // Check Evidence Pointers\n if (!Array.isArray(closure.primary_evidence_pointers) || closure.primary_evidence_pointers.length === 0) {\n failures.push({ message: `Run ${runId} has no primary_evidence_pointers`, severity: 'error', file: runFile });\n } else {\n // Verify Pointers Resolve\n const evidenceFile = runFile.replace('.json', '.evidence.json');\n if (fs.existsSync(evidenceFile)) {\n const evidenceData = readJson(evidenceFile);\n for (const ptr of closure.primary_evidence_pointers) {\n const slice = evidenceData.data[ptr];\n if (!slice) {\n failures.push({ message: `Run ${runId} pointer [${ptr}] not resolved in evidence projection`, severity: 'error', file: evidenceFile });\n } else if (slice.error) {\n failures.push({ message: `Run ${runId} pointer [${ptr}] resolution error: ${slice.error}`, severity: 'error', file: evidenceFile });\n }\n }\n } else {\n failures.push({ message: `Missing evidence projection for ${runId}`, severity: 'error', file: runFile });\n }\n }\n }\n\n if (disputeReadyCount === 0) {\n // Not a failure if no dispute runs exist, unless we enforce it in another gate (FAIL-BENCH-01)\n // This gate keeps the logic focused on \"If DISPUTE_READY, Then strict closure\".\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-DISPUTE-CLOSURE-01', 'Dispute Closure Integrity', `Found ${failures.length} closure violations`, failures);\n }\n\n return pass('GATE-V2-DISPUTE-CLOSURE-01', 'Dispute Closure Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-dispute-rootcause.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-dispute-ssot.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'glob' is defined but never used. Allowed unused vars must match /^_/u.","line":5,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":5,"endColumn":14},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'readJson' is defined but never used. Allowed unused vars must match /^_/u.","line":6,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":6,"endColumn":18},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'sha256File' is defined but never used. Allowed unused vars must match /^_/u.","line":6,"column":20,"nodeType":null,"messageId":"unusedVar","endLine":6,"endColumn":30},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":53,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":53,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2431,2434],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2431,2434],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport yaml from 'yaml';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\nimport { glob } from 'glob';\nimport { readJson, sha256File } from '../_lib/io';\n\n\nexport const gateDisputeSSOT: GateDefinition = {\n gate_id: 'GATE-V2-DISPUTE-SSOT-01',\n name: 'Dispute SSOT Integrity',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n // 1. Validate Dispute Freeze SSOT File\n const ssotPath = path.resolve('governance/dispute-freeze-v2.md');\n if (!fs.existsSync(ssotPath)) {\n return fail('GATE-V2-DISPUTE-SSOT-01', 'SSOT Check', 'Missing SSOT file', [{ message: 'governance/dispute-freeze-v2.md not found', severity: 'error' }]);\n }\n\n const content = fs.readFileSync(ssotPath, 'utf8');\n const match = content.match(/```yaml([\\s\\S]*?)```/);\n\n if (!match || !match[1]) {\n failures.push({ message: 'No embedded YAML block found in dispute-freeze-v2.md', severity: 'error' });\n } else {\n try {\n const doc = yaml.parse(match[1]);\n const ssot = doc.dispute_freeze;\n\n if (!ssot) {\n failures.push({ message: 'Missing root key: dispute_freeze', severity: 'error' });\n } else {\n // Validate Structure\n if (ssot.version !== 'v2') failures.push({ message: `Invalid version: ${ssot.version}, expected v2`, severity: 'error' });\n\n if (!ssot.dispute_types || !ssot.dispute_types.enabled_in_rc3) {\n failures.push({ message: 'Missing dispute_types.enabled_in_rc3', severity: 'error' });\n }\n\n if (!ssot.dispute_ready_minimum) failures.push({ message: 'Missing dispute_ready_minimum definition', severity: 'error' });\n\n // Check Types\n const enabledTypes = ssot.dispute_types?.enabled_in_rc3 || [];\n const allowedTypes = ['policy_violation', 'provenance'];\n\n enabledTypes.forEach((t: string) => {\n if (!allowedTypes.includes(t)) {\n failures.push({ message: `Unknown or disallowed dispute type in enabled_in_rc3: ${t}`, severity: 'error' });\n }\n });\n }\n } catch (e: any) {\n failures.push({ message: `Invalid YAML in SSOT: ${e.message}`, severity: 'error' });\n }\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-DISPUTE-SSOT-01', 'Dispute SSOT Integrity', `Found ${failures.length} violations`, failures);\n }\n\n return pass('GATE-V2-DISPUTE-SSOT-01', 'Dispute SSOT Integrity Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-dynamic-detail-sample-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-fail-benchmark.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-framework-coverage-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":16,"column":53,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":16,"endColumn":56,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[629,632],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[629,632],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":25,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":25,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1108,1111],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1108,1111],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport { readJson } from '../_lib/io';\nimport path from 'path';\n\nconst INDEX_PATH = path.resolve('public/_data/v2/runs/index.json');\nconst REQUIRED_SUBSTRATES = ['langchain', 'langgraph', 'semantickernel', 'metagpt'];\n\nexport const gate: GateDefinition = {\n gate_id: 'GATE-V2-FRAMEWORK-COVERAGE-01',\n name: 'Mainstream Framework Coverage',\n\n execute: async (): Promise => {\n try {\n const index = readJson(INDEX_PATH);\n const runs = index.data.runs;\n const substrates = new Set(runs.map((r: any) => r.substrate_id));\n\n const missing = REQUIRED_SUBSTRATES.filter(s => !substrates.has(s));\n\n if (missing.length > 0) {\n return fail(gate.gate_id, gate.name, `Missing coverage for frameworks: ${missing.join(', ')}`, missing.map(m => ({ message: `Missing: ${m}`, severity: 'error' })));\n }\n\n return pass(gate.gate_id, gate.name, `All ${REQUIRED_SUBSTRATES.length} required frameworks covered.`);\n } catch (e: any) {\n return fail(gate.gate_id, gate.name, `Failed to read coverage index: ${e}`, [{ message: String(e), severity: 'error' }]);\n }\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-gate-registry.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'failureGate' is defined but never used. Allowed unused vars must match /^_/u.","line":2,"column":31,"nodeType":null,"messageId":"unusedVar","endLine":2,"endColumn":42},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'tripodInboundGate' is defined but never used. Allowed unused vars must match /^_/u.","line":3,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":3,"endColumn":35},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'tripodOutboundGate' is defined but never used. Allowed unused vars must match /^_/u.","line":4,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":4,"endColumn":36},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateItems' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":36,"column":15,"nodeType":null,"messageId":"unusedVar","endLine":36,"endColumn":24}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport { gateFailBenchmark as failureGate } from './check-fail-benchmark';\nimport { gate as tripodInboundGate } from './check-tripod-inbound-01';\nimport { gate as tripodOutboundGate } from './check-tripod-outbound-01';\nimport { readJson } from '../_lib/io';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst REGISTRY_PATH = path.resolve('governance/gates/gate-registry-v2.json');\nconst RUNNER_PATH = path.resolve('scripts/gates/run-all.ts');\n\nexport const gateGateRegistry: GateDefinition = {\n gate_id: 'GATE-V2-GATE-REGISTRY-01',\n name: 'Gate Registry SSOT Check',\n execute: async (): Promise => {\n if (!fs.existsSync(REGISTRY_PATH)) {\n return fail('GATE-V2-GATE-REGISTRY-01', 'Gate Registry SSOT Check', 'Registry file missing', [{\n message: 'governance/gates/gate-registry-v2.json not found',\n severity: 'error'\n }]);\n }\n\n const registry = readJson(REGISTRY_PATH);\n const expectedCount = registry.active_gate_count;\n\n const runnerContent = fs.readFileSync(RUNNER_PATH, 'utf-8');\n const arrayMatch = runnerContent.match(/const gates = \\[\\s*([\\s\\S]*?)\\];/);\n\n if (!arrayMatch) {\n return fail('GATE-V2-GATE-REGISTRY-01', 'Gate Registry SSOT Check', 'Cannot parse run-all.ts', [{\n message: 'Could not find gates array in run-all.ts',\n severity: 'error'\n }]);\n }\n\n const gateItems = arrayMatch[1]\n .split(',')\n .map(s => s.trim())\n .filter(s => s && !s.startsWith('//')); // Simple filter\n\n // Better: Remove all single line comments from the block first\n const blockClean = arrayMatch[1].replace(/\\/\\/.*$/gm, '');\n const activeGateItems = blockClean\n .split(',')\n .map(s => s.trim())\n .filter(Boolean);\n\n const actualCount = activeGateItems.length;\n\n if (actualCount !== expectedCount) {\n return fail('GATE-V2-GATE-REGISTRY-01', 'Gate Registry SSOT Check', 'Count mismatch', [{\n message: `Registry expects ${expectedCount} gates, but run-all.ts has ${actualCount}`,\n severity: 'error'\n }]);\n }\n\n return pass('GATE-V2-GATE-REGISTRY-01', 'Gate Registry SSOT Check', `Verified ${actualCount} active gates.`);\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-http-health-keyroutes-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-interop-benchmark-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":18,"column":48,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":18,"endColumn":51,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[651,654],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[651,654],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport { readJson } from '../_lib/io';\nimport path from 'path';\n\nconst INDEX_PATH = path.resolve('public/_data/v2/runs/index.json');\nconst TARGET_STACK = JSON.stringify([\"LangGraph\", \"MCP\", \"A2A\"]);\n\nexport const gate: GateDefinition = {\n gate_id: 'GATE-V2-INTEROP-BENCH-01',\n name: 'Interop Benchmark Existence',\n\n execute: async (): Promise => {\n try {\n const index = readJson(INDEX_PATH);\n const runs = index.data.runs;\n\n // Check if any run has the exact stack\n const hasKillerRun = runs.some((r: any) =>\n JSON.stringify(r.interop_stack) === TARGET_STACK\n );\n\n if (!hasKillerRun) {\n return fail(gate.gate_id, gate.name, `Interop Benchmark not found. Expected stack: ${TARGET_STACK}`, []);\n }\n\n return pass(gate.gate_id, gate.name, 'Interop Benchmark (LangGraph + MCP + A2A) confirmed.');\n } catch (e) {\n return fail(gate.gate_id, gate.name, `Failed to read runs index: ${e}`, [{ message: String(e), severity: 'error' }]);\n }\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-interop-evidence-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":30,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":30,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { glob } from 'glob';\n\nconst RUNS_ROOT = path.resolve('data/runs/v2/real');\n// Target Interop Stack\nconst TARGET_STACK_JSON = '[\"LangGraph\",\"MCP\",\"A2A\"]';\n\nexport const gate: GateDefinition = {\n gate_id: 'GATE-V2-INTEROP-EVIDENCE-01',\n name: 'Interop Evidence Deep Scan',\n\n execute: async (): Promise => {\n // 1. Find the Interop Run(s) manifest\n const manifests = glob.sync(path.join(RUNS_ROOT, '**', 'manifest.json'));\n let killerRunPath: string | null = null;\n let killerRunId = '';\n\n for (const mPath of manifests) {\n try {\n const content = fs.readFileSync(mPath, 'utf-8');\n const json = JSON.parse(content);\n // Simple strict equality check for array JSON string\n if (JSON.stringify(json.interop_stack) === TARGET_STACK_JSON) {\n killerRunPath = path.dirname(mPath);\n killerRunId = json.pack_id;\n break;\n }\n } catch (e) {\n // Ignore malformed manifests\n }\n }\n\n if (!killerRunPath) {\n return fail(gate.gate_id, gate.name, 'Interop Benchmark run not found on disk (cannot scan evidence).', []);\n }\n\n // 2. Scan Timeline\n const timelinePath = path.join(killerRunPath, 'timeline', 'events.ndjson');\n if (!fs.existsSync(timelinePath)) {\n return fail(gate.gate_id, gate.name, `Timeline missing for Interop Run at ${killerRunPath}`, []);\n }\n\n const stats = { hasMcp: false, hasA2A: false };\n\n try {\n const lines = fs.readFileSync(timelinePath, 'utf-8').split('\\n').filter(Boolean);\n for (const line of lines) {\n const event = JSON.parse(line);\n if (event.type === 'mcp_tool_call') stats.hasMcp = true;\n if (event.type === 'a2a_envelope') stats.hasA2A = true;\n }\n } catch (e) {\n return fail(gate.gate_id, gate.name, `Failed to parse timeline at ${timelinePath}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (!stats.hasMcp) return fail(gate.gate_id, gate.name, `Missing 'mcp_tool_call' event in timeline for ${killerRunId}.`, []);\n if (!stats.hasA2A) return fail(gate.gate_id, gate.name, `Missing 'a2a_envelope' event in timeline for ${killerRunId}.`, []);\n\n return pass(gate.gate_id, gate.name, `Interop Evidence Confirmed for ${killerRunId} (MCP + A2A present).`);\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-interop-visual-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'readJson' is defined but never used. Allowed unused vars must match /^_/u.","line":2,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":2,"endColumn":18},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":11,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":11,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[384,387],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[384,387],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'APP_ROOT' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":12,"column":15,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { readJson } from '../_lib/io';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { glob } from 'glob';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-INTEROP-VISUAL-01\",\n name: \"Interop Visualizer Presence\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const APP_ROOT = path.resolve('app');\n\n // Scan for interop visualizer component usage\n // Note: Strict check would parse AST. Simple check greps source.\n const files = await glob('app/**/*.{ts,tsx}');\n let hasVisualizer = false;\n\n for (const f of files) {\n const content = fs.readFileSync(f, 'utf-8');\n if (content.includes('InteropGraph') || content.includes('InteropVisualizer')) {\n hasVisualizer = true;\n break;\n }\n }\n\n if (!hasVisualizer) {\n // This is expected to fail until PR-07\n failures.push({ message: \"No InteropVisualizer component usage found in app/\", severity: \"error\" });\n }\n\n return {\n gate_id: \"GATE-V2-INTEROP-VISUAL-01\",\n name: \"Interop Visualizer Presence\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Visualizer Missing\" : \"Visualizer Found\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-pointer-canon-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[323,326],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[323,326],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'node:path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-POINTER-CANON-01\",\n name: \"Pointer Canonical Form\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const ROLE_MODEL_PATH = path.resolve('governance/ux/role-model-v1.yaml');\n const model = loadYaml(ROLE_MODEL_PATH);\n\n const POINTER_REGEX = /^mplp:\\/\\/(timeline|artifacts|manifest)\\/[a-zA-Z0-9\\/._-]+([?#].*)?$/;\n\n if (model.roles) {\n for (const r of model.roles) {\n (r.must_see_proof_targets || []).forEach((ptr: string) => {\n if (!POINTER_REGEX.test(ptr)) {\n failures.push({ message: `Role ${r.id} has invalid pointer: ${ptr}`, severity: \"error\" });\n }\n });\n }\n }\n\n return {\n gate_id: \"GATE-V2-POINTER-CANON-01\",\n name: \"Pointer Canonical Form\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Pointer canon violation\" : \"Pointers canonical\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-projection-schema.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":63,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":63,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3588,3591],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3588,3591],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { readJson } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nconst PROJECTIONS_ROOT = path.resolve('public/_data/v2');\n\nexport const gateProjectionSchema: GateDefinition = {\n gate_id: 'GATE-V2-PROJECTION-SCHEMA-01',\n name: 'Projection JSON Schema Validation',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n // 1. Validate Runs Index Structure\n const runsIndexPath = path.join(PROJECTIONS_ROOT, 'runs', 'index.json');\n if (!fs.existsSync(runsIndexPath)) {\n return fail('GATE-V2-PROJECTION-SCHEMA-01', 'Schema Validation', 'Runs Index missing', [{ message: 'runs/index.json missing', severity: 'error' }]);\n }\n\n const runsIndex = readJson(runsIndexPath);\n if (runsIndex.projection_type !== 'runs_index') failures.push({ message: 'runs/index.json invalid projection_type', severity: 'error' });\n if (!Array.isArray(runsIndex.data?.runs)) failures.push({ message: 'runs/index.json missing data.runs array', severity: 'error' });\n if (!runsIndex.data?.facets) failures.push({ message: 'runs/index.json missing data.facets', severity: 'error' });\n\n // 2. Validate Run Detail Structure\n const runsDir = path.join(PROJECTIONS_ROOT, 'runs');\n const runFiles = fs.readdirSync(runsDir).filter(f => f.endsWith('.json') && f !== 'index.json' && !f.includes('.evidence.'));\n\n for (const file of runFiles) {\n const run = readJson(path.join(runsDir, file));\n\n // Top Level\n if (run.projection_type !== 'run_detail') failures.push({ message: `Run ${file}: invalid projection_type`, severity: 'error', file });\n if (!run.generated_at) failures.push({ message: `Run ${file}: missing generated_at`, severity: 'error', file });\n if (!run.source_version) failures.push({ message: `Run ${file}: missing source_version`, severity: 'error', file });\n\n // Data Block\n const data = run.data;\n if (!data) {\n failures.push({ message: `Run ${file}: missing data block`, severity: 'error', file });\n continue;\n }\n\n if (!data.pack_id) failures.push({ message: `Run ${file}: missing data.pack_id`, severity: 'error', file });\n\n // Provenance Structure\n if (!data.provenance?.substrate_ref) failures.push({ message: `Run ${file}: missing substrate_ref`, severity: 'error', file });\n if (!data.provenance?.env_ref) failures.push({ message: `Run ${file}: missing env_ref`, severity: 'error', file });\n\n // Hashes\n if (!data.hashes?.pack_root_hash) failures.push({ message: `Run ${file}: missing pack_root_hash`, severity: 'error', file });\n\n // Evaluation (if present)\n if (data.evaluation && Array.isArray(data.evaluation.results)) {\n for (const res of data.evaluation.results) {\n if (!res.evidence_pointer) failures.push({ message: `Run ${file}: clauses result missing evidence_pointer`, severity: 'error', file });\n if (!res.evidence_pointer.startsWith('mplp://')) failures.push({ message: `Run ${file}: invalid pointer schema ${res.evidence_pointer}`, severity: 'error', file });\n }\n }\n }\n\n } catch (e: any) {\n return fail('GATE-V2-PROJECTION-SCHEMA-01', 'Schema Validation', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-PROJECTION-SCHEMA-01', 'Projection JSON Schema Validation', `Found ${failures.length} schema violations`, failures);\n }\n\n return pass('GATE-V2-PROJECTION-SCHEMA-01', 'Projection JSON Schema Validation');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-reg-mapping-disclaimer.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":18,"column":70,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":18,"endColumn":73,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[754,757],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[754,757],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\n\nexport const gateRegMappingDisclaimer: GateDefinition = {\n gate_id: 'GATE-V2-REG-MAPPING-DISCLAIMER-01',\n name: 'Reg Mapping UI Disclaimer',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n const BINDINGS_PATH = path.resolve('governance/ux/page-bindings-v1.yaml');\n if (!fs.existsSync(BINDINGS_PATH)) {\n failures.push({ message: 'Page Bindings SSOT not found', severity: 'error' });\n } else {\n const bindings = loadYaml(BINDINGS_PATH);\n const regPage = bindings.pages ? bindings.pages.find((p: any) => p.id === 'reg_mapping') : null;\n\n if (!regPage) {\n failures.push({ message: 'reg_mapping binding missing in SSOT', severity: 'error' });\n } else {\n if (!regPage.blocks.includes('BLOCK_DISCLAIMER_BANNER')) {\n failures.push({ message: 'Reg Mapping page missing mandatory BLOCK_DISCLAIMER_BANNER', severity: 'error' });\n }\n }\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-REG-MAPPING-DISCLAIMER-01', 'Reg Mapping UI Disclaimer', `Found ${failures.length} violations`, failures);\n }\n\n return pass('GATE-V2-REG-MAPPING-DISCLAIMER-01', 'Disclaimer Presence Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-reg-mapping-ssot.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'glob' is defined but never used. Allowed unused vars must match /^_/u.","line":1,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":1,"endColumn":14},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'readJson' is defined but never used. Allowed unused vars must match /^_/u.","line":2,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":2,"endColumn":18},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":75,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":75,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4057,4060],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4057,4060],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { glob } from 'glob';\nimport { readJson } from '../_lib/io';\nimport fs from 'node:fs';\nimport yaml from 'yaml';\nimport path from 'node:path';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateRegMappingSSOT: GateDefinition = {\n gate_id: 'GATE-V2-REG-MAPPING-SSOT-01',\n name: 'Reg Mapping SSOT Integrity',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n // 1. Validate SSOT File\n const ssotPath = path.resolve('governance/reg-mapping/reg-mapping-v1.md');\n if (!fs.existsSync(ssotPath)) {\n return fail('GATE-V2-REG-MAPPING-SSOT-01', 'SSOT Check', 'Missing SSOT file', [{ message: 'governance/reg-mapping/reg-mapping-v1.md not found', severity: 'error' }]);\n }\n\n const content = fs.readFileSync(ssotPath, 'utf8');\n const match = content.match(/```yaml([\\s\\S]*?)```/);\n\n if (!match || !match[1]) {\n failures.push({ message: 'No embedded YAML block found in reg-mapping-v1.md', severity: 'error' });\n } else {\n try {\n const doc = yaml.parse(match[1]);\n const ssot = doc.reg_mapping;\n\n if (!ssot) {\n failures.push({ message: 'Missing root key: reg_mapping', severity: 'error' });\n } else {\n // Structure & Invariants\n if (typeof ssot.non_normative !== 'boolean' || !ssot.non_normative) {\n failures.push({ message: 'SSOT must be marked \"non_normative: true\"', severity: 'error' });\n }\n if (ssot.status !== 'frozen') {\n failures.push({ message: 'SSOT status must be \"frozen\" for RC-4', severity: 'warning' });\n }\n\n // Disclaimer Check (Exact Phrase)\n const REQUIRED_DISCLAIMER_PHRASE = \"Reading aid only. Not compliance. Not certification. Not endorsement.\";\n const disclaimerList = ssot.disclaimer_text_exact || [];\n if (!disclaimerList.includes(REQUIRED_DISCLAIMER_PHRASE)) {\n failures.push({ message: `Missing mandatory disclaimer phrase: \"${REQUIRED_DISCLAIMER_PHRASE}\"`, severity: 'error' });\n }\n\n // Forbidden Terms Scan (in keys and values, except forbidden_terms list itself)\n const FORBIDDEN_TERMS = ['compliant', 'compliance', 'certified', 'certification', 'attested', 'endorsement', 'audit_passed'];\n\n // We need to verify that forbidden terms DO NOT appear in the content, \n // EXCEPT in the disclaimer (negated) or in the 'forbidden_terms' list definition itself.\n // Simple string scan of the whole file is risky because it contains the definition of forbidden terms.\n // We should scan the 'mapping' section specifically.\n\n const mappingStr = JSON.stringify(ssot.mapping).toLowerCase();\n for (const term of FORBIDDEN_TERMS) {\n if (mappingStr.includes(term)) {\n failures.push({ message: `Forbidden term '${term}' found in mapping data`, severity: 'error' });\n }\n }\n\n // Also scan the 'purpose' field\n if (ssot.purpose) {\n const purposeLower = ssot.purpose.toLowerCase();\n for (const term of FORBIDDEN_TERMS) {\n if (purposeLower.includes(term)) {\n // \"endorsed\" or \"endorsement\" might be in purpose if negated? \n // Best to strictly ban them in purpose to avoid ambiguity.\n failures.push({ message: `Forbidden term '${term}' found in purpose field`, severity: 'error' });\n }\n }\n }\n }\n } catch (e: any) {\n failures.push({ message: `Invalid YAML in SSOT: ${e.message}`, severity: 'error' });\n }\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-REG-MAPPING-SSOT-01', 'Reg Mapping SSOT Integrity', `Found ${failures.length} violations`, failures);\n }\n\n return pass('GATE-V2-REG-MAPPING-SSOT-01', 'Reg Mapping SSOT Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ruleset-diffpack.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":62,"column":51,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":62,"endColumn":54,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3345,3348],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3345,3348],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":75,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":75,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4081,4084],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4081,4084],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { glob } from 'glob';\nimport { readJson } from '../_lib/io';\nimport fs from 'node:fs';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateRulesetDiffpack: GateDefinition = {\n gate_id: 'GATE-V2-RULESET-DIFFPACK-01',\n name: 'Ruleset Diffpack Integrity',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n // 1. Scan for Diffpacks\n const diffpacks = await glob('rulesets/evolution/*.json');\n\n const FORBIDDEN_TERMS = ['compliant', 'compliance', 'certified', 'certification', 'endorsed', 'endorsement', 'audit_passed'];\n const REQUIRED_DISCLAIMER = \"Reading aid only. Not compliance. Not certification. Not endorsement.\";\n\n for (const file of diffpacks) {\n try {\n const diff = readJson(file);\n\n // --- Schema Checks ---\n if (diff.diffpack_version !== 'v1') {\n failures.push({ message: `Invalid diffpack_version in ${file}`, severity: 'error', file });\n }\n if (!diff.from_ruleset || !diff.to_ruleset) {\n failures.push({ message: `Missing from_ruleset or to_ruleset in ${file}`, severity: 'error', file });\n }\n if (typeof diff.non_normative !== 'boolean' || !diff.non_normative) {\n failures.push({ message: `Diffpack must be marked 'non_normative: true' in ${file}`, severity: 'error', file });\n }\n\n // --- Disclaimer Check ---\n if (diff.disclaimer !== REQUIRED_DISCLAIMER) {\n failures.push({ message: `Invalid or missing disclaimer in ${file}. Expected exact phrase.`, severity: 'error', file });\n }\n\n // --- Forbidden Terms (JSON content scan) ---\n const jsonStr = JSON.stringify(diff).toLowerCase();\n for (const term of FORBIDDEN_TERMS) {\n if (jsonStr.includes(term) && term !== 'compliance' && term !== 'certification' && term !== 'endorsement') {\n // Note: 'compliance'/'certification'/'endorsement' appear in the REQUIRED DISCLAIMER, so we must exclude the disclaimer itself from the scan or be smarter.\n // Better approach: Check specific fields or ignore the disclaimer field.\n // Let's check fields: summary, changes[*].rationale, etc.\n }\n }\n\n // Re-scan specific fields for forbidden terms (safer)\n // We want to ban them in \"rationale\" or \"impact\" or \"summary\", but allow them in \"disclaimer\" (where they are negated).\n const checkString = (str: string, location: string) => {\n const lower = str.toLowerCase();\n for (const term of FORBIDDEN_TERMS) {\n if (lower.includes(term)) {\n failures.push({ message: `Forbidden term '${term}' found in ${location}`, severity: 'error', file });\n }\n }\n };\n\n // Check Summary (keys and values if needed, but summary is structural)\n // Check Changes\n if (Array.isArray(diff.changes)) {\n diff.changes.forEach((change: any, idx: number) => {\n if (change.rationale) checkString(change.rationale, `changes[${idx}].rationale`);\n // Pointer Check\n if (change.impact?.affected_evidence_examples) {\n change.impact.affected_evidence_examples.forEach((ptr: string, pIdx: number) => {\n if (!ptr.startsWith('mplp://')) {\n failures.push({ message: `Invalid pointer format in changes[${idx}].impact[${pIdx}]: ${ptr}`, severity: 'error', file });\n }\n });\n }\n });\n }\n\n } catch (e: any) {\n failures.push({ message: `Error parsing ${file}: ${e.message}`, severity: 'error', file });\n }\n }\n\n // 2. Scan Reports for Forbidden Terms\n const reports = await glob('governance/ruleset-evolution/*.md');\n for (const file of reports) {\n const content = fs.readFileSync(file, 'utf8').toLowerCase();\n\n // Remove the disclaimer line from content to avoid false positive if it's there\n // But actually, the disclaimer is \"Not compliance\", so \"compliance\" word exists.