PUBLIC_VERIFICATION_MATRIX.json

{
  "version": "0.2.0",
  "reviewed_at": "2026-03-29",
  "purpose": "Provide a bounded machine-readable map from verification command families to the public surfaces and failure classes they protect.",
  "checks": [
    {
      "id": "public-surface-coverage",
      "summary": "Protects manifest coverage, catalog integrity, curated raw capsule discoverability, compact reference-pack discoverability, and the existence of declared public artifacts.",
      "commands": [
        "npm run audit:public-surface",
        "npm run check:catalog",
        "npm run check:raw-capsules",
        "npm run check:reference-pack"
      ],
      "protects": [
        "SOURCE_MANIFEST.json",
        "PUBLIC_CONTRACT_CATALOG.json",
        "references/",
        "capsules/",
        "PUBLIC_RELEASE_METADATA.json"
      ],
      "strongest_surfaces": [
        "SOURCE_MANIFEST.json",
        "PUBLIC_CONTRACT_CATALOG.json",
        "scripts/audit-public-surface.js",
        "scripts/check-reference-pack.js",
        "scripts/check-raw-capsules.js"
      ],
      "failure_modes_prevented": [
        "untracked public files",
        "missing catalog entries",
        "stale manifest coverage",
        "undocumented compact reference drift",
        "undocumented raw capsule drift"
      ]
    },
    {
      "id": "capsule-and-api-example-integrity",
      "summary": "Protects public-safe examples, curated raw capsules, API payload examples, repo-local plus CommonJS/ESM/TypeScript installed-package OpenAPI code-generation recipes, live client recipes for all published validator routes, the reusable Python validator-route bridge, installed-package support-response recipes for gates and stats, and the reproducibility of published G16 integrity seals and computedHash values.",
      "commands": [
        "npm run check:examples",
        "npm run check:raw-capsules",
        "npm run check:api-examples",
        "npm run check:integrity-recipes",
        "npm run check:python-recipes",
        "npm run check:api-schemas",
        "npm run check:client-recipes",
        "npm run check:openapi-codegen"
      ],
      "protects": [
        "examples/",
        "capsules/",
        "examples/api/",
        "schemas/validator-api-envelopes.schema.json",
        "docs/integrity-recipes.md",
        "docs/python-consumption.md",
        "examples/client/recompute-integrity-seal.mjs",
        "examples/client/esm-package-recompute-integrity-seal.mjs",
        "examples/client/python-recompute-integrity-seal.py",
        "examples/client/python-live-validator-client.py",
        "examples/client/python-validate-single.py",
        "examples/client/python-validate-batch.py",
        "examples/client/python-validate-fix.py",
        "examples/client/python-parse-validate-responses.py",
        "examples/client/python-parse-error-responses.py",
        "examples/client/python-parse-support-responses.py",
        "references/contract-constants.json",
        "docs/client-recipes.md",
        "examples/client/curl-get-gates.sh",
        "examples/client/curl-get-stats.sh",
        "examples/client/node-get-gates.mjs",
        "examples/client/node-get-stats.mjs",
        "examples/client/python-get-gates.py",
        "examples/client/python-get-stats.py",
        "examples/client/node-validate-fix.mjs",
        "examples/client/cjs-package-support-responses.cjs",
        "examples/client/cjs-package-live-validator-client.cjs",
        "examples/client/esm-package-support-responses.mjs",
        "examples/client/ts-package-support-responses.ts",
        "docs/openapi-codegen-recipes.md",
        "examples/client/openapi-generate-validator-types.mjs",
        "examples/client/cjs-package-openapi-codegen.cjs",
        "examples/client/ts-package-openapi-codegen.ts",
        "examples/client/esm-package-openapi-codegen.mjs"
      ],
      "strongest_surfaces": [
        "examples/example-project-hub.capsule.json",
        "capsules/capsule.foundation.capsuleos.confidence-vector.v1.json",
        "examples/api/validate-request.single.json",
