{
  "repository": "ruvnet/ruflo",
  "ref": "bbd057eb177f583d10d66f6e6dc2c6ed773c7dca",
  "methods": [
    {
      "slug": "formal",
      "title": "Formal verification and model checking"
    },
    {
      "slug": "static_analysis",
      "title": "Static analysis"
    },
    {
      "slug": "testing",
      "title": "Testing"
    },
    {
      "slug": "formatting",
      "title": "Formatting and hygiene"
    },
    {
      "slug": "supply_chain",
      "title": "Supply chain"
    },
    {
      "slug": "unclassified",
      "title": "Unclassified"
    }
  ],
  "verifications": [
    {
      "tool": "cargo-check",
      "method": "static_analysis",
      "commands": [
        "cargo check --features native --verbose"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/federation-peer-rust.yml",
          "locator": "jobs.stable-native.steps[3] (cargo check --features native (resolves midstreamer-quic + aimds-*))"
        }
      ],
      "upstream": "https://github.com/rust-lang/cargo",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "clippy",
      "method": "static_analysis",
      "commands": [
        "cargo clippy --all-targets -- -D warnings"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/federation-peer-rust.yml",
          "locator": "jobs.stable-noop.steps[5] (cargo clippy (no native features))"
        }
      ],
      "upstream": "https://github.com/rust-lang/rust-clippy",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "codeql",
      "method": "static_analysis",
      "commands": [
        "uses github/codeql-action/analyze"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/codeql.yml",
          "locator": "jobs.analyze.steps[3] (Perform CodeQL Analysis)"
        }
      ],
      "upstream": "https://github.com/github/codeql",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "tsc",
      "method": "static_analysis",
      "commands": [
        "tsc",
        "tsc -p v3/@claude-flow/performance/tsconfig.json",
        "tsc --noEmit"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[3] (Build workspace-linked packages needed at runtime by tests)"
        },
        {
          "path": "package.json",
          "locator": "scripts.build"
        },
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[4] (Build local @claude-flow/cli-core and overlay onto the installed package)"
        },
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[3] (Build project)"
        },
        {
          "path": "package.json",
          "locator": "scripts.build:ts"
        },
        {
          "path": ".github/workflows/codex-activity.yml",
          "locator": "jobs.activity.steps[3]"
        },
        {
          "path": ".github/workflows/no-agentbbs-smoke.yml",
          "locator": "jobs.smoke-without-agentbbs.steps[6] (Rule 3 — runtime drill (surgically remove agentbbs only, run smoke))"
        },
        {
          "path": ".github/workflows/resource-admission.yml",
          "locator": "jobs.validate.steps[3] (Type check and build performance package)"
        },
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.pre-rollback-validation.steps[5] (Test rollback target viability)"
        },
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[3] (Verify build functionality)"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.graph-intelligence-build-smoke.steps[3] (Type-check)"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.graph-intelligence-build-smoke.steps[4] (Build)"
        }
      ],
      "upstream": "https://github.com/microsoft/TypeScript",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "eslint",
      "method": "static_analysis",
      "commands": [],
      "triggers": [],
      "evidence": [
        {
          "path": "package.json",
          "locator": "devDependencies: eslint"
        },
        {
          "path": "plugins/ruflo-arena/eslint.config.js",
          "locator": "config file"
        },
        {
          "path": "ruflo/src/ruvocal/.eslintrc.cjs",
          "locator": "config file"
        },
        {
          "path": "v3/@claude-flow/cli/.eslintrc.json",
          "locator": "config file"
        },
        {
          "path": "v3/goal_ui/eslint.config.js",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/eslint/eslint",
      "docs": "https://eslint.org/docs/latest/use/command-line-interface#exit-codes",
      "exit_codes": {
        "0": "no errors",
        "1": "linting errors found",
        "2": "configuration problem or internal error"
      },
      "autofix": true,
      "declared_only": true
    },
    {
      "tool": "cargo-test",
      "method": "testing",
      "commands": [
        "cargo test --verbose"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/federation-peer-rust.yml",
          "locator": "jobs.stable-noop.steps[4] (cargo test (no native features))"
        }
      ],
      "upstream": "https://github.com/rust-lang/cargo",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "ci-matrix",
      "method": "testing",
      "commands": [
        "test (os: 1)",
        "build (os: 3, include: 3)",
        "analyze (include: 3)",
        "activity (os: 3)",
        "validate (node: 2)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.strategy.matrix"
        },
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.strategy.matrix"
        },
        {
          "path": ".github/workflows/codeql.yml",
          "locator": "jobs.analyze.strategy.matrix"
        },
        {
          "path": ".github/workflows/codex-activity.yml",
          "locator": "jobs.activity.strategy.matrix"
        },
        {
          "path": ".github/workflows/resource-admission.yml",
          "locator": "jobs.validate.strategy.matrix"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.build.strategy.matrix"
        }
      ],
      "upstream": "https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "node-test",
      "method": "testing",
      "commands": [
        "node --test tests/external-plugins.test.mjs",
        "node --test tests/check-guard-tool-names.test.mjs tests/all-plugins-smoke-workflow.test.mjs",
        "node --test tests/plugins/codex-mod-hooks.test.mjs",
        "node --test tests/check-status-forwarding.test.mjs",
