InverseAltruism / csd-sdk

No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Instalar npm:@inversealtruism/csd-tx@0.1.17 arrastra 4 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.

Ningún aviso conocido afecta a las dependencias evaluadas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1444,
      "has_wiki": true,
      "homepage": "http://cairn-substrate.com",
      "languages": {
        "Shell": 2340,
        "Python": 72053,
        "JavaScript": 353250,
        "TypeScript": 635641
      },
      "pushed_at": "2026-07-23T18:00:18Z",
      "created_at": "2026-06-06T22:32:53Z",
      "owner_type": "User",
      "updated_at": "2026-07-23T18:00:32Z",
      "description": "Compute Substrate (CSD) SDK + light client - canonical codec/crypto/tx/RPC + headers-first verified light client.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "JavaScript"
      ]
    },
    "owner": {
      "blog": "https://cairn-substrate.com",
      "name": "Inverse",
      "type": "User",
      "login": "InverseAltruism",
      "company": null,
      "location": null,
      "followers": 16,
      "avatar_url": "https://avatars.githubusercontent.com/u/129900527?v=4",
      "created_at": "2023-04-04T20:12:40Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 1211
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.10",
          "kind": "patch",
          "published_at": "2026-06-16T22:33:02Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-06-15T19:25:38Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-06-15T00:45:31Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-06-14T23:31:38Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-06-14T06:09:25Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-06-12T22:27:42Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-06-08T18:56:16Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f2ac1286f3cd9cc695eb8bae7260af24daa2d980",
          "body": "…TS State snapshot\n\n- seal-differential header no longer lists replay-hashes.json among the frozen step-2 pins\n  (the code narrowed it out for B8-hash; header now matches).\n- types.ts V28 comment: point-in-time phrasing, marks the 2026-07-23 crossing and the\n  extended pin range.\n- AGENTS.md State snapshot to the post-REBIND LTS baseline (0.1.40 published, V28 crossed,\n  B8-hash pinned, FU-A skew recorded, V29 the only pending gate).",
          "is_bot": false,
          "headline": "docs: close the two G15 LOW stale-comment findings + refresh the AGEN…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-23T18:00:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49c13a84d3beb9fc86a0adda585884a3fbbfafa7",
          "body": "- Section 32 written from resolve.ts/types.ts and cross-checked against the independent\n  Python oracle: M4 duplicate-event drop (one identity per tx; first-in-consensus-order\n  kept; no straddle case, a duplicate pair shares one block) and M5 open-holds-only\n  concurrent-claim count (strict subset,\n[…]\nHANGES rollout note 2 closed; note 1 updated for the executed B8-hash\n  baseline (corpus + V28-inclusive pins now load-bearing in-tree).\n- AGENTS.md cairnx-core row: CONVENTION v2.9 no longer pending.",
          "is_bot": false,
          "headline": "CONVENTION section 32: the v2.9 normative spec (REBIND M4 + M5)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-23T17:56:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a7e52902e02b7551d22af0e6fdf51950fa489ff0",
          "body": "- replay-hashes.json re-pinned at the V28 crossing (captured 2026-07-23, tip 60,425).\n  STOP RULE verified: all 13 pre-existing 45,959-era heights reproduce byte-identically;\n  V24/V25/V26/V27/V23/V28 entries ADDED, none changed.\n- replay-corpus.json: the deterministic on-chain event corpus (389 eve\n[…]\nrom the B6-era byte-freeze by\n  the same narrowing pattern B9 established (it is the deliberate B8-hash deliverable, now\n  independently guarded by the vectors.test assertion). SEAL re-run: PASS (GO).",
          "is_bot": false,
          "headline": "B8-hash (REBIND F8): V28-inclusive replay-hash baseline, load-bearing",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-23T17:52:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "722b427ba43ad06e71fd355e8b9ba4318f5ec529",
          "body": "…y surface + B9 V29 gate @ 88,000)\n\nB6 CORE-ADDITIVE (default-off, SEAL byte-identical to 0.1.38 with features off) + B9 M4/M5 gated at\nV29_HEIGHT=88,000 (below-gate byte-identical, fork-lens proven). Below tip 88,000 every 0.1.40 replayer\nis byte-identical to 0.1.38. npm publish is the operator step; the replay-hash re-pin lands at the crossing.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: cairnx-core 0.1.40 (Plan 71 REBIND: B6 additive fill-boundar…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-21T00:54:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eb99580dbb287df9da9c43f8f8df9c4dafb8640b",
          "body": "- CONSENSUS_CHANGES.md: V29 @ 88,000 entry (M4 event de-dup + M5 concurrent-hold\n  status filter, event-height gated; post-crossing replay-hash re-pin checklist\n  step + stop rule; adoption discipline + abort lever). Lands BEFORE the 0.1.40\n  bump per the close-out order.\n- publish-guard.mjs: honest\n[…]\nariant.\n- types.ts: claimWindowOf JSDoc corrected for the expiry-capped EARLY-side\n  over-state (G10-B flag); comment-only, stripped from dist.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B8-docs (REBIND): csd-sdk AGENTS/truth pass",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-21T00:20:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "94cd992dfefb881dd32dcaf86a0753fd31f39b2a",
          "body": "…raddle, below-gate differential, fork-lens fixture\n\nThe independent-verification half of the V29 gate. No resolve() behavior change; this\ncommit is the proof that B9a is a sound, correctly-scheduled consensus relaxation.\n\n- conformance/cairnx_ref.py: the M4 (event de-dup) + M5 (open-holds-only cap)\n[…]\ntep clean (version UNCHANGED at 0.1.38); audit:all exit 0 (sealed-band\nburns 0); B6 seal-differential still SEAL PASS; em-dash 0 in added lines.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B9b (REBIND M4+M5 proof half): Python oracle mirror, V29 crosslang st…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T19:38:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8c30a43810a18346bef490bf3e5f30e2b4049be9",
          "body": "…88,000\n\nTwo resolve() corrections that both move canonical state, so both ride ONE height\ngate V29_HEIGHT = 88,000 (operator decision 2026-07-20). Below the gate the core is\nBYTE-IDENTICAL to v2.8: 72/72 B6-era golden vectors unchanged, every pinned replay\nheight (<= 45,959) far below 88,000.\n\n- M5\n[…]\n this diff): the 0.1.40 version bump + publish, and the V29\nreplay-hash re-pin (needs the live-indexer generator reachable into the V29 region).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B9a (REBIND M4+M5): the V29 consensus gate, resolve()-side, gated at …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T19:26:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d71e31161395707fb56c6c934ff895674a5d44c",
          "body": "- conformance/crosscheck-siwc.mjs: replace the em-dash in the zero-length\n  deny-leg console.error with a regular hyphen (the remaining em-dash on the\n  case-2 SIWC statement is deliberate pinned test-vector data; changing it\n  would move a pinned digest and drop non-ASCII coverage, so it stays).\n- \n[…]\n it\n  cannot go dead-green if the export is renamed/removed. RED-FIRST verified.\n\nTest/conformance-only: no built dist byte changes (SEAL-safe).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6 gate fold-ins (G10): em-dash strip + unsafeMint prod-guard",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T19:05:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "26fb628dc05d29184b00d94e885b3958457bfe8b",
          "body": "…tch (standing rule: zero in added text)\n\nComment/string-only; dist semantics unchanged (the SEAL differential re-run pins that).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6 polish: strip em dashes from strings and comments added by this ba…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:25:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "058f3710aa0c75ca392d5eed4592f3bcd5216047",
          "body": "…referee executes at the gate)\n\nnode scripts/seal-differential.mjs [baselineRef=84f22d7]:\n1. settled-tree check (check-lockstep: dist fresh);\n2. vector-corpus non-movement vs the baseline ref (cases.json / replay-hashes.json /\n   wa-parity untouched - the differential runs on unmoved pins);\n3. build\n[…]\n150->151 in the tree dist -> DIVERGED on the v16 rebate vectors,\nexit 1; rebuild -> exit 0. Any nonzero exit = B6-SEAL no-go, nothing publishes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6-SEAL harness: the 0.1.38 byte-identity differential (author half; …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:23:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dc4580284a21f17784b0bba37a1b2ccdf04ef1cc",
          "body": "…2 exact-gate both(), R3 premise pins\n\n- export-surface.test.ts: pins CONF_TOKEN_FILL (the 1_000_000 token-fill confidence\n  sentinel) in src AND in the built dist/index.d.ts the wallet re-vendor consumes.\n  Verified already exported (types.ts export *); the pin makes regression loud\n  (red-first: a\n[…]\nlog. Red-first: each premise relaxed in dist failed exactly its own pin.\n  Wired into test:crosslang. Test-only; the Python oracle is untouched.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6 conformance riders (REBIND): export pin, proven-terms tripwire, F-…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:20:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9a4c50fde95e6c212307c43d5c7898019a0b98de",
          "body": "…fier boolean, node byte caps in builders, SIWC zero-length parity\n\nAll four leaf LOWs verified against the live tree before coding; every fix authored\nred-first (test written, observed RED, then fixed):\n\n- registry reverseName: encodeURIComponent(address) (sibling parity with resolveName;\n  a path-\n[…]\ned RED against the unfixed ref (JS refused, Python built).\n  The wallet-builder half of the audit LOW is cairn-wallet scope and rides its batch.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B8-sdklow rider (REBIND audit LOWs): registry URL-encode, merkle veri…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:14:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e43ca8eeeb939e5b83e9aeb7b3deafdc96904e75",