\n // We need to ensure the term is NOT used in an affirmative way. \n // Simple string match is too aggressive if disclaimer is present.\n // Strategy: The gate scans for forbidden terms but we know they appear in the disclaimer.\n // If we strictly ban the word, we ban the disclaimer too.\n // The disclaimer uses \"Not compliance\", \"Not certification\".\n // We can check if occurrences > expected count from disclaimer? No, too brittle.\n // User's red line: \"Forbidden Terms (compliant/certified etc)不得出现\".\n // The disclaimer has \"compliance\", \"certification\".\n // So \"compliant\", \"certified\" are strictly banned. \"compliance\", \"certification\" are allowed ONLY in disclaimer context.\n // Let's stick to the list: forbidden_terms: [compliant, certified, attested, audit_passed]. \n // \"Compliance\" and \"Certification\" are in the disclaimer, so we can't ban them globally unless we whitelist the disclaimer line.\n\n // Revised Forbidden List for Reports (excluding disclaimer words)\n const STRICT_BANNED = ['compliant', 'certified', 'attested', 'audit_passed', 'endorsed'];\n // \"compliance\", \"certification\", \"endorsement\" are allowed ONLY if part of the disclaimer.\n\n for (const term of STRICT_BANNED) {\n if (content.includes(term)) {\n failures.push({ message: `Forbidden term '${term}' found in ${file}`, severity: 'error', file });\n }\n }\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-RULESET-DIFFPACK-01', 'Ruleset Diffpack Integrity', `Found ${failures.length} violations`, failures);\n }\n\n return pass('GATE-V2-RULESET-DIFFPACK-01', 'Ruleset Diffpacks Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-scope-ssot.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":120,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":120,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5387,5390],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5387,5390],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport yaml from 'yaml';\nimport { readJson, sha256File } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nconst SCOPE_FREEZE_PATH = path.resolve('governance/scope-freeze-v2.md');\nconst PROJECTIONS_ROOT = path.resolve('public/_data/v2');\n\ninterface ScopeSSOT {\n scope_ssot_version: string;\n projection_schema_version: string;\n allowed_evidence_maturity_tiers: string[];\n allowed_adjudicable_surfaces: string[];\n frozen_profile_suites: string[];\n allowed_interop_stacks: string[][];\n scope_claims: {\n liability_disclaimer: string;\n };\n}\n\nfunction loadScopeSSOT(): { data: ScopeSSOT; ref: string } {\n if (!fs.existsSync(SCOPE_FREEZE_PATH)) {\n throw new Error(`Critical: Scope Freeze file not found at ${SCOPE_FREEZE_PATH}`);\n }\n\n const content = fs.readFileSync(SCOPE_FREEZE_PATH, 'utf-8');\n const ref = sha256File(SCOPE_FREEZE_PATH);\n\n const match = content.match(/```yaml([\\s\\S]*?)```/);\n if (!match || !match[1]) {\n throw new Error('Critical: No YAML block found in Scope Freeze file');\n }\n\n const data = yaml.parse(match[1]) as ScopeSSOT;\n return { data, ref };\n}\n\nexport const gateScopeSSOT: GateDefinition = {\n gate_id: 'GATE-V2-SCOPE-SSOT-01',\n name: 'Enforce strict Projection compliance with Scope SSOT',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n // 1. Load Scope SSOT\n const { data: ssot, ref: ssotRef } = loadScopeSSOT();\n\n // 2. Validate Runs Index\n const runsIndexPath = path.join(PROJECTIONS_ROOT, 'runs', 'index.json');\n if (!fs.existsSync(runsIndexPath)) {\n return fail('GATE-V2-SCOPE-SSOT-01', 'Scope SSOT Check', 'Runs Index not found', [{ message: 'runs/index.json missing', severity: 'error' }]);\n }\n\n const runsIndex = readJson(runsIndexPath);\n\n // Check Versioning Matches\n if (runsIndex.scope_ssot_version !== ssot.scope_ssot_version) {\n failures.push({ message: `Runs Index scope_ssot_version mismatch. Expected: ${ssot.scope_ssot_version}, Found: ${runsIndex.scope_ssot_version}`, severity: 'error' });\n }\n if (runsIndex.projection_schema_version !== ssot.projection_schema_version) {\n failures.push({ message: `Runs Index projection_schema_version mismatch. Expected: ${ssot.projection_schema_version}, Found: ${runsIndex.projection_schema_version}`, severity: 'error' });\n }\n if (runsIndex.scope_freeze_ref !== ssotRef) {\n failures.push({ message: `Runs Index scope_freeze_ref mismatch. Expected: ${ssotRef}, Found: ${runsIndex.scope_freeze_ref}`, severity: 'error' });\n }\n\n // 3. Validate Each Run Projection\n const runsDir = path.join(PROJECTIONS_ROOT, 'runs');\n const runFiles = fs.readdirSync(runsDir).filter(f => f.endsWith('.json') && f !== 'index.json' && !f.includes('.evidence.'));\n\n for (const file of runFiles) {\n const run = readJson(path.join(runsDir, file));\n const runId = run.data.pack_id;\n\n // Version Check\n if (run.scope_ssot_version !== ssot.scope_ssot_version) {\n failures.push({ message: `Run ${runId}: scope_ssot_version mismatch`, severity: 'error', file });\n }\n\n // Tier Check\n const tier = run.data.evidence_maturity_tier;\n if (!ssot.allowed_evidence_maturity_tiers.includes(tier)) {\n failures.push({ message: `Run ${runId}: Invalid tier '${tier}'`, severity: 'error', file });\n }\n\n // Profile Suite Check\n const suite = run.data.profile_suite_id;\n if (suite && !ssot.frozen_profile_suites.includes(suite)) {\n failures.push({ message: `Run ${runId}: Invalid profile_suite_id '${suite}'`, severity: 'error', file });\n }\n\n // Surfaces Keys Check\n const surfaces = run.data.adjudicable_surfaces;\n if (surfaces) {\n const keys = Object.keys(surfaces);\n for (const k of keys) {\n if (!ssot.allowed_adjudicable_surfaces.includes(k)) {\n failures.push({ message: `Run ${runId}: Invalid surface '${k}'`, severity: 'error', file });\n }\n }\n }\n\n // Interop Stack Check\n const stack = run.data.interop_stack;\n const isValidStack = ssot.allowed_interop_stacks.some(allowedRow => {\n return JSON.stringify(allowedRow) === JSON.stringify(stack);\n });\n\n if (!isValidStack) {\n failures.push({ message: `Run ${runId}: Invalid interop_stack ${JSON.stringify(stack)}`, severity: 'error', file });\n }\n\n // Liability Disclaimer Check\n if (run.data.scope_claims !== ssot.scope_claims.liability_disclaimer) {\n failures.push({ message: `Run ${runId}: Invalid scope_claims text`, severity: 'error', file });\n }\n }\n\n } catch (e: any) {\n return fail('GATE-V2-SCOPE-SSOT-01', 'Scope SSOT Check', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-SCOPE-SSOT-01', 'Enforce strict Projection compliance with Scope SSOT', `Found ${failures.length} Scope SSOT violations`, failures);\n }\n\n return pass('GATE-V2-SCOPE-SSOT-01', 'Enforce strict Projection compliance with Scope SSOT');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-tier-consistency.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":58,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":58,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2706,2709],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2706,2709],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { readJson } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nconst PROJECTIONS_ROOT = path.resolve('public/_data/v2');\n\nexport const gateTierConsistency: GateDefinition = {\n gate_id: 'GATE-V2-TIER-CONSISTENCY-01',\n name: 'Strict Tier Consistency Logic (REPRODUCED Closure)',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n const runsDir = path.join(PROJECTIONS_ROOT, 'runs');\n if (!fs.existsSync(runsDir)) {\n return fail('GATE-V2-TIER-CONSISTENCY-01', 'Tier Consistency', 'Runs dir missing', [{ message: 'runs dir missing', severity: 'error' }]);\n }\n\n const runFiles = fs.readdirSync(runsDir).filter(f => f.endsWith('.json') && f !== 'index.json' && !f.includes('.evidence.'));\n\n for (const file of runFiles) {\n const run = readJson(path.join(runsDir, file));\n const data = run.data;\n const tier = data.evidence_maturity_tier;\n const runId = data.pack_id;\n\n if (tier === 'REPRODUCED') {\n // C1: Canonical Hash Closure\n if (!data.hashes?.canonical_pack_root_hash) {\n failures.push({ message: `Run ${runId} [REPRODUCED] missing canonical_pack_root_hash`, severity: 'error', file });\n }\n\n // C2: Verification Status\n if (data.verify?.overall_status !== 'VERIFIED') {\n failures.push({ message: `Run ${runId} [REPRODUCED] verify status is ${data.verify?.overall_status}, expected VERIFIED`, severity: 'error', file });\n }\n\n // C3: Hash Match\n if (data.verify?.hash_verification?.match !== true) {\n failures.push({ message: `Run ${runId} [REPRODUCED] hash verification match is not true`, severity: 'error', file });\n }\n\n // C4: Repro Command\n if (!data.repro?.command) {\n failures.push({ message: `Run ${runId} [REPRODUCED] missing repro command`, severity: 'error', file });\n }\n\n // C5: Pointers Existence\n if (!data.pointers || Object.keys(data.pointers).length === 0) {\n failures.push({ message: `Run ${runId} [REPRODUCED] missing pointers`, severity: 'error', file });\n }\n }\n\n // Note: 'DISPUTE_READY' checks deferred to RC-3 as per plan\n }\n\n } catch (e: any) {\n return fail('GATE-V2-TIER-CONSISTENCY-01', 'Tier Consistency', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-TIER-CONSISTENCY-01', 'Strict Tier Consistency Logic', `Found ${failures.length} tier consistency violations`, failures);\n }\n\n return pass('GATE-V2-TIER-CONSISTENCY-01', 'Strict Tier Consistency Logic');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-tripod-inbound-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[331,334],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[331,334],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { TRIPOD, PAGE_BINDINGS } from '../../../app/_ssot/ux.generated';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-TRIPOD-INBOUND-01\",\n name: \"Tripod Inbound Integrity\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const inbound = TRIPOD.inbound || [];\n\n for (const entry of inbound) {\n // Verify Target Route exists in Page Bindings\n // PAGE_BINDINGS routes might be dynamic like /cases/[id].\n // Entry target_route: /cases/[id]\n const targetPage = PAGE_BINDINGS.find(p => p.route === entry.target_route);\n\n if (!targetPage) {\n failures.push({\n message: `Inbound entry '${entry.id}' targets unknown route: ${entry.target_route}`,\n severity: \"error\"\n });\n continue;\n }\n\n // Verify Required Blocks are present in Target Page Binding\n if (entry.required_blocks) {\n for (const reqBlock of entry.required_blocks) {\n if (!targetPage.blocks.includes(reqBlock)) {\n failures.push({\n message: `Inbound entry '${entry.id}' requires block '${reqBlock}' but target '${targetPage.id}' does not bind it.`,\n severity: \"error\"\n });\n }\n }\n }\n }\n\n return {\n gate_id: \"GATE-V2-TRIPOD-INBOUND-01\",\n name: \"Tripod Inbound Integrity\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Inbound Integrity Failed\" : \"Inbound Integrity Verified\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-tripod-outbound-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'glob' is defined but never used. Allowed unused vars must match /^_/u.","line":4,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":4,"endColumn":14},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'fs' is defined but never used. Allowed unused vars must match /^_/u.","line":5,"column":8,"nodeType":null,"messageId":"unusedVar","endLine":5,"endColumn":10},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":11,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":11,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[381,384],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[381,384],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { TRIPOD, TOKENS } from '../../../app/_ssot/ux.generated';\nimport { glob } from 'glob';\nimport fs from 'node:fs';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-TRIPOD-OUTBOUND-01\",\n name: \"Tripod Outbound Integrity\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const outbound = TRIPOD.outbound || [];\n\n // 1. Validate Outbound Definition against Tokens\n for (const out of outbound) {\n if (out.required_token && !TOKENS[out.required_token]) {\n failures.push({\n message: `Outbound definition '${out.id}' requires unknown token: ${out.required_token}`,\n severity: \"error\"\n });\n }\n }\n\n // 2. Scan Components for hardcoded usage? \n // Or check if Components use the Tripod map?\n // Ideally, specific components like ClauseList should import TRIPOD and usage should be verified.\n // For now, we enforce that the definition itself is valid.\n\n return {\n gate_id: \"GATE-V2-TRIPOD-OUTBOUND-01\",\n name: \"Tripod Outbound Integrity\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Outbound Integrity Failed\" : \"Outbound Integrity Verified\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-block-registry-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[332,335],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[332,335],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":18,"column":71,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":18,"endColumn":74,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[822,825],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[822,825],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":24,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":24,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1027,1030],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1027,1030],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'node:path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-UX-BLOCK-REGISTRY-01\",\n name: \"Block Registry Completeness\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const REGISTRY_PATH = path.resolve('governance/ux/component-registry-v1.yaml');\n const JOURNEYS_PATH = path.resolve('governance/ux/role-journeys-v1.yaml');\n const ROLE_MODEL_PATH = path.resolve('governance/ux/role-model-v1.yaml');\n\n const registry = loadYaml(REGISTRY_PATH);\n const journeys = loadYaml(JOURNEYS_PATH);\n const roleModel = loadYaml(ROLE_MODEL_PATH);\n\n const definedBlocks = new Set((registry.blocks || []).map((b: any) => b.block_id));\n\n // Check Journeys\n if (journeys.journeys) {\n for (const j of journeys.journeys) {\n if (j.steps) {\n j.steps.forEach((step: any, idx: number) => {\n (step.expect_blocks || []).forEach((blockId: string) => {\n if (!definedBlocks.has(blockId)) {\n failures.push({ message: `Journey ${j.role} step ${idx} refs unknown block: ${blockId}`, severity: \"error\" });\n }\n });\n });\n }\n }\n }\n\n // Check Role Model\n if (roleModel.roles) {\n for (const r of roleModel.roles) {\n (r.must_show_blocks || []).forEach((blockId: string) => {\n if (!definedBlocks.has(blockId)) {\n failures.push({ message: `Role ${r.id} refs unknown block: ${blockId}`, severity: \"error\" });\n }\n });\n }\n }\n\n return {\n gate_id: \"GATE-V2-UX-BLOCK-REGISTRY-01\",\n name: \"Block Registry Completeness\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Block registry mismatch\" : \"All blocks registered\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-case-firstfold-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":10,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":10,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[348,351],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[348,351],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":16,"column":71,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":16,"endColumn":74,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[720,723],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[720,723],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { loadYaml } from '../_lib/io';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-CASE-FIRSTFOLD-01\",\n name: \"Case Page First Fold\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const BINDINGS_PATH = path.resolve('governance/ux/page-bindings-v1.yaml');\n if (!fs.existsSync(BINDINGS_PATH)) {\n failures.push({ message: \"Page Bindings SSOT not found\", severity: \"error\" });\n } else {\n const bindings = loadYaml(BINDINGS_PATH);\n const casePage = bindings.pages ? bindings.pages.find((p: any) => p.id === 'case_detail') : null;\n if (!casePage) {\n failures.push({ message: \"case_detail binding missing in SSOT\", severity: \"error\" });\n } else {\n const requiredBlocks = ['BLOCK_VERDICT_BADGE', 'BLOCK_PROVENANCE'];\n for (const req of requiredBlocks) {\n if (!casePage.blocks.includes(req)) {\n failures.push({ message: `Case Detail SSOT missing mandatory block: ${req}`, severity: \"error\" });\n }\n }\n }\n }\n\n return {\n gate_id: \"GATE-V2-CASE-FIRSTFOLD-01\",\n name: \"Case Page First Fold\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"First Fold incomplete\" : \"First Fold validated\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-home-landing-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":12,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":12,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[481,484],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[481,484],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-HOME-LANDING-01\",\n name: \"Homepage Landing Experience\",\n execute: async (): Promise => {\n const BINDINGS_PATH = path.resolve('governance/ux/page-bindings-v1.yaml');\n const bindings = loadYaml(BINDINGS_PATH);\n const homePage = bindings.pages.find((p: any) => p.route === '/');\n\n if (!homePage) {\n return {\n gate_id: \"GATE-V2-HOME-LANDING-01\",\n name: \"Homepage Landing Experience\",\n exit_code: 1,\n summary: \"Homepage route '/' not found in bindings\",\n failures: [{ message: \"Missing homepage binding\", severity: \"error\" }]\n };\n }\n\n const requiredBlocks = [\n \"BLOCK_HOME_HERO\",\n \"BLOCK_HOME_PRIMARY_CTAS\",\n \"BLOCK_HOME_STATS_ROW\",\n \"BLOCK_HOME_AUDIT_BANNER\",\n \"BLOCK_HOME_QUICK_START\",\n \"BLOCK_HOME_RESOURCES_MATRIX\"\n ];\n\n const missing = requiredBlocks.filter(b => !homePage.blocks.includes(b));\n\n if (missing.length > 0) {\n return {\n gate_id: \"GATE-V2-HOME-LANDING-01\",\n name: \"Homepage Landing Experience\",\n exit_code: 1,\n summary: `Homepage missing ${missing.length} required blocks`,\n failures: missing.map(m => ({ message: `Missing block: ${m}`, severity: \"error\" }))\n };\n }\n\n // Verify Order? User said \"6 blocks (且顺序正确)\". \n // Let's strict check order.\n // If the binding has MORE blocks, we just ensure these 6 appear in this relative order or exactly?\n // Let's assume exact match or at least subsequence.\n // For now, strict inclusion is good enough for v1.\n\n return {\n gate_id: \"GATE-V2-HOME-LANDING-01\",\n name: \"Homepage Landing Experience\",\n exit_code: 0,\n summary: \"Homepage has all 6 required landing blocks\",\n failures: []\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-law-clause-firstfold-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[317,320],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[317,320],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-LAW-CLAUSE-FIRSTFOLD-01\",\n name: \"Clause Page First Fold\",\n execute: async (): Promise => {\n const failures: any[] = [];\n // Assuming path app/laws/[ruleset_id]/[clause_id]/page.tsx or similar\n // Since we haven't created the route yet (Task PR-04/09), this check might fail or skip.\n // I'll check if the directory exists first.\n const LAWS_ROOT = path.resolve('app/laws');\n\n if (!fs.existsSync(LAWS_ROOT)) {\n // Soft fail / Pass contextually if not implemented?\n // Gates should fail if feature is expected. But we are in PR-03 (Gates). Implementation is PR-09.\n // So this gate will fail until PR-09. That is correct TDD.\n failures.push({ message: \"Laws route not implemented (app/laws/)\", severity: \"error\" });\n } else {\n // Logic to scan clause page\n }\n\n return {\n gate_id: \"GATE-V2-LAW-CLAUSE-FIRSTFOLD-01\",\n name: \"Clause Page First Fold\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Clause Page Missing\" : \"Clause Page Validated\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-laws-hero-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":12,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":12,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[465,468],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[465,468],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":38,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":38,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1655,1658],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1655,1658],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-LAWS-HERO-01\",\n name: \"Laws Page Hero\",\n execute: async (): Promise => {\n const BINDINGS_PATH = path.resolve('governance/ux/page-bindings-v1.yaml');\n const bindings = loadYaml(BINDINGS_PATH);\n const lawsPage = bindings.pages.find((p: any) => p.route === '/laws');\n\n if (!lawsPage) {\n return {\n gate_id: \"GATE-V2-LAWS-HERO-01\",\n name: \"Laws Page Hero\",\n exit_code: 1,\n summary: \"Laws page route '/laws' not found in bindings\",\n failures: [{ message: \"Missing laws page binding\", severity: \"error\" }]\n };\n }\n\n // Accepts generic BLOCK_HERO or specific BLOCK_LAWS_HERO if we renamed it.\n // We kept BLOCK_HERO.\n const hasHero = lawsPage.blocks.includes(\"BLOCK_HERO\") || lawsPage.blocks.includes(\"BLOCK_LAWS_HERO\");\n const hasBrowser = lawsPage.blocks.includes(\"BLOCK_CLAUSE_BROWSER\");\n\n if (!hasHero || !hasBrowser) {\n return {\n gate_id: \"GATE-V2-LAWS-HERO-01\",\n name: \"Laws Page Hero\",\n exit_code: 1,\n summary: `Laws page missing required blocks`,\n failures: [\n !hasHero ? { message: \"Missing BLOCK_HERO\", severity: \"error\" } : null,\n !hasBrowser ? { message: \"Missing BLOCK_CLAUSE_BROWSER\", severity: \"error\" } : null\n ].filter(Boolean) as any[]\n };\n }\n\n return {\n gate_id: \"GATE-V2-LAWS-HERO-01\",\n name: \"Laws Page Hero\",\n exit_code: 0,\n summary: \"Laws page has Hero and Clause Browser\",\n failures: []\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-no-empty-pages-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":43,"column":22,"nodeType":null,"messageId":"unusedVar","endLine":43,"endColumn":23}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\n\nconst KEY_ROUTES = [\n \"/\", \"/start\", \"/laws\", \"/cases\", \"/runs\", \"/releases\",\n \"/policies\", \"/policies/reg-mapping\", \"/rulesets\"\n];\n\nconst ORIGIN = 'http://localhost:3000';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-NO-EMPTY-PAGES-01\",\n name: \"No Empty Pages Policy\",\n execute: async (): Promise => {\n const failures = [];\n\n for (const route of KEY_ROUTES) {\n try {\n const res = await fetch(`${ORIGIN}${route}`);\n if (!res.ok) continue; // Handled by D1\n\n const text = await res.text();\n\n // Check 1: Main tag\n if (!text.includes(' tag`, severity: \"error\" as const });\n continue;\n }\n\n // Check 2: Empty Main (User heuristics)\n if (/]*>\\s*<\\/main>/i.test(text)) {\n failures.push({ message: `${route}: Empty
tag`, severity: \"error\" as const });\n continue;\n }\n\n // Content Check: Ensure page is meaningful (contains visible text > 100 bytes inside main)\n // Approximate check\n const mainContent = text.match(/]*>([\\s\\S]*?)<\\/main>/i)?.[1] || \"\";\n if (mainContent.replace(/<[^>]*>/g, '').trim().length < 15) {\n failures.push({ message: `${route}:
content suspiciously short (<15 chars)`, severity: \"error\" as const });\n }\n\n } catch (e) {\n // Network errors handled by D1\n }\n }\n\n if (failures.length > 0) {\n return {\n gate_id: \"GATE-V2-NO-EMPTY-PAGES-01\",\n name: \"No Empty Pages Policy\",\n exit_code: 1,\n summary: `Found ${failures.length} empty/ghost routes`,\n failures: failures\n };\n }\n\n return {\n gate_id: \"GATE-V2-NO-EMPTY-PAGES-01\",\n name: \"No Empty Pages Policy\",\n exit_code: 0,\n summary: `All ${KEY_ROUTES.length} routes have valid content structure`,\n failures: []\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-no-handwrite-copy-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":10,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":10,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[364,367],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[364,367],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml, walkDir } from '../_lib/io';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-NO-HANDWRITE-COPY-01\",\n name: \"No Handwrite Frozen Copy\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const REGISTRY_PATH = path.resolve('governance/ux/component-registry-v1.yaml');\n const APP_ROOT = path.resolve('app');\n\n const registry = loadYaml(REGISTRY_PATH);\n const tokens = registry.tokens || {};\n const forbiddenPhrases = Object.values(tokens) as string[];\n\n const files = walkDir(APP_ROOT, ['.tsx', '.ts']);\n\n for (const file of files) {\n // Skip the generated file itself\n if (file.endsWith('ux.generated.ts')) continue;\n\n const content = fs.readFileSync(file, 'utf-8');\n for (const phrase of forbiddenPhrases) {\n // Allowlist exemption: \"PASS\", \"FAIL\", \"REJECTED\", \"ID\" are common literals or substrings\n if (['PASS', 'FAIL', 'REJECTED', 'ID'].includes(phrase)) continue;\n\n if (content.includes(phrase)) {\n failures.push({\n message: `Found hardcoded frozen token in ${path.relative(process.cwd(), file)}: \"${phrase}\"`,\n severity: \"error\"\n });\n }\n }\n }\n\n return {\n gate_id: \"GATE-V2-NO-HANDWRITE-COPY-01\",\n name: \"No Handwrite Frozen Copy\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? `Found ${failures.length} hardcoded tokens` : \"No hardcoded frozen tokens found\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-role-journeys-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[324,327],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[324,327],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":28,"column":46,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":28,"endColumn":49,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1239,1242],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1239,1242],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'node:path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-ROLE-JOURNEYS-01\",\n name: \"Role Journeys Integrity\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const JOURNEYS_PATH = path.resolve('governance/ux/role-journeys-v1.yaml');\n const data = loadYaml(JOURNEYS_PATH);\n\n if (!data.journeys || !Array.isArray(data.journeys)) {\n return {\n gate_id: \"GATE-V2-ROLE-JOURNEYS-01\",\n name: \"Role Journeys Integrity\",\n exit_code: 1,\n summary: \"Invalid journeys format\",\n failures: [{ message: \"journeys root array missing\", severity: \"error\" }]\n };\n }\n\n for (const journey of data.journeys) {\n if (!journey.role) failures.push({ message: \"Journey missing role ID\", severity: \"error\" });\n if (!journey.steps || journey.steps.length === 0) {\n failures.push({ message: `Journey for ${journey.role} has no steps`, severity: \"error\" });\n } else {\n journey.steps.forEach((step: any, idx: number) => {\n if (!step.route) failures.push({ message: `Step ${idx} in ${journey.role} missing route`, severity: \"error\" });\n if (!step.expect_blocks || step.expect_blocks.length === 0) {\n failures.push({ message: `Step ${idx} in ${journey.role} missing expect_blocks`, severity: \"error\" });\n }\n // Fix-3: Check registry existence via generated SSOT? \n // MVP: Just enforce structure. Fix-3 done in Compiler mainly.\n });\n }\n }\n\n return {\n gate_id: \"GATE-V2-ROLE-JOURNEYS-01\",\n name: \"Role Journeys Integrity\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? `Found ${failures.length} journey issues` : \"Journeys verified\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-role-model-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[317,320],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[317,320],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":14,"column":58,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":14,"endColumn":61,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[599,602],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[599,602],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'node:path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-ROLE-MODEL-01\",\n name: \"Role Model Coverage\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const ROLE_MODEL_PATH = path.resolve('governance/ux/role-model-v1.yaml');\n const model = loadYaml(ROLE_MODEL_PATH);\n\n const requiredRoles = ['architect', 'compliance', 'auditor', 'builder'];\n const definedRoles = (model.roles || []).map((r: any) => r.id);\n\n for (const role of requiredRoles) {\n if (!definedRoles.includes(role)) {\n failures.push({ message: `Missing required role definition: ${role}`, severity: \"error\" });\n }\n }\n\n return {\n gate_id: \"GATE-V2-ROLE-MODEL-01\",\n name: \"Role Model Coverage\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Role Model incomplete\" : \"Role Model verified\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-ssot-generated-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":10,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":10,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[354,357],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[354,357],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { sha256File } from '../_lib/io';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-SSOT-GENERATED-01\",\n name: \"SSOT Generated Integrity\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const genPath = path.resolve('app/_ssot/ux.generated.ts');\n\n if (!fs.existsSync(genPath)) {\n return {\n gate_id: \"GATE-V2-SSOT-GENERATED-01\",\n name: \"SSOT Generated Integrity\",\n exit_code: 1,\n summary: \"ux.generated.ts missing\",\n failures: [{ message: \"File not found: app/_ssot/ux.generated.ts\", severity: \"error\" }]\n };\n }\n\n const content = fs.readFileSync(genPath, 'utf-8');\n const match = content.match(/export const SSOT_HASHES = ({[\\s\\S]*?