        "node --test plugins/ruflo-business-pods/scripts/pod-tick.test.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[3] (External plugin checks (github-only source, realpath containment, scrubbed env and cwd))"
        },
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[6] (Guard tool names exist in the registry)"
        },
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[7] (Native Codex hooks for adr, ddd and sparc (bundles match their sources))"
        },
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[8] (No mod forwards another mod's status file into model context (ADR-450 T7))"
        },
        {
          "path": ".github/workflows/business-pods-smoke.yml",
          "locator": "jobs.smoke.steps[5] (node --test — pod-tick)"
        },
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.score.steps[2] (CLI help and invalid arguments have no side effects)"
        },
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.score.steps[3] (Memory calls prefer the installed ruflo CLI over npx @latest (#3558))"
        }
      ],
      "upstream": "https://github.com/nodejs/node",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "vitest",
      "method": "testing",
      "commands": [
        "vitest",
        "vitest run __tests__/funnel.test.ts __tests__/statusline-cost-display.test.ts",
        "vitest run v3/@claude-flow/performance/__tests__/resource-admission.test.ts v3/@claude-flow/performance/__tests__/resource-admission-report.test.ts",
        "vitest run __tests__/doctor-metaharness-windows-3186.test.ts",
        "vitest run"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/chatgpt-federation.yml",
          "locator": "jobs.test.steps[3]"
        },
        {
          "path": "package.json",
          "locator": "scripts.test"
        },
        {
          "path": ".github/workflows/codex-activity.yml",
          "locator": "jobs.activity.steps[4] (Test activity reader and viewer)"
        },
        {
          "path": ".github/workflows/funnel-gates.yml",
          "locator": "jobs.invariants.steps[4] (Funnel invariant suite (ADR-310 gate map))"
        },
        {
          "path": ".github/workflows/resource-admission.yml",
          "locator": "jobs.validate.steps[4] (Run resource admission tests and structural benchmarks)"
        },
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[9] (Validate public registration gateway)"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.build.steps[6] (Windows MetaHarness doctor regression (#3186))"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.graph-intelligence-build-smoke.steps[5] (Run vitest)"
        },
        {
          "path": "package.json",
          "locator": "scripts.test:ui"
        },
        {
          "path": "package.json",
          "locator": "scripts.test:security"
        },
        {
          "path": "package.json",
          "locator": "scripts.security:test"
        },
        {
          "path": "package.json",
          "locator": "scripts.v3:security"
        }
      ],
      "upstream": "https://github.com/vitest-dev/vitest",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "prettier",
      "method": "formatting",
      "commands": [],
      "triggers": [],
      "evidence": [
        {
          "path": "ruflo/src/ruvocal/.prettierrc",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/prettier/prettier",
      "docs": "https://prettier.io/docs/cli#exit-codes",
      "exit_codes": {
        "0": "everything formatted",
        "1": "something was not formatted (--check)",
        "2": "prettier error"
      },
      "autofix": true,
      "declared_only": true
    },
    {
      "tool": "dependency-review",
      "method": "supply_chain",
      "commands": [
        "uses actions/dependency-review-action"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.dependency-review.steps[1] (Dependency Review)"
        }
      ],
      "upstream": "https://github.com/actions/dependency-review-action",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "npm-audit",
      "method": "supply_chain",
      "commands": [
        "npm audit --audit-level=high",
        "npm audit --production --audit-level=moderate",
        "npm audit --audit-level=critical",
        "npm audit --json 2>/dev/null",
        "npm audit --omit=dev"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.security.steps[3] (Run security audit)"
        },
        {
          "path": ".github/workflows/cve-audit.yml",
          "locator": "jobs.audit-root.steps[3] (npm audit — critical gate (must be 0))"
        },
        {
          "path": ".github/workflows/cve-audit.yml",
          "locator": "jobs.audit-v3.steps[2] (npm audit v3 — critical gate (must be 0))"
        },
        {
          "path": ".github/workflows/cve-audit.yml",
          "locator": "jobs.audit-high-report.steps[2] (Combined high/moderate summary)"
        },
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[9] (Validate public registration gateway)"
        },
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.security-verification.steps[4] (Security audit)"
        },
        {
          "path": "package.json",
          "locator": "scripts.security:audit"
        },
        {
          "path": "package.json",
          "locator": "scripts.security:fix"
        },
        {
          "path": "package.json",
          "locator": "scripts.v3:security"
        }
      ],
      "upstream": "https://github.com/npm/cli",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Check"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.rollback-monitoring.steps[2] (Generate rollback report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "INSERT INTO test_sessions (id, metadata) VALUES"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-setup.steps[5] (Create integration test database)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "New-Item -ItemType Directory -Path $tmp"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[6] (Daemon survives parent exit (Windows, regression)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Pipeline finished. Check individual jobs for details."