          "body": "…aced by a glob runner\n\n- scripts/publish-guard.mjs (every package's prepublishOnly) now runs the package's own\n  test suite and, for cairnx-core, the root cross-language conformance gate\n  (test:crosslang), after the pnpm-client + lockstep checks. Opt-out is EXPLICIT ONLY\n  (CSD_PUBLISH_SKIP_TESTS=\n[…]\nthe summary\n- red cairnx suite -> publish-guard exit 1 'REFUSING to publish'\n- CSD_PUBLISH_SKIP_TESTS=1 -> loud banner, tests skipped explicitly\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6d (REBIND M13): publish gate runs the tests; cairnx test chain repl…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:10:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0deb7babd89e55941825aa261f447c639efba10a",
          "body": "…parameter, mirrors claimGraceOf)\n\nAn fclaim hold's claimUntilHeight = (E+1)*EPOCH_LEN is epoch-quantized, so the legacy\n40-block era inverse under-derives the grant by 6..35 blocks (true span 46..75) and the\nclaim-depth consumer shows a false 'not ready' on the flagship name-buy flow. With the\noffe\n[…]\nn truth), P4 (strictly wider than 40),\nP5 (true span inside [46,75]); mutation proof that deleting the fclaim branch reverts\nto the M6 behavior.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6c (REBIND M6): claimWindowOf made fclaim-aware in place (claimTxid …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:07:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "38bec3872fddf09e3a64b8d2baa1a2cb4d9194fc",
          "body": "…uccessors; fillIsSafe/requiredFillOutputs frozen, doc-corrected, deprecated\n\n- fillEndorsement(offer, me, pay, tip, {fillTargetId}): a discriminated honest verdict\n  (endorsed / refused / not-endorsable). Token wants get the DISTINCT not-endorsable\n  verdict (honest non-endorsement, never a refusal\n[…]\n tests: Correction-1 red/green pair, frozen-behavior pins, per-guard mutation proofs\n  (each new guard is the sole rejecter of its doomed case).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6b (REBIND W10/M1): fillEndorsement + fillOutputPlan discriminated s…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:06:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e11f3fb4d3b7abf966ac9d94b1e0958c57856132",
          "body": "…yment bind, ProvenOfferTerms brand\n\nAll additive and DEFAULT-OFF (decision D4); resolve.ts untouched, replay byte-identical.\n\n- bindOfferTerms gains OPT-IN give.ticker/give.amount/give.name legs (explicit presence +\n  verbatim string equality, never a deep object compare) and a symmetric want-type \n[…]\nproofs (each new guard is the sole rejecter), and an executable tsc\n  compile gate for the brand (test/brand.test.ts + fixtures/brand-usage.ts).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "B6a (REBIND W2/W3/W7): opt-in give/wantType term legs, opt-in sums pa…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-20T18:02:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "815683f3c26b11bc7c46dbfd3bc685c61c1ab015",
          "body": "The V28 differential guard was blind. Measured over 20,000 generated sequences,\nevent heights DID exceed V28 (via lapseFlow's far-future re-claims) but every one\nof those was a `propose`, so not one attest ever reached the gate. Every v2.8\nbranch - grant, fclaim fill routing, Correction 1, and the l\n[…]\nstored\nbyte-identical after every mutation experiment.\n\nMutation-proven: delete the gate and the differential itself now diverges.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "conformance(B0a): repair the vacuous V28 fork gate",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-19T19:09:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "29806897259e3a53334fbfde95de794db42118f4",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "Merge Plan 70 R2 into master (cairnx-core 0.1.38 + csd-tx 0.1.17)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T09:07:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "84f22d7c77cda9049c9f728074efafc97d0c0abb",
          "body": "…-identical)\n\ncairnx-core 0.1.38: the Option-B shared bindOfferTerms fill-boundary predicate (exported) +\nL1 FILL_TIP_MARGIN 2->4 (client fclaim deadline cushion, fail-safe reject-more). csd-tx 0.1.17:\nbuildProposeVerified/buildAttestVerified (F9-C). CONSENSUS_CHANGES entry added: CLIENT reject-more\n[…]\n2/72 golden vectors + replay-hashes unmoved), non-retroactive, no gate.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "release: cairnx-core 0.1.38 + csd-tx 0.1.17 (Plan 70 R2; resolve byte…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T09:03:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c7c01e8b34683479a5d11b222fcece1591bf8b2a",
          "body": "…ndOfferTerms) + FILL_TIP_MARGIN 2->4 (Plan 70 R2 Batch G)\n\nverifyfill.ts: export the ONE fill-boundary TERM-mismatch verdict `bindOfferTerms`\n(byte-identical to the R1 wallet provenTermsMismatch + site amount-leg hand-copies,\nwhich were already behaviourally identical, differing only in shape) plus\n[…]\ndentical, consumer-pin + lockstep OK. No version bump (not publishing).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "feat(cairnx §Option B): single-source the fill-boundary term bind (bi…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T02:26:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dcc761107aaf169083bf38b8531967ca87ac2320",
          "body": "…e-verified money-out builders)\n\nAdd the verified twins of buildPropose/buildAttest, mirroring buildSendVerified: select inputs by\nreported value, await verify(sel.inputs) against the chain (fail-closed on !ok or throw), then assemble\nthe Propose/Attest from the VERIFIED total with the same fee-floo\n[…]\nfied-total change, fee-floor twin,\nCONF_TOKEN_FILL marker (68/68 pass).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "feat(tx F9-C): buildProposeVerified + buildAttestVerified (input-valu…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T01:59:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fb9b70ae29deac7eabe8513218a00ef13b3de27e",
          "body": "…vector + oracle comment honesty\n\nPlan 70 R2/R3 finding I1 (oracle independence for the name-give fclaim path). Every prior\nfclaim crosslang vector is TOKEN-give; the v2.8 fclaim NAME-GIVE delivery path (an offer selling\na .csd name, settled via an fclaim hold + fill) had ZERO dedicated cross-impl v\n[…]\nnt violations). No JS consensus logic, versions, or\npublishing touched.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "test(conformance §I1): CONVENTION-derived NAME-GIVE fclaim crosslang …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T01:13:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2d02dd8065703d208117f354af6ba4e1cdf94885",
          "body": "…io + TREASURY_ADDR bind\n\nReview follow-ups: (1) the withheld-cancel scenario - a seller ocancel on-chain but\nOMITTED from the resolver hint list (the real F8 completeness attack, distinct from\nocancel-before-grant where the cancel IS served). cairnx-core verifyFillSpv canNOT catch\na withheld event \n[…]\nHash 0x0a4e1072...).\n\nPlan 70 R2 / W-A (WA-PARITY seam 1 review fixes).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "test(cairnx §WA-PARITY): add withheld-cancel (F8 completeness) scenar…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T00:42:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f6ca30dda9884ee03f2ca8b8bca1d87b105b1849",
          "body": "…apter (seam 1/3)\n\nThe W-A defense-in-depth fixture that keeps the three fill-boundary seams (cairnx-core\nverifyFillSpv, cairn-wallet fillspv.ts, cairn swapguard.js) from ever diverging again.\n\nwa-parity-corpus.json: one canonical, seam-agnostic hostile-case corpus (record-level\nscenarios; symbolic \n[…]\nxist.\n\nPlan 70 R2 / W-A (WA-PARITY, L4, SG-CLAIMGRANT folds to follow).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017h7GYgP2JsDnoVu5uP1VAH",
          "is_bot": false,
          "headline": "test(cairnx §WA-PARITY): shared fill-boundary corpus + cairnx-core ad…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-17T00:36:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "008a80c7bb26c8006c7aa21a46080a512a8d2e46",
          "body": "… integration)\n\nThe A1 csd-light change was integrated into the V28 line during the build and published as csd-light 0.1.18\n(commit b09a54a on this branch is byte-identical to a1-sg-content-bind's a2ae930). This merge records the\nintegration and retires the feature branch; it changes ZERO content (git merge-tree == master^{tree}).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge branch 'a1-sg-content-bind' into master (V28 A1 SG-CONTENT-BIND…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-13T14:36:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0afd384ca789bab19a473cb1c547927186807c39",
          "body": "…1.18 (A1 SG-CONTENT-BIND) + clarvis-optional framing\n\n- V28_HEIGHT 55_000 -> 60_000 in types.ts + cairnx_ref.py; 7 v28 vectors regenerated at 60000.\n- csd-light 0.1.17 -> 0.1.18 (carries the cherry-picked SG-CONTENT-BIND-1 verifyTxInclusion bind).\n- CONSENSUS_CHANGES: V28 entry gate + csd-light 0.1\n[…]\nity hard requirement.\n- Fork gate re-verified: vectors 71/71 byte-identical, crosslang 26/26 JS==Python at 60000, audit:all clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(V28): bump gate 55,000 -> 60,000 (deploy runway) + csd-light 0.…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-13T13:33:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b09a54a0b6e71969e7dcdd79d17dc2695c06790c",
          "body": "…olds merkle over the re-derived leaf\n\nCloses SG-CONTENT-BIND-1: the light client's inclusion proof folded server-reported\ntxids and discarded the proven tx, so a merkle proof did not bind the tx CONTENT. Now\nverifyTxInclusion recomputes the consensus txid from the returned tx and folds the\nmerkle b\n[…]\n-content-bind (ship-first security track; needs a version\nbump + re-vendor at publish; MERGE INTO the V28 branches before deploy).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(light §SG-CONTENT-BIND-1): verifyTxInclusion re-derives txid + f…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-13T13:29:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a2ae93042bfc98df514dcac10ea4d428de36c179",