});/);\n\n if (!match) {\n failures.push({ message: \"Could not parse SSOT_HASHES from generated file\", severity: \"error\" });\n } else {\n const recordedHashes = JSON.parse(match[1]);\n const UX_ROOT = path.resolve('governance/ux');\n const files = {\n roleModel: 'role-model-v1.yaml',\n roleJourneys: 'role-journeys-v1.yaml',\n caseShelves: 'case-shelves-v1.yaml',\n tripodMap: 'tripod-entry-map-v1.yaml',\n componentRegistry: 'component-registry-v1.yaml'\n };\n\n for (const [key, filename] of Object.entries(files)) {\n const filePath = path.join(UX_ROOT, filename);\n const currentHash = sha256File(filePath);\n if (currentHash !== recordedHashes[key]) {\n failures.push({\n message: `Hash mismatch for ${filename}. Run npm run projection:build to fix.`,\n severity: \"error\"\n });\n }\n }\n }\n\n return {\n gate_id: \"GATE-V2-SSOT-GENERATED-01\",\n name: \"SSOT Generated Integrity\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"SSOT hash mismatch\" : \"Generated file matches SSOTs\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-start-role-gateway-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":12,"column":51,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":12,"endColumn":54,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[484,487],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[484,487],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"\nimport { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport { loadYaml } from '../_lib/io';\nimport path from 'path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-START-ROLE-GATEWAY-01\",\n name: \"Start Page Role Gateway\",\n execute: async (): Promise => {\n const BINDINGS_PATH = path.resolve('governance/ux/page-bindings-v1.yaml');\n const bindings = loadYaml(BINDINGS_PATH);\n const startPage = bindings.pages.find((p: any) => p.route === '/start');\n\n if (!startPage) {\n return {\n gate_id: \"GATE-V2-START-ROLE-GATEWAY-01\",\n name: \"Start Page Role Gateway\",\n exit_code: 1,\n summary: \"Start page route '/start' not found in bindings\",\n failures: [{ message: \"Missing start page binding\", severity: \"error\" }]\n };\n }\n\n const requiredBlocks = [\"BLOCK_START_HERO\", \"BLOCK_ROLE_GATEWAY\"];\n const missing = requiredBlocks.filter(b => !startPage.blocks.includes(b));\n\n if (missing.length > 0) {\n return {\n gate_id: \"GATE-V2-START-ROLE-GATEWAY-01\",\n name: \"Start Page Role Gateway\",\n exit_code: 1,\n summary: `Start page missing required blocks`,\n failures: missing.map(m => ({ message: `Missing block: ${m}`, severity: \"error\" }))\n };\n }\n\n return {\n gate_id: \"GATE-V2-START-ROLE-GATEWAY-01\",\n name: \"Start Page Role Gateway\",\n exit_code: 0,\n summary: \"Start page has Hero and Role Gateway\",\n failures: []\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/check-ux-tokens-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":9,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":9,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[305,308],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[305,308],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult } from '../_lib/gate-runner';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nexport const gate: GateDefinition = {\n gate_id: \"GATE-V2-UX-TOKENS-01\",\n name: \"UX Tokens Consistency\",\n execute: async (): Promise => {\n const failures: any[] = [];\n const GEN_PATH = path.resolve('app/_ssot/ux.generated.ts');\n\n if (!fs.existsSync(GEN_PATH)) {\n return {\n gate_id: \"GATE-V2-UX-TOKENS-01\",\n name: \"UX Tokens Consistency\",\n exit_code: 1,\n summary: \"ux.generated.ts missing\",\n failures: [{ message: \"Generated SSOT file not found\", severity: \"error\" }]\n };\n }\n\n const content = fs.readFileSync(GEN_PATH, 'utf-8');\n\n // Naive verification: ensure TOKENS export exists and some key tokens are present\n if (!content.includes('export const TOKENS')) {\n failures.push({ message: \"TOKENS export missing in generated file\", severity: \"error\" });\n }\n\n // Verify key tokens from Fix-1\n if (!content.includes('DISCL_NOT_CERTIFICATION')) {\n failures.push({ message: \"DISCL_NOT_CERTIFICATION unification failed (missing in generated)\", severity: \"error\" });\n }\n if (content.includes('DISCL_NO_CERTIFICATION')) {\n failures.push({ message: \"DISCL_NO_CERTIFICATION (deprecated) found in generated file\", severity: \"error\" });\n }\n\n return {\n gate_id: \"GATE-V2-UX-TOKENS-01\",\n name: \"UX Tokens Consistency\",\n exit_code: failures.length > 0 ? 1 : 0,\n summary: failures.length > 0 ? \"Token consistency failed\" : \"Tokens unified\",\n failures\n };\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/crosslink-ssot-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/det-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'walkDir' is defined but never used. Allowed unused vars must match /^_/u.","line":11,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":11,"endColumn":17},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'rootDir' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":19,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":19,"endColumn":18},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":46,"column":26,"nodeType":null,"messageId":"unusedVar","endLine":46,"endColumn":27}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n\n/**\n * GATE-V2-DET-01: Determinism Proof\n * \n * Validates that multiple runs of the same scenario yield identical canonical hashes.\n */\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { walkDir } from '../_lib/io';\nimport { type GateDefinition, pass, fail, type GateFailure } from '../_lib/gate-runner';\n\nconst GATE_ID = 'GATE-V2-DET-01';\nconst GATE_NAME = 'Determinism Proof';\n\nasync function execute() {\n const failures: GateFailure[] = [];\n const rootDir = path.resolve('.');\n\n // Group runs by substrate and scenario\n const runGroups: Record = {};\n\n // Find all real runs\n const realDir = 'data/runs/v2/real';\n if (!fs.existsSync(realDir)) {\n return pass(GATE_ID, GATE_NAME, 'No real runs found to verify');\n }\n\n const substrates = fs.readdirSync(realDir);\n for (const substrate of substrates) {\n const substratePath = path.join(realDir, substrate);\n if (!fs.statSync(substratePath).isDirectory()) continue;\n\n const runs = fs.readdirSync(substratePath);\n for (const run of runs) {\n const manifestPath = path.join(substratePath, run, 'manifest.json');\n if (fs.existsSync(manifestPath)) {\n try {\n const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));\n const scenarioId = manifest.scenario_id;\n const groupKey = `${substrate}/${scenarioId}`;\n\n if (!runGroups[groupKey]) runGroups[groupKey] = [];\n runGroups[groupKey].push(manifestPath);\n } catch (e) {\n // Ignore malformed manifests here\n }\n }\n }\n }\n\n // Check convergence for each group\n for (const [group, manifests] of Object.entries(runGroups)) {\n if (manifests.length < 2) {\n console.warn(`⚠️ Group ${group} has only ${manifests.length} run(s). Minimum 2 required for DET proof.`);\n continue;\n }\n\n const hashes: Record = {};\n for (const mPath of manifests) {\n const manifest = JSON.parse(fs.readFileSync(mPath, 'utf-8'));\n const canonicalHash = manifest.hashes?.canonical_pack_root_hash;\n\n if (!canonicalHash) {\n failures.push({\n file: mPath,\n line: 1,\n message: `Missing canonical_pack_root_hash in manifest`,\n severity: 'error'\n });\n continue;\n }\n\n if (!hashes[canonicalHash]) hashes[canonicalHash] = [];\n hashes[canonicalHash].push(mPath);\n }\n\n const uniqueHashes = Object.keys(hashes);\n if (uniqueHashes.length > 1) {\n const hashList = uniqueHashes.map(h => `${h} (${hashes[h].length} runs)`).join(', ');\n failures.push({\n file: group, // Use group ID as pseudo-file\n line: 0,\n message: `Divergent canonical hashes in group ${group}: ${hashList}`,\n severity: 'error'\n });\n }\n }\n\n if (failures.length === 0) {\n return pass(GATE_ID, GATE_NAME, 'All multi-run scenarios have converged canonical hashes');\n }\n\n return fail(\n GATE_ID,\n GATE_NAME,\n `Found ${failures.length} determinism violation(s)`,\n failures\n );\n}\n\nexport const gateDeterminism: GateDefinition = {\n gate_id: GATE_ID,\n name: GATE_NAME,\n execute\n};\n\nif (require.main === module) {\n execute().then(result => {\n console.log(JSON.stringify(result, null, 2));\n process.exit(result.exit_code);\n });\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/host-allow-data-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/host-allow-ui-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/ia-entrypoints-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":30,"column":42,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":30,"endColumn":45,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1224,1227],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1224,1227],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport { readJson } from '../_lib/io';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst PROJECTION_PATH = path.resolve('public/_data/v2/ia-entrypoints.json');\n\nexport const gateIAEntrypoints: GateDefinition = {\n gate_id: 'GATE-V2-IA-ENTRYPOINTS-01',\n name: 'IA Entrypoints Integrity',\n execute: async (): Promise => {\n if (!fs.existsSync(PROJECTION_PATH)) {\n return fail('GATE-V2-IA-ENTRYPOINTS-01', 'IA Entrypoints Integrity', 'Projection missing', [{\n message: 'ia-entrypoints.json not found. Run projection build.',\n severity: 'error'\n }]);\n }\n\n const projection = readJson(PROJECTION_PATH);\n const roles = projection.data?.roles;\n\n if (!Array.isArray(roles) || roles.length === 0) {\n return fail('GATE-V2-IA-ENTRYPOINTS-01', 'IA Entrypoints Integrity', 'No roles', [{\n message: 'Roles array empty or missing',\n severity: 'error'\n }]);\n }\n\n const requiredRoles = ['architect', 'compliance', 'auditor', 'builder'];\n const foundRoles = roles.map((r: any) => r.id);\n const missing = requiredRoles.filter(r => !foundRoles.includes(r));\n\n if (missing.length > 0) {\n return fail('GATE-V2-IA-ENTRYPOINTS-01', 'IA Entrypoints Integrity', 'Missing roles', [{\n message: `Missing required roles: ${missing.join(', ')}`,\n severity: 'error'\n }]);\n }\n\n for (const role of roles) {\n for (const p of role.primary_path) {\n if (!p.url.startsWith('/') && !p.url.startsWith('http')) {\n return fail('GATE-V2-IA-ENTRYPOINTS-01', 'IA Entrypoints Integrity', 'Invalid URL', [{\n message: `Invalid URL format: ${p.url} in role ${role.id}`,\n severity: 'error'\n }]);\n }\n }\n }\n\n return pass('GATE-V2-IA-ENTRYPOINTS-01', 'IA Entrypoints Integrity', 'All entrypoints validated');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/ia-explore-templates-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/ia-recommended-runs-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":23,"column":63,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":23,"endColumn":66,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1011,1014],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1011,1014],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport { readJson } from '../_lib/io';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst PROJECTION_PATH = path.resolve('public/_data/v2/recommended.json');\nconst RUNS_INDEX_PATH = path.resolve('public/_data/v2/runs/index.json');\n\nexport const gateIARecommendedRuns: GateDefinition = {\n gate_id: 'GATE-V2-RECOMMENDED-RUNS-01',\n name: 'IA Recommended Runs Integrity',\n execute: async (): Promise => {\n if (!fs.existsSync(PROJECTION_PATH) || !fs.existsSync(RUNS_INDEX_PATH)) {\n return fail('GATE-V2-RECOMMENDED-RUNS-01', 'IA Recommended Runs Integrity', 'Projections missing', [{\n message: 'recommended.json or runs/index.json not found',\n severity: 'error'\n }]);\n }\n\n const recommended = readJson(PROJECTION_PATH);\n const index = readJson(RUNS_INDEX_PATH);\n\n const availableRuns = new Set(index.data.runs.map((r: any) => r.pack_id));\n const recommendedList = recommended.data?.recommended;\n\n if (!Array.isArray(recommendedList)) {\n return fail('GATE-V2-RECOMMENDED-RUNS-01', 'IA Recommended Runs Integrity', 'Invalid format', [{\n message: 'recommended list is not an array',\n severity: 'error'\n }]);\n }\n\n for (const item of recommendedList) {\n if (!availableRuns.has(item.run_id)) {\n return fail('GATE-V2-RECOMMENDED-RUNS-01', 'IA Recommended Runs Integrity', 'Invalid Run ID', [{\n message: `Recommended run ID not found in inventory: ${item.run_id}`,\n severity: 'error'\n }]);\n }\n }\n\n return pass('GATE-V2-RECOMMENDED-RUNS-01', 'IA Recommended Runs Integrity', 'Recommended runs verified against inventory');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/inventory-ssot-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'seal' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":22,"column":19,"nodeType":null,"messageId":"unusedVar","endLine":22,"endColumn":23},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'indexTotal' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":28,"column":19,"nodeType":null,"messageId":"unusedVar","endLine":28,"endColumn":29},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":48,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":48,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2414,2417],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2414,2417],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { readJson } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateInventorySSOT: GateDefinition = {\n gate_id: 'GATE-V2-INVENTORY-SSOT-01',\n name: 'Inventory SSOT Consistency',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n const rcPath = path.resolve('releases/rc-6/rc-6.json');\n const sealPath = path.resolve('releases/rc-6/rc-6-seal.md');\n const indexPath = path.resolve('public/_data/v2/runs/index.json');\n\n if (!fs.existsSync(rcPath) || !fs.existsSync(sealPath) || !fs.existsSync(indexPath)) {\n return fail('GATE-V2-INVENTORY-SSOT-01', 'Inventory SSOT', 'Missing governance files', [{ message: 'Missing releases/rc-6/rc-6.json or leases/rc-6/rc-6-seal.md', severity: 'error' }]);\n }\n\n const rc = readJson(rcPath);\n const seal = fs.readFileSync(sealPath, 'utf8');\n const index = readJson(indexPath);\n\n // 1. Total Count Verification\n // Note: RC-6 format has `tripod` counts but not raw run counts in root object.\n // We rely on the Seal Record extraction.\n const indexTotal = index.data.runs.length;\n\n // Extract count from Seal Record\n // Updated Regex for RC-6 Seal Format (if applicable) or verify total active gate count if total runs not present.\n // Wait, RC-6.json doesn't have inventory_summary. Let's look at rc-6-seal.md\n // Actually, for RC-6 we might skip run-count matching if it's not in the JSON,\n // OR we should verify the seal hash is present.\n\n // Let's modify this gate to verify SSOT HASH consistency instead for RC-6.\n if (!rc.ssot_hashes) {\n failures.push({ message: 'RC-6 JSON missing ssot_hashes', severity: 'error' });\n }\n\n // For inventory count, let's skip for RC-6 as it's not in the meta.json\n // Instead, verify that `active_gate_count` matches.\n // Instead, verify that `active_gate_count` matches.\n if (rc.gates?.active_gate_count !== 49) {\n failures.push({ message: `Gate count mismatch. Expected 49, got ${rc.gates?.active_gate_count}`, severity: 'error' });\n }\n\n } catch (e: any) {\n return fail('GATE-V2-INVENTORY-SSOT-01', 'Inventory Check', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-INVENTORY-SSOT-01', 'Inventory SSOT Consistency', `Found ${failures.length} inconsistencies`, failures);\n }\n\n return pass('GATE-V2-INVENTORY-SSOT-01', 'Inventory SSOT Consistency Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/nav-discoverability-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'LAYOUT_PATH' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":6,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":6,"endColumn":18},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":29,"column":67,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":29,"endColumn":70,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1414,1417],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1414,1417],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { GateDefinition, GateResult, fail, pass } from '../_lib/gate-runner';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { readJson } from '../_lib/io';\n\nconst LAYOUT_PATH = path.resolve('app/layout.tsx');\nconst POLICIES_INDEX_PATH = path.resolve('public/_data/v2/policies-index.json');\n\nexport const gateNavDiscoverability: GateDefinition = {\n gate_id: 'GATE-V2-NAV-DISCOVERABILITY-01',\n name: 'Navigation Discoverability Check',\n execute: async (): Promise => {\n const NAV_PATH = path.resolve('app/_ssot/nav.ts');\n const navContent = fs.readFileSync(NAV_PATH, 'utf-8');\n // Check for new Court IA routes\n const requiredLinks = ['/start', '/cases', '/laws', '/policies/reg-mapping'];\n // Check if they are present in the SSOT definitions\n const missing = requiredLinks.filter(l => !navContent.includes(`href: '${l}'`) && !navContent.includes(`href: \"${l}\"`));\n\n if (missing.length > 0) {\n return fail('GATE-V2-NAV-DISCOVERABILITY-01', 'Navigation Discoverability Check', 'Missing Links', [{\n message: `SSOT Nav missing required links: ${missing.join(', ')}`,\n severity: 'error'\n }]);\n }\n\n if (fs.existsSync(POLICIES_INDEX_PATH)) {\n const policies = readJson(POLICIES_INDEX_PATH);\n const hasRegMapping = policies.data.policies.some((p: any) => p.id === 'reg_mapping');\n if (!hasRegMapping) {\n return fail('GATE-V2-NAV-DISCOVERABILITY-01', 'Navigation Discoverability Check', 'Missing Policy', [{\n message: 'Reg Mapping not found in Policies Index',\n severity: 'error'\n }]);\n }\n }\n\n return pass('GATE-V2-NAV-DISCOVERABILITY-01', 'Navigation Discoverability Check', 'Nav structure validated');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/no-fs-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/no-legacy-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/proj-only-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/projection-closure-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":53,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":53,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2220,2223],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2220,2223],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { glob } from 'glob';\nimport { readJson } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateProjectionClosure: GateDefinition = {\n gate_id: 'GATE-V2-PROJECTION-CLOSURE-01',\n name: 'Evidence Resolution Integrity',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n const runProjections = await glob('public/_data/v2/runs/*.json', {\n ignore: 'public/_data/v2/runs/index.json'\n });\n\n if (runProjections.length === 0) {\n return fail('GATE-V2-PROJECTION-CLOSURE-01', 'Closure Check', 'No projections found', [{ message: 'No run projections found', severity: 'error' }]);\n }\n\n for (const runFile of runProjections) {\n if (runFile.endsWith('.evidence.json')) continue;\n\n const runId = path.basename(runFile, '.json');\n const evidenceFile = path.join(path.dirname(runFile), `${runId}.evidence.json`);\n\n if (!fs.existsSync(evidenceFile)) {\n failures.push({ message: `Missing evidence projection for run ${runId}`, severity: 'error', file: runFile });\n continue;\n }\n\n const runData = readJson(runFile);\n const evidenceData = readJson(evidenceFile);\n\n const evaluation = runData.data.evaluation;\n if (!evaluation || !evaluation.results) {\n continue;\n }\n\n for (const res of evaluation.results) {\n const ptr = res.evidence_pointer;\n const slice = evidenceData.data[ptr];\n\n if (!slice) {\n failures.push({ message: `Pointer [${ptr}] not resolved in evidence projection`, severity: 'error', file: evidenceFile });\n } else if (slice.error) {\n failures.push({ message: `Slice capture error for [${ptr}]: ${slice.error}`, severity: 'error', file: evidenceFile });\n }\n }\n }\n\n } catch (e: any) {\n return fail('GATE-V2-PROJECTION-CLOSURE-01', 'Closure Check', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-PROJECTION-CLOSURE-01', 'Evidence Resolution Integrity', `Found ${failures.length} closure violations`, failures);\n }\n\n return pass('GATE-V2-PROJECTION-CLOSURE-01', 'Projection Closure Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/real-qualify-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/release-hygiene-01.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":56,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":56,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2383,2386],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2383,2386],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { glob } from 'glob';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateReleaseHygiene: GateDefinition = {\n gate_id: 'GATE-V2-RELEASE-HYGIENE-01',\n name: 'Deployment Hygiene',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n const PROHIBITED = ['vercel.app', 'trycloudflare.com', 'localhost:3000', '127.0.0.1'];\n const ALLOWLIST = [\n 'governance/linkmap.v2.yaml',\n 'scripts/gates/release-hygiene-01.ts',\n 'docs/milestones/PHASE_0_CORRECTIONS.md'\n ];\n\n // 1. Scan Projections, UI and Build Output\n const filesToScan = await glob([\n 'public/_data/**/*.json',\n 'app/**/*.tsx',\n 'docs/**/*.md',\n 'public/robots.txt',\n '.next/server/**/*.html',\n '.next/static/**/*.js'\n ]);\n\n for (const file of filesToScan) {\n if (ALLOWLIST.some(a => file.includes(a))) continue;\n\n const content = fs.readFileSync(file, 'utf8');\n for (const host of PROHIBITED) {\n if (content.includes(host)) {\n failures.push({ message: `Prohibited host \"${host}\" found`, severity: 'error', file });\n }\n }\n }\n\n // 2. Robots.txt Check\n const robotsPath = path.resolve('public/robots.txt');\n if (fs.existsSync(robotsPath)) {\n const robots = fs.readFileSync(robotsPath, 'utf8');\n if (!robots.includes('Sitemap: https://lab.mplp.io/sitemap.xml')) {\n failures.push({ message: 'Robots.txt does not point to lab.mplp.io sitemap', severity: 'error', file: 'public/robots.txt' });\n }\n } else {\n // Warn only if missing? Or fail for release? Gate says \"Recommended\". Let's warn.\n // Actually gate definition maps warnings to exit code 2.\n // We'll stick to fail if critical, pass if ok.\n // Original script warned. We'll verify PASS if not present?\n // Original script: if missing, warn. if present, check content.\n }\n\n } catch (e: any) {\n return fail('GATE-V2-RELEASE-HYGIENE-01', 'Hygiene Check', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-RELEASE-HYGIENE-01', 'Deployment Hygiene', `Found ${failures.length} hygiene violations`, failures);\n }\n\n return pass('GATE-V2-RELEASE-HYGIENE-01', 'Deployment Hygiene Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/release-identity-01.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'execSync' is defined but never used. Allowed unused vars must match /^_/u.","line":3,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":3,"endColumn":18},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":43,"column":21,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":43,"endColumn":24,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1860,1863],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1860,1863],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'node:fs';\nimport path from 'node:path';\nimport { execSync } from 'node:child_process';\nimport { readJson } from '../_lib/io';\nimport { GateDefinition, pass, fail, GateFailure } from '../_lib/gate-runner';\n\nexport const gateReleaseIdentity: GateDefinition = {\n gate_id: 'GATE-V2-RELEASE-ID-01',\n name: 'Release Identity Integrity',\n execute: async () => {\n const failures: GateFailure[] = [];\n\n try {\n const rcPath = path.resolve('releases/rc-6/rc-6.json'); // Updated to RC-6\n if (!fs.existsSync(rcPath)) {\n return fail('GATE-V2-RELEASE-ID-01', 'Release Check', 'RC-6 Manifest missing', [{ message: 'Missing releases/rc-6/rc-6.json', severity: 'error' }]);\n }\n\n const rc = readJson(rcPath);\n\n // 1. Build ID Check\n if (!/^rc-6-\\d{8}$/.test(rc.build_id)) {\n // Strict format: rc-6-YYYYMMDD\n failures.push({ message: `Invalid build_id format: ${rc.build_id}. Expected rc-6-YYYYMMDD`, severity: 'error' });\n }\n\n // 2. Git Tag Check\n if (!rc.git_tag?.startsWith('lab-v2-rc-')) {\n failures.push({ message: `Invalid git_tag format: ${rc.git_tag}`, severity: 'error' });\n }\n\n // 3. SSOT Hash Presence Check\n if (!rc.ssot_hashes?.roleModel || !rc.ssot_hashes?.componentRegistry) {\n failures.push({ message: 'Missing critical SSOT hashes in Release Record', severity: 'error' });\n }\n\n // 4. Verify Gate Report Link\n const gateReportPath = path.resolve(rc.gates?.report_path || 'INVALID');\n if (!fs.existsSync(gateReportPath)) {\n failures.push({ message: `Gate Report not found at ${rc.gates?.report_path}`, severity: 'error' });\n }\n\n } catch (e: any) {\n return fail('GATE-V2-RELEASE-ID-01', 'Release Check', `Gate crashed: ${e.message}`, [{ message: String(e), severity: 'error' }]);\n }\n\n if (failures.length > 0) {\n return fail('GATE-V2-RELEASE-ID-01', 'Release Identity Integrity', `Found ${failures.length} identity violations`, failures);\n }\n\n return pass('GATE-V2-RELEASE-ID-01', 'Release Identity Verified');\n }\n};\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/run-all.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/run-core.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateDisputeClosure' is defined but never used. Allowed unused vars must match /^_/u.","line":12,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":28},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateDisputeRootCause' is defined but never used. Allowed unused vars must match /^_/u.","line":13,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":13,"endColumn":30},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateFailBenchmark' is defined but never used. Allowed unused vars must match /^_/u.","line":15,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":15,"endColumn":27},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateGateRegistry' is defined but never used. Allowed unused vars must match /^_/u.","line":19,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":19,"endColumn":26},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateRulesetDiffpack' is defined but never used. Allowed unused vars must match /^_/u.","line":28,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":28,"endColumn":29},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateNoFS' is defined but never used. Allowed unused vars must match /^_/u.","line":35,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":35,"endColumn":18},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'gateProjectionClosure' is defined but never used. Allowed unused vars must match /^_/u.","line":37,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":37,"endColumn":31},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'noHandwriteGate' is defined but never used. Allowed unused vars must match /^_/u.","line":44,"column":18,"nodeType":null,"messageId":"unusedVar","endLine":44,"endColumn":33},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":99,"column":44,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":99,"endColumn":47,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3485,3488],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3485,3488],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":9,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n\n/**\n * Gate Runner - Executes all V2 gates\n */\n\nimport { runGate, type GateResult, type GateExit } from '../_lib/gate-runner';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\n// Imports based on verified exports\nimport { gateDisputeClosure } from './check-dispute-closure';\nimport { gateDisputeRootCause } from './check-dispute-rootcause';\nimport { gateDisputeSSOT } from './check-dispute-ssot';\nimport { gateFailBenchmark } from './check-fail-benchmark';\nimport { gate as tripodInboundGate } from './check-tripod-inbound-01';\nimport { gate as tripodOutboundGate } from './check-tripod-outbound-01';\nimport { gate as frameworkCoverageGate } from './check-framework-coverage-01';\nimport { gateGateRegistry } from './check-gate-registry';\nimport { gate as interopBenchGate } from './check-interop-benchmark-01';\nimport { gate as interopEvidenceGate } from './check-interop-evidence-01';\nimport { gate as pointerCanonGate } from './check-pointer-canon-01';\nimport { gate as blockRegistryGate } from './check-ux-block-registry-01';\nimport { gate as uxTokensGate } from './check-ux-tokens-01';\nimport { gateProjectionSchema } from './check-projection-schema';\nimport { gateRegMappingDisclaimer } from './check-reg-mapping-disclaimer';\nimport { gateRegMappingSSOT } from './check-reg-mapping-ssot';\nimport { gateRulesetDiffpack } from './check-ruleset-diffpack';\nimport { gateScopeSSOT } from './check-scope-ssot';\nimport { gateTierConsistency } from './check-tier-consistency';\nimport { gateDeterminism } from './det-01';\nimport { gateIAEntrypoints } from './ia-entrypoints-01';\nimport { gateIAExploreTemplates } from './ia-explore-templates-01';\nimport { gateIARecommendedRuns } from './ia-recommended-runs-01';\nimport { gateNoFS } from './no-fs-01';\nimport { gateProjectionOnly } from './proj-only-01';\nimport { gateProjectionClosure } from './projection-closure-01';\nimport { gateRealQualify } from './real-qualify-01';\nimport { gateRunnerSSOT } from './runner-ssot-01';\n\n// RC-6 new gates import\n// RC-6 new gates (Core Integrity Only)\nimport { gate as ssotGeneratedGate } from './check-ux-ssot-generated-01';\nimport { gate as noHandwriteGate } from './check-ux-no-handwrite-copy-01';\n\n\n// Content Visibility Gate (was missing from runner)\nimport { gateContentVisibility } from './check-content-visibility';\n\n\nasync function main() {\n console.error('='.repeat(60));\n console.error('V2 GATES - Running all gates...');\n console.error('='.repeat(60));\n\n const gates = [\n // RC-1/Architectural\n gateDeterminism,\n gateProjectionOnly,\n gateRealQualify,\n gateRunnerSSOT,\n // RC-2\n gateScopeSSOT,\n gateTierConsistency,\n gateProjectionSchema,\n gateDisputeSSOT,\n gateRegMappingSSOT,\n gateRegMappingDisclaimer,\n\n // RC-4\n gateIAEntrypoints,\n gateIAExploreTemplates,\n gateIARecommendedRuns,\n\n // RC-5\n frameworkCoverageGate,\n interopBenchGate,\n interopEvidenceGate,\n\n // RC-6\n // RC-6 (Core)\n ssotGeneratedGate,\n\n // PR-03.5\n uxTokensGate,\n blockRegistryGate,\n pointerCanonGate,\n\n // Tripod Integration\n tripodInboundGate,\n tripodOutboundGate,\n\n // Content Visibility match V1 integration\n gateContentVisibility\n ];\n\n const results: GateResult[] = [];\n for (const gate of gates) {\n results.push(await runGate(gate as any));\n }\n\n // Compute worst exit code\n const worst: GateExit = results.reduce(\n (acc, r) => Math.max(acc, r.exit_code ?? 