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.verification-report.steps[1] (Generate verification report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Security"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.verification-report.steps[1] (Generate verification report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Start-Sleep -Seconds 5"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[6] (Daemon survives parent exit (Windows, regression)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Tests"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.rollback-monitoring.steps[2] (Generate rollback report)"
        },
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.verification-report.steps[1] (Generate verification report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host ::group::Phase 3: verify daemon survives parent exit"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[6] (Daemon survives parent exit (Windows, regression)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host Install took $($installSw.Elapsed.TotalSeconds)s"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[6] (Daemon survives parent exit (Windows, regression)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host Testing daemon survival for @claude-flow/cli@$cliVer"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[6] (Daemon survives parent exit (Windows, regression)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host cmd.exe parent exited in $($spawnSw.Elapsed.TotalSeconds)s with code $($proc.ExitCode)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.build.steps[6] (Daemon survives parent exit (Windows, regression)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "agent_type TEXT,"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-setup.steps[5] (Create integration test database)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function healthCheck() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testAgentCoordination() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-agent-coordination.steps[4] (Initialize swarm for agent testing)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testCommunication() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-agent-coordination.steps[5] (Test inter-agent communication)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testFailureRecovery() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-fault-tolerance.steps[3] (Test agent failure recovery)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testMemorySync() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[5] (Test cross-agent memory synchronization)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testPerformance() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[3] (Test multi-agent performance)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testResilience() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-fault-tolerance.steps[4] (Test system resilience)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testScalability() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[4] (Test scalability limits)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testSharedMemory() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[4] (Test shared memory operations)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "async function testTaskDistribution() {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-agent-coordination.steps[6] (Test task distribution)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "audit --json 2>/dev/null"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/cve-audit.yml",
          "locator": "jobs.audit-root.steps[4] (npm audit — high summary (warn only))"
        },
        {
          "path": ".github/workflows/cve-audit.yml",
          "locator": "jobs.audit-v3.steps[3] (npm audit v3 — high summary (warn only))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "audit-ci --config .audit-ci.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.security-verification.steps[6] (Dependency vulnerability scan)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "await import(./v3/@claude-flow/security/dist/policy/product-plane.js)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[13] (Build and smoke-test immutable package archives)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bestPerformance = scalTest.throughput"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[4] (Test scalability limits)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.configuration.message = Configuration files present"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.configuration.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.dependencies.message = `${deps} runtime, ${devDeps} dev dependencies`"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.dependencies.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.overall.healthy = passedChecks >= 3"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.overall.message = e.message"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.overall.status = checks.overall.healthy ? passed : failed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.overall.status = error"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.packageJson.message = `Package: ${pkg.name}@${pkg.version}`"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "checks.packageJson.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "complexity-report --format json --output complexity-report.json src/"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.code-quality.steps[7] (Complexity analysis)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const checks = {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const loadTest = {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-fault-tolerance.steps[4] (Test system resilience)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const passedChecks = Object.values(checks).filter(c => c.status === passed).length"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/rollback-manager.yml",
          "locator": "jobs.post-rollback-verification.steps[6] (System health check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const perfTest = {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[3] (Test multi-agent performance)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const prevTest = results.scalabilityTests[agentCount - 2]"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[4] (Test scalability limits)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const scalTest = {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[4] (Test scalability limits)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const security = await import(base + /security/dist/index.js)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[13] (Build and smoke-test immutable package archives)"