          "body": "…olds merkle over the re-derived leaf\n\nCloses SG-CONTENT-BIND-1: the light client's inclusion proof folded server-reported\ntxids and discarded the proven tx, so a merkle proof did not bind the tx CONTENT. Now\nverifyTxInclusion recomputes the consensus txid from the returned tx and folds the\nmerkle b\n[…]\n-content-bind (ship-first security track; needs a version\nbump + re-vendor at publish; MERGE INTO the V28 branches before deploy).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(light §SG-CONTENT-BIND-1): verifyTxInclusion re-derives txid + f…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-12T22:19:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a7183650c0e2fc6dda6722b133743a5caa9a964f",
          "body": "…e 55,000)\n\nCloses CX-DVP-CROSSBLOCK-1 (cross-block \"pay without delivery\" on the open-lane\nmarketplace buy). The open-lane claim becomes a short-expiry `fclaim` Propose and the\nfill Attests that fclaim's txid, so L0's own attest-existence + attest-after-expiry\nrules ARE the hold deadline (overlay d\n[…]\nent fill-SPV evidence layer is hand-implemented\ntwice (site + wallet) and should be consolidated into a shared cairnx-core helper.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx v2.8/§31): V28 fclaim open-lane settlement atomicity (gat…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-12T22:18:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e1e745b9f9d965d56ed315bd13605f2b8e916350",
          "body": "…d home dir\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(scripts): read the demo key path from env/$HOME, not a hardcode…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-11T01:53:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "03f58a657efe7eb19a5039c3b62bd6a252a8938a",
          "body": "The docstring claimed the check is 'sound by the freeze arithmetic ... guarantees\nthe finalize lands' and the S1 hardening framed it as 'no resolver value can\ninduce a loss'. Both overclaim: the displacement guard (effectiveHeight !==\ncommitHeight) only bites when commitHeight comes from a source IN\n[…]\ns\nregistration-state SPV (roadmapped). Comment-only, no behavior change (rides the\nnext natural cairnx-core publish; not a docs-only republish).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx): honest trust-scope on finalizeWinnerCheck (meta-review)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T21:09:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a51ca920ba5a91499493a1e002ac46af83ec9663",
          "body": "…eck pure derivation (S1)\n\nPre-publish hardening from the 9-agent audit (csd-light 0.1.17 + cairnx-core\n0.1.36 were never published, so these fold into the same unreleased versions).\n\nH1 (consensus red-team, PoC-confirmed): the initial C1 anchor-containment only\nrequired the snapshot to CONTAIN its \n[…]\nolve/records/types unchanged):\ncrosslang exit 0, audit:all exit 0 (byte-identity 1000/1000, sealed-band 0),\nlockstep + per-package suites green.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "harden(light+cairnx): complete C1 anchor band (H1) + finalizeWinnerCh…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T20:01:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "59dbdba92c7ce78da2a456245c84129863179268",
          "body": "…T-5 mirror)\n\nThe helpers judge a record the caller hands them, so the fail-closed fetch\nposture (a clean 404 or status-less 200 means the resolver will not settle\nthe fill; the L1 payment burns) is now stated in the shared contract header,\nmirroring the wallet 0.2.57 OFFER_UNKNOWN behavior. Comment-only; rides the\nunpublished 0.1.36.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx): state the fetch posture in the preflight contract (M-MK…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T19:02:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "19d77d9b8dfc40bb8e2e87138c6ce196902ed22e",
          "body": "…ct replayers unchanged\n\nPlans/68 D3b. CONSUMERS gains a tier column: strict (cairnx svc, cairn-cli;\nany cairnx-core pin mismatch fatal, as before) vs graded (cairn-sdk, clarvis;\na lag is fatal ONLY when the pinned-version..HEAD diff touches the consensus\nsurface resolve/records/types - a helpers-on\n[…]\nect version check.\n\nCloses the guard's blind spot on exactly the repo the external review\nflagged (cairn-sdk was previously not checked at all).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(scripts): consumer-pins tiers - cairn-sdk + clarvis graded, stri…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T18:27:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "285a0486fb312c45b6afd2a72bf4988bddda1d6f",
          "body": "…airnx-core 0.1.36)\n\nPlans/68 B2 (revives Plan 63 N-2). finalizeWinnerCheck accepts an optional\ntip and, when passed, refuses BOTH sides of the finalize window: too-early\n(displacement contest not frozen: the resolver rejects the nfinalize after\nthe reg fee moved, a burn) and too-late (mines past fi\n[…]\n test:crosslang exit 0 (resolve 64/64, fuzz\n1500/1500), audit:all exit 0 (0 invariant violations, sealed-band burns 0,\nbyte-identity 1000/1000).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx): finalizeWinnerCheck gains the finalize-window checks (c…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T18:27:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "41c192fa1bce0c012ca72b17cb2958345927ab74",
          "body": "…s (csd-light 0.1.17)\n\nPlans/68 C1. fromSnapshot hardens the restore path, reject-more only:\n\n- Anchor containment: a checkpoint-configured client refuses any snapshot\n  whose range does not CONTAIN its lowest pinned checkpoint (genesis-rooted\n  snapshots stay exempt, anchored by the H4 genesis chec\n[…]\nht-offline.test.ts, each verified to FAIL on 0.1.16 (29/32) and pass on\n0.1.17 (32/32). CONSENSUS_CHANGES entry included; no height gate needed.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(light): snapshot anchor containment + restore-time timestamp rule…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T18:26:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c2e0926636d4385e895fb1f4fa1f229b4b1b135b",
          "body": "…byte-identical)\n\nfromSnapshot restores measured ~85% LWMA re-derivation: the sliding 45-header\nwindow re-converts the same header's bits up to 45x. Module-scope capped memo\nof the pure targetToBigInt(bitsToTarget(bits)) composition cuts restore cost\n~4x (192 -> 47 us/header on the real-header fixtu\n[…]\ne window + edge encodings + forced cap eviction) and the unchanged\nlight-offline golden (incl. H4 poison vector). CONSENSUS_CHANGES entry added.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(light): memoize LWMA bits->target conversion (csd-light 0.1.16, …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-10T15:48:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1034ab23b16f9e64ae7cbafdfdce15836fd3fa26",
          "body": "AGENTS.md is the canonical repo briefing for coding agents and outside\ncontributors; CLAUDE.md imports it via @AGENTS.md (edit AGENTS.md only).\nProduction and operations specifics are intentionally out of scope and\nmaintained privately.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add public agent onboarding briefing (AGENTS.md + CLAUDE.md)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-09T22:59:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6cccfd15de0c3510ee30c3859c406329acbb5a5e",
          "body": "…03 re-pin (46400/46440/46480/46520)\n\nCONVENTION.md (normative, published in the npm package) still carried the pre-re-pin heights\n49200/51000/51200/52500: a third party implementing from the published spec would gate v2.4-v2.7\nthousands of blocks late and fork replay. Heights corrected everywhere (\n[…]\nTION.md.\nNOTE: npm cairnx-core@0.1.35 still ships the stale spec; a docs-only 0.1.36 republish is the\nrecommended follow-up (operator decision).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx-core): correct V24-V27 activation heights to the 2026-07-…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-06T19:14:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a5e1c4995ef644877921863e8706973a4786476a",
          "body": "…ndings)\n\n- csd-tx: selectInputs exclude param coverage (excluded-best-coin, pool exhaustion -> null,\n  case-sensitive key contract, 2-arg unchanged). The param shipped in 0.1.16 with its only lock\n  living downstream in cairn-wallet's parity file; csd-tx CI can now catch its own regression.\n- cairn\n[…]\nr (whole-fill\n  overpay == par; partial overpay clamped to the remainder, fee on the clamp, resolver accepts\n  exactly and completes the offer).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: in-repo locks for the 0.1.35/0.1.16 promotions (verification fi…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-06T19:14:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b71f08969d5305b68ffc0ba129297586f5d41b4e",
          "body": "…eview finding\n\nThe uppercase-query test used an all-digit hex address, so .toUpperCase() was a no-op and the\ntest passed with or without the defensive .toLowerCase() in pickPrimaryName. Use a C-bearing\naddress that genuinely round-trips through the case-fold. Verified by mutation: dropping the\nlowercase now fails the test (null !== 'casefold'), restoring it passes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(primary): make the case-fold pin actually bite (a-f address) — r…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-06T16:31:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cc90c14cb5a1105e3547f5aa2533f28bd0b6bde8",
          "body": "…ind HEAD)\n\nThe wallet/cairn freshness gates prove their bundle matches the PINNED csd-sdk commit but say\nnothing about how far behind HEAD that pin sits. Warn (never fail) when the vendored commit is\nolder than 14 days of csd-sdk history. Verified against the live PROVENANCE files (both 0d today).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "check-consumer-pins: advisory vendored-consumer lag warning (>14d beh…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-06T15:29:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6325edb96e411401ac6faa051bb875bcee229b95",