        "schemas/validator-api-envelopes.schema.json",
        "scripts/check-integrity-recipes.js",
        "examples/api/validate-response.pass.json",
        "examples/api/forbidden-response.sample.json",
        "examples/api/stats-error-response.sample.json",
        "openapi/validate.openapi.json"
      ],
      "failure_modes_prevented": [
        "broken example semantics",
        "broken raw capsule semantics",
        "API/sample drift",
        "schema/example mismatch",
        "stale G16 integrity seals in published capsule examples",
        "stale computedHash values in validator API examples",
        "package-level integrity recipe claims that only work through repo-local helper state",
        "cross-language Python integrity recipes drifting away from the published G16 rule or extracted package layout",
        "cross-language Python live-client bridge drifting away from the published route map, request examples, or extracted package layout",
        "cross-language Python validator-envelope recipes drifting away from the published API example payloads or extracted package layout",
        "cross-language Python response-family recipes drifting away from the published API example payloads or extracted package layout",
        "cross-language Python error-envelope recipes drifting away from the published API example payloads or extracted package layout",
        "live support-route client recipes drifting away from the published validator HTTP surface",
        "cross-language Python support-route recipes drifting away from the published support-response payloads or extracted package layout",
        "Node fix-route client recipes drifting away from the published validator HTTP surface",
        "installed-package support-response recipes drifting away from the published support payloads or public package exports",
        "missing bounded owner-role rejection evidence for protected validator routes",
        "missing bounded stats-computation failure evidence for published support routes",
        "repo-local or CommonJS/ESM/TypeScript installed-package OpenAPI code-generation recipes drifting away from the published OpenAPI artifact, route family, packaged input path, or bounded stats query metadata"
      ]
    },
    {
      "id": "compact-contract-references",
      "summary": "Protects compact package-consumable references for enums, gate IDs, and validator option flags without letting them drift from stronger schema and gate surfaces.",
      "commands": [
        "npm run check:reference-pack",
        "npm run check:python-recipes",
        "npm run check:package-surface",
        "npm run check:package-install"
      ],
      "protects": [
        "references/",
        "docs/reference-pack.md",
        "docs/python-consumption.md",
        "examples/client/python-contract-reference.py",
        "scripts/check-python-recipes.js",
        "package.json"
      ],
      "strongest_surfaces": [
        "references/contract-constants.json",
        "references/validation-gates.json",
        "scripts/check-reference-pack.js",
        "docs/reference-pack.md"
      ],
      "failure_modes_prevented": [
        "compact reference/schema drift",
        "broken reference package exports",
        "consumer-facing gate-map drift",
        "cross-language raw-asset reference recipes drifting away from packaged JSON exports"
      ]
    },
    {
      "id": "raw-schema-consumer-recipes",
      "summary": "Protects Ajv-based raw-schema, client-recipe navigator, archive-schema, and bundled-schema consumer recipes so direct capsule, client-recipe navigator, validator-envelope, and archive-bundle validation, including structural rejection of intentionally invalid archive, client-recipe navigator, capsule, and API-envelope fixtures, stays executable from both repo-relative files and installed package exports.",
      "commands": [
        "npm run check:schema-recipes",
        "npm run check:archive-recipes",
        "npm run check:invalid-archive-examples",
        "npm run check:schema-bundles",
        "npm run check:invalid-examples",
        "npm run check:package-install",