        },
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[16] (Verify registry deployment)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const successfulTests = results.failureTests.filter(t => t.recoverySuccess)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-fault-tolerance.steps[3] (Test agent failure recovery)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const syncTest = {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[5] (Test cross-agent memory synchronization)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "const test = {"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-agent-coordination.steps[5] (Test inter-agent communication)"
        },
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[4] (Test shared memory operations)"
        },
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-fault-tolerance.steps[3] (Test agent failure recovery)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "diff -qr v3/@claude-flow/security/dist $extracted/package/node_modules/@claude-flow/security/dist"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[13] (Build and smoke-test immutable package archives)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "inspect registry processing before retrying publication\""
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[15] (Publish the three verified archives)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "license-checker --onlyAllow 'MIT"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.security.steps[7] (License compliance check)"
        },
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.security-verification.steps[5] (License compliance check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "loadTest.systemStable = loadTest.errorCount < agentCount * 0.1"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-fault-tolerance.steps[4] (Test system resilience)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node $RUNNER_TEMP/managed-e2e/scripts/e2e-managed-loop.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/managed-dynamic-workflows.yml",
          "locator": "jobs.contract.steps[5] (Executable independent verifier and feedback cycle)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node --input-type=module - <<NODE"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[13] (Build and smoke-test immutable package archives)"
        },
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[16] (Verify registry deployment)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node ../../../node_modules/vitest/vitest.mjs run --maxWorkers=2 --config vitest.config.ts __tests__/managed-agent-tools.test.ts __tests__/managed-workflows.test.ts __tests__/managed-mod-integration.test.ts __tests__/managed-learning.test.ts __tests__/managed-learning-loop.test.ts __tests__/managed-memory-isolation.test.ts __tests__/managed-run-collector.test.ts __tests__/managed-run-store.test.ts __tests__/workflow-validation-runtime.test.ts __tests__/workflow-resume-dispatch-r50.test.ts __tests__/workflow-progress-ownership-r50.test.ts"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/managed-dynamic-workflows.yml",
          "locator": "jobs.contract.steps[4] (Offline provider and adjacent workflow regressions)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node ../scripts/__tests__/stage-internal-runtime-bundles.test.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[8] (Run release test gates)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node @claude-flow/security/scripts/verify-oauth-exports.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.tool-output-guardrail-smoke.steps[3] (Build @claude-flow/security)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node node_modules/typescript/lib/tsc.js --target es2022 --module nodenext --moduleResolution nodenext --strict --skipLibCheck --types node --noEmit v3/@claude-flow/cli/src/mcp-tools/managed-agent-tools.ts"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/managed-dynamic-workflows.yml",
          "locator": "jobs.contract.steps[3] (Type check the adapter boundary)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node node_modules/typescript/lib/tsc.js --target es2022 --module nodenext --moduleResolution nodenext --strict --skipLibCheck --types node --outDir $RUNNER_TEMP/managed-e2e scripts/e2e-managed-loop.mts scripts/managed-outcome-verifier.mts v3/@claude-flow/cli/src/services/managed-memory-worker.ts"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/managed-dynamic-workflows.yml",
          "locator": "jobs.contract.steps[5] (Executable independent verifier and feedback cycle)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node node_modules/vitest/vitest.mjs run --maxWorkers=2 plugins/ruflo-console/tests/managed.spec.ts plugins/ruflo-console/tests/managed-palette.spec.ts plugins/ruflo-console/tests/model-tools.spec.ts plugins/ruflo-console/tests/palette-view.spec.ts plugins/ruflo-console/tests/workflows.spec.ts plugins/ruflo-console/tests/mods-section.spec.ts plugins/ruflo-console/tests/render-smoke.spec.ts plugins/ruflo-console/tests/tui-actions.spec.ts"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/managed-dynamic-workflows.yml",