          "body": "…eight owns the gate list)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: V28+ gate/fee-tier rollout checklist (post-promotion, buildFeeH…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-06T15:27:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "94e801f8505bcab6ae314c91409383c9acb3fa0b",
          "body": "… repos hand-copied\n\ncairnx-core 0.1.35 (preflight.ts + new primary.ts; resolve.ts/types.ts UNTOUCHED - replay-identical,\nfull crosslang conformance green):\n- requiredFillOutputs(offer, payRaw): the resolver's fill value-gate need-map (resolve.ts:699-712\n  whole / :643-649 partial) as a build-ready \n[…]\nxos, need, exclude?): upstream the wallet 0.2.53 ghost-coin exclude param\n  (positional, additive; key format documented: lowercased txid:vout).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cairnx-core 0.1.35 + csd-tx 0.1.16: promote the app-band helpers four…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-06T14:37:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c4ae122c61ca8ca04a5b45c0d3902a8621d871db",
          "body": "…ct resolver mirror at feeBps=0)\n\npreviewFill coerced a stored feeBps=0 (a pre-v1.1-era offer, resolve.ts stamps 0 and charges nothing)\nto the FEE_BPS fallback, quoting a 1% fee the chain does not require — an over-quote a taker would\noverpay to the treasury. Use the offer's own feeBps; the existing\n[…]\n-band burns 0; package suite + dts build clean).\n\nSecond-reviewer finding F3, /opt/cairn_substrate/REVIEW-NOTES-PLAN60-61-ROLLOUT-2026-07-04.md.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "preflight: quote the offer's stamped feeBps verbatim (review F3 — exa…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-04T17:09:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "18a916f98eb881a19a12ffe43f78e66f39be302c",
          "body": "…ed + loser-follow-on burn fixtures\n\nTier 1 (deep-review 2026-07-03): new pure preflight.ts exports (previewFill / fillIsSafe /\nfinalizeWinnerCheck + isOpenClaimLane / hasLiveClaim) mirroring the resolver's fill pro-rata floor,\nopen-CSD claim gate, and registration-finalize freeze arithmetic EXACTLY\n[…]\no-delivery) — findBurns re-surfaces every one;\nselftest classifies all 13 scenarios correctly. cairn-sdk 0.2.1 pins re-staged to these versions.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cairnx-core 0.1.34: shared pre-flight helpers + M2 registry fail-clos…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-04T16:22:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0a38a5c4470185502eaae2523042daf7b38dfeae",
          "body": "…40 / V26 46,480 / V27 46,520)\n\nZERO rule changes: the same gates activate sooner (operator-approved private-alpha\ncompression of the adoption windows; coordinated same-day re-pin of every verifier).\nBoth mirrors moved (types.ts + cairnx_ref.py). The four v24 boundary vectors are\nre-pointed to the n\n[…]\n4/64 vectors, crosslang battery\n(v20-v27 + nprofile + regex + siwc), audit:all (sealed-band burns 0, byte-identity\n1000/1000). Published to npm.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cairnx-core 0.1.33: pull activation heights in (V24 46,400 / V25 46,4…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-03T12:56:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb59e41d3763be2e720d9c3fce7bb1590c27f1eb",
          "body": "…es to tip 45,959\n\nThe published spec ended at v2.1 while the shipped core gates v2.2-v2.7, so a\nthird-party implementer following the published CONVENTION diverges at 41,300\nand hard-forks on fees at 49,200. New sections: 25 (v2.2 uncap, anchor-keyed),\n26 (v2.3 nset zero-addr clear), 27 (v2.4 fee c\n[…]\nt\ncairnx-core publish; the docs no longer have to say pins stop pre-V21.\n\nDoc + test-vector data only: no dist change, cairnx-core stays 0.1.32.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "CONVENTION.md: extend the normative spec to v2.7 + re-pin replay hash…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-03T08:37:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e232dfa3acf48693f1660741dee1af38fec5f379",
          "body": "…consumer-posture guards)\n\nNew zero-dep @inversealtruism/csd-indexwire 0.1.0: the REST row shapes (proposals,\nattestations, txs/outputs, /health) that were hand-maintained in 5 places, plus\nruntime guards extracted VERBATIM from the production consumer postures: fail-loud\non structure (requireArrayP\n[…]\ncairn project.ts, cairn-sdk typing) — consumers swap only after\nthis publishes (clarvis installs from npm). Lockstep 10 packages OK, dist fresh.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(indexwire): the csd-indexer wire contract as a package (types + …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-03T08:20:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f5e915f7af8ba44276d10fd461feb43f0030667a",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: CONSENSUS_CHANGES 0.1.32 (V27 sale-embargo relaxation + polish)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-03T05:28:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4a40c0194a01dde3db9dd7e6d71129aca4f4c575",
          "body": "…rving polish (cairnx-core 0.1.32)\n\nV27 (gate 52,500, past V26 and the unrelated V23 nset-clear gate at 52,000): the young-name SALE\nembargo drops from COMMIT_MAX_BLOCKS (240, ~8h) to REG_COMMIT_MAX_BLOCKS (8, ~16min) for events\n>= V27. Provably redundant under the V25 sealed model (a finalized name\n[…]\nIP (the one\nfinding, the CONVENTION.md paragraph, fixed + empirically re-verified). Staged UNPUBLISHED (freeze\nuntil the operator token window).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx): V27 young-name sale-embargo relaxation + behavior-prese…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-03T05:21:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b2af107326a7f51ade4aa35825b7efbc28b03a6f",
          "body": "…ity; harden paidTo accumulator (Plan 57 R1)\n\nA configured-but-failing batch source (origin outage, 429 storm, empty page) now degrades the\none-shot cold start to the per-height provider instead of hard-failing it; sync() keeps the\nhard fail on purpose (incremental callers re-poll). Only the fetch i\n[…]\n dict semantics; hostile prototype-key addrs land as own\nkeys). 6 new asserts pin the degraded paths, the recovery path, and both hostile edges.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(light): syncFromCheckpoint fails SOFT on batch-source unavailabil…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-02T22:19:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "56ef74a0548ebc725a80182d1e013fb11b364a23",
          "body": "…nsus-adjacent code (Plan 57 B4)\n\n- csd-crypto: parseScriptSig + signerAddrFromScriptSig (SCANNER contract:\n  >=198, trailing tolerated, no verify; drop-in for the chainscan.ts and\n  decode.ts copies) and recoverSigner (STRICT wallet contract: exact length,\n  verifyDigest, lowercase addr). One docum\n[…]\n proven for the\nhot-loadable packages, dist shapes verified ESM+CJS+nodenext types.\nIndependent review: SHIP (1 test fix + 4 nits, all applied).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sdk): widen the export surface that made consumers re-roll conse…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-02T19:45:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9f86b76d75abcfbf00b024e973b2182c02f5a469",
          "body": "…x(client): 4xx no longer spends the retry budget; test(client): offline hostile-boundary suite\n\nPlan 57 B1 (Plan 56 items 15+19). The publish guard closes the 0.1.22\nbroken-workspace-artifact class: npm publish is refused (rehearsed), pnpm\nruns check-lockstep. The client fix aligns behavior with th\n[…]\nipline,\nverifyInputValues fail-closed). No dist rebuild here on purpose: the live\ncheckout's dists stay at 0.1.30 bytes until the B5b promotion.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "guard(publish): prepublishOnly pnpm+lockstep gate in all packages; fi…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-02T18:20:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5c0bb71d084da500b4fdda5dd83e012de2ea5ced",
          "body": "…irective\n\nCritical-review of coverage found two real gaps where the fuel under-exercised\nthe invariants it claims to check:\n- name-give offers were rejected (listed within the 240-block young-name window,\n  and with expiresEpoch beyond the lease), so INV6 name-lock was ~untested\n  (nameLocked 26/50\n[…]\n to add as the system grows, and a pointer in\nCONSENSUS_CHANGES.md so a future consensus-changer runs it alongside test:crosslang.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "audit: widen invariant fuel (name-lock + token-to-token) + standing d…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T21:32:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2f8fb03e68df307b6593b417b186d763789b4f98",
          "body": "The prior tools (money-safety.mjs, race-harness.mjs) target ONE known failure\nmode. invariants.mjs is the general, future-proof tool: 7 properties that must\nhold for EVERY resolved state regardless of feature — no negative balance, token\nconservation (no mint-from-nothing), mint within supply cap, l\n[…]\no a real state.\n\nWire audit:invariants + chain into audit:all/audit:selftest. Report-only, non-\ngating, no consensus code touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "audit: add general ledger-soundness invariants (feature-agnostic oracle)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T21:22:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "842cd08bf5a9fceade8ea6edcbed97459055e878",
          "body": "…age)\n\nbuildRec never emitted nfinalize, so the JS/Python differential fork-guard had ZERO coverage of the sealed reserve-to-finalize state transition (the gates sit far above the fuzz height range). Adds a regFlow (commit -> payment-free reveal -> winner-only nfinalize, with contested + reject vari\n[…]\nor, a pendingReg coverage counter, and a deterministic finalize self-check. 6000 sequences, 0 diverged; full test:crosslang green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "conformance: fuzz the V25/V26 reserve->finalize path (nfinalize cover…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T20:32:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "83451d735fece91036a42e91a755b83b22f2008f",