        "npm run check:api-schemas",
        "npm run check:invalid-api-examples",
        "npm run check:invalid-client-recipe-index-examples"
      ],
      "protects": [
        "docs/schema-validation-recipes.md",
        "docs/schema-bundles.md",
        "docs/invalid-capsule-examples.md",
        "examples/client/ajv-validate-capsule.mjs",
        "examples/client/ajv-validate-validator-envelope.mjs",
        "examples/client/ajv-validate-schema-bundles.mjs",
        "examples/client/ajv-reject-invalid-capsules.mjs",
        "examples/client/esm-package-ajv-validate-contracts.mjs",
        "examples/client/esm-package-ajv-validate-schema-bundles.mjs",
        "examples/client/esm-package-ajv-reject-invalid-capsules.mjs",
        "examples/invalid/",
        "package.json",
        "docs/invalid-api-envelope-examples.md",
        "examples/client/ajv-reject-invalid-validator-envelopes.mjs",
        "examples/client/esm-package-ajv-reject-invalid-validator-envelopes.mjs",
        "examples/api-invalid/",
        "docs/archive-validation-recipes.md",
        "examples/client/ajv-validate-archive-bundle.mjs",
        "examples/client/esm-package-ajv-validate-archive-bundle.mjs",
        "examples/archive/",
        "docs/invalid-archive-bundle-examples.md",
        "examples/client/ajv-reject-invalid-archive-bundles.mjs",
        "examples/client/esm-package-ajv-reject-invalid-archive-bundles.mjs",
        "examples/archive-invalid/",
        "docs/invalid-client-recipe-index-examples.md",
        "examples/client/ajv-validate-client-recipe-index.mjs",
        "examples/client/ajv-reject-invalid-client-recipe-index.mjs",
        "examples/client/esm-package-ajv-reject-invalid-client-recipe-index.mjs",
        "examples/client-invalid/",
        "examples/client/cjs-package-ajv-validate-contracts.cjs",
        "examples/client/cjs-package-ajv-reject-invalid-capsules.cjs",
        "examples/client/ts-package-ajv-validate-contracts.ts",
        "examples/client/ts-package-ajv-reject-invalid-capsules.ts",
        "examples/client/cjs-package-ajv-validate-archive-bundle.cjs",
        "examples/client/cjs-package-ajv-validate-schema-bundles.cjs",
        "examples/client/cjs-package-ajv-reject-invalid-archive-bundles.cjs",
        "examples/client/cjs-package-ajv-reject-invalid-validator-envelopes.cjs",
        "examples/client/ts-package-ajv-validate-archive-bundle.ts",
        "examples/client/ts-package-ajv-validate-schema-bundles.ts",
        "examples/client/ts-package-ajv-reject-invalid-archive-bundles.ts",
        "examples/client/ts-package-ajv-reject-invalid-validator-envelopes.ts"
      ],
      "strongest_surfaces": [
        "scripts/check-schema-recipes.js",
        "scripts/check-schema-bundles.js",
        "scripts/check-invalid-examples.js",
        "docs/schema-validation-recipes.md",
        "docs/schema-bundles.md",
        "schemas/capsule-schema.json",
        "schemas/capsule-schema.bundle.json",
        "schemas/neuro-concentrate.schema.json",
        "schemas/validator-api-envelopes.schema.json",
        "schemas/validator-api-envelopes.bundle.json",
        "scripts/check-invalid-api-examples.js",
        "docs/archive-validation-recipes.md",
        "scripts/check-archive-recipes.js",
        "schemas/archive-bundle.schema.json",
        "examples/archive/archive-bundle.sample.json",
        "docs/invalid-archive-bundle-examples.md",
        "scripts/check-invalid-archive-examples.js",
        "schemas/client-recipe-index.schema.json",
        "scripts/check-invalid-client-recipe-index-examples.js"
      ],
      "failure_modes_prevented": [
        "broken raw-schema consumer recipes",
        "Ajv/package-schema drift",
        "package-level schema export claims that only work through repo-local paths",
        "invalid schema fixtures that unexpectedly pass structural validation",
        "invalid validator-envelope fixtures that unexpectedly pass structural validation",
        "broken single-file bundled-schema consumer recipes",
        "bundle schemas drifting away from the stronger raw schema files",