          "locator": "jobs.contract.steps[7] (Focused console managed integration and rendering)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/test-cli-no-crash.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.mcp-roundtrip-smoke.steps[5] (Run)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/test-consensus-transport.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.mcp-roundtrip-smoke.steps[6] (Run ADR-095 G2 consensus-transport guard)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/test-hooks.mjs node $GITHUB_WORKSPACE/v3/@claude-flow/cli/bin/cli.js"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-hooks-smoke.steps[4] (Run plugin hooks smoke against local CLI build)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/test-mcp-protocol.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.mcp-protocol-smoke.steps[4] (Run MCP protocol-shape compliance scan)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/test-mcp-roundtrips.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.mcp-roundtrip-smoke.steps[4] (Run)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/test-memory-import.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.memory-import-smoke.steps[4] (Run memory-import regression guards (#1883 +)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-core/scripts/witness/verify.mjs --manifest $MANIFEST --json > $RUNNER_TEMP/witness-result.json 2> $RUNNER_TEMP/witness-result.err"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.witness-verify.steps[4] (Verify witness manifest (via standalone plugin script — no CLI dep))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-cost-tracker/scripts/health.mjs --format json > /tmp/cost-health.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/cost-tracker-smoke.yml",
          "locator": "jobs.smoke.steps[6] (cost-health composite gate (smoke — no sessions in CI))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-cost-tracker/scripts/test-cli-resolution-3558.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-hooks-smoke.steps[6] (cost-tracker prefers the installed ruflo CLI over npx @latest (#3558))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-cost-tracker/scripts/test-health-integration.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/cost-tracker-smoke.yml",
          "locator": "jobs.smoke.steps[7] (cost-health integration test (synthetic fixtures incl. iter-75 regression))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-cost-tracker/scripts/test-hooks.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-hooks-smoke.steps[5] (Run cost-tracker Stop hook smoke against local CLI build)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/bench-parse-mcp-scan.mjs --iters 100000 --max-mean-us 5 --format json > /tmp/bench-parse-mcp-scan.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.similarity-tests.steps[10] (Performance gate — parseMcpScanText sub-5μs (iter 87))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/mcp-scan.mjs --path . --fail-on high --format json > /tmp/metaharness-mcp-scan.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.mcp-scan.steps[2] (harness mcp-scan against ruflo (fail on HIGH findings))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/oia-audit.mjs --dry-run --format json > /tmp/drift-baseline.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.metaharness-real-data.steps[7] (Drift-from-history dispatcher round-trip with --baseline-file (iter 98))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/oia-audit.mjs --path . --dry-run --alert-on-worst high --format json > /tmp/oia-audit.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/oia-audit-weekly.yml",
          "locator": "jobs.audit.steps[2] (Run composite audit (alert on HIGH))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/test-mcp-tools.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.router-compat.steps[4] (MCP tool runtime contract test (ADR-150 iter 23))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/test-parallel-pipeline.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.router-compat.steps[3] (Parallel-pipeline e2e integration test (ADR-150 iter 13))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/test-pipeline-roundtrip.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.metaharness-real-data.steps[5] (End-to-end pipeline roundtrip (iter 47))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-metaharness/scripts/test-similarity.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.similarity-tests.steps[2] (Unit tests — _similarity.mjs (iter 39, 53 assertions))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node plugins/ruflo-mods/scripts/build-learning-loop-helper.mjs --check"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/mod-guidance.yml",
          "locator": "jobs.guidance-contracts.steps[3] (Check adapter types and static mod security)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node ruflo/src/mcp-bridge/test-runtime-security.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/adr-166-mcp-bridge-security.yml",
          "locator": "jobs.runtime-behavior.steps[3] (ADR-166 runtime verification)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node ruflo/src/mcp-bridge/test-security-lock.js"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/adr-166-mcp-bridge-security.yml",
          "locator": "jobs.static-source-lock.steps[2] (ADR-166 §6)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/__tests__/audit-supply-chain.test.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.supply-chain-audit.steps[5] (Test audit script itself)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-better-sqlite3-override.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[14] (Run better-sqlite3 override audit (#2219))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-cli-mcp-tools.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/managed-dynamic-workflows.yml",
          "locator": "jobs.contract.steps[6] (Plugin and registration contracts)"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.tool-descriptions-audit.steps[3] (Run CLI ↔ MCP tool coverage audit (#1916))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-codex-integration.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/codex-integration-audit.yml",