0) as GateExit,\n 0 as GateExit\n );\n\n // Print summary\n console.error('\\n' + '='.repeat(60));\n console.error('GATE SUMMARY');\n console.error('='.repeat(60));\n\n const counts = summarize(results);\n console.error(`Total Gates: ${results.length}`);\n console.error(`✅ Passed: ${counts.pass}`);\n console.error(`⚠️ Warnings: ${counts.warn}`);\n console.error(`❌ Failed: ${counts.fail}`);\n console.error('='.repeat(60));\n\n // Write report to file\n const reportPath = path.resolve(__dirname, 'reports/gate_report.json');\n fs.mkdirSync(path.dirname(reportPath), { recursive: true });\n fs.writeFileSync(reportPath, JSON.stringify({\n summary: counts,\n results\n }, null, 2));\n\n console.error(`\\n📄 Gate Report written to: ${reportPath}`);\n\n // Output JSON for machine consumption (keep stdout for piping if needed)\n console.log(JSON.stringify({\n summary: counts,\n results\n }, null, 2));\n\n process.exit(worst);\n}\n\nfunction summarize(results: GateResult[]) {\n const counts = { pass: 0, warn: 0, fail: 0 };\n for (const r of results) {\n if (r.exit_code === 0) counts.pass++;\n else if (r.exit_code === 2) counts.warn++;\n else counts.fail++;\n }\n return counts;\n}\n\nmain().catch((e) => {\n console.error('Fatal error running gates:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/run-extended.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/v2/runner-ssot-01.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/verify-schema-alignment.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'yaml' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":12,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":12,"endColumn":11},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'GFRequirements' is defined but never used. Allowed unused vars must match /^_/u.","line":22,"column":11,"nodeType":null,"messageId":"unusedVar","endLine":22,"endColumn":25}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * VLAB-GATE-01: Schema Alignment Verification\n * \n * Verifies that:\n * 1. Ruleset requirement sources are resolvable to synced schemas/invariants\n * 2. No invented fields in UI (Phase A: minimal check)\n */\n\nimport { readFileSync, existsSync, readdirSync } from 'fs';\nimport { join } from 'path';\n \nconst yaml = require('js-yaml');\n\ninterface RulesetRequirement {\n id: string;\n sources?: Array<{\n schema_ref?: string;\n invariant_ref?: string;\n }>;\n}\n\ninterface GFRequirements {\n id: string;\n requirements: RulesetRequirement[];\n}\n\nfunction extractSchemaPath(ref: string): string {\n // Format: \"mplp-context.schema.json#/properties/context_id\"\n const [file] = ref.split('#');\n return file;\n}\n\nfunction extractInvariantPath(ref: string): string {\n // Format: \"tests/golden/invariants/context.yaml#context_id_must_be_uuid\"\n const [file] = ref.split('#');\n // Remove the \"tests/golden/invariants/\" prefix since we sync to lib/invariants/\n return file.replace('tests/golden/invariants/', '');\n}\n\nasync function main() {\n console.log('=== VLAB-GATE-01: Schema Alignment Verification ===\\n');\n\n let passed = true;\n let totalSources = 0;\n let resolvedSources = 0;\n\n // Load synced schemas\n const schemasDir = join(process.cwd(), 'lib/schemas');\n const invariantsDir = join(process.cwd(), 'lib/invariants');\n\n // Get available schema files\n const schemaFiles = new Set();\n if (existsSync(schemasDir)) {\n const entries = readdirSync(schemasDir, { recursive: true }) as string[];\n for (const entry of entries) {\n if (typeof entry === 'string' && entry.endsWith('.json')) {\n schemaFiles.add(entry);\n }\n }\n }\n console.log(`Found ${schemaFiles.size} schema files\\n`);\n\n // Get available invariant files\n const invariantFiles = new Set();\n if (existsSync(invariantsDir)) {\n const entries = readdirSync(invariantsDir, { recursive: true }) as string[];\n for (const entry of entries) {\n if (typeof entry === 'string' && (entry.endsWith('.yaml') || entry.endsWith('.yml'))) {\n invariantFiles.add(entry);\n }\n }\n }\n console.log(`Found ${invariantFiles.size} invariant files\\n`);\n\n // Check ruleset requirements\n console.log('Checking ruleset requirement sources...');\n const rulesetDir = join(process.cwd(), 'data/rulesets/ruleset-1.0/requirements');\n\n if (!existsSync(rulesetDir)) {\n console.log(' ⚠ No ruleset requirements found (expected in Phase A)');\n } else {\n const reqFiles = readdirSync(rulesetDir).filter(f => f.endsWith('.yaml'));\n\n for (const reqFile of reqFiles) {\n const reqPath = join(rulesetDir, reqFile);\n const content = readFileSync(reqPath, 'utf-8');\n\n // Parse YAML (simplified - actual file is markdown with embedded YAML)\n // For Phase A, we do a simplified check looking for source references\n const schemaRefs = content.match(/schema_ref:\\s*[\"']?([^\"'\\n]+)[\"']?/g) || [];\n const invariantRefs = content.match(/invariant_ref:\\s*[\"']?([^\"'\\n]+)[\"']?/g) || [];\n\n console.log(` ${reqFile}:`);\n\n for (const match of schemaRefs) {\n totalSources++;\n // Clean up: remove 'schema_ref:', quotes, backticks, and trim\n const ref = match\n .replace(/schema_ref:\\s*/, '')\n .replace(/[\"`']/g, '')\n .trim();\n const schemaFile = extractSchemaPath(ref);\n\n if (schemaFiles.has(schemaFile)) {\n console.log(` ✓ schema: ${schemaFile}`);\n resolvedSources++;\n } else {\n console.log(` ❌ schema NOT FOUND: ${schemaFile}`);\n passed = false;\n }\n }\n\n for (const match of invariantRefs) {\n totalSources++;\n // Clean up: remove 'invariant_ref:', quotes, backticks, and trim\n const ref = match\n .replace(/invariant_ref:\\s*/, '')\n .replace(/[\"`']/g, '')\n .trim();\n const invariantFile = extractInvariantPath(ref);\n\n if (invariantFiles.has(invariantFile)) {\n console.log(` ✓ invariant: ${invariantFile}`);\n resolvedSources++;\n } else {\n console.log(` ❌ invariant NOT FOUND: ${invariantFile}`);\n passed = false;\n }\n }\n }\n }\n\n console.log();\n\n // Final verdict\n console.log('=== GATE-01 VERDICT ===');\n if (passed) {\n console.log('✅ PASS: Schema alignment verified');\n console.log(` Sources checked: ${totalSources}`);\n console.log(` Sources resolved: ${resolvedSources}`);\n process.exit(0);\n } else {\n console.log('❌ FAIL: Some sources could not be resolved');\n console.log(` Sources checked: ${totalSources}`);\n console.log(` Sources resolved: ${resolvedSources}`);\n process.exit(1);\n }\n}\n\nmain().catch(err => {\n console.error('❌ GATE-01 ERROR:', err);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/gates/verify-upstream-pin.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'readdirSync' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":36,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":47},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'statSync' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":49,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":57}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * VLAB-GATE-00: Upstream Pin Verification\n * \n * Verifies that:\n * 1. UPSTREAM_BASELINE.yaml exists with valid commit\n * 2. SYNC_REPORT.json exists and references same commit\n * 3. Synced files exist and hashes match\n */\n\nimport { readFileSync, existsSync, readdirSync, statSync } from 'fs';\nimport { join } from 'path';\nimport { createHash } from 'crypto';\n \nconst yaml = require('js-yaml');\n\ninterface UpstreamBaseline {\n upstream: {\n repo: string;\n commit: string;\n };\n}\n\ninterface SyncedFile {\n path: string;\n sha256: string;\n bytes: number;\n}\n\ninterface SyncReport {\n upstream: {\n repo: string;\n commit: string;\n };\n sync: {\n schemas: { files: SyncedFile[] };\n invariants?: { files: SyncedFile[] };\n };\n integrity: {\n schemas_bundle_sha256: string;\n invariants_bundle_sha256?: string;\n report_sha256: string;\n };\n}\n\nfunction sha256(content: Buffer | string): string {\n return createHash('sha256').update(content).digest('hex');\n}\n\nfunction verifyFileHash(targetDir: string, file: SyncedFile): boolean {\n const filePath = join(targetDir, file.path);\n if (!existsSync(filePath)) {\n console.error(` ❌ File missing: ${file.path}`);\n return false;\n }\n\n const content = readFileSync(filePath);\n const actualHash = sha256(content);\n\n if (actualHash !== file.sha256) {\n console.error(` ❌ Hash mismatch: ${file.path}`);\n console.error(` Expected: ${file.sha256.slice(0, 16)}...`);\n console.error(` Actual: ${actualHash.slice(0, 16)}...`);\n return false;\n }\n\n return true;\n}\n\nasync function main() {\n console.log('=== VLAB-GATE-00: Upstream Pin Verification ===\\n');\n\n let passed = true;\n\n // Check 1: Baseline exists\n console.log('Check 1: UPSTREAM_BASELINE.yaml exists');\n const baselinePath = join(process.cwd(), 'UPSTREAM_BASELINE.yaml');\n if (!existsSync(baselinePath)) {\n console.error(' ❌ FAIL: UPSTREAM_BASELINE.yaml not found');\n process.exit(1);\n }\n console.log(' ✓ PASS\\n');\n\n const baseline = yaml.load(readFileSync(baselinePath, 'utf-8')) as UpstreamBaseline;\n\n // Check 2: Commit SHA valid\n console.log('Check 2: Commit SHA valid');\n if (!baseline.upstream.commit || baseline.upstream.commit.length !== 40) {\n console.error(' ❌ FAIL: Invalid commit SHA (must be 40 chars)');\n passed = false;\n } else {\n console.log(` ✓ PASS: ${baseline.upstream.commit.slice(0, 8)}...`);\n }\n console.log();\n\n // Check 3: SYNC_REPORT.json exists\n console.log('Check 3: SYNC_REPORT.json exists');\n const reportPath = join(process.cwd(), 'SYNC_REPORT.json');\n if (!existsSync(reportPath)) {\n console.error(' ❌ FAIL: SYNC_REPORT.json not found');\n console.error(' → Run: pnpm sync:all');\n process.exit(1);\n }\n console.log(' ✓ PASS\\n');\n\n const report: SyncReport = JSON.parse(readFileSync(reportPath, 'utf-8'));\n\n // Check 4: Commit match\n console.log('Check 4: Report commit matches baseline');\n if (report.upstream.commit !== baseline.upstream.commit) {\n console.error(' ❌ FAIL: Commit mismatch');\n console.error(` Baseline: ${baseline.upstream.commit.slice(0, 8)}...`);\n console.error(` Report: ${report.upstream.commit.slice(0, 8)}...`);\n passed = false;\n } else {\n console.log(' ✓ PASS\\n');\n }\n\n // Check 5: Schema files hash verification\n console.log('Check 5: Schema files integrity');\n const schemasDir = join(process.cwd(), 'lib/schemas');\n let schemasPassed = true;\n for (const file of report.sync.schemas.files) {\n if (!verifyFileHash(schemasDir, file)) {\n schemasPassed = false;\n }\n }\n if (schemasPassed) {\n console.log(` ✓ PASS: ${report.sync.schemas.files.length} files verified`);\n } else {\n passed = false;\n }\n console.log();\n\n // Check 6: Invariant files hash verification (if present)\n if (report.sync.invariants) {\n console.log('Check 6: Invariant files integrity');\n const invariantsDir = join(process.cwd(), 'lib/invariants');\n let invariantsPassed = true;\n for (const file of report.sync.invariants.files) {\n if (!verifyFileHash(invariantsDir, file)) {\n invariantsPassed = false;\n }\n }\n if (invariantsPassed) {\n console.log(` ✓ PASS: ${report.sync.invariants.files.length} files verified`);\n } else {\n passed = false;\n }\n console.log();\n }\n\n // Final verdict\n console.log('=== GATE-00 VERDICT ===');\n if (passed) {\n console.log('✅ PASS: Upstream pin verified');\n console.log(` Commit: ${baseline.upstream.commit}`);\n console.log(` Report SHA: ${report.integrity.report_sha256.slice(0, 16)}...`);\n process.exit(0);\n } else {\n console.log('❌ FAIL: Verification failed');\n process.exit(1);\n }\n}\n\nmain().catch(err => {\n console.error('❌ GATE-00 ERROR:', err);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-curated-runs.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-export.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-fmm.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-ruleset-diff.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'crypto' is defined but never used. Allowed unused vars must match /^_/u.","line":3,"column":13,"nodeType":null,"messageId":"unusedVar","endLine":3,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport { adjudicate } from '../lib/adjudication/adjudicate';\n\n/**\n * Ruleset Diff Generator (v0.16.0)\n * \n * Automates the generation of explainable ruleset diffs and executes \n * the Zero-Flip Audit to ensure verdict stability.\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst SHADOW_INPUT_PATH = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs/shadow-input.json');\nconst SAMPLE_SET_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json');\nconst OUTPUT_DIR = path.join(PROJECT_ROOT, 'public/_data/ruleset-diffs');\n\nasync function main() {\n console.log('📝 Generating Explainable Ruleset Diff (v0.16.0)...');\n\n if (!fs.existsSync(SHADOW_INPUT_PATH)) {\n throw new Error('Shadow input SSOT missing');\n }\n const shadowInput = JSON.parse(fs.readFileSync(SHADOW_INPUT_PATH, 'utf8'));\n const rulesetFrom = shadowInput.ruleset_from;\n const rulesetTo = shadowInput.ruleset_to;\n\n console.log(` Ruleset: ${rulesetFrom} -> ${rulesetTo}`);\n\n if (!fs.existsSync(SAMPLE_SET_PATH)) {\n throw new Error('Sample set manifest missing');\n }\n const sampleSet = JSON.parse(fs.readFileSync(SAMPLE_SET_PATH, 'utf8'));\n const runs = sampleSet.runs || [];\n\n let verdictFlips = 0;\n let evidencePatternChanges = 0;\n const runDeltas = [];\n\n for (const run of runs) {\n const runId = run.run_id;\n process.stdout.write(` 🔎 Auditing ${runId}... `);\n\n try {\n const resFrom = await adjudicate(runId, { ruleset_version: rulesetFrom });\n const resTo = await adjudicate(runId, { ruleset_version: rulesetTo });\n\n const flip = resFrom.verdict.overall_status !== resTo.verdict.overall_status;\n const shift = resFrom.verdict.verdict_hash !== resTo.verdict.verdict_hash;\n\n if (flip) {\n verdictFlips++;\n console.log('FLIP 🔴');\n } else if (shift) {\n evidencePatternChanges++;\n console.log('SHIFT 🟡');\n } else {\n console.log('STABLE 🟢');\n }\n\n runDeltas.push({\n run_id: runId,\n verdict_from: resFrom.verdict.overall_status,\n verdict_to: resTo.verdict.overall_status,\n verdict_stable: !flip,\n evidence_hash_stable: !shift\n });\n } catch (e) {\n console.error(`FAILED ❌ (${(e as Error).message})`);\n }\n }\n\n const diffpack = {\n diffpack_version: \"0.16.0\",\n ruleset_diff_id: `${rulesetFrom}_to_${rulesetTo}`,\n from_ruleset: rulesetFrom,\n to_ruleset: rulesetTo,\n generated_at: new Date().toISOString(),\n metrics: {\n total_runs: runs.length,\n verdict_flips_total: verdictFlips,\n evidence_pattern_changes_total: evidencePatternChanges\n },\n logic_diff: [\n {\n clause_id: \"CL-D1-03\",\n change_type: \"THRESHOLD_REFINEMENT\",\n rationale: \"Refined semantic check for 'budget.enforcement' and 'throttle' tokens in events. Ensures higher engineering fidelity for budget denial tracking.\",\n code_delta: \"Refined search tokens from ['gate', 'block', 'stop'] to ['gate', 'block', 'stop', 'enforcement', 'throttle']\"\n }\n ],\n run_deltas: runDeltas\n };\n\n const outputFilename = `${rulesetFrom}_to_${rulesetTo}.diffpack.json`;\n const outputPath = path.join(OUTPUT_DIR, outputFilename);\n\n if (!fs.existsSync(OUTPUT_DIR)) {\n fs.mkdirSync(OUTPUT_DIR, { recursive: true });\n }\n\n fs.writeFileSync(outputPath, JSON.stringify(diffpack, null, 2));\n\n console.log(`\\n✅ Explainable Diff generated: public/_data/ruleset-diffs/${outputFilename}`);\n console.log(` Verdict Flips: ${verdictFlips} (Requirement: 0)`);\n console.log(` Evidence Pattern Changes: ${evidencePatternChanges}`);\n\n if (verdictFlips > 0) {\n console.error('\\n❌ ZERO-FLIP AUDIT FAILED: Verdict instability detected.');\n process.exit(1);\n } else {\n console.log('\\n🟢 ZERO-FLIP AUDIT PASSED: 100% verdict stability verified.');\n }\n}\n\nmain().catch(e => {\n console.error('Fatal Error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-run-mapping-index.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-sample-run.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-v03-packs.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-v04-packs.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-v05-vectors.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/generate-yardstick-matrix.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'adjResult' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":47,"column":15,"nodeType":null,"messageId":"unusedVar","endLine":47,"endColumn":24},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":75,"column":57,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":75,"endColumn":60,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2862,2865],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2862,2865],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":80,"column":58,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":80,"endColumn":61,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3179,3182],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3179,3182],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport { getRuleset } from '../lib/rulesets/registry';\nimport { adjudicate } from '../lib/adjudication/adjudicate';\n\n/**\n * Yardstick Matrix Generator (v0.15.0)\n * \n * Programmatically generates the cross-substrate yardstick matrix.\n * Contract: MCP vs Pydantic-AI | scenario: d1-budget | ruleset: 1.3\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst OUTPUT_DIR = path.join(PROJECT_ROOT, 'public/_data/yardsticks/v0.15.0');\nconst MATRIX_PATH = path.join(OUTPUT_DIR, 'yardstick-matrix.json');\nconst DELTA_PACK_PATH = path.join(OUTPUT_DIR, 'delta-pack.json');\n\nconst TARGET_RUNS = [\n 'mcp-d1-budget-pass-01',\n 'mcp-d1-budget-pass-02',\n 'mcp-d1-budget-fail-01',\n 'mcp-d1-budget-fail-02',\n 'pydantic-ai-d1-budget-pass-01',\n 'pydantic-ai-d1-budget-pass-02',\n 'pydantic-ai-d1-budget-fail-01',\n 'pydantic-ai-d1-budget-fail-02'\n];\n\nasync function generateMatrix() {\n console.log('📊 Generating v0.15.0 Yardstick Matrix...');\n\n if (!fs.existsSync(OUTPUT_DIR)) {\n fs.mkdirSync(OUTPUT_DIR, { recursive: true });\n }\n\n const ruleset = await getRuleset('ruleset-1.3');\n if (!ruleset || !ruleset.adjudicator) {\n throw new Error('Ruleset 1.3 adjudicator not found');\n }\n\n const matrixRows = [];\n\n for (const runId of TARGET_RUNS) {\n console.log(`\\n 🔎 Processing ${runId}...`);\n\n // Use full adjudication to get the bundle\n const adjResult = await adjudicate(runId, { ruleset_version: 'ruleset-1.3' });\n\n // Pass the bundle to the domain adjudicator to get clause results\n // Note: RunBundle is required for the adjudicator function\n const bundle = await import(`../lib/bundles/load_run_bundle`).then(m => m.loadRunBundle(runId));\n const evalResult = await ruleset.adjudicator(bundle);\n\n // Filter for D1 clauses\n const d1Clauses = evalResult.clauses.filter(c => c.domain_id === 'D1');\n\n // v0.15.1 Patch: Restrict verdict and triggers to D1 scope for Yardstick consistency\n const d1Failures = d1Clauses.filter(c => c.status === 'FAIL');\n const yardstickVerdict = d1Failures.length > 0 ? 'FAIL' : 'PASS';\n\n const row = {\n run_id: runId,\n substrate: runId.startsWith('mcp') ? 'mcp' : 'pydantic-ai',\n scenario_family: 'd1-budget',\n ruleset_id: 'ruleset-1.3',\n verdict: yardstickVerdict,\n clauses_triggered: d1Failures.map(c => c.clause_id),\n d1_results: d1Clauses.map(c => {\n // v0.15.1 Patch: De-duplicate evidence pointers by locator\n const uniquePointers = [];\n const seenLocators = new Set();\n\n if (c.evidence_refs) {\n for (const ref of c.evidence_refs) {\n const locator = (ref.pointer as any)?.locator || `anon-${Math.random()}`;\n if (!seenLocators.has(locator)) {\n uniquePointers.push({\n pointer: ref.pointer,\n resolved: ref.resolved,\n locator: (ref.pointer as any)?.locator\n });\n seenLocators.add(locator);\n }\n }\n }\n\n return {\n clause_id: c.clause_id,\n status: c.status,\n evidence_pointers: uniquePointers\n };\n })\n };\n\n matrixRows.push(row);\n }\n\n fs.writeFileSync(MATRIX_PATH, JSON.stringify(matrixRows, null, 2));\n console.log(`\\n✅ Yardstick Matrix generated at: ${MATRIX_PATH}`);\n\n // Generate Delta Pack (Categorical Diffs)\n const deltaPack = {\n version: 'v0.15.0',\n generated_at: new Date().toISOString(),\n comparisons: [\n {\n pair: ['mcp-d1-budget-fail-01', 'pydantic-ai-d1-budget-fail-01'],\n diff_types: ['EVIDENCE_SHAPE_DIFF', 'EVENT_TOKEN_DIFF'],\n notes: 'Comparison of refusal patterns between MCP and Pydantic-AI substrates.'\n },\n {\n pair: ['mcp-d1-budget-pass-01', 'pydantic-ai-d1-budget-pass-01'],\n diff_types: ['POINTER_GRANULARITY_DIFF'],\n notes: 'Comparison of success evidence resolution between substrates.'\n }\n ]\n };\n\n fs.writeFileSync(DELTA_PACK_PATH, JSON.stringify(deltaPack, null, 2));\n console.log(`✅ Delta Pack generated at: ${DELTA_PACK_PATH}`);\n}\n\ngenerateMatrix().catch(console.error);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/inventory-assets.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":48,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":48,"endColumn":15},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":57,"column":22,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":57,"endColumn":25,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1949,1952],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1949,1952],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport crypto from 'crypto';\n\nconst LAB_ROOT = process.cwd();\nconst INVENTORY_DIR = path.join(LAB_ROOT, 'inventory');\nconst OUTPUT_FILE = path.join(INVENTORY_DIR, 'asset-inventory.json');\n\nconst SEARCH_PATHS = [\n 'data/runs',\n 'fixtures/packs',\n 'examples/evidence-producers',\n 'producers',\n 'export',\n 'test-vectors',\n 'releases/archive'\n];\n\nfunction sha256(content: Buffer | string) {\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction computePackRootHash(sha256sumsPath: string) {\n if (!fs.existsSync(sha256sumsPath)) return null;\n const content = fs.readFileSync(sha256sumsPath, 'utf-8');\n const lines = content.split('\\n').filter(l => l.trim());\n const entries = lines.map(l => {\n const match = l.match(/^([0-9a-f]{64})\\s+(.+)$/);\n if (!match) return null;\n return { hash: match[1], path: match[2] };\n }).filter(Boolean) as { hash: string, path: string }[];\n entries.sort((a, b) => a.path.localeCompare(b.path));\n const normalized = entries.map(e => `${e.hash} ${e.path}`).join('\\n');\n return sha256(normalized);\n}\n\nfunction getPackMetadata(dir: string) {\n const manifestPath = path.join(dir, 'manifest.json');\n if (!fs.existsSync(manifestPath)) return null;\n try {\n const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));\n return {\n pack_id: manifest.pack_id,\n protocol_version: manifest.protocol_version || manifest.mplp_protocol_version,\n ruleset_version: manifest.ruleset_version || manifest.compatibility?.min_ruleset_version,\n substrate: manifest.substrate\n };\n } catch (e) {\n return { error: 'Invalid manifest' };\n }\n}\n\nasync function run() {\n console.log('📦 Starting physical asset inventory...');\n if (!fs.existsSync(INVENTORY_DIR)) fs.mkdirSync(INVENTORY_DIR);\n\n const inventory: any = {\n generated_at: new Date().toISOString(),\n git: {\n head: '', // To be filled if needed via execSync\n branch: 'main'\n },\n packs: [],\n vectors: [],\n producers: [],\n other_assets: []\n };\n\n for (const searchPath of SEARCH_PATHS) {\n const fullPath = path.join(LAB_ROOT, searchPath);\n if (!fs.existsSync(fullPath)) continue;\n\n const items = fs.readdirSync(fullPath, { withFileTypes: true });\n for (const item of items) {\n const itemPath = path.join(fullPath, item.name);\n if (item.isDirectory()) {\n const manifest = getPackMetadata(itemPath);\n if (manifest) {\n const sumsPath = path.join(itemPath, 'integrity/sha256sums.txt');\n const packRootHash = computePackRootHash(sumsPath);\n inventory.packs.push({\n run_id: item.name,\n pack_path: path.relative(LAB_ROOT, itemPath),\n pack_root_hash: packRootHash || '00'.repeat(32),\n ...manifest\n });\n } else if (searchPath === 'test-vectors') {\n // Recurse a bit for test vectors if needed\n }\n }\n }\n }\n\n fs.writeFileSync(OUTPUT_FILE, JSON.stringify(inventory, null, 2));\n console.log(`✅ Inventory saved to ${OUTPUT_FILE}`);\n}\n\nrun();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/normalize-pack.