        "broken archive-bundle validation recipes",
        "archive portability sample drifting away from the published archive schema",
        "invalid archive fixtures that unexpectedly pass structural validation",
        "archive negative-path teaching drift between docs, fixtures, and rejection recipes",
        "invalid client-recipe navigator fixtures that unexpectedly pass structural validation",
        "client-recipe navigator negative-path teaching drift between docs, fixtures, and rejection recipes"
      ]
    },
    {
      "id": "coverage-and-negative-paths",
      "summary": "Protects bounded example coverage and explicit negative-path behavior on the public surface.",
      "commands": [
        "npm run check:example-coverage",
        "npm run check:invalid-examples",
        "npm run check:failure-model"
      ],
      "protects": [
        "PUBLIC_EXAMPLE_COVERAGE.json",
        "PUBLIC_FAILURE_MODEL.json",
        "examples/api/forbidden-response.sample.json",
        "docs/invalid-capsule-examples.md",
        "examples/invalid/",
        "examples/api/stats-error-response.sample.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_EXAMPLE_COVERAGE.json",
        "PUBLIC_FAILURE_MODEL.json",
        "examples/api/forbidden-response.sample.json",
        "examples/example-validator-invalid-g16.capsule.json",
        "examples/invalid/example-invalid-missing-neuro-concentrate.capsule.json",
        "examples/invalid/example-invalid-relation-type.capsule.json",
        "examples/api/stats-error-response.sample.json"
      ],
      "failure_modes_prevented": [
        "fake example coverage claims",
        "missing negative-path evidence",
        "happy-path-only review posture",
        "undocumented schema-negative teaching artifacts",
        "missing owner-role rejection evidence for bounded public API failures",
        "missing bounded stats-computation failure evidence for support-route review"
      ]
    },
    {
      "id": "boundary-portability-and-limits",
      "summary": "Protects published-vs-deferred boundaries, portability posture, and explicit non-promises.",
      "commands": [
        "npm run check:boundary-map",
        "npm run check:portability",
        "npm run check:limitations-register"
      ],
      "protects": [
        "PUBLIC_BOUNDARY_MAP.json",
        "PUBLIC_PORTABILITY_PROFILE.json",
        "PUBLIC_LIMITATIONS_REGISTER.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_BOUNDARY_MAP.json",
        "PUBLIC_PORTABILITY_PROFILE.json",
        "PUBLIC_LIMITATIONS_REGISTER.json"
      ],
      "failure_modes_prevented": [
        "scope drift",
        "fake portability claims",
        "hidden non-promises"
      ]
    },
    {
      "id": "community-and-maintainer-governance",
      "summary": "Protects public maintainer posture, contributor intake, change control, and ownership authority.",
      "commands": [
        "npm run check:community-health",
        "npm run check:maintenance-model",
        "npm run check:change-control",
        "npm run check:ownership-map"
      ],
      "protects": [
        "docs/community-health.md",
        "PUBLIC_MAINTENANCE_MODEL.json",
        "PUBLIC_CHANGE_CONTROL_MODEL.json",
        "PUBLIC_OWNERSHIP_MAP.json"
      ],
      "strongest_surfaces": [
        "docs/community-health.md",
        "PUBLIC_MAINTENANCE_MODEL.json",
        "PUBLIC_CHANGE_CONTROL_MODEL.json",
        "PUBLIC_OWNERSHIP_MAP.json"
      ],
      "failure_modes_prevented": [
        "unclear contributor intake",
        "implicit change policy",
        "ambiguous artifact authority"
      ]
    },
    {
      "id": "reviewer-and-summary-layers",
      "summary": "Protects fast external evaluation surfaces and bounded reviewer shortcuts.",
      "commands": [
        "npm run check:project-profile",
        "npm run check:evaluation-packet",
        "npm run check:review-scorecard",
        "npm run check:audience-paths",
        "npm run check:evidence-strength",
        "npm run check:capability-matrix",
        "npm run check:adoption-readiness",
        "npm run check:freshness",