          "body": "…lse positives\n\nCritical-review pass on money-safety.mjs / race-harness.mjs found and fixed:\n- race-harness.mjs had no main-module guard, so importing its detectors\n  (findDisplacementBurns / findPaymentWithoutDelivery) ran the whole harness and\n  exited. Guard run() behind an import.meta.url check \n[…]\ns is unchanged (harness output byte-identical to before);\nthe guards only affect arbitrary stdin input. No consensus code touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "audit tooling QA: fix importability, add detector self-test, guard fa…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T20:12:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e4a55e734c1bd5645249344c45fd4a3d887eafa1",
          "body": "money-safety.mjs and race-harness.mjs (already committed) are report-only\naudit tools for the honest-user-burn class (a fee anchored then rejected).\nWire them as on-demand pnpm scripts (audit:money-safety / audit:race /\naudit:all), kept OUT of the test:crosslang gate so they never block a merge.\nAdd\n[…]\ne observability-gap review, the rubric) and a README pointer.\n\nNo consensus code changed; no runtime guard shipped; nothing gated.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "audit tooling: wire non-gating audit:* scripts + AUDIT.md",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T19:44:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d7b6451fd07d95cf2e0af4583014b8a238874034",
          "body": "…ns 0)\n\nConfirms the V25 fix on the live gate: 'sealed-band (>=V25) name-race burns = 0', JS==Python 1000/1000.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "race-harness: gate-aware register-race (sealed flow >=V25 → loser bur…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T19:38:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3508ddc272015f78f3ef51b862d220da98f296ac",
          "body": "…ion, V26=51200 recapture)\n\nThe only consensus change vs 0.1.28 is the two activation heights (resolve.ts/records.ts\nbyte-identical). Gates chosen with the operator: ~1 week out, cleanly spaced, non-retroactive.\nV25 sits just above V24 (49200) so the fee-schedule vectors stay byte-identical; V26 sit\n[…]\n4 21/21, package vectors 64/64, e2e all pass.\n\n+ Plan 55 audit harnesses (money-safety, race-harness): report-only internal tools.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cairnx-core 0.1.30: activate V25/V26 close gates (V25=51000 registrat…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T19:30:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8391ccdf0dfaed45e4a1598d5443dfa406242bb3",
          "body": "…lize\n\nAt height >= V26 a name reveal on a LAPSED name is payment-free and reserves it (internal\n`recaptures` map; the lapsed record stays UNTOUCHED so the premium basis is preserved and an\nabandoned reservation cannot bypass the premium); the decaying premium moves to the winner-only\nnfinalize, pri\n[…]\nclient can confirm it is still the winner\nbefore paying the premium. V26_HEIGHT dormant placeholder. Published cairnx-core 0.1.28.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "V26 sealed-recapture: payment-free reveal + winner-only premium nfina…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T18:32:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8e7d652fb7522bbf67c7c88242e11f1b61148c0d",
          "body": "…reg fee-burn root fix)\n\nRegistration-only (recapture deferred to a future V26). At height >= V25_HEIGHT a .csd name\nreveal is payment-free and creates a pending reservation; the reg fee moves to a new winner-only\nnfinalize valid ONLY after the displacement contest freezes, so a lost race never burn\n[…]\n500 fuzz). REG_FINALIZE_GRACE_BLOCKS 20 per review.\nV25_HEIGHT dormant placeholder (set at rollout). Published cairnx-core 0.1.26.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "V25 sealed-reservation: payment-free reveal + winner-only nfinalize (…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-07-01T17:45:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ea48345bf227fc05d7ba6a036edc42d739f15218",
          "body": "Locks the V24 length-graded .csd registration/renewal fee gate (the audit flagged it as the\nonly recent gate without a dedicated crosslang test). Proves, against both the JS resolver and\nthe Python reference, byte-identical: a registration at height >= V24 paying the OLD (V18) fee\nis REJECTED on bot\n[…]\n V18 price still applies below the gate, and every length tier prices\nidentically. Wired into test:crosslang (21 cases, 0 failed).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(conformance): V24 name-fee JS-vs-Python crosslang parity gate",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-30T23:10:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "96fff0ddb528e27b8b05aa27de6b4572a481cd1e",
          "body": "A steeper, length-graded short-name premium (anti-squat), gated at V24_HEIGHT=49200\n(~7 days out for wallet CWS adoption). At height >= V24: name length <=3 -> 15 CSD,\n==4 -> 10, 5-9 -> 5, >=10 -> 3 CSD. Below the gate the V18 2-tier is byte-identical\n(every pre-V24 canonical hash + pinned vector un\n[…]\n 64/64 vectors, 1500-ledger fuzz spanning V24 (0 diverged),\nlockstep OK. Adversarial review found no consensus/fund vulnerability.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx-core): v2.4 length-graded .csd name-fee gate (V24) — 0.1.24",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-30T20:03:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3e981d74dda94bb6fe57653ca7b7fb8dc2cf1682",
          "body": "…hipped workspace:* deps)\n\n0.1.22 was published with `npm publish`, which (unlike `pnpm publish`) did NOT rewrite the\n`@inversealtruism/csd-codec: workspace:*` dependency to the real version, so the 0.1.22 tarball\nis uninstallable by npm consumers. Same code (V23_HEIGHT=52000 + paidTo hardening); republished\nas 0.1.23 via `pnpm publish` so the dep resolves to csd-codec 0.1.14. 0.1.22 is unpublished.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(cairnx-core): 0.1.22 -> 0.1.23 (republish; 0.1.22 npm tarball s…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-27T14:52:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "90a7aa24212c28b58615c64833520428706803d0",
          "body": "…rdening (cairnx-core 0.1.22)\n\nV23 nset-clear activation: V23_HEIGHT placeholder 43500 -> 52000 (set at tip ~41,836,\n~14 days runway so wallet 0.2.36 adopts before the unset feature activates chain-wide).\n\npaidTo hardening (release QA): the 5 external paidTo/pt amount reads now gate through\nAMOUNT_R\n[…]\nyte-identical, fuzz 3000 + adversarial 0-diverged,\ntest:crosslang green (v23 52/52, all V-gates), cairnx-core package tests green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx)!: V23 activation height 52000 + paidTo input-contract ha…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-27T14:42:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fbb29f11e958f96df06a35f70b8400c069c93e2c",
          "body": "…rce-only ([email protected])\n\nAn nset to the ZERO address at EVENT height >= V23_HEIGHT clears the resolver\nrecord (name falls back to owner; drops out of the primary candidate set) instead\nof pointing at 0x000..0. Gated on event height so all history is byte-identical;\nthe zero address is already \n[…]\n published/\nactivated: V23_HEIGHT is a placeholder above tip; publish + re-vendor ALL mirrors +\nwallet ADOPTION before raising it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx)!: V23 nset-clear (\"unset\") consensus change — gated, sou…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-26T23:58:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d38253c4f1a711aa2e0e10745108a9eadf31d486",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: remove em dashes from READMEs and docs (house style, no AI-slop)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-26T19:38:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "027b89a2934cf2a4bfe41d7c06a59aacf05b51d5",
          "body": "…olution diagrams\n\nRewrite the cairnx-core README to lead with CNS (the .csd name service, first product to ship):\nlayered-overlay architecture (ASCII + mermaid), the .csd lifecycle state machine, the name-\nresolution + SPV trust flow (sequence), tokens, DvP swap flow, the build/determinism model, t\n[…]\nable, and honest limits. .csd suffix framed as UI-presentation (the rebrand\nto CNS + any suffix change is UI-only, not consensus).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx): CNS-led README with architecture + name-lifecycle + res…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-26T18:54:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f42d222a2ef3d5978769fbb4bee32a64822fff35",
          "body": "…ensus (UI-only)\n\nV22_HEIGHT=41300 un-caps offers/bids anchored >=V22 (effExpiry + creation rejects +\nofferExpiryHeightOf), keyed on the offer ANCHOR height so [V21,V22) and pre-V21 history stay\nbyte-identical (non-retroactive relaxation). Number.isSafeInteger(expiresEpoch) is now the\nsole consensus\n[…]\nrashing on fork-prone inputs.\n\nPublishes cairnx-core 0.1.20. Plan: docs/Plans/47. Independent review + 4-dim red-team = FORK-SAFE.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx-core)!: V22 — remove the offer/bid duration cap from cons…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-26T15:42:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eac040702e9d03aff8974b9eadddd3131d53c02b",
          "body": "…flow + pin-coherence guard\n\nSo the ecosystem doesn't re-drift into hand-mirrors (the bug class docs/Plans/46 deleted):\n- README \"Single source of truth\": cairnx-core is THE canonical impl; the consumer table (svc/UI/wallet/cli +\n  the Python oracle KEEP-list) and how each gets consensus; the full c\n[…]\nng consumers (cairnx svc,\n  cli) all pin the canonical cairnx-core version (the within-csd-sdk check-lockstep can't see siblings).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx): document the single-source consensus contract + change …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-24T19:17:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "791e2d601991d3557c2955aaf4f175c4f78e0ab1",