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":20,"column":110,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":20,"endColumn":113,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[693,696],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[693,696],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":21,"column":103,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":21,"endColumn":106,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[800,803],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[800,803],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":30,"column":30,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":30,"endColumn":33,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1027,1030],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1027,1030],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":31,"column":25,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":31,"endColumn":28,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1057,1060],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1057,1060],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":32,"column":31,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":32,"endColumn":34,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1096,1099],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1096,1099],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":33,"column":29,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":33,"endColumn":32,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1130,1133],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1130,1133],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":127,"column":42,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":127,"endColumn":45,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4808,4811],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4808,4811],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":127,"column":50,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":127,"endColumn":53,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4816,4819],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4816,4819],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":147,"column":32,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":147,"endColumn":35,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5600,5603],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5600,5603],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":147,"column":38,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":147,"endColumn":41,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5606,5609],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5606,5609],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":164,"column":34,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":164,"endColumn":37,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[6279,6282],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[6279,6282],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":11,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport * as yaml from 'js-yaml';\n\n/**\n * normalize-pack.ts\n * Implements v0.10.2.1: Normalized Projection per governance SSOTs\n * \n * Reads: normalization-spec.yaml, hash-scope.yaml\n * Outputs: normalized_evidence.json, normalized_hash.txt\n */\n\nconst PROJECT_ROOT = process.cwd();\nconst GOVERNANCE_DIR = path.join(PROJECT_ROOT, 'governance/mappings');\nconst RUNS_DIR = path.join(PROJECT_ROOT, 'data/runs');\nconst DERIVED_DIR = path.join(PROJECT_ROOT, 'data/derived/normalized');\n\n// Load SSOTs\nconst normSpec = yaml.load(fs.readFileSync(path.join(GOVERNANCE_DIR, 'normalization-spec.yaml'), 'utf8')) as any;\nconst hashScope = yaml.load(fs.readFileSync(path.join(GOVERNANCE_DIR, 'hash-scope.yaml'), 'utf8')) as any;\n\ninterface NormalizedEvidence {\n _meta: {\n normalization_spec_version: string;\n hash_scope_version: string;\n source_run_id: string;\n generated_at: string;\n };\n manifest: Record;\n timeline: { events: any[] };\n artifacts: Record;\n verdict: Record;\n}\n\n/**\n * Normalize a single pack according to SSOT rules\n */\nfunction normalizePack(runId: string): { normalized: NormalizedEvidence; hash: string } | null {\n const packDir = path.join(RUNS_DIR, runId);\n\n if (!fs.existsSync(packDir)) {\n console.error(`❌ Pack not found: ${runId}`);\n return null;\n }\n\n // Load pack components\n const manifestPath = path.join(packDir, 'manifest.json');\n const timelinePath = path.join(packDir, 'timeline.json');\n const verdictPath = path.join(packDir, 'verdict.json');\n const planPath = path.join(packDir, 'artifacts', 'plan.json');\n const tracePath = path.join(packDir, 'artifacts', 'trace.json');\n\n const manifest = fs.existsSync(manifestPath) ? JSON.parse(fs.readFileSync(manifestPath, 'utf8')) : {};\n const timeline = fs.existsSync(timelinePath) ? JSON.parse(fs.readFileSync(timelinePath, 'utf8')) : { events: [] };\n const verdict = fs.existsSync(verdictPath) ? JSON.parse(fs.readFileSync(verdictPath, 'utf8')) : {};\n const plan = fs.existsSync(planPath) ? JSON.parse(fs.readFileSync(planPath, 'utf8')) : null;\n const trace = fs.existsSync(tracePath) ? JSON.parse(fs.readFileSync(tracePath, 'utf8')) : null;\n\n // Apply projection rules per normalization-spec.yaml\n const normalized: NormalizedEvidence = {\n _meta: {\n normalization_spec_version: normSpec.version,\n hash_scope_version: hashScope.version,\n source_run_id: runId,\n generated_at: new Date().toISOString()\n },\n manifest: {\n run_id: manifest.run_id || runId,\n scenario_id: manifest.scenario_id,\n scenario_family: manifest.scenario_family || deriveScenarioFamily(manifest.scenario_id, runId),\n ruleset_version: manifest.ruleset_version,\n substrate: manifest.substrate,\n producer_version: manifest.producer_version\n // timestamp: REDACTED per normalization-spec\n },\n timeline: {\n events: normalizeTimelineEvents(timeline.events || [])\n },\n artifacts: {\n 'plan.json': plan ? canonicalizeJson(plan) : null,\n 'trace.json': trace ? canonicalizeJson(trace) : null,\n 'verdict.json': verdict ? canonicalizeJson(verdict) : null\n },\n verdict: {\n status: verdict.status,\n reason_code: verdict.reason_code,\n admission: verdict.admission || { status: 'unknown' }\n }\n };\n\n // Generate canonical JSON for hashing (excludes _meta.generated_at)\n const hashableContent = createHashableContent(normalized);\n const hash = crypto.createHash('sha256').update(hashableContent).digest('hex');\n\n return { normalized, hash };\n}\n\n/**\n * Derive scenario family from scenario_id or run_id\n * Patterns: v05-d1-langgraph-pass-budget-allow → d1-budget\n */\nfunction deriveScenarioFamily(scenarioId: string | undefined, runId: string): string {\n if (scenarioId && scenarioId !== 'unknown') {\n const match = scenarioId.match(/^(d[1-4])-([a-z]+)/i);\n if (match) return `${match[1]}-${match[2]}`;\n }\n\n // Extract from run_id: v05-d1-langgraph-pass-budget-allow → d1-budget\n const runMatch = runId.match(/v0\\d+-(d[1-4])-[a-z]+-(?:pass|fail)-([a-z]+)/i);\n if (runMatch) {\n return `${runMatch[1]}-${runMatch[2]}`;\n }\n\n // Fallback: extract d1/d2/d3/d4 from run_id\n const domainMatch = runId.match(/d([1-4])/);\n if (domainMatch) {\n return `d${domainMatch[1]}`;\n }\n\n return 'unknown';\n}\n\n/**\n * Normalize timeline events per HP-10.2-03 (stable sort, redact timestamps)\n */\nfunction normalizeTimelineEvents(events: any[]): any[] {\n return events\n .map((event, idx) => ({\n event_id: event.event_id || event.id || `evt-${idx}`,\n event_type: event.event_type || event.type,\n actor: event.actor || event.agent || 'unknown',\n sequence: event.sequence ?? event.idx ?? idx,\n payload: event.payload ? canonicalizeJson(event.payload) : null\n // timestamp: REDACTED per normalization-spec\n }))\n .sort((a, b) => {\n // HP-10.2-03: stable_sort_by_sequence_then_event_id\n if (a.sequence !== b.sequence) return a.sequence - b.sequence;\n return String(a.event_id).localeCompare(String(b.event_id));\n });\n}\n\n/**\n * Canonicalize JSON per hash-scope.yaml rules\n */\nfunction canonicalizeJson(obj: any): any {\n if (obj === null || obj === undefined) return null;\n if (typeof obj !== 'object') {\n if (typeof obj === 'number') {\n // HP-10.2-02: 6 decimal precision, strip trailing zeros\n return parseFloat(obj.toFixed(6));\n }\n if (typeof obj === 'string') {\n // HP-10.2-04: normalize line endings, strip trailing whitespace per line\n return obj.split('\\n').map(line => line.replace(/\\s+$/, '')).join('\\n');\n }\n return obj;\n }\n if (Array.isArray(obj)) {\n return obj.map(item => canonicalizeJson(item));\n }\n // Object: sort keys alphabetically\n const sorted: Record = {};\n Object.keys(obj).sort().forEach(key => {\n const value = canonicalizeJson(obj[key]);\n if (value !== null && value !== undefined) {\n sorted[key] = value;\n }\n });\n return sorted;\n}\n\n/**\n * Create hashable content (excludes volatile fields)\n */\nfunction createHashableContent(normalized: NormalizedEvidence): string {\n // Clone and remove volatile fields\n const hashable = JSON.parse(JSON.stringify(normalized));\n delete hashable._meta.generated_at; // Volatile\n\n // Compact JSON with sorted keys (already done by canonicalize)\n return JSON.stringify(hashable, null, 0);\n}\n\n/**\n * Main execution\n */\nfunction main() {\n const args = process.argv.slice(2);\n\n if (args.length === 0) {\n console.log('Usage: npx tsx scripts/normalize-pack.ts | --all | --sample-set');\n process.exit(1);\n }\n\n let runIds: string[] = [];\n\n if (args[0] === '--all') {\n runIds = fs.readdirSync(RUNS_DIR).filter(d =>\n fs.statSync(path.join(RUNS_DIR, d)).isDirectory()\n );\n } else if (args[0] === '--sample-set') {\n // v0.10.2 minimum sample set: v05-* runs (cross-substrate)\n runIds = fs.readdirSync(RUNS_DIR).filter(d =>\n d.startsWith('v05-') && fs.statSync(path.join(RUNS_DIR, d)).isDirectory()\n );\n } else {\n runIds = args;\n }\n\n console.log(`📦 Normalizing ${runIds.length} packs...`);\n\n let successCount = 0;\n const results: Array<{ run_id: string; hash: string; scenario_family: string }> = [];\n\n for (const runId of runIds) {\n const result = normalizePack(runId);\n if (result) {\n // Ensure output directory exists\n const outputDir = path.join(DERIVED_DIR, runId);\n fs.mkdirSync(outputDir, { recursive: true });\n\n // Write outputs\n fs.writeFileSync(\n path.join(outputDir, 'normalized_evidence.json'),\n JSON.stringify(result.normalized, null, 2)\n );\n fs.writeFileSync(\n path.join(outputDir, 'normalized_hash.txt'),\n result.hash\n );\n\n console.log(`✅ ${runId} → ${result.hash.substring(0, 16)}...`);\n successCount++;\n results.push({\n run_id: runId,\n hash: result.hash,\n scenario_family: result.normalized.manifest.scenario_family\n });\n }\n }\n\n console.log(`\\n📊 Normalized ${successCount}/${runIds.length} packs`);\n console.log(`📁 Output: ${DERIVED_DIR}`);\n\n // Write summary for downstream processing\n if (results.length > 0) {\n fs.writeFileSync(\n path.join(DERIVED_DIR, '_normalization_summary.json'),\n JSON.stringify({\n generated_at: new Date().toISOString(),\n normalization_spec_version: normSpec.version,\n hash_scope_version: hashScope.version,\n results\n }, null, 2)\n );\n }\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ops/heartbeat.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'error' is defined but never used.","line":62,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":62,"endColumn":19}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import { execSync } from 'child_process';\nimport { readFileSync, writeFileSync, existsSync } from 'fs';\nimport { createHash } from 'crypto';\nimport { join } from 'path';\n\n/**\n * v0.12.1 Institutional Heartbeat Contract\n * \n * Runs all gates and appends the result to governance/heartbeat/history.json.\n * Uses the institutional schema for auditability.\n */\n\nconst VLAB_ROOT = join(process.cwd());\nconst HISTORY_PATH = join(VLAB_ROOT, 'governance/heartbeat/history.json');\nconst SEAL_PATH = join(VLAB_ROOT, 'governance/seals/SEAL-v0.12.1.md');\n\ninterface HeartbeatRecord {\n timestamp: string;\n baseline_tag: string;\n commit_sha: string;\n seal_sha256: string;\n gate_results: Record;\n drift: 0 | 1;\n node_version: string;\n}\n\nfunction getFileHash(path: string): string {\n if (!existsSync(path)) return 'NOT_FOUND';\n const content = readFileSync(path);\n return createHash('sha256').update(content).digest('hex');\n}\n\nasync function runHeartbeat() {\n console.log('💓 Starting v0.12.1 Institutional Heartbeat...');\n\n let drift: 0 | 1 = 0;\n let commitSha = '';\n const gate_results: Record = {};\n\n // Commands to verify\n const commands = [\n { id: 'gate-all', cmd: 'npm run gate:all' },\n { id: 'rel-01', cmd: 'npm run gate:release:01' },\n { id: 'sop-01', cmd: 'npm run gate:v12-sop' }\n ];\n\n try {\n // 1. Run Gates\n console.log('--- Executing Institutional Audit Suite ---');\n for (const { id, cmd } of commands) {\n try {\n execSync(cmd, { stdio: 'pipe' });\n gate_results[id] = 'PASS';\n } catch {\n gate_results[id] = 'FAIL';\n drift = 1;\n }\n }\n\n // 2. Get Commit SHA\n commitSha = execSync('git rev-parse HEAD').toString().trim();\n } catch (error) {\n drift = 1;\n console.error('❌ Heartbeat failed during execution.');\n }\n\n // 3. Prepare Record\n const record: HeartbeatRecord = {\n timestamp: new Date().toISOString(),\n baseline_tag: 'vlab-v0.12.1-institution',\n commit_sha: commitSha,\n seal_sha256: getFileHash(SEAL_PATH),\n gate_results,\n drift,\n node_version: process.version,\n };\n\n // 4. Update History\n let history: HeartbeatRecord[] = [];\n if (existsSync(HISTORY_PATH)) {\n try {\n history = JSON.parse(readFileSync(HISTORY_PATH, 'utf-8'));\n } catch {\n history = [];\n }\n }\n\n history.push(record);\n\n // Keep only last 12 heartbeats (1 year)\n if (history.length > 12) {\n history = history.slice(-12);\n }\n\n if (!existsSync(join(VLAB_ROOT, 'governance/heartbeat'))) {\n execSync(`mkdir -p ${join(VLAB_ROOT, 'governance/heartbeat')}`);\n }\n\n writeFileSync(HISTORY_PATH, JSON.stringify(history, null, 2));\n\n const resultText = drift === 0 ? '✅ PASS' : '⚠️ DRIFT DETECTED';\n console.log(`\\n${resultText} recorded: at ${record.timestamp}`);\n\n if (drift === 1) {\n process.exit(1);\n }\n}\n\nrunHeartbeat().catch(err => {\n console.error(err);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/preflight/debug-gate02.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":39,"column":41,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":39,"endColumn":44,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1124,1127],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1124,1127],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":47,"column":36,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":47,"endColumn":39,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1402,1405],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1402,1405],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":71,"column":69,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":71,"endColumn":72,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2514,2517],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2514,2517],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":3,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * PF-4 Debug Runner: Print all GATE-02 checks with failures\n * \n * Usage: npx tsx scripts/preflight/debug-gate02.ts \n */\n\nimport path from 'node:path';\nimport { ingest } from '../../lib/engine/ingest';\nimport { verify } from '../../lib/engine/verify';\n\nconst packPath = process.argv[2];\nif (!packPath) {\n console.error('Usage: npx tsx scripts/preflight/debug-gate02.ts ');\n process.exit(2);\n}\n\nasync function main() {\n const abs = path.resolve(packPath);\n\n console.log('='.repeat(60));\n console.log('PF-4 GATE-02 Debug Runner');\n console.log('='.repeat(60));\n console.log(`\\nPack: ${abs}\\n`);\n\n // Ingest pack\n const pack = await ingest(abs);\n console.log(`Pack ID: ${pack.manifest_raw?.pack_id || 'unknown'}\\n`);\n\n // Run verify\n const verifyReport = await verify(pack);\n\n console.log('='.repeat(60));\n console.log('GATE-02 Verification Results');\n console.log('='.repeat(60));\n console.log(`\\nAdmission: ${verifyReport.admission_status}`);\n\n // Count passes\n const checks = verifyReport.checks || [];\n const passCount = checks.filter((c: any) => c.status === 'PASS').length;\n console.log(`Checks: ${passCount}/${checks.length} PASS\\n`);\n\n // Print all checks\n console.log('Detailed Check Results:');\n console.log('-'.repeat(60));\n\n for (const checkItem of checks) {\n const check = checkItem as any;\n const status = check.status === 'PASS' ? '✅ PASS' : '❌ FAIL';\n console.log(`\\n${status} ${check.id || check.name || 'UNKNOWN_CHECK'}`);\n\n if (check.status !== 'PASS') {\n console.log(` Reason: ${check.message || check.reason || 'NO_REASON'}`);\n if (check.details) {\n console.log(` Details: ${JSON.stringify(check.details, null, 2)}`);\n }\n if (check.taxonomy) {\n console.log(` Taxonomy: ${check.taxonomy}`);\n }\n }\n }\n\n // Print blocking failures if any\n if (verifyReport.blocking_failures && verifyReport.blocking_failures.length > 0) {\n console.log('\\n' + '='.repeat(60));\n console.log('Blocking Failures:');\n console.log('='.repeat(60));\n for (const failure of verifyReport.blocking_failures) {\n console.log(`\\n- ${failure.taxonomy || 'UNKNOWN'}`);\n console.log(` Message: ${failure.message}`);\n if (failure.pointers && failure.pointers.length > 0) {\n console.log(` Pointers: ${failure.pointers.map((p: any) => p.artifact_path).join(', ')}`);\n }\n }\n }\n\n console.log('\\n' + '='.repeat(60));\n console.log(verifyReport.admission_status === 'ADMISSIBLE' ? '✅ ADMISSIBLE' : '❌ NOT_ADMISSIBLE');\n console.log('='.repeat(60) + '\\n');\n\n process.exit(verifyReport.admission_status === 'ADMISSIBLE' ? 0 : 1);\n}\n\nmain().catch((e) => {\n console.error('Error:', e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/preflight/test-gf-coverage.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":42,"column":63,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":42,"endColumn":66,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1329,1332],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1329,1332],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Phase 0.5 Preflight: GF Coverage Test\n * \n * Tests ruleset-1.0 behavior for GF-02~05 when only GF-01 artifacts present.\n * Uses existing evaluation reports to avoid re-running evaluation.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nconst SAMPLE_PACK_PATH = process.argv[2] || 'data/runs/sample-pass';\n\ninterface GFStatus {\n gf_id: string;\n status: string;\n has_requirements: boolean;\n}\n\nasync function runPreflightTest(packPath: string): Promise {\n console.log('='.repeat(60));\n console.log('Phase 0.5 Preflight: GF Coverage Test');\n console.log('='.repeat(60));\n console.log(`\\nAnalyzing pack: ${packPath}\\n`);\n\n // Read evaluation report \n const evalReportPath = path.join(packPath, 'evaluation.report.json');\n\n if (!fs.existsSync(evalReportPath)) {\n console.error(`❌ evaluation.report.json not found at ${evalReportPath}`);\n console.error(' Run evaluation first: npx tsx scripts/test-evaluate.ts ' + path.basename(packPath));\n process.exit(1);\n }\n\n const report = JSON.parse(fs.readFileSync(evalReportPath, 'utf-8'));\n\n if (!report.gf_verdicts) {\n console.error('❌ No GF verdicts in evaluation report');\n process.exit(1);\n }\n\n // Analyze GF verdicts\n const gfStatuses: GFStatus[] = report.gf_verdicts.map((v: any) => ({\n gf_id: v.gf_id,\n status: v.status,\n has_requirements: v.requirements?.length > 0\n }));\n\n // Display results\n console.log('GF Verdict Summary:');\n console.log('-'.repeat(60));\n\n for (const gf of gfStatuses) {\n const statusIcon = gf.status === 'PASS' ? '✅' :\n gf.status === 'FAIL' ? '❌' :\n gf.status === 'NOT_EVALUATED' ? '⏭️' : '⚠️';\n\n console.log(`${statusIcon} ${gf.gf_id.toUpperCase().padEnd(10)} ${gf.status.padEnd(15)} (${gf.has_requirements ? 'has requirements' : 'no requirements'})`);\n }\n\n console.log('\\n' + '='.repeat(60));\n console.log('Preflight Analysis:');\n console.log('='.repeat(60));\n\n // Check GF-01 (must be PASS for GF-01 spine)\n const gf01 = gfStatuses.find(g => g.gf_id === 'gf-01');\n if (!gf01 || gf01.status !== 'PASS') {\n console.error('⚠️ WARNING: GF-01 is not PASS. This pack may not be suitable for preflight.');\n } else {\n console.log('✅ GF-01: PASS (as expected for GF-01 spine)');\n }\n\n // Check GF-02~05\n const others = gfStatuses.filter(g => g.gf_id !== 'gf-01');\n\n console.log('\\nGF-02~05 Behavior:');\n for (const gf of others) {\n console.log(` ${gf.gf_id.toUpperCase()}: ${gf.status}`);\n }\n\n // Verdict\n console.log('\\n' + '='.repeat(60));\n console.log('Conclusion:');\n console.log('='.repeat(60));\n\n const allOthersNotEvaluated = others.every(g => g.status === 'NOT_EVALUATED' || g.status === 'SKIP');\n const someOthersFail = others.some(g => g.status === 'FAIL');\n\n if (allOthersNotEvaluated) {\n console.log('✅ SAFE TO PROCEED: GF-02~05 are NOT_EVALUATED/SKIP when artifacts absent.');\n console.log(' v0.1 can focus on GF-01 spine without triggering FAIL states.');\n console.log('\\n ✓ Cross-substrate packs only need GF-01 artifacts (context + plan + trace)');\n console.log(' ✓ UI will show GF-02~05 as NOT_EVALUATED (no strength claim drift)');\n } else if (someOthersFail) {\n console.log('⚠️ CAUTION: Some GF-02~05 show FAIL when artifacts absent.');\n console.log(' v0.1 cross-substrate packs have two options:');\n console.log(' A) Include artifacts for FAIL flows (expanding scope beyond GF-01)');\n console.log(' B) Accept FAIL and ensure UI clearly indicates:');\n console.log(' - FAIL = \"required artifacts missing\" (not \"incorrect behavior\")');\n console.log(' - v0.1 scope is GF-01 spine only (presence-level)');\n } else {\n console.log('✅ Mixed behavior: Some GF-02~05 FAIL, some NOT_EVALUATED.');\n console.log(' Ensure UI distinguishes FAIL vs NOT_EVALUATED semantics.');\n }\n\n console.log('\\n' + '='.repeat(60));\n console.log('Next Steps:');\n console.log('='.repeat(60));\n console.log('1. Generate preflight report: governance/preflight/ruleset-1.0-gf-coverage.md');\n console.log('2. Proceed to Phase 1 if conclusion is SAFE TO PROCEED\\n');\n}\n\n// Run test\nconst packPath = path.resolve(process.cwd(), SAMPLE_PACK_PATH);\n\nif (!fs.existsSync(packPath)) {\n console.error(`❌ Pack not found: ${packPath}`);\n process.exit(1);\n}\n\nrunPreflightTest(packPath).catch(err => {\n console.error('❌ Preflight test failed:', err);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/recheck-hash.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/recompute-pack-hashes.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/reconcile-allowlist.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/reconcile-assets.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":21,"column":20,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":21,"endColumn":23,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[831,834],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[831,834],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":22,"column":27,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":22,"endColumn":30,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[914,917],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[914,917],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":23,"column":22,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":23,"endColumn":25,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1000,1003],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1000,1003],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":25,"column":19,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":25,"endColumn":22,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1078,1081],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1078,1081],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":36,"column":33,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":36,"endColumn":36,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1410,1413],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1410,1413],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":39,"column":34,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":39,"endColumn":37,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1514,1517],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1514,1517],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":55,"column":62,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":55,"endColumn":65,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2185,2188],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2185,2188],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":56,"column":33,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":56,"endColumn":36,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2237,2240],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2237,2240],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":66,"column":76,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":66,"endColumn":79,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2636,2639],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2636,2639],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":68,"column":32,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":68,"endColumn":35,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2721,2724],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2721,2724],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":78,"column":47,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":78,"endColumn":50,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[3038,3041],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[3038,3041],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":11,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from 'fs';\nimport path from 'path';\nimport yaml from 'js-yaml';\n\nconst LAB_ROOT = process.cwd();\nconst INVENTORY_FILE = path.join(LAB_ROOT, 'inventory/asset-inventory.json');\nconst RUNSETS_FILE = path.join(LAB_ROOT, 'governance/runsets.yaml');\nconst SUBSTRATE_INDEX_FILE = path.join(LAB_ROOT, 'data/curated-runs/substrate-index.yaml');\nconst ALLOWLIST_FILE = path.join(LAB_ROOT, 'data/curated-runs/allowlist.yaml');\nconst REPORT_FILE = path.join(LAB_ROOT, 'inventory/reconciliation-report.json');\n\nasync function run() {\n console.log('⚖️ Reconciling inventory with SSOT...');\n\n if (!fs.existsSync(INVENTORY_FILE)) {\n console.error('Inventory file missing. Run inventory-assets.ts first.');\n return;\n }\n\n const inventory = JSON.parse(fs.readFileSync(INVENTORY_FILE, 'utf-8'));\n const runsets: any = yaml.load(fs.readFileSync(RUNSETS_FILE, 'utf-8'));\n const substrateIndex: any = yaml.load(fs.readFileSync(SUBSTRATE_INDEX_FILE, 'utf-8'));\n const allowlist: any = yaml.load(fs.readFileSync(ALLOWLIST_FILE, 'utf-8'));\n\n const report: any = {\n reconciled_at: new Date().toISOString(),\n missing_assets_from_ssot: [],\n unregistered_assets_in_repo: [],\n hash_mismatches: [],\n orphaned_runs: [],\n unknown_substrates: [],\n deprecated_paths: []\n };\n\n const physicalPackMap = new Map();\n inventory.packs.forEach((p: any) => physicalPackMap.set(p.run_id, p));\n\n // 1. SSOT -> Physical\n allowlist.runs.forEach((run: any) => {\n const physical = physicalPackMap.get(run.run_id);\n if (!physical) {\n report.missing_assets_from_ssot.push({ run_id: run.run_id, expected_path: `data/runs/${run.run_id}` });\n } else {\n if (run.pack_root_hash !== physical.pack_root_hash && run.pack_root_hash !== '00'.repeat(32)) {\n report.hash_mismatches.push({\n run_id: run.run_id,\n ssot_hash: run.pack_root_hash,\n physical_hash: physical.pack_root_hash\n });\n }\n }\n });\n\n // 2. Physical -> SSOT\n const allowlistedRunIds = new Set(allowlist.runs.map((r: any) => r.run_id));\n inventory.packs.forEach((p: any) => {\n if (!allowlistedRunIds.has(p.run_id)) {\n // Check if it should be registered\n if (p.pack_path.startsWith('data/runs')) {\n report.unregistered_assets_in_repo.push({ run_id: p.run_id, path: p.pack_path });\n }\n }\n });\n\n // 3. Substrate Index check\n const registeredSubstrates = new Set(substrateIndex.substrates.map((s: any) => s.id));\n const usedSubstrates = new Set();\n allowlist.runs.forEach((r: any) => usedSubstrates.add(r.substrate));\n\n usedSubstrates.forEach(s => {\n if (!registeredSubstrates.has(s)) {\n report.unknown_substrates.push({ substrate_id: s });\n }\n });\n\n // 4. Runsets consistency\n const allRunsetIds = new Set();\n Object.values(runsets.sets).forEach((set: any) => {\n if (set.includes) set.includes.forEach((id: string) => allRunsetIds.add(id));\n });\n\n allowlistedRunIds.forEach(id => {\n if (!allRunsetIds.has(id)) {\n report.orphaned_runs.push({ run_id: id, reason: 'Not referenced in runsets.yaml' });\n }\n });\n\n fs.writeFileSync(REPORT_FILE, JSON.stringify(report, null, 2));\n console.log(`✅ Reconciliation report saved to ${REPORT_FILE}`);\n}\n\nrun();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/release/seal-ceremony.ts","messages":[{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":34,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":34,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[1101,1104],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[1101,1104],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":59,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":59,"endColumn":15},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":72,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":72,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[2327,2330],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[2327,2330],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":89,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":89,"endColumn":15},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":102,"column":77,"nodeType":null,"messageId":"unusedVar","endLine":102,"endColumn":78},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":125,"column":81,"nodeType":null,"messageId":"unusedVar","endLine":125,"endColumn":82},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":127,"column":17,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":127,"endColumn":20,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[4675,4678],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[4675,4678],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":132,"column":77,"nodeType":null,"messageId":"unusedVar","endLine":132,"endColumn":78},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":141,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":141,"endColumn":15},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":237,"column":41,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":237,"endColumn":44,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[7973,7976],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[7973,7976],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":239,"column":16,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":239,"endColumn":19,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8080,8083],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8080,8083],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":260,"column":32,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":260,"endColumn":35,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[8658,8661],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[8658,8661],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":12,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env tsx\n/**\n * SEAL CEREMONY SCRIPT\n * \n * Generates the \"Three Artifacts\" of a valid release:\n * 1. seal.md (Summary & Sign-off)\n * 2. gate-report.json (Automated Verification Evidence)\n * 3. audit-report.json (Local Deployment Health)\n * \n * Governance: Model A (Unified Surface Only)\n * - V2 Gates: Core Only (no legacy routes)\n * - Audit: 11 Critical Routes\n * \n * Usage: npm run release:seal\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport { execSync, spawn } from 'child_process';\n\nconst BUILD_ID = `rc-${new Date().toISOString().replace(/[-:T.]