          "locator": "jobs.audit.steps[2]"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-env-var-precedence.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[16] (Run env-var-precedence audit (ADR-125 / ADR-130))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-exit-bypass-antipattern.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[9] (Fleet-wide exit-bypass antipattern lint (iter-75 bug class))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-fix-invariants.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.hook-command-audit.steps[4] (Run fix-invariants audit (presence-check guard for)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-hook-commands.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.hook-command-audit.steps[2] (Run hook-command audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-hook-handler-prompt.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.hook-command-audit.steps[3] (Run hook-handler prompt-resolution audit (#1944))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-leaf-package-publish.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[12] (Run leaf-package publish audit (#3335,)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-leaf-versions-published.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[13] (Run leaf-versions-published audit (#4303))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-neural-trader-safety.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.hook-command-audit.steps[5] (Run neural-trader install-safety audit (#1974))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-package-dep-overlap.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[8] (Run package dep-overlap audit (#1147 /)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-plugin-hooks-cross-platform.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[15] (Run plugin-hooks cross-platform audit (#2132))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-plugin-manifest.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[12] (Fleet-wide plugin.json manifest audit (iter 88))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-plugin-mcp-prefix.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[13] (Fleet-wide plugin MCP namespace audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-plugin-packages.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[6] (Run plugin package audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-plugin-secrets.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[7] (Run plugin secrets audit (ADR-506))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-plugin-version-bump.mjs --base origin/$EXPR"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/plugin-version-bump.yml",
          "locator": "jobs.version-bump.steps[2] (Changed plugins must raise their version)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-skill-frontmatter.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[10] (Fleet-wide SKILL.md frontmatter audit (iter 87))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-skill-mcp-tools.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[14] (Skill MCP tool reference audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-supply-chain.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.supply-chain-audit.steps[4] (Run supply-chain audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-tool-descriptions.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.tool-descriptions-audit.steps[2] (Run tool-description audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-umbrella-version-lockstep.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[6] (Validate version train)"
        },
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[10] (Run umbrella version-lockstep audit (#2151))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-vector-dim.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.vector-dim-audit.steps[2] (Run vector-dim audit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/audit-wrapper-dep-ranges.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.plugin-package-audit.steps[9] (Run wrapper dep-range audit (#2127))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/build-codex-mod-hooks.mjs --check"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[7] (Native Codex hooks for adr, ddd and sparc (bundles match their sources))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-fingerprint-schema.mjs --format json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.metaharness-real-data.steps[3] (Upstream fingerprint schema invariants (iter 81 — protects _similarity.mjs))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-guard-tool-names.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[6] (Guard tool names exist in the registry)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-helper-sync.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/helpers-manifest-guard.yml",
          "locator": "jobs.guard.steps[8] (Verify helper sync and committed manifest (#3206))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-mcp-scan-format.mjs --format json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.metaharness-real-data.steps[4] (Upstream mcp-scan format invariants (iter 80 — protects iter-50 parser))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-metaharness-compat.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.router-compat.steps[2] (Compat check against current @metaharness/router pin)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-metaharness-pins.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.clean-install.steps[2] (Pin declaration contract (fails on undeclared / peer-only / stale))"
        },
        {
          "path": ".github/workflows/metaharness-pin-drift.yml",
          "locator": "jobs.pin-drift.steps[4] (Human-readable summary)"
        },
        {
          "path": ".github/workflows/metaharness-pin-drift.yml",
          "locator": "jobs.pin-drift.steps[5] (Fail PR on drift)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-metaharness-pins.mjs --format json > /tmp/pins.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-pin-drift.yml",
          "locator": "jobs.pin-drift.steps[2] (Check metaharness pin drift)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-plugin-manifests.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[11] (claude.ai plugin-validator static check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/check-status-forwarding.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[8] (No mod forwards another mod's status file into model context (ADR-450 T7))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/ci-test-ratchet.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[5] (Run all tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/e2e/host-matrix.mjs"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "package.json",
          "locator": "scripts.e2e"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/e2e/host-matrix.mjs --cli-path $PWD/v3/@claude-flow/cli/bin/cli.js --json e2e-matrix.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/e2e-host-matrix.yml",