        "npm run check:ecosystem-value",
        "npm run check:decision-log",
        "npm run check:evidence-gaps",
        "npm run check:program-fit",
        "npm run check:publication-readiness"
      ],
      "protects": [
        "PUBLIC_PROJECT_PROFILE.json",
        "PUBLIC_EVALUATION_PACKET.json",
        "PUBLIC_REVIEW_SCORECARD.json",
        "PUBLIC_CAPABILITY_MATRIX.json",
        "PUBLIC_AUDIENCE_PATHS.json",
        "PUBLIC_EVIDENCE_STRENGTH_MAP.json",
        "PUBLIC_ADOPTION_READINESS.json",
        "PUBLIC_FRESHNESS_MODEL.json",
        "PUBLIC_ECOSYSTEM_VALUE_MAP.json",
        "PUBLIC_DECISION_LOG.json",
        "PUBLIC_EVIDENCE_GAPS_REGISTER.json",
        "PUBLIC_PROGRAM_FIT_MAP.json",
        "PUBLIC_PUBLICATION_READINESS.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_PROJECT_PROFILE.json",
        "PUBLIC_EVALUATION_PACKET.json",
        "PUBLIC_REVIEW_SCORECARD.json",
        "PUBLIC_AUDIENCE_PATHS.json",
        "PUBLIC_EVIDENCE_STRENGTH_MAP.json",
        "PUBLIC_CAPABILITY_MATRIX.json",
        "PUBLIC_ADOPTION_READINESS.json",
        "PUBLIC_FRESHNESS_MODEL.json",
        "PUBLIC_ECOSYSTEM_VALUE_MAP.json",
        "PUBLIC_DECISION_LOG.json",
        "PUBLIC_EVIDENCE_GAPS_REGISTER.json",
        "PUBLIC_PROGRAM_FIT_MAP.json",
        "PUBLIC_PUBLICATION_READINESS.json"
      ],
      "failure_modes_prevented": [
        "stale reviewer shortcuts",
        "hand-wavy maturity claims",
        "unclear supported outcomes",
        "role-inappropriate entry paths",
        "over-trusted summary layers",
        "implicit adoption readiness claims",
        "stale freshness posture",
        "hidden stale-summary triggers",
        "opaque ecosystem value claims",
        "hidden decision rationale",
        "implicit evidence gaps and overstated maturity claims",
        "implicit program-fit claims and overstated reviewer-program readiness",
        "implicit publication-readiness claims and unsafe public-release assumptions"
      ]
    },
    {
      "id": "adoption-readiness-and-bounded-use",
      "summary": "Protects explicit public readiness posture, prerequisites, and deferred hosted-runtime expectations across audience-facing surfaces.",
      "commands": [
        "npm run check:adoption-readiness",
        "npm run check:audience-paths",
        "npm run check:limitations-register",
        "npm run check:package-surface",
        "npm run check:package-install"
      ],
      "protects": [
        "PUBLIC_ADOPTION_READINESS.json",
        "PUBLIC_AUDIENCE_PATHS.json",
        "PUBLIC_LIMITATIONS_REGISTER.json",
        "docs/npm-consumption.md"
      ],
      "strongest_surfaces": [
        "PUBLIC_ADOPTION_READINESS.json",
        "docs/adoption-readiness.md",
        "PUBLIC_EVIDENCE_STRENGTH_MAP.json",
        "docs/npm-consumption.md"
      ],
      "failure_modes_prevented": [
        "implicit adoption readiness claims",
        "hidden deferred hosted-runtime expectations",
        "role/readiness drift across reviewer and integration surfaces",
        "unstated package-consumer prerequisites",
        "package install or TypeScript type-resolution claims that only worked through repo-local self-reference"
      ]
    },
    {
      "id": "traceability-dependency-and-assurance",
      "summary": "Protects reading order, claim-to-evidence links, assurance posture, and co-moving summary layers.",
      "commands": [
        "npm run check:dependency-graph",
        "npm run check:assurance-case",
        "npm run check:update-coherence",
        "npm run check:traceability"
      ],
      "protects": [
        "PUBLIC_DEPENDENCY_GRAPH.json",
        "PUBLIC_ASSURANCE_CASE.json",
        "PUBLIC_UPDATE_COHERENCE_MAP.json",
        "PUBLIC_TRACEABILITY_MATRIX.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_DEPENDENCY_GRAPH.json",
        "PUBLIC_ASSURANCE_CASE.json",
        "PUBLIC_UPDATE_COHERENCE_MAP.json",
        "PUBLIC_TRACEABILITY_MATRIX.json"
      ],
      "failure_modes_prevented": [
        "broken reviewer navigation",
        "orphaned claims",
        "drifting summary layers"
      ]
    },