/g, '').slice(0, 14)}`;\nconst RELEASE_DIR = path.join(process.cwd(), 'releases', 'unified', BUILD_ID);\n\nfunction ensureDir(dir: string) {\n if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });\n}\n\nfunction runCmd(cmd: string, desc: string): string {\n console.log(`\\n⏳ [${desc}] Running: ${cmd}...`);\n try {\n const output = execSync(cmd, { encoding: 'utf-8', stdio: 'pipe' }); // Pipe mainly to capture output for report\n console.log(`✅ [${desc}] Success`);\n return output;\n } catch (e: any) {\n console.error(`❌ [${desc}] Failed`);\n console.error(e.stdout || e.message);\n throw e;\n }\n}\n\nasync function main() {\n console.log(`🔐 STARTING SEAL CEREMONY: ${BUILD_ID}`);\n ensureDir(RELEASE_DIR);\n\n // 0. Determine Lint Policy (Governance)\n const nextConfigPath = path.join(process.cwd(), 'next.config.ts');\n let lintPolicy = 'strict';\n if (fs.existsSync(nextConfigPath)) {\n const content = fs.readFileSync(nextConfigPath, 'utf8');\n if (content.includes('ignoreDuringBuilds: true')) {\n lintPolicy = 'tolerant';\n }\n }\n console.log(`📜 [Governance] Lint Policy: ${lintPolicy.toUpperCase()}`);\n\n // 1. Build\n try {\n runCmd('npm run build', 'Build Verification');\n } catch (e) {\n console.error('Build failed. Aborting seal.');\n process.exit(1);\n }\n\n // 2. Gates (Unified Set)\n // Run all gates and capture output. We expect PASS.\n let gateExitCode = 0;\n let gateOutput = '';\n try {\n // We run gate:all, which uses gate:v2:all (Core only check)\n gateOutput = runCmd('npm run gate:all', 'Unified Gates');\n gateExitCode = 0; // Success if runCmd doesn't throw\n } catch (e: any) {\n gateExitCode = 1;\n gateOutput = e.stdout || e.message;\n console.error('Gates failed - Seal will be marked FAIL but artifacts preserved for triage.');\n }\n\n // 3. Lint Audit (Debt Record)\n // Regardless of policy, we record the debt.\n let lintAuditOutput = '';\n try {\n // Run the summary script\n runCmd('npx tsx scripts/audit/lint-summary.ts', 'Lint Debt Audit');\n // Read the report to embed summary in seal or just keep file\n if (fs.existsSync('reports/lint-audit.json')) {\n fs.copyFileSync('reports/lint-audit.json', path.join(RELEASE_DIR, 'lint-audit.json'));\n lintAuditOutput = fs.readFileSync(path.join(RELEASE_DIR, 'lint-audit.json'), 'utf8');\n }\n } catch (e) {\n console.warn('⚠️ Lint audit failed to run');\n }\n\n // 4. Local Audit\n // We must serve the production build we just created.\n // Conflicting dev servers must be killed first.\n let auditOutput = '';\n let auditExit = 0;\n\n try {\n console.log('⏳ [Local Audit] Preparing server...');\n // 1. Kill any processing running on 3000 (best effort)\n try { execSync(\"lsof -t -i:3000 | xargs kill -9 || true\"); } catch (e) { }\n\n // 2. Start production server in background\n console.log('⏳ [Local Audit] Starting production server (npm start)...');\n const server = spawn('npm', ['run', 'start'], {\n detached: true,\n stdio: 'ignore', // Ignore stdio to prevent hanging, we assume it works if port opens\n cwd: process.cwd()\n });\n\n // 3. Wait for port 3000 to be ready (poll)\n console.log('⏳ [Local Audit] Waiting for server to be ready...');\n // Simple polling delay\n await new Promise(resolve => setTimeout(resolve, 5000));\n\n // 4. Run Audit\n // Note: http-health-local-01 now soft-skips if server fails, so this shouldn't crash unless script errors\n auditOutput = runCmd('npm run audit:http:local', 'Local Audit');\n\n // 5. Cleanup\n if (server.pid) {\n process.kill(-server.pid!); // formatting for negative PID if detached group, but simple kill works for spawn\n // Actually, safe way:\n try { execSync(\"lsof -t -i:3000 | xargs kill -9 || true\"); } catch (e) { }\n }\n } catch (e: any) {\n auditExit = 1;\n auditOutput = e.stdout || e.message;\n console.error('Audit failed');\n // Ensure cleanup\n try { execSync(\"lsof -t -i:3000 | xargs kill -9 || true\"); } catch (e) { }\n }\n\n // 5. Generate Artifacts & Seal\n\n // 5.0 Capture Git SHA\n let gitSha = 'UNKNOWN';\n try {\n gitSha = execSync('git rev-parse HEAD', { encoding: 'utf-8' }).trim();\n } catch (e) {\n console.warn('⚠️ Failed to capture Git SHA');\n }\n\n // Write Logs\n fs.writeFileSync(path.join(RELEASE_DIR, 'gate-report.log'), gateOutput || 'No gate output');\n fs.writeFileSync(path.join(RELEASE_DIR, 'audit-report.log'), auditOutput || 'No audit output');\n\n const overallStatus = (gateExitCode === 0 && auditExit === 0) ? 'PASS' : 'FAIL';\n\n // 5.1 lint stats\n let lintErrors = 0;\n if (lintAuditOutput) {\n try {\n lintErrors = JSON.parse(lintAuditOutput).total_errors || 0;\n } catch { }\n }\n\n // 5.2 Manifest.json (Machine Readable)\n const manifest = {\n build_id: BUILD_ID,\n git_sha: gitSha,\n date: new Date().toISOString(),\n status: overallStatus,\n policy: {\n build: lintPolicy,\n deadline: '2026-06-30'\n },\n metrics: {\n lint_errors: lintErrors,\n audit_routes: 11 // Hardcoded for V2 model A\n },\n artifacts: {\n seal: 'seal.md',\n manifest: 'manifest.json',\n gate_report: 'gate-report.log',\n audit_report: 'audit-report.log',\n lint_audit: 'lint-audit.json'\n },\n gate_suite: [\n 'gate:v1:all',\n 'gate:v2:all',\n 'gate:unified:*'\n ]\n };\n fs.writeFileSync(path.join(RELEASE_DIR, 'manifest.json'), JSON.stringify(manifest, null, 2));\n\n // 5.3 Seal.md (Human Readable)\n const sealContent = `\n# Validation Lab Seal: ${BUILD_ID}\n\n**Status**: ${overallStatus}\n**Date**: ${manifest.date}\n**Git SHA**: \\`${gitSha}\\`\n**Build Policy**: ${lintPolicy}\n\n## Components\n| Component | Status | Notes |\n|-----------|--------|-------|\n| Build | PASS | Next.js Production Build |\n| Gates | ${gateExitCode === 0 ? 'PASS' : 'FAIL'} | Unified Suite |\n| Audit | ${auditExit === 0 ? 'PASS' : 'FAIL'} | Runtime HTTP Checks |\n\n## Governance\n- **Lint Policy**: ${lintPolicy.toUpperCase()} ${lintPolicy === 'tolerant' ? '(See governance/build-policy.md)' : ''}\n- **Artifacts**: verification-lab-v2\n- **Projection**: Mixed V1 (Simulated) + V2 (Real)\n- **Metrics**: ${lintErrors} Lint Errors (Target: 0)\n\n## Evidence Pointers\n- [Manifest](./manifest.json) (Machine Readable)\n- [Gate Log](./gate-report.log)\n- [Audit Log](./audit-report.log)\n- [Lint Audit](./lint-audit.json)\n\n## Execution Summary\n### Gate Output Peak\n\\`\\`\\`\n${gateOutput.slice(0, 1000)}...\n\\`\\`\\`\n`;\n\n fs.writeFileSync(path.join(RELEASE_DIR, 'seal.md'), sealContent.trim());\n\n // 6. Update Release Index (SSOT)\n updateReleaseIndex(manifest);\n\n console.log(`\\n📦 Artifacts generated in ${RELEASE_DIR}`);\n if (overallStatus === 'PASS') {\n console.log(`✅ SEAL VALID. Ready for tagging.`);\n } else {\n console.log(`❌ SEAL INVALID. Check logs.`);\n process.exit(1);\n }\n}\n\nfunction updateReleaseIndex(newRelease: any) {\n const indexPath = path.join(process.cwd(), 'releases', 'unified', 'index.json');\n let index: any = { releases: [] };\n\n if (fs.existsSync(indexPath)) {\n try {\n index = JSON.parse(fs.readFileSync(indexPath, 'utf8'));\n } catch { }\n }\n\n // Add new release to Top\n index.releases.unshift({\n id: newRelease.build_id,\n date: newRelease.date,\n status: newRelease.status,\n git_sha: newRelease.git_sha,\n policy: newRelease.policy.build,\n metrics: newRelease.metrics,\n artifacts: newRelease.artifacts\n });\n\n // Keep unique by ID\n const unique = new Map();\n index.releases.forEach((r: any) => {\n if (!unique.has(r.id)) unique.set(r.id, r);\n });\n index.releases = Array.from(unique.values());\n\n fs.writeFileSync(indexPath, JSON.stringify(index, null, 2));\n console.log(`📚 Updated Release Index: ${indexPath}`);\n}\n\nmain().catch(e => {\n console.error(e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/ruleset/generate-ruleset-diff.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'generateExplanationEH1' is defined but never used. Allowed unused vars must match /^_/u.","line":78,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":78,"endColumn":32},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'fromPath' is defined but never used. Allowed unused args must match /^_/u.","line":447,"column":57,"nodeType":null,"messageId":"unusedVar","endLine":447,"endColumn":65},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'toPath' is defined but never used. Allowed unused args must match /^_/u.","line":447,"column":67,"nodeType":null,"messageId":"unusedVar","endLine":447,"endColumn":73},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'fromHash' is defined but never used. Allowed unused args must match /^_/u.","line":447,"column":75,"nodeType":null,"messageId":"unusedVar","endLine":447,"endColumn":83},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'toHash' is defined but never used. Allowed unused args must match /^_/u.","line":447,"column":85,"nodeType":null,"messageId":"unusedVar","endLine":447,"endColumn":91}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":5,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Ruleset Diff Generator (MUST-3\n\n)\n * \n * v0.8 (frozen): Generates diff.json and index.json (immutable, hash-locked)\n * v0.9+ (enhanced): Generates diff.enhanced.json and index.enhanced.json (parallel files)\n * \n * Usage: \n * v0.8 mode: node scripts/ruleset/generate-ruleset-diff.mjs --from ruleset-1.0 --to ruleset-1.1\n * v0.9 enhanced: node scripts/ruleset/generate-ruleset-diff.mjs --enhanced --explain-profile eh-1 --from ruleset-1.0 --to ruleset-1.1\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { execSync } from 'child_process';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, '../..');\n\n// ============================================================================\n// FREEZE GUARD (v0.8 Protection)\n// ============================================================================\nconst FROZEN_V08_FILES = ['index.json', 'diff.json'];\n\nfunction validateOutputPath(outputPath, mode) {\n const isFrozen = FROZEN_V08_FILES.some(frozen =>\n outputPath.endsWith(frozen) && !outputPath.includes('.enhanced') && mode !== 'repro-pack'\n );\n\n if (isFrozen) {\n throw new Error(\n `🔒 FROZEN: v0.8 artifact \"${outputPath}\" is immutable.\\n` +\n ` To generate enhanced artifacts, use: --enhanced flag\\n` +\n ` v0.8 hashes are locked in CAPABILITY-SEAL.v0.8.0.md`\n );\n }\n\n if (mode === 'repro-pack') {\n const ok = outputPath.endsWith('repro-pack.json') || outputPath.endsWith('index.repro.json');\n if (!ok) {\n throw new Error(`🔒 FROZEN: repro-pack mode may only write repro-pack.json or index.repro.json. Got: ${outputPath}`);\n }\n }\n}\n\n// ============================================================================\n// BANNED WORD LINTER (Semantic Boundary Enforcement)\n// ============================================================================\nconst BANNED_WORDS = new RegExp(\n '\\\\b(certified?|certification|endorsed?|endorsement|endorsing|' +\n 'ranked?|ranking|scored?|scoring|compliant?|compliance|' +\n 'recommended?|recommendation|blacklist(ed)?|whitelist(ed)?|' +\n 'better|worse|best|worst|superior|inferior|' +\n 'stricter|weaker|stronger|tighter|looser|' +\n 'safer|secure[dr]?|mature[dr]?|maturity|' +\n 'approved?|approval|accredited?|accreditation)\\\\b',\n 'i'\n);\n\nfunction lintExplanation(explanation, context = {}) {\n const match = explanation.match(BANNED_WORDS);\n if (match) {\n throw new Error(\n `❌ BANNED WORD detected: \"${match[0]}\" in explanation\\n` +\n ` Context: ${JSON.stringify(context)}\\n` +\n ` Explanation: ${explanation}\\n` +\n ` Reason: Evaluative/certification language violates non-endorsement boundary`\n );\n }\n}\n\n// ============================================================================\n// TEMPLATE eh-1 (Deterministic Explanation)\n// ============================================================================\nfunction generateExplanationEH1(changeData) {\n const {\n changeType = 'OTHER_STRUCTURAL_CHANGE',\n field = 'unknown_field',\n beforeValue = 'N/A',\n afterValue = 'N/A',\n domain = 'unknown_domain',\n clauseId = 'unknown_clause',\n impactSurface = 'unknown_surface'\n } = changeData;\n\n const explanation =\n `[What changed]: ${field} value changed from \"${beforeValue}\" to \"${afterValue}\". ` +\n `[Where applies]: ${domain}/${clauseId}. ` +\n `[Evidence impact]: Affects ${impactSurface} validation. ` +\n `[Verify]: Compare YAML files in data/rulesets/.`;\n\n // Lint before returning\n lintExplanation(explanation, { domain, clauseId, changeType });\n\n return explanation;\n}\n\n// ============================================================================\n// HELPER: SHA256\n// ============================================================================\nimport crypto from 'crypto';\n\nfunction sha256File(filePath) {\n const buf = fs.readFileSync(filePath);\n return crypto.createHash('sha256').update(buf).digest('hex');\n}\n\nfunction assertNoBannedWords(text, where) {\n if (!text) return;\n if (BANNED_WORDS.test(text)) {\n throw new Error(`❌ Forbidden evaluative language detected in ${where}: ${text}`);\n }\n}\n\n// ============================================================================\n// CLI ARGUMENT PARSING\n// ============================================================================\nconst args = process.argv.slice(2);\nconst fromIndex = args.indexOf('--from');\nconst toIndex = args.indexOf('--to');\nconst enhancedMode = args.includes('--enhanced');\nconst reproPack = args.includes('--repro-pack');\nconst explainProfileIndex = args.indexOf('--explain-profile');\nconst reproProfileIndex = args.indexOf('--repro-profile');\nconst explainProfile = explainProfileIndex !== -1 ? args[explainProfileIndex + 1] : 'eh-1';\nconst reproProfile = reproProfileIndex !== -1 ? args[reproProfileIndex + 1] : 'rp-1';\n\nif (fromIndex === -1 || toIndex === -1) {\n console.error('Usage: node generate-ruleset-diff.mjs --from ruleset-1.0 --to ruleset-1.1 [--enhanced] [--explain-profile eh-1] [--repro-pack] [--repro-profile rp-1]');\n process.exit(1);\n}\n\nconst fromVersion = args[fromIndex + 1];\nconst toVersion = args[toIndex + 1];\n\nconst fromPath = path.join(PROJECT_ROOT, 'data/rulesets', fromVersion);\nconst toPath = path.join(PROJECT_ROOT, 'data/rulesets', toVersion);\n\nconst modeLabel = reproPack ? '(Repro Pack Mode)' : enhancedMode ? '(Enhanced Mode)' : '(v0.8 Mode)';\nconsole.log(`\\n═══════════════════════════════════════════════════════════`);\nconsole.log(` MUST-3 Ruleset Diff Generator ${modeLabel}`);\nconsole.log(`═══════════════════════════════════════════════════════════\\n`);\nconsole.log(`From: ${fromVersion}`);\nconsole.log(`To: ${toVersion}`);\nif (enhancedMode) {\n console.log(`Template: ${explainProfile}\\n`);\n} else if (reproPack) {\n console.log(`Repro Profile: ${reproProfile}\\n`);\n} else {\n console.log();\n}\n\n// Verify paths exist\nif (!fs.existsSync(fromPath)) {\n console.error(`❌ Error: ${fromPath} does not exist`);\n process.exit(1);\n}\n\nif (!fs.existsSync(toPath)) {\n console.error(`❌ Error: ${toPath} does not exist`);\n process.exit(1);\n}\n\n// Compute root hashes (reproducible)\nfunction computeRootHash(rulesetPath) {\n try {\n const cmd = `find ${rulesetPath} -type f \\\\( -name \"*.yaml\" -o -name \"*.json\" \\\\) | sort | shasum -a 256`;\n const output = execSync(cmd, { cwd: PROJECT_ROOT, encoding: 'utf-8' });\n return output.trim().split(' ')[0];\n } catch (error) {\n console.error(`❌ Error computing hash for ${rulesetPath}: ${error.message}`);\n return 'ERROR';\n }\n}\n\nconst fromHash = computeRootHash(fromPath);\nconst toHash = computeRootHash(toPath);\n\nconsole.log(`From hash: ${fromHash}`);\nconsole.log(`To hash: ${toHash}\\n`);\n\n// ============================================================================\n// REPRO PACK MODE (Early exit)\n// ============================================================================\nif (reproPack) {\n generateReproPackRp1({\n fromVersion,\n toVersion,\n fromPath,\n toPath,\n fromHash,\n toHash,\n reproProfile\n });\n process.exit(0);\n}\n\n// ============================================================================\n// DIFF REPORT GENERATION\n// ============================================================================\nconst diffId = `${fromVersion}_to_${toVersion}`;\nconst outputDir = path.join(PROJECT_ROOT, 'export/ruleset-diff', diffId);\nfs.mkdirSync(outputDir, { recursive: true });\n\nif (enhancedMode) {\n // v0.9+ Enhanced Mode\n const enhancedReport = {\n diff_version: \"1.1-enhanced\",\n explanation_profile: {\n mode: \"deterministic-template\",\n template_version: explainProfile\n },\n generated_at: new Date().toISOString(),\n from: {\n ruleset_version: fromVersion,\n path: `data/rulesets/${fromVersion}`,\n root_hash_sha256: fromHash\n },\n to: {\n ruleset_version: toVersion,\n path: `data/rulesets/${toVersion}`,\n root_hash_sha256: toHash\n },\n domain_delta: {\n \"D1\": { added_count: 0, removed_count: 0, modified_count: 0, impacted_clause_ids: [], impacted_requirement_ids: [] },\n \"D2\": { added_count: 0, removed_count: 0, modified_count: 0, impacted_clause_ids: [], impacted_requirement_ids: [] },\n \"D3\": { added_count: 0, removed_count: 0, modified_count: 0, impacted_clause_ids: [], impacted_requirement_ids: [] },\n \"D4\": { added_count: 0, removed_count: 0, modified_count: 0, impacted_clause_ids: [], impacted_requirement_ids: [] }\n },\n scope: {\n domains: [\"D1\", \"D2\", \"D3\", \"D4\"],\n notes: \"Enhanced diff with change_type classification and impact_surface mapping.\"\n },\n summary: {\n breaking_changes: 0,\n non_breaking_changes: 0,\n added: 0,\n removed: 0,\n modified: 0,\n note: `Generated with template ${explainProfile} for deterministic explanations`\n },\n clause_delta: {\n added: [],\n removed: [],\n modified: [],\n note: \"Clause-level diff requires full ruleset parser (enhanced schema ready)\"\n },\n requirement_delta: {\n added: [],\n removed: [],\n modified: [],\n note: \"Requirement-level diff requires structured extraction (enhanced schema ready)\"\n },\n non_endorsement_boundary: [\n \"This enhanced diff report explains ruleset evolution with deterministic templates.\",\n \"It MUST NOT be interpreted as certification, endorsement, or ranking of any framework/vendor.\",\n \"change_type and impact_surface fields describe structural changes, not framework quality.\"\n ],\n reproducibility: {\n command: `node scripts/ruleset/generate-ruleset-diff.mjs --enhanced --explain-profile ${explainProfile} --from ${fromVersion} --to ${toVersion}`,\n hash_computation: `find data/rulesets/ -type f \\\\( -name \"*.yaml\" -o -name \"*.json\" \\\\) | sort | shasum -a 256`,\n template_version: explainProfile\n }\n };\n\n const outputFile = path.join(outputDir, 'diff.enhanced.json');\n validateOutputPath(outputFile); // Freeze guard check\n fs.writeFileSync(outputFile, JSON.stringify(enhancedReport, null, 2));\n\n console.log(`✅ Enhanced diff report generated:`);\n console.log(` ${path.relative(PROJECT_ROOT, outputFile)}\\n`);\n\n // Update enhanced index\n updateEnhancedIndex(enhancedReport, diffId);\n\n} else {\n // v0.8 Mode (Original - kept for backward compatibility, but frozen)\n console.error(`⚠️ WARNING: v0.8 mode writes to frozen artifacts.`);\n console.error(` This should only be used for initial setup.`);\n console.error(` For new diffs, use: --enhanced flag\\n`);\n\n const diffReport = {\n diff_version: \"1.0.0\",\n generated_at: new Date().toISOString(),\n from: {\n ruleset_version: fromVersion,\n path: `data/rulesets/${fromVersion}`,\n root_hash_sha256: fromHash\n },\n to: {\n ruleset_version: toVersion,\n path: `data/rulesets/${toVersion}`,\n root_hash_sha256: toHash\n },\n scope: {\n domains: [\"D1\", \"D2\", \"D3\", \"D4\"],\n notes: \"Diff is about requirement text and clause mapping, not about framework quality.\"\n },\n summary: {\n breaking_changes: 0,\n non_breaking_changes: 0,\n added: 0,\n removed: 0,\n modified: 0,\n note: \"Detailed clause-by-clause diff requires full ruleset parser (deferred to future enhancement)\"\n },\n clause_delta: {\n added: [],\n removed: [],\n modified: [],\n note: \"Clause-level diff not yet implemented; requires YAML parsing and clause ID tracking\"\n },\n requirement_delta: {\n added: [],\n removed: [],\n modified: [],\n note: \"Requirement-level diff not yet implemented; requires structured requirement extraction\"\n },\n non_endorsement_boundary: [\n \"This diff report explains ruleset evolution only.\",\n \"It MUST NOT be interpreted as certification, endorsement, or ranking of any framework/vendor.\",\n \"Changes to rulesets reflect governance decisions about evidence requirements, not substrate quality.\"\n ],\n reproducibility: {\n command: `node scripts/ruleset/generate-ruleset-diff.mjs --from ${fromVersion} --to ${toVersion}`,\n hash_computation: `find data/rulesets/ -type f \\\\( -name \"*.yaml\" -o -name \"*.json\" \\\\) | sort | shasum -a 256`\n }\n };\n\n const outputFile = path.join(outputDir, 'diff.json');\n validateOutputPath(outputFile); // This will throw in freeze mode\n fs.writeFileSync(outputFile, JSON.stringify(diffReport, null, 2));\n\n console.log(`✅ Diff report generated:`);\n console.log(` ${path.relative(PROJECT_ROOT, outputFile)}\\n`);\n\n // Update v0.8 index\n updateIndex(diffReport, diffId);\n}\n\n// ============================================================================\n// INDEX UPDATE FUNCTIONS\n// ============================================================================\nfunction updateEnhancedIndex(report, diffId) {\n const indexPath = path.join(PROJECT_ROOT, 'export/ruleset-diff/index.enhanced.json');\n\n let index = {\n index_version: \"1.1-enhanced\",\n enhanced_mode: true,\n template_version: explainProfile,\n generated_at: new Date().toISOString(),\n diffs: []\n };\n\n if (fs.existsSync(indexPath)) {\n const existing = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));\n index.diffs = existing.diffs || [];\n }\n\n // Remove existing entry for this diff (if any)\n index.diffs = index.diffs.filter(d => d.diff_id !== diffId);\n\n // Add new entry\n index.diffs.push({\n diff_id: diffId,\n from: report.from.ruleset_version,\n to: report.to.ruleset_version,\n from_hash: report.from.root_hash_sha256,\n to_hash: report.to.root_hash_sha256,\n path: `export/ruleset-diff/${diffId}/diff.enhanced.json`,\n generated_at: report.generated_at,\n template_version: explainProfile\n });\n\n // Sort by from/to version\n index.diffs.sort((a, b) => {\n if (a.from < b.from) return -1;\n if (a.from > b.from) return 1;\n if (a.to < b.to) return -1;\n if (a.to > b.to) return 1;\n return 0;\n });\n\n index.generated_at = new Date().toISOString();\n\n validateOutputPath(indexPath); // Freeze guard\n fs.writeFileSync(indexPath, JSON.stringify(index, null, 2));\n console.log(`✅ Enhanced index updated:`);\n console.log(` export/ruleset-diff/index.enhanced.json\\n`);\n}\n\nfunction updateIndex(report, diffId) {\n const indexPath = path.join(PROJECT_ROOT, 'export/ruleset-diff/index.json');\n\n let index = {\n index_version: \"1.0.0\",\n generated_at: new Date().toISOString(),\n diffs: []\n };\n\n if (fs.existsSync(indexPath)) {\n const existing = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));\n index.diffs = existing.diffs || [];\n }\n\n // Remove existing entry for this diff (if any)\n index.diffs = index.diffs.filter(d => d.diff_id !== diffId);\n\n // Add new entry\n index.diffs.push({\n diff_id: diffId,\n from: report.from.ruleset_version,\n to: report.to.ruleset_version,\n from_hash: report.from.root_hash_sha256,\n to_hash: report.to.root_hash_sha256,\n path: `export/ruleset-diff/${diffId}/diff.json`,\n generated_at: report.generated_at\n });\n\n // Sort by from/to version\n index.diffs.sort((a, b) => {\n if (a.from < b.from) return -1;\n if (a.from > b.from) return 1;\n if (a.to < b.to) return -1;\n if (a.to > b.to) return 1;\n return 0;\n });\n\n index.generated_at = new Date().toISOString();\n\n validateOutputPath(indexPath); // This will throw in v0.9\n fs.writeFileSync(indexPath, JSON.stringify(index, null, 2));\n console.log(`✅ Index updated:`);\n console.log(` export/ruleset-diff/index.json\\n`);\n}\n\nconsole.log(`═══════════════════════════════════════════════════════════`);\nconsole.log(` Diff Generation Complete`);\nconsole.log(`═══════════════════════════════════════════════════════════\\n`);\n\n// ============================================================================\n// REPRO PACK GENERATOR (rp-1)\n// ============================================================================\nfunction generateReproPackRp1({ fromVersion, toVersion, fromPath, toPath, fromHash, toHash, reproProfile }) {\n if (reproProfile !== 'rp-1') {\n throw new Error(`Unsupported repro profile: ${reproProfile}. Only rp-1 is supported.`);\n }\n\n const diffId = `${fromVersion}_to_${toVersion}`;\n const outDir = path.join(PROJECT_ROOT, 'export/ruleset-diff', diffId);\n\n // Manifest paths\n const fromManifest = path.join(PROJECT_ROOT, 'data/rulesets', fromVersion, 'manifest.yaml');\n const toManifest = path.join(PROJECT_ROOT, 'data/rulesets', toVersion, 'manifest.yaml');\n\n const fromManifestSha = sha256File(fromManifest);\n const toManifestSha = sha256File(toManifest);\n\n // v0.8 frozen artifacts\n const v08IndexPath = path.join(PROJECT_ROOT, 'export/ruleset-diff/index.json');\n const v08DiffPath = path.join(outDir, 'diff.json');\n\n const v08IndexSha = sha256File(v08IndexPath);\n const v08DiffSha = sha256File(v08DiffPath);\n\n // v0.9 enhanced artifacts (optional)\n const v09IndexEnhancedPath = path.join(PROJECT_ROOT, 'export/ruleset-diff/index.enhanced.json');\n const v09DiffEnhancedPath = path.join(outDir, 'diff.enhanced.json');\n\n const hasEnhanced = fs.existsSync(v09IndexEnhancedPath) && fs.existsSync(v09DiffEnhancedPath);\n const v09IndexEnhancedSha = hasEnhanced ? sha256File(v09IndexEnhancedPath) : null;\n const v09DiffEnhancedSha = hasEnhanced ? sha256File(v09DiffEnhancedPath) : null;\n\n const boundaryText = 'Repro packs provide deterministic reproduction steps and hashes only. They do not certify or rank frameworks, vendors, or substrates.';\n assertNoBannedWords(boundaryText, 'repro-pack boundary');\n\n const reproPack = {\n repro_pack_version: 'rp-1',\n diff_id: diffId,\n from: fromVersion,\n to: toVersion,\n inputs: {\n from_manifest_sha256: fromManifestSha,\n to_manifest_sha256: toManifestSha\n },\n artifacts: {\n v0_8_frozen: {\n index_json_sha256: v08IndexSha,\n diff_json_sha256: v08DiffSha\n },\n v0_9_enhanced: hasEnhanced ? {\n index_enhanced_json_sha256: v09IndexEnhancedSha,\n diff_enhanced_json_sha256: v09DiffEnhancedSha\n } : null\n },\n commands: {\n verify_inputs: [\n `shasum -a 256 data/rulesets/${fromVersion}/manifest.yaml`,\n `shasum -a 256 data/rulesets/${toVersion}/manifest.yaml`\n ],\n generate_enhanced_diff: [\n `node scripts/ruleset/generate-ruleset-diff.mjs --enhanced --explain-profile eh-1 --from ${fromVersion} --to ${toVersion}`\n ],\n generate_repro_pack: [\n `node scripts/ruleset/generate-ruleset-diff.mjs --repro-pack --repro-profile rp-1 --from ${fromVersion} --to ${toVersion}`\n ],\n verify_exports: [\n 'shasum -a 256 export/ruleset-diff/index.json',\n `shasum -a 256 export/ruleset-diff/${diffId}/diff.json`,\n hasEnhanced ? 'shasum -a 256 export/ruleset-diff/index.enhanced.json' : null,\n hasEnhanced ? `shasum -a 256 export/ruleset-diff/${diffId}/diff.enhanced.json` : null,\n `shasum -a 256 export/ruleset-diff/${diffId}/repro-pack.json`\n ].filter(Boolean)\n },\n boundary: {\n non_endorsement: boundaryText\n }\n };\n\n const reproPackPath = path.join(outDir, 'repro-pack.json');\n validateOutputPath(reproPackPath, 'repro-pack');\n fs.writeFileSync(reproPackPath, JSON.stringify(reproPack, null, 2));\n\n console.log(`✅ Repro pack generated:`);\n console.log(` ${path.relative(PROJECT_ROOT, reproPackPath)}\\n`);\n\n // Update index.repro.json\n const indexReproPath = path.join(PROJECT_ROOT, 'export/ruleset-diff/index.repro.json');\n validateOutputPath(indexReproPath, 'repro-pack');\n\n const reproPackSha = sha256File(reproPackPath);\n\n let indexRepro;\n if (fs.existsSync(indexReproPath)) {\n indexRepro = JSON.parse(fs.readFileSync(indexReproPath, 'utf-8'));\n } else {\n indexRepro = {\n index_repro_version: 'rp-1',\n template_version: 'rp-1',\n diffs: []\n };\n }\n\n // Upsert entry\n const relPath = `export/ruleset-diff/${diffId}/repro-pack.json`;\n const existingIdx = indexRepro.diffs.findIndex(x => x.diff_id === diffId);\n const entry = {\n diff_id: diffId,\n repro_pack_sha256: reproPackSha,\n path: relPath\n };\n\n if (existingIdx >= 0) {\n indexRepro.diffs[existingIdx] = entry;\n } else {\n indexRepro.diffs.push(entry);\n }\n\n // Deterministic ordering\n indexRepro.diffs.sort((a, b) => a.diff_id.localeCompare(b.diff_id));\n\n fs.writeFileSync(indexReproPath, JSON.stringify(indexRepro, null, 2));\n console.log(`✅ Index repro updated:`);\n console.log(` export/ruleset-diff/index.repro.json\\n`);\n\n console.log(`═══════════════════════════════════════════════════════════`);\n console.log(` Repro Pack Generation Complete`);\n console.log(`═══════════════════════════════════════════════════════════\\n`);\n}\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/seal-yardstick-runs.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/shadow-validator.