          "body": "…ts bytes)\n\nAudit Batch-1 finding (medium): Phase 0.5 (626c83f) added exports to cairnx-core but left the version at\n0.1.18 — so the local dist the vendored bundles were built from is \"0.1.18 with different bytes\" than the\npublished npm 0.1.18. That is the same-version-different-bytes hazard `check-\n[…]\nring is not in the bundled code, so the committed\nvendor bundles are unchanged). check-lockstep stays green (independent cadence).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): bump cairnx-core 0.1.18 → 0.1.19 (Phase 0.5 changed i…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-24T18:36:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "626c83f3a4751272a78ff16b92cf2bd004514a38",
          "body": "…S + codec re-exports (Phase 0.5)\n\nPrep for the shared-core de-duplication (cairn docs/Plans/46): make cairnx-core export EVERYTHING the\nbrowser UI / wallet / swapguard re-derive by hand, so the consumers can import a single source instead of\nmirroring consensus math (a re-derivation forks who-may-f\n[…]\nv20-69csd + v21-cap); tsc clean. No consensus change — canonicalState\nis byte-identical, so every pinned replay hash is preserved.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx-core): export the client selectors + reorg-safety + *_KEY…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-24T17:06:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cb656aa86ecd66559d053b77929dee059e26f9cc",
          "body": "…ign docs\n\ncheck-lockstep.mjs required a single uniform version across packages/*, which has\nbeen false (and failing CI's `test` job) since cairnx-core bumped to 0.1.18 ahead of\nthe stable csd-* primitives at 0.1.14. Consensus changes (V18–V21) touch only\ncairnx-core; lockstep-bumping the other 8 by\n[…]\nns enforced by the conformance job (the REAL guard).\nNegative-tested: forbidden caret inter-dep and invalid semver still rejected.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): independent version cadence — fix check-lockstep + al…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-24T16:47:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d8b80f81dcbcb29f7e16ca5a17125a57f3a0de74",
          "body": "…o npm\n\nPublishes the v2.1 CONVENTION.md, the 60-vector cases.json, the through-V20 replay-hashes, and the deduped resolve.ts to npm. Behaviorally BYTE-IDENTICAL to the published 0.1.17 (the dedup is a proven no-op + spec/vectors are conformance artifacts), so the live cairnx service + clarvis + the wallet bundle do NOT need a redeploy — they remain byte-identical. Deps: csd-codec 0.1.14.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): cairnx-core 0.1.18 — ship the remediation artifacts t…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-23T19:33:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "be252743bbc98f8612ad0cd0fc1f00678cf6e611",
          "body": "…s (JS + Python)\n\nThe token / partial / whole-CSD fill paths each re-implemented the v1.7 open-claim gate, the name-delivery+viaFill stamp, and the give-lock release — a 'fix it in six places' hazard the audit flagged (M1). Extracts openFillReject / deliverNameToBuyer / releaseGiveLock in resolve.ts\n[…]\nepublished — byte-identical to the live 0.1.17, so it propagates to npm + the wallet bundle at the next release; no deploy needed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cairnx): dedup the three SCORE_FILL paths into shared helper…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-23T17:36:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e12aa54bfa4ea0faae42e4bb2fb8ef6976d3f5e1",
          "body": "…e (v2.1, normative v1.6-v2.1)\n\nThe published cairnx-core CONVENTION.md (the copy a third party 'npm install' fetches) was stale (DRAFT v1.0 header, missing the §5.1 A1-A7 expansion and all v1.6-v2.1 normative semantics) while the app-repo copy was kept current. Promotes the verified, full spec here\n[…]\n source of truth matches the shipping resolver. Byte-identical to the cairnx app-repo copy. Ships on the next cairnx-core publish.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(spec): promote the current CONVENTION.md to the published packag…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-23T16:20:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "797fe893d490bc6232de19668c82325a6726e95e",
          "body": "… (through V20, tip 39017)\n\nThe csd-sdk (published) replay-hashes copy was stale at 4 pre-V14 pins while the operator copy in the cairnx repo pinned through V19+. Syncs it to the freshly re-pinned set (through V20) so the artifact a third-party 'npm install cairnx-core' receives matches the real-chain anchor. Pure data sync; non-retroactive (historical hashes unchanged).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "conformance: sync published replay-hashes.json to the current pin set…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-23T16:06:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "12c059729b900c0c77b1b6cd4bec2fb55126ad36",
          "body": "…e-ops/lapse/rejects) + wire V21 cross-lang into CI\n\nCloses the conformance-coverage gap the resolver audit found: cases.json (the CI-enforced, no-node bar + the JS<->Python differential) covered only through v1.8, so a 3rd-party resolver could pass every vector and still fork on V20 grace / V21 cap\n[…]\n. Negative control: a planted Python MAX_OFFER_EPOCHS off-by-one is caught by the new v21-atcap vector. No consensus code changed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(cairnx): add post-v1.8 conformance vectors (V20/V21/nprofile/nam…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-23T16:02:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ba9f9e1b62593deec1f65b81cc94e7d6457d9601",
          "body": "…1.17)\n\nLowers the v2.1 max offer/bid duration cap from the 42000 placeholder to 40100 so it activates ~40h out (tip ~38907) while clearing every conformance fixture (highest over-cap fixture is h40004) — zero fixture edits. Non-retroactive; all 4 mirrors agree (param-drift 0). resolve 37/37, fuzz 1500/1500, v20-grace 17/0, v21-cap 12/0 byte-identical JS=Python. Bumps cairnx-core 0.1.16->0.1.17.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx-core): set V21 offer-duration cap activation to 40100 (0.…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-23T13:23:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "27c4b9151dd2614eaa2188bb20449fc3f2004eb8",
          "body": "…hed to npm\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): cairnx-core 0.1.16 (v2.1 offer-duration cap) — publis…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-22T18:05:00Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "af4bbbd1e7536431892ff7a03237114062219617",
          "body": "… V21)",
          "is_bot": false,
          "headline": "Merge feat/v21-offer-duration-cap: v2.1 offer/bid duration cap (gated…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-22T17:56:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dffb77a775c9760240616ee3564acd56b3a66c33",
          "body": "… the SPV checkpoint shallow\n\nAn offer/bid could rest for an unbounded time (UI capped at 30d but the resolver did not cap, and non-UI\noffers rested far longer — e.g. PRBX2 @ ~60k-block life). A long-resting offer forces the swapguard SPV\ncheckpoint to sit below it (so its anchor tx stays merkle-ver\n[…]\n21_HEIGHT=42000 (a stale\nresolver vs a fresh one would diverge at the gate). Adjust V21_HEIGHT upward if deploy needs more runway.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(v2.1): max offer/bid duration cap (7 days), gated at V21 — keeps…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-22T17:56:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f161eff3b5b99c1175ddad1c04136b857f2f106",
          "body": "An open-offer fill mining at the claim-window boundary was rejected after its\npayment was already on-chain → the buyer lost it (real incident: 69.csd, ~46 CSD).\nGated at V20_HEIGHT (non-retroactive):\n\n- claim window 15→40 + a bounded 5-block fill GRACE. Within the hold (window+grace)\n  the claimer's\n[…]\nn-hold,\n  JS==Python) + v20-incident-69csd.mjs (the real purchase now delivers, exact split).\n- bump cairnx-core 0.1.14 -> 0.1.15.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v2.0 (V20): open-lane claim→fill late-fill fund-loss fix (bounded grace)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-22T00:03:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f1a4671bbbba412c1298e58bc4583e7ac5bb5390",
          "body": "The 'test' job ran 'node scripts/check-lockstep.mjs' before the package\nbuild, but check-lockstep's M4 guard requires every package's dist/ to\nexist (dist/ is gitignored) -> 'no dist/' -> exit 1 -> build+tests were\nskipped and CI went red. Reorder so 'pnpm -r build' runs before the\nlockstep check. Also add a workflow-level concurrency block to cancel\nsuperseded in-flight runs.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: build before check-lockstep in test job + add concurrency",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-21T00:58:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4481e2e85c04408e7ac89ce228f76ac765dd85eb",
          "body": "…ADME) — 0.1.14\n\nNo runtime/consensus change (differential vs the live node stays 0; suites byte-identical):\n- Comment-truth: resolve.ts header + records.ts onlyKeys + conformance/README now name what is GUARDED\n  by the conformance differential vs merely asserted (the audit's over-claim findings).\n\n[…]\nackage without one).\nDeferred (documented): TREASURY_ADDR single-sourcing (now consts-parity-guarded) + the 600L resolve.ts split.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "quality: Phase-2 AI-slop pass (comment-truth + type hygiene + siwc RE…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-20T13:15:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "84e61e19743a052c3d5c874b735f7988dc9e3ff3",
          "body": "… lockstep 0.1.13\n\nForward consensus codec executed-verified against the live Rust node (JS == Python ==\nRust, 0 divergence); every change is reject-more, never accept-different (replay-identical).\n\nCRITICAL/HIGH:\n- C1: cairnx_ref.py schema regexes .match -> .fullmatch (trailing-\\n cross-language fo\n[…]\n17 SIWC line-terminators.\n\nCONSENSUS_CHANGES.md documents V16-V19 + this remediation. All suites green; live re-anchor 0-mismatch.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "security: Phase-1 audit remediation (csd-sdk-deep-audit-2026-06-20) +…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-20T13:04:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3dc28d3f6a1ae5a2724fbdf4acbcf7feb31b9ab8",