          "locator": "jobs.keyless.steps[7] (Matrix (keyless))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/e2e/host-matrix.mjs --live"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "package.json",
          "locator": "scripts.e2e:live"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/metaharness-clean-install-test.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/metaharness-ci.yml",
          "locator": "jobs.clean-install.steps[3] (Clean-directory install + advertised-symbol contract)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/smoke-flywheel-proof.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.test.steps[6] (ADR-176/177 — self-learning proof artifacts must stay valid)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/smoke-helper-signing-security.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/helpers-manifest-guard.yml",
          "locator": "jobs.guard.steps[4] (Helper signing key transport + single-source guard)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/smoke-kg-extract-type-imports.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.kg-extract-type-imports-smoke.steps[2] (Run kg-extract type-import smoke)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/smoke-neural-trader-backtest-signing.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.neural-trader-backtest-signing-smoke.steps[3] (Run backtest signing smoke)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/smoke-witness-verify-precondition.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.witness-verify-precondition-smoke.steps[3] (Drive precondition + built-tree shapes through verify.mjs)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/sync-mod-screen.mjs --check"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/all-plugins-smoke.yml",
          "locator": "jobs.smoke-all.steps[5] (Mod secret screen — every copy matches the origin (ADR-445))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/test-mcp-policy-stdio.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.test.steps[4] (Verify opt-in MCP policy through both shipped stdio launchers)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/verify-helpers.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/stable-npm-release.yml",
          "locator": "jobs.publish.steps[10] (Verify signed helper manifest)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node src/mcp-bridge/test-harness.js"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "ruflo/package.json",
          "locator": "scripts.dev:test"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node v3/@claude-flow/cli/benchmarks/context-delegation/verify.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/context-delegation.yml",
          "locator": "jobs.contracts.steps[6] (Verify committed source-bound evidence)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node v3/@claude-flow/cli/benchmarks/context-delegation/verify.mjs /tmp/context-delegation-results.json"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/context-delegation.yml",
          "locator": "jobs.contracts.steps[7] (Reproduce deterministic before and after benchmark)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "perfTest.averageTaskTime = perfTest.executionTime / perfTest.tasksCompleted"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[3] (Test multi-agent performance)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "perfTest.throughput = (perfTest.tasksCompleted / perfTest.executionTime) * 1000"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-performance-integration.steps[3] (Test multi-agent performance)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.summary.failedTests = report.summary.totalTests - report.summary.passedTests"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.summary.overallSuccess = report.summary.failedTests === 0"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.summary.passedTests++"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.summary.totalTests++"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.testResults.coordination.details = { agentTypes: coordFiles.length }"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.testResults.coordination.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.testResults.faultTolerance.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.testResults.memory.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "report.testResults.performance.status = passed"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.integration-test-report.steps[2] (Generate comprehensive report)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "run list --workflow=oia-audit-weekly.yml --status=success --limit=10 --json databaseId,headSha --jq \".[]"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/oia-audit-weekly.yml",
          "locator": "jobs.audit.steps[4] (Download prior week's audit artifact (if any))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "syncTest.conflictsResolved = syncTest.conflictsDetected"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[5] (Test cross-agent memory synchronization)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "tee $RUNNER_TEMP/vitest-output.log"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/v3-ci.yml",
          "locator": "jobs.test.steps[8] (Run tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "test.averageLatency = test.testCases.reduce((sum, tc) => sum + tc.latency, 0) / test.testCases.length"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[4] (Test shared memory operations)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "test.successRate = test.testCases.filter(tc => tc.success).length / test.testCases.length"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/integration-tests.yml",
          "locator": "jobs.test-memory-integration.steps[4] (Test shared memory operations)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "true"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.security.steps[4] (Lint code)"
        },
        {
          "path": "package.json",
          "locator": "scripts.lint"
        },
        {
          "path": ".github/workflows/verification-pipeline.yml",
          "locator": "jobs.code-quality.steps[4] (ESLint code analysis)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    }
  ]
}