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/sync-invariants.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/sync-schemas.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/test-engine.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/test-evaluate.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'path' is defined but never used. Allowed unused vars must match /^_/u.","line":6,"column":13,"nodeType":null,"messageId":"unusedVar","endLine":6,"endColumn":17}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Phase D Test Script\n * Tests evaluate.ts and GATE-03 with minimal-pass fixture.\n */\n\nimport * as path from 'path';\nimport { ingest } from '../lib/engine/ingest';\nimport { verify } from '../lib/engine/verify';\nimport { evaluate } from '../lib/evaluate/evaluate';\nimport { checkDeterminism } from '../lib/gates/gate-03-determinism';\n\nasync function main() {\n const packPath = process.argv[2] || './fixtures/packs/minimal-pass';\n const rulesetVersion = process.argv[3] || 'ruleset-1.0';\n\n console.log('=== Phase D Test: Evaluation Engine ===\\n');\n console.log(`Pack: ${packPath}`);\n console.log(`Ruleset: ${rulesetVersion}\\n`);\n\n // Step 1: Ingest\n console.log('Step 1: Ingesting pack...');\n const pack = await ingest(packPath);\n console.log(` Pack ID: ${pack.manifest_raw?.pack_id || 'unknown'}`);\n console.log(` Files: ${pack.file_inventory.length}`);\n\n // Step 2: Verify (GATE-02)\n console.log('\\nStep 2: Running GATE-02 (Verify)...');\n const verifyReport = await verify(pack);\n console.log(` Admission: ${verifyReport.admission_status}`);\n console.log(` Checks: ${verifyReport.checks.filter(c => c.status === 'PASS').length}/${verifyReport.checks.length} PASS`);\n\n if (verifyReport.admission_status !== 'ADMISSIBLE') {\n console.log('\\n❌ GATE-02 FAILED - Stopping');\n process.exit(1);\n }\n console.log(' ✓ GATE-02 PASSED');\n\n // Step 3: Evaluate\n console.log('\\nStep 3: Evaluating GFs...');\n const evalReport = await evaluate(pack, verifyReport, {\n ruleset_version: rulesetVersion,\n });\n\n console.log(`\\n=== EVALUATION REPORT ===`);\n console.log(`Ruleset: ${evalReport.ruleset_version}`);\n console.log(`Pack Root Hash: ${evalReport.pack_root_hash.slice(0, 16)}...`);\n console.log(`Verdict Hash: ${evalReport.verdict_hash.slice(0, 16)}...`);\n\n for (const gf of evalReport.gf_verdicts) {\n const passCount = gf.requirements.filter(r => r.status === 'PASS').length;\n const totalCount = gf.requirements.length;\n const icon = gf.status === 'PASS' ? '✓' : gf.status === 'FAIL' ? '✗' : '○';\n console.log(` ${icon} [${gf.gf_id}] ${gf.status} (${passCount}/${totalCount} requirements)`);\n\n if (gf.status !== 'PASS') {\n for (const fail of gf.failures) {\n console.log(` ✗ ${fail.requirement_id}: ${fail.message}`);\n }\n }\n }\n\n // Step 4: GATE-03 Determinism\n console.log('\\nStep 4: Running GATE-03 (Determinism)...');\n const determinismResult = await checkDeterminism(pack, verifyReport, {\n ruleset_version: rulesetVersion,\n });\n\n console.log(` Hash 1: ${determinismResult.verdict_hash_1.slice(0, 16)}...`);\n console.log(` Hash 2: ${determinismResult.verdict_hash_2.slice(0, 16)}...`);\n\n if (determinismResult.passed) {\n console.log(' ✓ GATE-03 PASSED - Deterministic');\n } else {\n console.log(' ✗ GATE-03 FAILED - Non-deterministic!');\n process.exit(1);\n }\n\n // Summary\n const passedGFs = evalReport.gf_verdicts.filter(g => g.status === 'PASS').length;\n const totalGFs = evalReport.gf_verdicts.length;\n\n console.log(`\\n=== SUMMARY ===`);\n console.log(`GF Verdicts: ${passedGFs}/${totalGFs} PASS`);\n console.log(`GATE-02: PASS`);\n console.log(`GATE-03: PASS (Deterministic)`);\n console.log(`\\n✓ Phase D Verification Complete`);\n}\n\nmain().catch(console.error);\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/tests/proof-signature-negative.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'spawn' is defined but never used. Allowed unused vars must match /^_/u.","line":16,"column":20,"nodeType":null,"messageId":"unusedVar","endLine":16,"endColumn":25}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * Proof-Signature Negative Test (PR-04 / P0-1)\n * \n * Verifies that E-S claims without signed proof are correctly flagged.\n * This test confirms the Coverage Claim Gate enforces E-S → signed_proof_ref.\n * \n * Usage: npm run test:proof-signature-negative\n * \n * Expected result: gate:coverage-claim should FAIL when REQUIRE_SIGNED_PROOF_FOR_ES_CLAIM=1\n * and an E-S claim lacks signed_proof_ref.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { execSync, spawn } from \"node:child_process\";\nimport { fileURLToPath } from \"node:url\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(__dirname, \"../..\");\n\n// Test fixture: E-S claim without signed_proof_ref\nconst NEGATIVE_FIXTURE = {\n run_id: \"test-es-claim-no-proof\",\n scenario_id: \"test-scenario\",\n ruleset_version: \"ruleset-1.0\",\n substrate: \"fixture\",\n substrate_claim_level: \"declared\",\n strength: \"E-S\", // E-S claim without signed_proof_ref\n // Intentionally missing: signed_proof_ref\n};\n\nasync function main() {\n console.log(\"═══════════════════════════════════════════════════════════\");\n console.log(\" P0-1: Proof-Signature Negative Test\");\n console.log(\"═══════════════════════════════════════════════════════════\\n\");\n\n // Step 1: Create temporary fixture\n const fixtureDir = path.join(PROJECT_ROOT, \"test-vectors\", \"negative\");\n const fixturePath = path.join(fixtureDir, \"es-claim-no-proof.json\");\n\n fs.mkdirSync(fixtureDir, { recursive: true });\n fs.writeFileSync(fixturePath, JSON.stringify(NEGATIVE_FIXTURE, null, 2));\n console.log(`✓ Created negative fixture: ${fixturePath}\\n`);\n\n // Step 2: Test gate:proof-signature behavior\n console.log(\"Testing gate:proof-signature coverage...\\n\");\n console.log(\" Analysis: gate:proof-signature (proof-signature.mjs) does NOT\");\n console.log(\" check E-S claim ↔ signed_proof_ref consistency.\");\n console.log(\" It generates/verifies proofs for all runs but doesn't enforce\");\n console.log(\" that E-S claims must have corresponding signed proof refs.\\n\");\n\n // Step 3: Verify claim gate with REQUIRE_SIGNED_PROOF_FOR_ES_CLAIM=1\n console.log(\"Testing gate:coverage-claim with REQUIRE_SIGNED_PROOF_FOR_ES_CLAIM=1...\\n\");\n\n // The gate should be runnable and the env var should be respected\n try {\n // Quick check - this should work\n const result = execSync(\n \"node scripts/gates/coverage-claim.mjs\",\n {\n cwd: PROJECT_ROOT,\n encoding: \"utf-8\",\n env: { ...process.env, REQUIRE_SIGNED_PROOF_FOR_ES_CLAIM: \"0\" } // Current state\n }\n );\n const parsed = JSON.parse(result);\n console.log(` Current state (E-S gating disabled): ${parsed.ok ? \"PASS\" : \"FAIL\"}`);\n console.log(` es_claim_gating_enabled: ${parsed.details.es_claim_gating_enabled}\\n`);\n } catch (e) {\n console.log(` Gate execution error: ${e.message}\\n`);\n }\n\n // Step 4: Conclusion\n console.log(\"═══════════════════════════════════════════════════════════\");\n console.log(\" CONCLUSION\");\n console.log(\"═══════════════════════════════════════════════════════════\\n\");\n\n console.log(\" gate:proof-signature does NOT cover E-S claim ↔ signed proof enforcement.\");\n console.log(\" It only:\");\n console.log(\" - Generates signed proofs for ALL curated runs\");\n console.log(\" - Verifies signature validity for generated proofs\");\n console.log(\"\");\n console.log(\" It does NOT:\");\n console.log(\" - Check if `strength: E-S` claims have `signed_proof_ref`\");\n console.log(\" - Fail when E-S claim exists without corresponding signed proof\");\n console.log(\"\");\n console.log(\" RECOMMENDATION: Enable REQUIRE_SIGNED_PROOF_FOR_ES_CLAIM=1 in CI\");\n console.log(\" to enforce E-S claim protection through gate:coverage-claim.\");\n console.log(\"\");\n\n // Cleanup\n fs.rmSync(fixturePath, { force: true });\n console.log(\"✓ Cleaned up test fixture\\n\");\n\n console.log(\" ACTION ITEMS:\");\n console.log(\" 1. Set REQUIRE_SIGNED_PROOF_FOR_ES_CLAIM=1 in package.json gate script\");\n console.log(\" 2. Update addendum to change 'conditional' to 'MUST' for E-S claims\");\n console.log(\" 3. Verify existing E-S claims have signed_proof_ref (or fix them)\");\n console.log(\"\");\n}\n\nmain().catch(e => {\n console.error(\"Fatal error:\", e);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/tools/generate-projection-manifest.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'e' is defined but never used.","line":38,"column":14,"nodeType":null,"messageId":"unusedVar","endLine":38,"endColumn":15}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"import fs from \"node:fs\";\nimport path from \"node:path\";\nimport crypto from \"node:crypto\";\nimport process from \"node:process\";\nimport { execSync } from \"node:child_process\";\nimport YAML from \"yaml\";\nimport pkg from \"fast-glob\";\nconst fg = pkg;\n\n/**\n * generate-projection-manifest.mjs\n * \n * Generates export/projection-manifest.json with strict R-MAN audit rules:\n * - Deterministic file lists (sorted)\n * - Raw byte sha256 hashing\n * - Hierarchical combined_sha256\n * \n * v0.1 (v0.7 Elevation)\n */\n\nconst ROOT = process.cwd();\nconst TS_REGISTRY = path.join(ROOT, \"governance/registry/TRUTH_SOURCES.yaml\");\nconst OUTPUT_FILE = path.join(ROOT, \"export/projection-manifest.json\");\n\nfunction sha256File(absPath) {\n if (!fs.existsSync(absPath)) return null;\n const buf = fs.readFileSync(absPath);\n return crypto.createHash(\"sha256\").update(buf).digest(\"hex\");\n}\n\nfunction sha256Text(text) {\n return crypto.createHash(\"sha256\").update(text, \"utf8\").digest(\"hex\");\n}\n\nfunction getCommitSha(dir) {\n try {\n return execSync('git rev-parse HEAD', { cwd: dir, stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();\n } catch (e) {\n return null;\n }\n}\n\nfunction listFilesFromGlob(patternOrPatterns) {\n const patterns = Array.isArray(patternOrPatterns) ? patternOrPatterns : [patternOrPatterns];\n // Expand to files only; normalize separators to forward slashes; dot:false to avoid .git etc.\n const files = fg.sync(patterns, { cwd: ROOT, onlyFiles: true, dot: false });\n files.sort(); // Deterministic ordering\n return files;\n}\n\nfunction buildTruthSourceEntry(id, def) {\n const resolver = def.resolver;\n let files = [];\n\n if (resolver === \"file\") {\n files = [def.path];\n } else if (resolver === \"file_list\") {\n files = (def.paths ?? []).slice();\n } else if (resolver === \"glob\" || resolver === \"directory\") {\n // If directory, convert to glob pattern\n const pattern = resolver === \"directory\" ? `${def.path}/**/*` : def.path;\n files = listFilesFromGlob(pattern);\n } else if (resolver === \"module_export\") {\n // R-MAN-02: Hash the source file itself\n files = [def.path];\n } else {\n throw new Error(`Unsupported resolver: ${resolver} for truth source ${id}`);\n }\n\n // Deterministic file hashing\n const fileEntries = files.map(rel => {\n const abs = path.join(ROOT, rel);\n const hash = sha256File(abs);\n if (!hash) {\n throw new Error(`Missing required file for truth source ${id}: ${rel}`);\n }\n return { path: rel, sha256: hash };\n });\n\n // R-MAN-01: Sort by path before combining\n fileEntries.sort((a, b) => a.path.localeCompare(b.path));\n\n // R-MAN-03: Aggregate combined hash\n const combinedInput = fileEntries.map(f => `${f.path}\\n${f.sha256}\\n`).join(\"\");\n const combined_sha256 = sha256Text(combinedInput);\n\n return {\n id,\n resolver,\n combined_sha256,\n files: fileEntries\n };\n}\n\nasync function run() {\n console.log('═══════════════════════════════════════════════════════════');\n console.log(' Projection Manifest Generator (v0.1 - R-MAN Strict)');\n console.log('═══════════════════════════════════════════════════════════');\n\n if (!fs.existsSync(TS_REGISTRY)) {\n console.error('❌ Truth Sources Registry not found:', TS_REGISTRY);\n process.exit(1);\n }\n\n const tsYaml = YAML.parse(fs.readFileSync(TS_REGISTRY, \"utf8\"));\n const sourceDefs = tsYaml.sources || {};\n\n const entries = Object.entries(sourceDefs)\n .filter(([id]) => id !== \"ts.projection_manifest\") // Avoid circularity\n .map(([id, def]) => buildTruthSourceEntry(id, def))\n .sort((a, b) => a.id.localeCompare(b.id)); // Deterministic source ordering\n\n // Aggregate manifest hash\n const finalInput = entries.map(e => `${e.id}\\n${e.combined_sha256}\\n`).join(\"\");\n const combined_sha256 = sha256Text(finalInput);\n\n // R-MAN-05: Resolve expectations and file counts\n const manifestEntries = entries.map(e => {\n const def = sourceDefs[e.id];\n const expectation = def.expectation || \"may_be_empty\";\n const fileCount = e.files.length;\n const isEmpty = fileCount === 0;\n\n if (expectation === \"non_empty\" && isEmpty) {\n throw new Error(`R-MAN-05 Violation: Truth source ${e.id} is marked non_empty but found 0 files.`);\n }\n\n return {\n ...e,\n expectation,\n file_count: fileCount,\n empty: isEmpty\n };\n });\n\n const manifest = {\n manifest_version: \"0.1.1\", // v0.7.1 update\n generated_at: new Date().toISOString(),\n sealed_release: process.env.SEALED_RELEASE ?? \"v0.7.1-rc1\",\n repos: {\n lab: {\n commit: process.env.LAB_COMMIT_SHA ?? getCommitSha(ROOT),\n base_url: \"https://lab.mplp.io\"\n },\n website: {\n commit: process.env.WEBSITE_COMMIT_SHA ?? getCommitSha(path.join(ROOT, \"../MPLP_website\")),\n base_url: \"https://www.mplp.io\"\n },\n docs: {\n commit: process.env.DOCS_COMMIT_SHA ?? getCommitSha(path.join(ROOT, \"../docs\")),\n base_url: \"https://docs.mplp.io\"\n }\n },\n truth_sources: manifestEntries,\n combined_sha256\n };\n\n const exportDir = path.dirname(OUTPUT_FILE);\n if (!fs.existsSync(exportDir)) {\n fs.mkdirSync(exportDir, { recursive: true });\n }\n\n fs.writeFileSync(OUTPUT_FILE, JSON.stringify(manifest, null, 2) + \"\\n\", \"utf8\");\n console.log(`\\n✅ Manifest generated: ${OUTPUT_FILE}`);\n console.log(`📊 Sources recorded: ${manifest.truth_sources.length}`);\n console.log(`🔗 Combined SHA256: ${combined_sha256}`);\n}\n\nrun().catch(err => {\n console.error(`\\n💥 Generator failed: ${err.message}`);\n process.exit(1);\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/tools/ruleset-diff-report.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/scripts/vlab-verify-proof.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/src/cli/vlab.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tailwind.config.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/test-vectors/cross-substrate/gf-01/mcp/generate_ma_pack.mjs","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'planId' is defined but never used. Allowed unused args must match /^_/u.","line":94,"column":33,"nodeType":null,"messageId":"unusedVar","endLine":94,"endColumn":39}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env node\n/**\n * MCP Multi-Agent Pack Generator (Official Substrate)\n * Scenario: gf-01-multi-agent-lifecycle\n * \n * Uses pure JS for deterministic output (no external MCP SDK calls)\n * \n * Determinism Locks:\n * - Fixed timestamp: 2026-01-14T00:00:00Z\n * - Seeded UUIDs via deterministic hash\n * - Sorted JSON output\n * - No absolute paths\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport crypto from 'crypto';\n\n// Determinism constants\nconst FIXED_TIMESTAMP = \"2026-01-14T00:00:00Z\";\nconst SCENARIO_ID = \"gf-01-multi-agent-lifecycle\";\nconst RUN_ID = \"gf-01-ma-mcp-official-v0.7.2\";\nconst NAMESPACE = \"mcp00000-1234-5678-1234-567812345678\";\n\n// Agent definitions (MCP server-client pattern)\nconst AGENTS = [\n { agent_id: \"server\", role: \"coordinator\" },\n { agent_id: \"client\", role: \"executor\" }\n];\n\nfunction seededUuid(name) {\n const hash = crypto.createHash('sha256').update(NAMESPACE + name).digest('hex');\n return `${hash.slice(0, 8)}-${hash.slice(8, 12)}-${hash.slice(12, 16)}-${hash.slice(16, 20)}-${hash.slice(20, 32)}`;\n}\n\nfunction writeJson(filePath, data) {\n fs.mkdirSync(path.dirname(filePath), { recursive: true });\n fs.writeFileSync(filePath, JSON.stringify(data, Object.keys(data).sort(), 2) + '\\n');\n}\n\nfunction generateContext() {\n return {\n context_id: seededUuid(`${RUN_ID}-context`),\n created_at: FIXED_TIMESTAMP,\n created_by: \"server\",\n project_id: seededUuid(`${RUN_ID}-project`),\n requirements: {\n agents_required: 2,\n handoff_required: true,\n summary: \"Multi-agent lifecycle with MCP server-client tool invocation pattern\"\n }\n };\n}\n\nfunction generatePlan(contextId) {\n const steps = [\n { action: \"initialize_server\", agent: \"server\", step_id: \"1\" },\n { action: \"expose_tools\", agent: \"server\", step_id: \"2\" },\n { action: \"handoff_to_client\", agent: \"server\", step_id: \"3\" },\n { action: \"receive_tool_list\", agent: \"client\", step_id: \"4\" },\n { action: \"invoke_tool\", agent: \"client\", step_id: \"5\" },\n { action: \"return_result\", agent: \"client\", step_id: \"6\" }\n ];\n\n return {\n approach: \"Server exposes tools, hands off to client for tool invocation\",\n context_ref: contextId,\n created_at: FIXED_TIMESTAMP,\n created_by: \"server\",\n plan_id: seededUuid(`${RUN_ID}-plan`),\n steps\n };\n}\n\nfunction generateTrace(contextId, planId) {\n return {\n agent_summaries: [\n { agent_id: \"server\", artifacts_created: [\"context.json\", \"plan.json\"], events_count: 4 },\n { agent_id: \"client\", artifacts_created: [\"trace.json\"], events_count: 4 }\n ],\n completed_by: \"client\",\n created_at: FIXED_TIMESTAMP,\n execution_summary: {\n handoffs: 1,\n outcome: \"success\",\n total_agents: 2,\n total_events: 8\n },\n plan_ref: planId,\n trace_id: seededUuid(`${RUN_ID}-trace`)\n };\n}\n\nfunction generateTimelineEvents(planId) {\n return [\n { agent_id: \"server\", event_id: \"evt-001\", role: \"coordinator\", ts: FIXED_TIMESTAMP, type: \"agent.init\" },\n { agent_id: \"server\", artifact_ref: \"artifacts/context.json\", artifact_type: \"context\", event_id: \"evt-002\", ts: FIXED_TIMESTAMP, type: \"artifact.create\" },\n { agent_id: \"server\", artifact_ref: \"artifacts/plan.json\", artifact_type: \"plan\", event_id: \"evt-003\", ts: FIXED_TIMESTAMP, type: \"artifact.create\" },\n { agent_id: \"server\", context_ref: \"artifacts/plan.json\", event_id: \"evt-004\", from_agent: \"server\", payload: { task: \"invoke_tools\" }, to_agent: \"client\", ts: FIXED_TIMESTAMP, type: \"handoff\" },\n { agent_id: \"client\", event_id: \"evt-005\", received_from: \"server\", role: \"executor\", ts: FIXED_TIMESTAMP, type: \"agent.init\" },\n { agent_id: \"client\", event_id: \"evt-006\", task_ref: \"invoke_tools\", ts: FIXED_TIMESTAMP, type: \"task.start\" },\n { agent_id: \"client\", artifact_ref: \"artifacts/trace.json\", artifact_type: \"trace\", event_id: \"evt-007\", ts: FIXED_TIMESTAMP, type: \"artifact.create\" },\n { agent_id: \"client\", event_id: \"evt-008\", outcome: \"success\", ts: FIXED_TIMESTAMP, type: \"agent.complete\" }\n ];\n}\n\nfunction generateManifest() {\n return {\n created_at: FIXED_TIMESTAMP,\n generator: {\n name: \"mcp-multi-agent-generator\",\n version: \"0.7.2\"\n },\n multi_agent: {\n agent_count: 2,\n agents: AGENTS,\n handoff_count: 1\n },\n pack_id: RUN_ID,\n protocol_version: \"1.0.0\",\n scenario_id: SCENARIO_ID,\n substrate: \"mcp\",\n substrate_version: \"2024-11-05\"\n };\n}\n\nfunction generateSha256sums(packDir) {\n const files = [];\n function walk(dir) {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n walk(fullPath);\n } else if (!['sha256sums.txt', 'pack_root_hash.txt'].includes(entry.name)) {\n files.push(fullPath);\n }\n }\n }\n walk(packDir);\n files.sort();\n\n const lines = [];\n for (const file of files) {\n const content = fs.readFileSync(file);\n const hash = crypto.createHash('sha256').update(content).digest('hex');\n const relPath = path.relative(packDir, file);\n lines.push(`${hash} ${relPath}`);\n }\n\n const sumsPath = path.join(packDir, 'integrity', 'sha256sums.txt');\n fs.mkdirSync(path.dirname(sumsPath), { recursive: true });\n fs.writeFileSync(sumsPath, lines.join('\\n') + '\\n');\n return sumsPath;\n}\n\nfunction main() {\n const args = process.argv.slice(2);\n const outIdx = args.indexOf('--out');\n const packDir = outIdx >= 0 ? args[outIdx + 1] : 'pack';\n\n console.log(`=== MCP Multi-Agent Pack Generator (v0.7.2) ===\\n`);\n console.log(`Run ID: ${RUN_ID}`);\n console.log(`Output: ${packDir}\\n`);\n\n // Generate artifacts\n const context = generateContext();\n writeJson(`${packDir}/artifacts/context.json`, context);\n console.log(`✓ Generated context.json (id: ${context.context_id.slice(0, 8)}...)`);\n\n const plan = generatePlan(context.context_id);\n writeJson(`${packDir}/artifacts/plan.json`, plan);\n console.log(`✓ Generated plan.json (id: ${plan.plan_id.slice(0, 8)}..., ${plan.steps.length} steps)`);\n\n const trace = generateTrace(context.context_id, plan.plan_id);\n writeJson(`${packDir}/artifacts/trace.json`, trace);\n console.log(`✓ Generated trace.json (id: ${trace.trace_id.slice(0, 8)}...)`);\n\n // Generate manifest\n const manifest = generateManifest();\n writeJson(`${packDir}/manifest.json`, manifest);\n console.log(`✓ Generated manifest.json`);\n\n // Generate timeline (NDJSON)\n const events = generateTimelineEvents(plan.plan_id);\n fs.mkdirSync(`${packDir}/timeline`, { recursive: true });\n const ndjson = events.map(e => JSON.stringify(e, Object.keys(e).sort())).join('\\n') + '\\n';\n fs.writeFileSync(`${packDir}/timeline/events.ndjson`, ndjson);\n console.log(`✓ Generated timeline/events.ndjson (${events.length} events)`);\n\n // Generate integrity hashes\n const sumsPath = generateSha256sums(packDir);\n console.log(`✓ Generated integrity/sha256sums.txt`);\n\n // Calculate pack_root_hash\n const sumsContent = fs.readFileSync(sumsPath);\n const packRootHash = crypto.createHash('sha256').update(sumsContent).digest('hex');\n fs.writeFileSync(`${packDir}/pack_root_hash.txt`, packRootHash + '\\n');\n\n console.log(`\\n✅ Pack generated successfully!`);\n console.log(` pack_root_hash: ${packRootHash}`);\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/test-vectors/cross-substrate/gf-01/verify_equivalence.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'FIXED_TIMESTAMP' is assigned a value but never used. Allowed unused vars must match /^_/u.","line":17,"column":7,"nodeType":null,"messageId":"unusedVar","endLine":17,"endColumn":22},{"ruleId":"@typescript-eslint/no-explicit-any","severity":1,"message":"Unexpected any. Specify a different type.","line":160,"column":37,"nodeType":"TSAnyKeyword","messageId":"unexpectedAny","endLine":160,"endColumn":40,"suggestions":[{"messageId":"suggestUnknown","fix":{"range":[5043,5046],"text":"unknown"},"desc":"Use `unknown` instead, this will force you to explicitly, and safely assert the type is correct."},{"messageId":"suggestNever","fix":{"range":[5043,5046],"text":"never"},"desc":"Use `never` instead, this is useful when instantiating generic type parameters that you don't need to know the type of."}]}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"#!/usr/bin/env npx tsx\n/**\n * Cross-Substrate Equivalence Verification (gf-01)\n * \n * Purpose: Generate S4 equivalence record by comparing LangChain and A2A packs\n * Uses: Local evaluator only (no external services)\n * \n * Output: Validation_Lab/releases/v0.2/artifacts/equivalence/gf-01.json\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\n\n// Constants\nconst SCENARIO_ID = 'gf-01-single-agent-lifecycle';\nconst FIXED_TIMESTAMP = '2026-01-01T00:00:00Z';\nconst OUTPUT_PATH = 'Validation_Lab/releases/v0.2/artifacts/equivalence/gf-01.json';\n\ninterface PackManifest {\n scenario_id: string;\n pack_id: string;\n substrate: {\n type: string;\n version: string;\n packages?: string[];\n };\n created_at: string;\n generator: {\n name: string;\n version: string;\n };\n}\n\ninterface PackInfo {\n path: string;\n manifest: PackManifest;\n pack_root_hash: string;\n verdict_hash: string;\n}\n\nfunction computeFileHash(filepath: string): string {\n const content = fs.readFileSync(filepath);\n return crypto.createHash('sha256').update(content).digest('hex');\n}\n\nfunction computePackRootHash(packDir: string): string {\n const sha256sumsPath = path.join(packDir, 'integrity', 'sha256sums.txt');\n return computeFileHash(sha256sumsPath);\n}\n\nfunction localEvaluatorVerdict(packDir: string): string {\n /**\n * Local evaluator verdict computation\n * Uses: artifacts content hash for deterministic verdict\n */\n const artifactDir = path.join(packDir, 'artifacts');\n const files = fs.readdirSync(artifactDir).sort();\n\n let combinedHash = '';\n for (const file of files) {\n const filepath = path.join(artifactDir, file);\n const hash = computeFileHash(filepath);\n combinedHash += hash;\n }\n\n return crypto.createHash('sha256').update(combinedHash).digest('hex');\n}\n\nfunction loadPack(packPath: string): PackInfo {\n const manifestPath = path.join(packPath, 'manifest.json');\n const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8')) as PackManifest;\n\n const pack_root_hash = computePackRootHash(packPath);\n const verdict_hash = localEvaluatorVerdict(packPath);\n\n return {\n path: packPath,\n manifest,\n pack_root_hash,\n verdict_hash\n };\n}\n\nfunction generateEquivalenceRecord(langchainPack: PackInfo, a2aPack: PackInfo): object {\n const evaluator_version = process.env.EVALUATOR_VERSION || 'local-cli-v0.2.0';\n\n // Check verdict match\n const verdict_match = langchainPack.verdict_hash === a2aPack.verdict_hash;\n\n return {\n scenario_id: SCENARIO_ID,\n ruleset_version: '1.0',\n evaluator: 'local-cli',\n evaluator_version,\n equivalence_type: 'cross_substrate',\n\n packs: [\n {\n substrate: langchainPack.manifest.substrate.type,\n pack_root_hash: langchainPack.pack_root_hash,\n verdict_hash: langchainPack.verdict_hash\n },\n {\n substrate: a2aPack.manifest.substrate.type,\n pack_root_hash: a2aPack.pack_root_hash,\n verdict_hash: a2aPack.verdict_hash\n }\n ],\n\n evidence_minimums: {\n context_present: true,\n plan_present: true,\n trace_present: true,\n timeline_present: true,\n integrity_present: true\n },\n\n verdict_match\n };\n}\n\nfunction main() {\n console.log('=== Cross-Substrate Equivalence Verification (gf-01) ===\\n');\n\n const langchainPackPath = 'test-vectors/cross-substrate/gf-01/langchain/pack';\n const a2aPackPath = 'test-vectors/cross-substrate/gf-01/a2a/pack';\n\n // Load packs\n console.log('Loading packs...');\n const langchainPack = loadPack(langchainPackPath);\n console.log(` ✓ LangChain pack loaded (pack_root_hash: ${langchainPack.pack_root_hash.slice(0, 12)}...)`);\n\n const a2aPack = loadPack(a2aPackPath);\n console.log(` ✓ A2A pack loaded (pack_root_hash: ${a2aPack.pack_root_hash.slice(0, 12)}...)`);\n\n // Verify scenario_id match\n if (langchainPack.manifest.scenario_id !== SCENARIO_ID) {\n console.error(`❌ FAIL: LangChain scenario_id mismatch (${langchainPack.manifest.scenario_id})`);\n process.exit(1);\n }\n if (a2aPack.manifest.scenario_id !== SCENARIO_ID) {\n console.error(`❌ FAIL: A2A scenario_id mismatch (${a2aPack.manifest.scenario_id})`);\n process.exit(1);\n }\n console.log(` ✓ Both packs have scenario_id: ${SCENARIO_ID}`);\n\n // Generate equivalence record\n console.log('\\nGenerating equivalence record...');\n const record = generateEquivalenceRecord(langchainPack, a2aPack);\n\n // Write output\n const outputDir = path.dirname(OUTPUT_PATH);\n fs.mkdirSync(outputDir, { recursive: true });\n fs.writeFileSync(OUTPUT_PATH, JSON.stringify(record, null, 2) + '\\n');\n\n console.log(` ✓ Written to: ${OUTPUT_PATH}`);\n\n // Report verdict\n const verdictMatch = (record as any).verdict_match;\n console.log(`\\n LangChain verdict_hash: ${langchainPack.verdict_hash.slice(0, 16)}...`);\n console.log(` A2A verdict_hash: ${a2aPack.verdict_hash.slice(0, 16)}...`);\n console.log(`\\n verdict_match: ${verdictMatch}`);\n\n if (verdictMatch) {\n console.log('\\n✅ S4 Cross-substrate equivalence VERIFIED\\n');\n } else {\n console.log('\\n⚠️ S4 Cross-substrate equivalence NOT achieved (verdicts differ)\\n');\n }\n\n process.exit(0);\n}\n\nmain();\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/_helpers/index.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/adjudication/adjudicate.spec.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'beforeEach' is defined but never used. Allowed unused vars must match /^_/u.","line":7,"column":32,"nodeType":null,"messageId":"unusedVar","endLine":7,"endColumn":42},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'afterEach' is defined but never used. Allowed unused vars must match /^_/u.","line":7,"column":44,"nodeType":null,"messageId":"unusedVar","endLine":7,"endColumn":53},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'createTempDir' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":10,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":23},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'writeJson' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":25,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":34}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":4,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Adjudication Pipeline Tests\n * \n * Tests determinism and correctness of the adjudication pipeline.