          "body": "…p version bump\n\nSets the v1.9 ENS-class identity (nprofile) activation height to 36700 (~7.4h above the deploy tip 36477; non-retroactive — no existing record is reinterpreted, replay-hash pins unchanged) and bumps all 9 csd-* packages 0.1.11 -> 0.1.12 in lockstep (exact-version discipline; deps via workspace:*). Build + META-1 23/23 + nprofile 42/42 + dormancy pins green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release(v0.1.12): activate v1.9 nprofile (V19_HEIGHT=36700) + lockste…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-20T03:02:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9ef8a009c2cd89aea3ccf3627dfd0eb246a768db",
          "body": "Height-gated at V19_HEIGHT (placeholder 50000, non-retroactive). A new inert nprofile record carries a charset-locked string->string identity map on a .csd name (avatar/display/socials/url) — cosmetic, never a send target.\n\n- types/records/resolve: NameProfileRecord, PKEY (ASCII => sort-invariant), \n[…]\nGED (dormancy). Live real-chain differential: 0-diverged. Spec=cairn docs/ecosystem/36. Independently red-teamed: SHIP-AS-DORMANT.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx-core): v1.9 nprofile — ENS-class identity records (DORMANT)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-20T02:42:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "821091c10bec99cff5a2859ed11563ef0204db81",
          "body": "Reject a SIWC message issued in the future (beyond skew) or >1h ago. The age bound also caps effective\nvalidity to ~1h from issuance regardless of a far-future expirationTime. Lockstep with cairn vendored copy.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "security(phase2): SIWC-IAT — bound issuedAt in verifySiwc",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-19T19:31:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d566dbc34e1ee5a909fd4c8b5455f48b107339e1",
          "body": "…e=true\n\nExcludes immature/locked coinbase UTXOs by default so SDK consumers don't build txs spending\nun-spendable outputs (the node would silently reject them). Pass {available:false} for the full set.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "security(phase1): TXB-1-SDK — CsdClient.utxos() defaults to ?availabl…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-19T19:17:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e8afb0b3b048d698300a2e9097c47c78fc104f1a",
          "body": "Realigned the drifted versions (L0 @0.1.8, cairnx-core/siwc @0.1.10) to one version and\nPUBLISHED all 9 public packages to npm @0.1.11, incl. the new @inversealtruism/csd-siwc\n(first publish) and cairnx-core (0.1.9→0.1.11). check-lockstep OK; build + per-package tests\n+ JS⇄Python conformance (37/37, SIWC 4/4, 1500-fuzz 0-diverged) all green pre-publish.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: lockstep realign — all csd-* packages @0.1.11 (published)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-17T15:31:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c55350d611f6e22b793266e4310c709f1cc2e154",
          "body": "…SIWC\n\nThe cross-language byte-contract (resolver, record codec, and now SIWC) is what\nactually prevents an inter-implementation chain fork, but it was never run in CI —\nonly the version-lockstep check was. And test:crosslang omitted the new csd-siwc\n4-impl byte-contract.\n\n- test:crosslang now also \n[…]\n csd-* versions realign ahead of a publish).\n\nVerified green locally: META-1 23/23, resolve 37/37, SIWC 4/4, fuzz 1500 0-diverged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(conformance): enforce the JS⇄Python cross-language lockstep + add …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-17T13:04:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3476498bd623dc43eaee79f22baf104aab395786",
          "body": "feat: @inversealtruism/csd-siwc — Sign in with CSD (Phase 1)",
          "is_bot": false,
          "headline": "Merge pull request #1 from InverseAltruism/feat/siwc",
          "author_name": "Inverse",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-17T12:33:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5acd186aa9156fad902740bc0114359f5bc524e",
          "body": "…check\n\nsiwc_ref.py is an independent Python reference for the SIWC byte-contract; crosscheck-siwc.mjs feeds\nthe same field-sets (incl. astral/U+FFFF statement) to the shipping JS impl and Python and asserts\nbyte-identical message+digest == pinned vectors. 4 cases green. SIWC has no object-key sorti\n[…]\nal-JSON UTF-16 traps don't apply; the only determinism surfaces are exact line layout + UTF-8\nhashing, both proven cross-language.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(siwc): conformance vectors + Python reference + JS⇄Python cross-…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-17T08:51:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2c2aeae93b5f57822102ec7650693cf728d921dc",
          "body": "Canonical audience-bound auth byte-contract: buildSiwcMessage / parseSiwcMessage (strict\ncanonical round-trip) / siwcDigest (sha256d(taggedHash('CSD-SIWC-v1', msg))) / signSiwc /\nverifySiwc (ordered fail-closed: domain/chain/nonce/time + sig + hash160==account) /\ngenerateNonce / CSD_CHAIN_MAINNET (c\n[…]\n incl. cross-domain\nreplay rejection + digest domain-separation; builds esm/cjs/dts. Version 0.1.10 (realign\nlockstep at publish).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(siwc): add @inversealtruism/csd-siwc — Sign in with CSD (CAIP-122)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-17T08:34:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "481d56c303bfb06e2d72af6f4dae71b842f50843",
          "body": "…+ v0.1.10 republish marker for V18\n\n- resolve.ts + cairnx_ref.py: document the known, bounded, non-fork cooldown\n  bypass (a 2nd-address intervening claim resets the per-offer cooldown) for the\n  lane re-enable phase. Comment-only — replay-identical, JS+Python lockstep.\n- bump cairnx-core 0.1.9 -> \n[…]\n.1.10 as the clean republishable marker including the\n  V18 2-tier name fee (height-gated, dormant) committed since the 0.1.9 tag.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx-core): V17 cooldown intervening-claimer bound (lockstep) …",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-16T22:33:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d103625f738c91efcc6a2100821212627a486a1",
          "body": "… vectors)\n\n≤4 chars = 6.7 CSD, ≥5 chars = 3 CSD, gated at V18_HEIGHT=40000 (dormant placeholder). Below V18 the original 5-tier curve is byte-frozen so historical replay + pinned vectors are unchanged. nameRegFee/expiredClaimFee are height-aware and threaded through resolve.ts; mirrored exactly in cairnx_ref.py. 5 new v18-* vectors via gen-v18-vectors.mjs; cross-impl 37/37 byte-identical + 1500-fuzz 0-diverged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cairnx): V18 simplified 2-tier name fee (height-gated, lockstep,…",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-16T18:33:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3d6ef58b2cc132276f680c3fffdb638c3556e19c",
          "body": "Document why V17_HEIGHT=34000 is safe even if the tip crosses it before the UI\nrollout completes: V17 is non-retroactive (a score=50 attest / open CSD offer\nbelow the gate is a no-op), and no such event exists below it in the wild to\nreinterpret. Comment-only — the compiled dist is byte-identical, so the published\n@inversealtruism/cairnx-core@0.1.9 needs NO republish.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cairnx-core): clarify V17_HEIGHT non-retroactivity (comment-only)",
          "author_name": "InverseAltruism",
          "author_login": "InverseAltruism",
          "committed_at": "2026-06-16T12:11:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 7,
      "commits_last_year": 147,
      "latest_release_at": "2026-06-16T22:33:02Z",
      "latest_release_tag": "v0.1.10",
      "releases_from_tags": true,
      "days_since_last_push": 6,
      "active_weeks_last_year": 8,
      "days_since_latest_release": 42,
      "mean_days_between_releases": 1.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@inversealtruism/csd-tx",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-tx",
          "is_deprecated": false,
          "latest_version": "0.1.17",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 14,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 835,
          "first_published_at": "2026-06-06T22:22:48.875000Z",
          "latest_published_at": "2026-07-17T18:00:19.988000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 12
        },
        {
          "name": "@inversealtruism/csd-siwc",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-siwc",
          "is_deprecated": false,
          "latest_version": "0.1.15",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 5,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 251,
          "first_published_at": "2026-06-17T15:29:41.765000Z",
          "latest_published_at": "2026-07-02T22:58:54.320000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 26
        },
        {
          "name": "@inversealtruism/csd-codec",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-codec",
          "is_deprecated": false,
          "latest_version": "0.1.15",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 12,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 932,
          "first_published_at": "2026-06-06T22:22:40.943000Z",
          "latest_published_at": "2026-07-02T22:58:44.594000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 26
        },
        {
          "name": "@inversealtruism/csd-light",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-light",
          "is_deprecated": false,
          "latest_version": "0.1.18",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 14,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 759,
          "first_published_at": "2026-06-06T22:22:46.989000Z",
          "latest_published_at": "2026-07-13T14:01:55.630000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 16
        },
        {
          "name": "@inversealtruism/cairnx-core",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/cairnx-core",
          "is_deprecated": false,
          "latest_version": "0.1.40",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 30,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3405,
