External contract verification
Checks claims about third-party behaviour (an API can return null, a library throws) against authoritative documentation, and grades how strong that proof is.
Sub-techniques
2
| ID | Name | Description |
|---|---|---|
V1044.001 | Documentation lookup | Fetch the exact library version's documentation or source. |
V1044.002 | Proof grading | Grade as definitive (spec or exhaustive enum), illustrative (an example) or unresolved. |
Craft it
- Resolve the dependency version from the lockfile.
- Fetch that version's docs or source, not the latest.
- Keep findings that rest on illustrative proof at lower severity.
Reverse engineer it
Signs that a codebase already runs this technique, and where to read how it is configured.
- Documentation MCP servers or doc lookup tools configured for the review agent.