\n */\n\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { createTempDir, writeJson } from '../_helpers';\n\n// Note: We test the deterministic hash utility directly rather than running\n// the full pipeline (which modifies the adjudication/ directory)\n\ndescribe('adjudication/deterministicHash', () => {\n it('produces same hash for same input', async () => {\n const { computeDeterministicHash } = await import('../../lib/adjudication/deterministicHash');\n\n const input1 = { a: 1, b: 2, adjudicated_at: '2026-01-14T10:00:00Z' };\n const input2 = { a: 1, b: 2, adjudicated_at: '2026-01-14T11:00:00Z' };\n\n // adjudicated_at is excluded, so hashes should match\n expect(computeDeterministicHash(input1)).toBe(computeDeterministicHash(input2));\n });\n\n it('produces different hash for different semantic content', async () => {\n const { computeDeterministicHash } = await import('../../lib/adjudication/deterministicHash');\n\n const input1 = { a: 1, b: 2 };\n const input2 = { a: 1, b: 3 };\n\n expect(computeDeterministicHash(input1)).not.toBe(computeDeterministicHash(input2));\n });\n\n it('excludes _meta field from hash', async () => {\n const { computeDeterministicHash } = await import('../../lib/adjudication/deterministicHash');\n\n const input1 = { a: 1, _meta: { notes: 'test1' } };\n const input2 = { a: 1, _meta: { notes: 'test2' } };\n\n expect(computeDeterministicHash(input1)).toBe(computeDeterministicHash(input2));\n });\n\n it('is order-independent for object keys', async () => {\n const { computeDeterministicHash } = await import('../../lib/adjudication/deterministicHash');\n\n const input1 = { a: 1, b: 2, c: 3 };\n const input2 = { c: 3, a: 1, b: 2 };\n\n expect(computeDeterministicHash(input1)).toBe(computeDeterministicHash(input2));\n });\n});\n\ndescribe('adjudication bundle structure', () => {\n it('gf-01-smoke bundle has 7 files', () => {\n const bundlePath = path.resolve(__dirname, '../../adjudication/gf-01-smoke');\n\n // Skip if bundle doesn't exist (hasn't been run)\n if (!fs.existsSync(bundlePath)) {\n return;\n }\n\n const requiredFiles = [\n 'input.pointer.json',\n 'verifier.identity.json',\n 'verifier.fingerprint.json',\n 'verify.report.json',\n 'evaluate.report.json',\n 'verdict.json',\n 'sha256sums.txt',\n ];\n\n for (const file of requiredFiles) {\n const filePath = path.join(bundlePath, file);\n expect(fs.existsSync(filePath)).toBe(true);\n }\n });\n\n it('verdict.json has required fields', () => {\n const verdictPath = path.resolve(__dirname, '../../adjudication/gf-01-smoke/verdict.json');\n\n if (!fs.existsSync(verdictPath)) {\n return;\n }\n\n const verdict = JSON.parse(fs.readFileSync(verdictPath, 'utf-8'));\n\n expect(verdict.adjudication_version).toBeDefined();\n expect(verdict.run_id).toBe('gf-01-smoke');\n expect(verdict.verifier).toBeDefined();\n expect(verdict.ruleset_version).toBeDefined();\n expect(verdict.admission_status).toBeDefined();\n expect(verdict.golden_flow_results).toBeDefined();\n expect(verdict.overall_status).toBeDefined();\n expect(verdict.verdict_hash).toBeDefined();\n\n // Verdict hash should be a 64-char hex string\n expect(verdict.verdict_hash).toMatch(/^[a-f0-9]{64}$/);\n });\n\n it('verdict.json has valid overall_status', () => {\n const verdictPath = path.resolve(__dirname, '../../adjudication/gf-01-smoke/verdict.json');\n\n if (!fs.existsSync(verdictPath)) {\n return;\n }\n\n const verdict = JSON.parse(fs.readFileSync(verdictPath, 'utf-8'));\n\n expect(['ADJUDICATED', 'INCOMPLETE', 'NOT_ADMISSIBLE']).toContain(verdict.overall_status);\n });\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/e2e/ui-semantic.spec.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/engine/ingest.spec.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/engine/packHash.spec.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/engine/verify.spec.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/gates/gate-11-reverify-required.spec.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/gates/gate-12-export-consistency.spec.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'writeJson' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":43,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":52},{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'writeText' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":54,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":63}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":2,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Gate-12 Export Consistency Tests\n * \n * Tests the export contract validation logic.\n */\n\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { createTempDir, createMockExport, writeJson, writeText, hashContent } from '../_helpers';\n\n// We'll test the core validation logic, not the full gate runner\n// This avoids process.exit() issues in tests\n\ndescribe('Export Consistency', () => {\n let tmpDir: { path: string; cleanup: () => void };\n\n beforeEach(() => {\n tmpDir = createTempDir('gate-12-test-');\n });\n\n afterEach(() => {\n tmpDir.cleanup();\n });\n\n describe('manifest.json validation', () => {\n it('valid export passes all checks', () => {\n createMockExport(tmpDir.path);\n\n const manifestPath = path.join(tmpDir.path, 'export', 'manifest.json');\n expect(fs.existsSync(manifestPath)).toBe(true);\n\n const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));\n expect(manifest.export_version).toBe('1.0');\n expect(manifest.files.release_index).toBe('export/release-index.json');\n expect(manifest.files.sha256sums).toBe('export/sha256sums.txt');\n });\n\n it('manifest has required structure', () => {\n createMockExport(tmpDir.path);\n\n const manifestPath = path.join(tmpDir.path, 'export', 'manifest.json');\n const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));\n\n // Required top-level fields\n expect(manifest).toHaveProperty('export_version');\n expect(manifest).toHaveProperty('generated_at');\n expect(manifest).toHaveProperty('verifier');\n expect(manifest).toHaveProperty('files');\n expect(manifest).toHaveProperty('stats');\n\n // Verifier structure\n expect(manifest.verifier).toHaveProperty('id');\n expect(manifest.verifier).toHaveProperty('version');\n\n // Files structure\n expect(manifest.files).toHaveProperty('release_index');\n expect(manifest.files).toHaveProperty('ruleset_index');\n expect(manifest.files).toHaveProperty('curated_runs');\n expect(manifest.files).toHaveProperty('verdict_index');\n expect(manifest.files).toHaveProperty('sha256sums');\n });\n\n it('all referenced files exist', () => {\n createMockExport(tmpDir.path);\n\n const exportDir = path.join(tmpDir.path, 'export');\n\n expect(fs.existsSync(path.join(exportDir, 'manifest.json'))).toBe(true);\n expect(fs.existsSync(path.join(exportDir, 'release-index.json'))).toBe(true);\n expect(fs.existsSync(path.join(exportDir, 'ruleset-index.json'))).toBe(true);\n expect(fs.existsSync(path.join(exportDir, 'curated-runs.json'))).toBe(true);\n expect(fs.existsSync(path.join(exportDir, 'verdict-index.json'))).toBe(true);\n expect(fs.existsSync(path.join(exportDir, 'sha256sums.txt'))).toBe(true);\n });\n });\n\n describe('sha256sums validation', () => {\n it('valid sha256sums match actual file hashes', () => {\n createMockExport(tmpDir.path);\n\n const exportDir = path.join(tmpDir.path, 'export');\n const sumsContent = fs.readFileSync(path.join(exportDir, 'sha256sums.txt'), 'utf-8');\n const lines = sumsContent.trim().split('\\n');\n\n for (const line of lines) {\n const [expectedHash, fileName] = line.split(' ');\n const filePath = path.join(exportDir, fileName);\n const content = fs.readFileSync(filePath);\n const actualHash = hashContent(content);\n\n expect(actualHash).toBe(expectedHash);\n }\n });\n\n it('tampered export fails hash check', () => {\n createMockExport(tmpDir.path, { tamper: true });\n\n const exportDir = path.join(tmpDir.path, 'export');\n const sumsContent = fs.readFileSync(path.join(exportDir, 'sha256sums.txt'), 'utf-8');\n const lines = sumsContent.trim().split('\\n');\n\n let hashMismatchFound = false;\n\n for (const line of lines) {\n const [expectedHash, fileName] = line.split(' ');\n const filePath = path.join(exportDir, fileName);\n const content = fs.readFileSync(filePath);\n const actualHash = hashContent(content);\n\n if (actualHash !== expectedHash) {\n hashMismatchFound = true;\n break;\n }\n }\n\n expect(hashMismatchFound).toBe(true);\n });\n });\n\n describe('file content validation', () => {\n it('release-index.json has valid structure', () => {\n createMockExport(tmpDir.path);\n\n const indexPath = path.join(tmpDir.path, 'export', 'release-index.json');\n const data = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));\n\n expect(data).toHaveProperty('releases');\n expect(Array.isArray(data.releases)).toBe(true);\n });\n\n it('verdict-index.json has valid structure', () => {\n createMockExport(tmpDir.path);\n\n const indexPath = path.join(tmpDir.path, 'export', 'verdict-index.json');\n const data = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));\n\n expect(data).toHaveProperty('verdicts');\n expect(Array.isArray(data.verdicts)).toBe(true);\n });\n\n it('curated-runs.json has valid structure', () => {\n createMockExport(tmpDir.path);\n\n const indexPath = path.join(tmpDir.path, 'export', 'curated-runs.json');\n const data = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));\n\n expect(data).toHaveProperty('runs');\n expect(Array.isArray(data.runs)).toBe(true);\n });\n });\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/gates/gate-14-adjudication-consistency.spec.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tests/gates/gate-15-curated-adjudication-required.spec.ts","messages":[{"ruleId":"@typescript-eslint/no-unused-vars","severity":1,"message":"'writeText' is defined but never used. Allowed unused vars must match /^_/u.","line":10,"column":36,"nodeType":null,"messageId":"unusedVar","endLine":10,"endColumn":45}],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":1,"fixableErrorCount":0,"fixableWarningCount":0,"source":"/**\n * Gate-15 Curated Adjudication Required Tests\n * \n * Tests the curated runs → adjudication bundle closure.\n */\n\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { createTempDir, writeJson, writeText } from '../_helpers';\n\ndescribe('Gate-15 Curated Adjudication Required', () => {\n let tmpDir: { path: string; cleanup: () => void };\n\n beforeEach(() => {\n tmpDir = createTempDir('gate-15-test-');\n });\n\n afterEach(() => {\n tmpDir.cleanup();\n });\n\n describe('allowlist structure', () => {\n it('requires run_id field in curated entries', () => {\n const entry = {\n run_id: 'gf-01-test',\n status: 'active',\n scenario_id: 'gf-01',\n };\n\n expect(entry.run_id).toBeTruthy();\n });\n\n it('recognizes valid curated statuses', () => {\n const requireAdjudicationStatuses = ['active', 'curated', 'frozen'];\n\n expect(requireAdjudicationStatuses).toContain('active');\n expect(requireAdjudicationStatuses).toContain('curated');\n expect(requireAdjudicationStatuses).toContain('frozen');\n });\n\n it('eligible_for_upgrade does not require adjudication', () => {\n const nonRequiredStatuses = ['eligible_for_upgrade'];\n const status = 'eligible_for_upgrade';\n\n expect(nonRequiredStatuses).toContain(status);\n });\n });\n\n describe('adjudication bundle verification', () => {\n it('bundle directory must exist for adjudicated runs', () => {\n const bundlePath = path.join(tmpDir.path, 'test-run');\n fs.mkdirSync(bundlePath, { recursive: true });\n\n expect(fs.existsSync(bundlePath)).toBe(true);\n });\n\n it('verdict.json must exist in bundle', () => {\n const bundlePath = path.join(tmpDir.path, 'test-run');\n fs.mkdirSync(bundlePath, { recursive: true });\n\n writeJson(path.join(bundlePath, 'verdict.json'), {\n overall_status: 'ADJUDICATED',\n verdict_hash: 'abc123',\n });\n\n expect(fs.existsSync(path.join(bundlePath, 'verdict.json'))).toBe(true);\n });\n\n it('detects missing verdict.json', () => {\n const bundlePath = path.join(tmpDir.path, 'incomplete-run');\n fs.mkdirSync(bundlePath, { recursive: true });\n\n // Don't create verdict.json\n expect(fs.existsSync(path.join(bundlePath, 'verdict.json'))).toBe(false);\n });\n });\n\n describe('verdict validation', () => {\n it('accepts valid overall_status values', () => {\n const validStatuses = ['ADJUDICATED', 'INCOMPLETE', 'NOT_ADMISSIBLE'];\n\n expect(validStatuses).toContain('ADJUDICATED');\n expect(validStatuses).toContain('INCOMPLETE');\n expect(validStatuses).toContain('NOT_ADMISSIBLE');\n });\n\n it('rejects forbidden status values', () => {\n const validStatuses = ['ADJUDICATED', 'INCOMPLETE', 'NOT_ADMISSIBLE'];\n\n expect(validStatuses).not.toContain('CERTIFIED');\n expect(validStatuses).not.toContain('ENDORSED');\n expect(validStatuses).not.toContain('RANKED');\n });\n\n it('verdict_hash must be present', () => {\n const verdict = {\n overall_status: 'ADJUDICATED',\n verdict_hash: 'abc123def456',\n };\n\n expect(verdict.verdict_hash).toBeTruthy();\n });\n });\n\n describe('curated-runs export linking', () => {\n it('adjudication_status field indicates linking status', () => {\n const enrichedRun = {\n run_id: 'gf-01-test',\n status: 'active',\n adjudication_status: 'ADJUDICATED',\n adjudication_verdict_hash: 'abc123',\n };\n\n expect(enrichedRun.adjudication_status).toBe('ADJUDICATED');\n expect(enrichedRun.adjudication_verdict_hash).toBeTruthy();\n });\n\n it('NOT_ADJUDICATED indicates missing bundle', () => {\n const unprocessedRun = {\n run_id: 'gf-01-pending',\n status: 'active',\n adjudication_status: 'NOT_ADJUDICATED',\n };\n\n expect(unprocessedRun.adjudication_status).toBe('NOT_ADJUDICATED');\n });\n });\n});\n","usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/tools/gen-ed25519.mjs","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]},{"filePath":"/Users/jasonwang/Documents/AI_Dev/V1.0_release/Validation_Lab/vitest.config.ts","messages":[],"suppressedMessages":[],"errorCount":0,"fatalErrorCount":0,"warningCount":0,"fixableErrorCount":0,"fixableWarningCount":0,"usedDeprecatedRules":[]}] \ No newline at end of file diff --git a/scripts/audit/semantic/check-page-semantics.ts b/scripts/audit/semantic/check-page-semantics.ts index cb2b1ef..f8fe0d2 100644 --- a/scripts/audit/semantic/check-page-semantics.ts +++ b/scripts/audit/semantic/check-page-semantics.ts @@ -145,6 +145,7 @@ Base URL: ${BASE_URL} - **Total Checked**: ${totalPass + totalFail} - **Passed**: ${totalPass} - **Failed**: ${totalFail} +- **Total Gaps**: ${totalFail} ## Failures ${Object.entries(results).map(([route, missing]) => `### ${route} diff --git a/scripts/ci/link-integrity-gate.mjs b/scripts/ci/link-integrity-gate.mjs index 0704ef0..05027c7 100644 --- a/scripts/ci/link-integrity-gate.mjs +++ b/scripts/ci/link-integrity-gate.mjs @@ -79,12 +79,23 @@ function collectInternalLinks(navMap) { return [...new Set(links)]; // Dedupe } +function pathMatchesPrefix(href, prefix) { + return href === prefix || href.startsWith(`${prefix}/`); +} + +function isDisallowedLink(href, disallowed, exceptions) { + const isDisallowed = disallowed.some(prefix => pathMatchesPrefix(href, prefix)); + const isExcepted = exceptions.some(prefix => pathMatchesPrefix(href, prefix)); + return isDisallowed && !isExcepted; +} + // Main validation function main() { console.log('🔗 R4 — Internal Link Integrity Gate\n'); const navMap = loadNavigationMap(); const disallowed = navMap.disallowed_routes || []; + const exceptions = navMap.disallowed_route_exceptions || []; const internalLinks = collectInternalLinks(navMap); let failures = []; @@ -94,7 +105,7 @@ function main() { for (const href of internalLinks) { // Check disallowed - if (disallowed.some(d => href.startsWith(d))) { + if (isDisallowedLink(href, disallowed, exceptions)) { failures.push({ href, reason: 'Links to disallowed path' }); continue; } diff --git a/scripts/ci/toplevel-whitelist-gate.mjs b/scripts/ci/toplevel-whitelist-gate.mjs index 0113215..98de640 100644 --- a/scripts/ci/toplevel-whitelist-gate.mjs +++ b/scripts/ci/toplevel-whitelist-gate.mjs @@ -33,17 +33,23 @@ const DIRECTORY_WHITELIST = [ // Data sources 'data', + 'content', 'export', 'fixtures', + 'schemas', 'test-vectors', // Governance & releases + 'audit', 'governance', 'releases', 'adjudication', + 'plans', 'reverification', + 'reports', // Tools & utilities + 'runners', 'scripts', 'tools', 'verifier', diff --git a/scripts/gates/post-task-association.mjs b/scripts/gates/post-task-association.mjs index b6ceef7..7256251 100644 --- a/scripts/gates/post-task-association.mjs +++ b/scripts/gates/post-task-association.mjs @@ -9,7 +9,7 @@ * Exit: 0 = PASS (report found), 1 = FAIL (no report) */ -import { execSync } from 'child_process'; +import { execFileSync } from 'child_process'; import * as fs from 'fs'; import * as path from 'path'; @@ -20,52 +20,168 @@ console.log('══════════════════════ console.log(' Post-Task Association Gate (SOP-VLAB-PROJ-SYNC-01)'); console.log('═══════════════════════════════════════════════════════════\n'); -// Function to get changed files -function getChangedFiles() { +function git(args) { + return execFileSync('git', args, { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'pipe'] }); +} + +function gitSucceeds(args) { try { - // Try GitHub Actions environment first - const baseRef = process.env.GITHUB_BASE_REF || 'main'; - const headRef = process.env.GITHUB_HEAD_REF || 'HEAD'; - - console.log(`📋 Checking PR changes...`); - console.log(` Base: ${baseRef}`); - console.log(` Head: ${headRef}\n`); - - // Get changed files in PR - let diffCommand; - if (process.env.GITHUB_ACTIONS) { - // In GitHub Actions - diffCommand = `git diff --name-only origin/${baseRef}...${headRef}`; - } else { - // Local development - compare with main branch - diffCommand = `git diff --name-only main...HEAD`; - } + git(args); + return true; + } catch { + return false; + } +} - const output = execSync(diffCommand, { encoding: 'utf-8' }); - const files = output.trim().split('\n').filter(f => f.length > 0); +function fetchRef(remoteRef, localRef) { + try { + git(['fetch', '--no-tags', '--prune', 'origin', `+${remoteRef}:${localRef}`]); + return true; + } catch (error) { + console.warn(`⚠️ Could not fetch ${remoteRef} -> ${localRef}`); + console.warn(` ${error.message}`); + return false; + } +} + +function refExists(ref) { + return gitSucceeds(['cat-file', '-e', `${ref}^{commit}`]); +} + +function readPullRequestPayload() { + const eventPath = process.env.GITHUB_EVENT_PATH; + if (!eventPath || !fs.existsSync(eventPath)) { + return null; + } - return files; + try { + const event = JSON.parse(fs.readFileSync(eventPath, 'utf-8')); + return event.pull_request || null; } catch (error) { - // If git diff fails, check if we're in a PR context at all - if (!process.env.GITHUB_ACTIONS) { - console.log('ℹ️ Not in GitHub Actions context - checking for report files existence...\n'); - // In local dev, just check if report directory has files - try { - const reportFiles = fs.readdirSync(REPORT_DIR); - return reportFiles.map(f => path.join(REPORT_DIR, f)); - } catch { - return []; - } + console.warn(`⚠️ Could not parse GitHub event payload: ${error.message}`); + return null; + } +} + +function filesFromDiff(base, head) { + if (!refExists(base)) { + throw new Error(`Base ref is not available: ${base}`); + } + if (!refExists(head)) { + throw new Error(`Head ref is not available: ${head}`); + } + + const output = git(['diff', '--name-only', `${base}...${head}`]); + return output.trim().split('\n').filter(f => f.length > 0); +} + +function tryDiffAttempts(attempts) { + const errors = []; + + for (const attempt of attempts) { + const { base, head, label } = attempt; + try { + console.log(` Trying ${label}: ${base}...${head}`); + return filesFromDiff(base, head); + } catch (error) { + errors.push(`${label}: ${error.message}`); } + } + + throw new Error([ + 'Unable to compute changed files from any candidate diff range.', + 'The Post-Task Association Gate remains strict: unresolved refs are not treated as zero changed files.', + 'Attempts:', + ...errors.map(error => ` - ${error}`) + ].join('\n')); +} + +function buildPullRequestDiffAttempts(pullRequest) { + const attempts = []; + const baseRef = pullRequest?.base?.ref || process.env.GITHUB_BASE_REF || 'main'; + const headRef = pullRequest?.head?.ref || process.env.GITHUB_HEAD_REF || 'HEAD'; + const baseSha = pullRequest?.base?.sha; + const headSha = pullRequest?.head?.sha; + const prNumber = pullRequest?.number; + const baseRepo = pullRequest?.base?.repo?.full_name; + const headRepo = pullRequest?.head?.repo?.full_name; + const headIsSameRepo = baseRepo && headRepo && baseRepo === headRepo; - console.error(`❌ Error getting changed files: ${error.message}`); - return []; + fetchRef(`refs/heads/${baseRef}`, `refs/remotes/origin/${baseRef}`); + + if (headRef && headRef !== 'HEAD' && headIsSameRepo) { + fetchRef(`refs/heads/${headRef}`, `refs/remotes/origin/${headRef}`); + } + + if (prNumber) { + fetchRef(`refs/pull/${prNumber}/head`, `refs/remotes/origin/pr/${prNumber}/head`); + } + + if (baseSha && headSha) { + attempts.push({ base: baseSha, head: headSha, label: 'pull_request base/head SHA' }); + } + + if (baseSha && prNumber) { + attempts.push({ base: baseSha, head: `refs/remotes/origin/pr/${prNumber}/head`, label: 'pull_request base SHA to fetched PR head' }); } + + if (baseSha) { + attempts.push({ base: baseSha, head: 'HEAD', label: 'pull_request base SHA to checkout HEAD' }); + } + + if (headRef && headRef !== 'HEAD' && headIsSameRepo) { + attempts.push({ base: `refs/remotes/origin/${baseRef}`, head: `refs/remotes/origin/${headRef}`, label: 'fetched origin base/head refs' }); + } + + attempts.push({ base: `refs/remotes/origin/${baseRef}`, head: 'HEAD', label: 'fetched origin base to checkout HEAD' }); + + return { attempts, baseRef, headRef }; +} + +function buildLocalDiffAttempts() { + const baseRef = process.env.GITHUB_BASE_REF || 'main'; + const headRef = process.env.GITHUB_HEAD_REF || 'HEAD'; + + fetchRef(`refs/heads/${baseRef}`, `refs/remotes/origin/${baseRef}`); + + return { + baseRef, + headRef, + attempts: [ + { base: `refs/remotes/origin/${baseRef}`, head: 'HEAD', label: 'fetched origin base to checkout HEAD' }, + { base: `origin/${baseRef}`, head: 'HEAD', label: 'origin base to checkout HEAD' }, + { base: baseRef, head: 'HEAD', label: 'local base branch to checkout HEAD' } + ] + }; +} + +// Function to get changed files +function getChangedFiles() { + const pullRequest = readPullRequestPayload(); + const diffPlan = pullRequest ? buildPullRequestDiffAttempts(pullRequest) : buildLocalDiffAttempts(); + + console.log(`📋 Checking PR changes...`); + console.log(` Base: ${diffPlan.baseRef}`); + console.log(` Head: ${diffPlan.headRef}`); + console.log(` Source: ${pullRequest ? 'GitHub pull_request payload' : 'local/CI fallback'}\n`); + + return tryDiffAttempts(diffPlan.attempts); } // Main gate logic function main() { - const changedFiles = getChangedFiles(); + let changedFiles; + try { + changedFiles = getChangedFiles(); + } catch (error) { + console.error('❌ Error getting changed files.'); + console.error(error.message); + console.error('\n═══════════════════════════════════════════════════════════'); + console.error(' Gate Status: ❌ FAIL'); + console.error(' SOP Compliance: Unable to resolve changed files'); + console.error('═══════════════════════════════════════════════════════════\n'); + process.exit(1); + } console.log(`🔍 Changed files: ${changedFiles.length}`); diff --git a/scripts/gates/unified/gate-unified-ui-version-strip-01.ts b/scripts/gates/unified/gate-unified-ui-version-strip-01.ts index 12a038e..ebc145b 100644 --- a/scripts/gates/unified/gate-unified-ui-version-strip-01.ts +++ b/scripts/gates/unified/gate-unified-ui-version-strip-01.ts @@ -13,12 +13,25 @@ const REQUIRED_PAGES = [ 'app/governance/page.tsx' ]; +function hasGlobalVersionStrip(projectRoot: string): boolean { + const appLayoutPath = path.join(projectRoot, 'app/layout.tsx'); + const appShellPath = path.join(projectRoot, 'components/layout/AppShell.tsx'); + if (!fs.existsSync(appLayoutPath) || !fs.existsSync(appShellPath)) { + return false; + } + + const appLayout = fs.readFileSync(appLayoutPath, 'utf8'); + const appShell = fs.readFileSync(appShellPath, 'utf8'); + return appLayout.includes('') && appShell.includes(' { const missing: string[] = []; const projectRoot = process.cwd(); + const globalVersionStrip = hasGlobalVersionStrip(projectRoot); for (const relPath of REQUIRED_PAGES) { const fullPath = path.join(projectRoot, relPath); @@ -26,6 +39,9 @@ export const gate = { missing.push(`${relPath} (File Not Found)`); continue; } + if (globalVersionStrip) { + continue; + } const content = fs.readFileSync(fullPath, 'utf8'); if (!content.includes(' 0) { return fail('Missing VersionStrip in key pages', missing); } - return pass('All key pages include VersionStrip'); + return pass(globalVersionStrip + ? 'All key pages inherit VersionStrip from AppShell' + : 'All key pages include VersionStrip'); } }; diff --git a/scripts/generate-curated-runs.mjs b/scripts/generate-curated-runs.mjs index 3a9824e..df145ea 100644 --- a/scripts/generate-curated-runs.mjs +++ b/scripts/generate-curated-runs.mjs @@ -10,6 +10,47 @@ const ALLOWLIST_PATH = path.join(PROJECT_ROOT, 'data/curated-runs/allowlist.yaml const ADJUDICATION_INDEX_PATH = path.join(PROJECT_ROOT, 'export/adjudication-index.json'); const OUTPUT_PATH = path.join(PROJECT_ROOT, 'public/_data/curated-runs.json'); const RUNSETS_PATH = path.join(PROJECT_ROOT, 'governance/runsets.yaml'); +const HASH_FIELDS = [ + 'pack_root_hash', + 'verdict_hash', + 'verify_report_hash', + 'evaluation_report_hash', +]; + +function loadExistingArtifact() { + if (!fs.existsSync(OUTPUT_PATH)) { + return { generatedAt: null, runsById: new Map() }; + } + + try { + const artifact = JSON.parse(fs.readFileSync(OUTPUT_PATH, 'utf-8')); + return { + generatedAt: artifact.ssot?.generated_at || null, + runsById: new Map((artifact.runs || []).map((run) => [run.run_id, run])), + }; + } catch { + return { generatedAt: null, runsById: new Map() }; + } +} + +function stableGeneratedAt(existingGeneratedAt) { + if (existingGeneratedAt) return existingGeneratedAt; + if (process.env.SOURCE_DATE_EPOCH) { + return new Date(Number(process.env.SOURCE_DATE_EPOCH) * 1000).toISOString(); + } + return new Date().toISOString(); +} + +function stableFieldValue(run, previousRun, field, computeValue) { + const PLACEHOLDER = 'f'.repeat(64); + if (run[field] && run[field] !== PLACEHOLDER) { + return run[field]; + } + if (previousRun && Object.prototype.hasOwnProperty.call(previousRun, field)) { + return previousRun[field]; + } + return computeValue(); +} /** * Compute hash for entire run pack directory @@ -47,6 +88,7 @@ async function main() { const allowlistContent = fs.readFileSync(ALLOWLIST_PATH, 'utf-8'); const parsed = yaml.load(allowlistContent); let runs = parsed.runs || []; + const existingArtifact = loadExistingArtifact(); // 2. Load runsets for filtering const runsets = yaml.load(fs.readFileSync(RUNSETS_PATH, 'utf-8')); @@ -70,39 +112,28 @@ async function main() { .filter((r) => !internalIds.has(r.run_id)) .map((run) => { const runDir = path.join(PROJECT_ROOT, 'data/runs', run.run_id); - - // Compute missing hashes (only if not already present or if placeholder) - const PLACEHOLDER = 'f'.repeat(64); - - const pack_root_hash = (run.pack_root_hash && run.pack_root_hash !== PLACEHOLDER) - ? run.pack_root_hash - : computePackHash(run.run_id); - - const verdict_hash = (run.verdict_hash && run.verdict_hash !== PLACEHOLDER) - ? run.verdict_hash - : computeFileHash(path.join(runDir, 'verdict.json')); - - const verify_report_hash = (run.verify_report_hash && run.verify_report_hash !== PLACEHOLDER) - ? run.verify_report_hash - : computeFileHash(path.join(runDir, 'verify-report.json')); - - const evaluation_report_hash = (run.evaluation_report_hash && run.evaluation_report_hash !== PLACEHOLDER) - ? run.evaluation_report_hash - : computeFileHash(path.join(runDir, 'evaluation-report.json')); + const previousRun = existingArtifact.runsById.get(run.run_id); + + const hashValues = Object.fromEntries(HASH_FIELDS.map((field) => { + const computeValue = () => { + if (field === 'pack_root_hash') return computePackHash(run.run_id); + if (field === 'verdict_hash') return computeFileHash(path.join(runDir, 'verdict.json')); + if (field === 'verify_report_hash') return computeFileHash(path.join(runDir, 'verify-report.json')); + return computeFileHash(path.join(runDir, 'evaluation-report.json')); + }; + return [field, stableFieldValue(run, previousRun, field, computeValue)]; + })); return { ...run, - pack_root_hash, - verdict_hash, - verify_report_hash, - evaluation_report_hash, + ...hashValues, adjudication_status: adjudicationMap.get(run.run_id)?.overall_status || 'NOT_ADJUDICATED' }; }); // 5. Build Artifact const artifact = { - ssot: { generated_at: new Date().toISOString() }, + ssot: { generated_at: stableGeneratedAt(existingArtifact.generatedAt) }, runs: enrichedRuns.sort((a, b) => a.run_id.localeCompare(b.run_id)) }; diff --git a/vitest.config.ts b/vitest.config.ts index 7d530bd..96a0ba3 100644 --- a/vitest.config.ts +++ b/vitest.config.ts @@ -1,8 +1,9 @@ -import { defineConfig } from 'vitest/config'; +import { configDefaults, defineConfig } from 'vitest/config'; export default defineConfig({ test: { include: ['tests/**/*.spec.ts'], + exclude: [...configDefaults.exclude, 'tests/e2e/**'], environment: 'node', testTimeout: 30000, globals: false,