          "first_published_at": "2026-06-15T08:32:45.999000Z",
          "latest_published_at": "2026-07-21T12:22:57.894000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "@inversealtruism/csd-client",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-client",
          "is_deprecated": false,
          "latest_version": "0.1.15",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 11,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 501,
          "first_published_at": "2026-06-06T22:22:43.157000Z",
          "latest_published_at": "2026-07-02T22:58:47.979000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 26
        },
        {
          "name": "@inversealtruism/csd-crypto",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-crypto",
          "is_deprecated": false,
          "latest_version": "0.1.15",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 11,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 719,
          "first_published_at": "2026-06-06T22:22:44.976000Z",
          "latest_published_at": "2026-07-02T22:58:49.629000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 26
        },
        {
          "name": "@inversealtruism/csd-vectors",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inversealtruism/csd-vectors",
          "is_deprecated": false,
          "latest_version": "0.1.15",
          "repository_url": "https://github.com/InverseAltruism/csd-sdk",
          "versions_count": 11,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 336,
          "first_published_at": "2026-06-06T22:22:39.092000Z",
          "latest_published_at": "2026-07-02T22:58:42.880000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 26
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "packages/cairnx/tsconfig.json",
        "packages/client/tsconfig.json",
        "packages/codec/tsconfig.json",
        "packages/crypto/tsconfig.json",
        "packages/indexwire/tsconfig.json",
        "packages/light/tsconfig.json",
        "packages/registry/tsconfig.json",
        "packages/siwc/tsconfig.json",
        "packages/tx/tsconfig.json",
        "packages/vectors/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 72348,
      "source_files_sampled": 98,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 18646
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 4,
        "malicious_count": 0,
        "assessed_package": "npm:@inversealtruism/csd-tx@0.1.17",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/cairnx/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@noble/hashes",
          "manifest": "packages/codec/package.json",
          "ecosystem": "npm",
          "version_constraint": "1.8.0"
        },
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/crypto/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@noble/curves",
          "manifest": "packages/crypto/package.json",
          "ecosystem": "npm",
          "version_constraint": "1.9.7"
        },
        {
          "name": "@noble/hashes",
          "manifest": "packages/crypto/package.json",
          "ecosystem": "npm",
          "version_constraint": "1.8.0"
        },
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/light/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-client",
          "manifest": "packages/light/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/registry/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-crypto",
          "manifest": "packages/registry/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/siwc/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-crypto",
          "manifest": "packages/siwc/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@noble/hashes",
          "manifest": "packages/siwc/package.json",
          "ecosystem": "npm",
          "version_constraint": "1.8.0"
        },
        {
          "name": "@inversealtruism/csd-codec",
          "manifest": "packages/tx/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@inversealtruism/csd-crypto",
          "manifest": "packages/tx/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "InverseAltruism",
          "commits": 147,
          "avatar_url": "https://avatars.githubusercontent.com/u/129900527?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f2ac1286f3cd9cc695eb8bae7260af24daa2d980",
        "ran_at": "2026-07-29T19:13:07Z",
        "aggregate_score": 3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T18:00:52Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-06-17T12:33:32Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InverseAltruism/csd-sdk",
    "host": "github.com",
    "name": "csd-sdk",
    "owner": "InverseAltruism"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 44,
        "vitality": 71,
        "community": 34,
        "governance": 52,
        "engineering": 62
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "commits_last_year": 147,
              "human_commit_share": 1,
              "days_since_last_push": 6,
              "active_weeks_last_year": 8
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "8/52 weeks with commits",
                "points": 5.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "147 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 147
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "releases_count": 7,
              "latest_release_tag": "v0.1.10",
              "releases_from_tags": true,
              "days_since_latest_release": 42,
              "mean_days_between_releases": 1.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "7 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 42 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 42
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 34,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "packages": [
                "@inversealtruism/csd-tx",
                "@inversealtruism/csd-siwc",
                "@inversealtruism/csd-codec",
                "@inversealtruism/csd-light",
                "@inversealtruism/cairnx-core",
                "@inversealtruism/csd-client",
                "@inversealtruism/csd-crypto",
                "@inversealtruism/csd-vectors"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 7738
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "7,738 downloads/month across npm",
                "points": 51.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 7738,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 52,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "followers": 16,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "InverseAltruism",
              "public_repos": 12,
              "account_age_days": 1211
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "16 followers of InverseAltruism",
                "points": 8.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 16,
                      "login": "InverseAltruism"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~3 yr old",
                "points": 14.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@inversealtruism/csd-tx",
                "@inversealtruism/csd-siwc",
                "@inversealtruism/csd-codec",
                "@inversealtruism/csd-light",
                "@inversealtruism/cairnx-core",
                "@inversealtruism/csd-client",
                "@inversealtruism/csd-crypto",
                "@inversealtruism/csd-vectors"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "8 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 8,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "30 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 62,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "http://cairn-substrate.com",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://cairn-substrate.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 44,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@inversealtruism/csd-tx@0.1.17 runtime dependency closure — what installing the published package pulls in — 4 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@inversealtruism/csd-tx@0.1.17",
                  "assessed": 4
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 4,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 4,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.99,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 18646
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "99 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 99,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "packages/cairnx/tsconfig.json",
                "packages/client/tsconfig.json",
                "packages/codec/tsconfig.json",
                "packages/crypto/tsconfig.json",
                "packages/indexwire/tsconfig.json",
                "packages/light/tsconfig.json",
                "packages/registry/tsconfig.json",
                "packages/siwc/tsconfig.json",
                "packages/tx/tsconfig.json",
                "packages/vectors/tsconfig.json"
              ],
              "agent_commit_share": 0.95,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "packages/cairnx/tsconfig.json, packages/client/tsconfig.json, packages/codec/tsconfig.json, packages/crypto/tsconfig.json, packages/indexwire/tsconfig.json, packages/light/tsconfig.json, packages/registry/tsconfig.json, packages/siwc/tsconfig.json, packages/tx/tsconfig.json, packages/vectors/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/cairnx/tsconfig.json, packages/client/tsconfig.json, packages/codec/tsconfig.json, packages/crypto/tsconfig.json, packages/indexwire/tsconfig.json, packages/light/tsconfig.json, packages/registry/tsconfig.json, packages/siwc/tsconfig.json, packages/tx/tsconfig.json, packages/vectors/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "95 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 95,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 72348,
              "source_files_sampled": 98,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/98 source files over 60KB",
                "points": 53.9,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 98,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-29T19:13:11.672794Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InverseAltruism/csd-sdk.svg",
  "full_name": "InverseAltruism/csd-sdk",
  "license_state": "standard",
  "license_spdx": "MIT"
}