    {
      "id": "docs-and-cross-surface-coherence",
      "summary": "Protects Markdown link integrity and cross-surface coherence across docs, OpenAPI/compact reference layers, release review, and package scripts.",
      "commands": [
        "npm run check:docs",
        "npm run check:surface",
        "npm run check:openapi-coherence",
        "npm run check:package-surface",
        "npm run check:package-install"
      ],
      "protects": [
        "docs/",
        "openapi/validate.openapi.json",
        "references/validator-routes.json",
        "references/validator-envelope-families.json",
        "PUBLIC_RELEASE_REVIEW.md",
        "package.json",
        "docs/npm-consumption.md"
      ],
      "strongest_surfaces": [
        "docs/public-contract-index.md",
        "docs/openapi.md",
        "docs/reference-pack.md",
        "docs/verification.md",
        "PUBLIC_RELEASE_REVIEW.md",
        "docs/npm-consumption.md"
      ],
      "failure_modes_prevented": [
        "broken docs navigation",
        "missing cross-links",
        "stale reviewer/release references",
        "broken package-export consumer path",
        "fresh-install regressions hidden by local workspace state",
        "OpenAPI and compact route/envelope summaries drifting apart"
      ]
    },
    {
      "id": "release-state-and-maintenance-history",
      "summary": "Protects current release evidence and bounded visibility into active maintenance over time.",
      "commands": [
        "npm run check:evidence-timeline",
        "npm run check:release",
        "npm run verify:repo"
      ],
      "protects": [
        "PUBLIC_EVIDENCE_TIMELINE.json",
        "PUBLIC_RELEASE_METADATA.json",
        "CHANGELOG.md"
      ],
      "strongest_surfaces": [
        "PUBLIC_EVIDENCE_TIMELINE.json",
        "PUBLIC_RELEASE_METADATA.json",
        "CHANGELOG.md"
      ],
      "failure_modes_prevented": [
        "invisible maintenance history",
        "stale release evidence",
        "symbolic top-level verification"
      ]
    },
    {
      "id": "freshness-and-summary-currency",
      "summary": "Protects freshness expectations, stale-summary triggers, and the currency of reviewer-facing summary layers.",
      "commands": [
        "npm run check:freshness",
        "npm run check:release",
        "npm run check:evidence-timeline"
      ],
      "protects": [
        "PUBLIC_FRESHNESS_MODEL.json",
        "PUBLIC_RELEASE_METADATA.json",
        "PUBLIC_EVIDENCE_TIMELINE.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_FRESHNESS_MODEL.json",
        "docs/freshness.md",
        "PUBLIC_RELEASE_METADATA.json"
      ],
      "failure_modes_prevented": [
        "stale reviewer summaries",
        "stale readiness claims",
        "hidden freshness expectations"
      ]
    },
    {
      "id": "ecosystem-value-and-program-utility",
      "summary": "Protects bounded external-utility claims, reviewer/program fit, and the public explanation of why this surface matters.",
      "commands": [
        "npm run check:ecosystem-value",
        "npm run check:evaluation-packet",
        "npm run check:adoption-readiness"
      ],
      "protects": [
        "PUBLIC_ECOSYSTEM_VALUE_MAP.json",
        "PUBLIC_EVALUATION_PACKET.json",
        "PUBLIC_ADOPTION_READINESS.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_ECOSYSTEM_VALUE_MAP.json",
        "docs/ecosystem-value.md",
        "PUBLIC_EVALUATION_PACKET.json"
      ],
      "failure_modes_prevented": [
        "ecosystem value claims disconnected from public artifacts",
        "reviewer/program utility left implicit",
        "bounded external utility drifting away from release evidence"
      ]
    },
    {
      "id": "decision-rationale-and-public-intent",
      "summary": "Protects bounded public design rationale, projection intent, and the explicit explanation of why the public surface is shaped this way.",
      "commands": [
        "npm run check:decision-log",
        "npm run check:update-coherence",
        "npm run check:review-scorecard"
      ],
      "protects": [
        "PUBLIC_DECISION_LOG.json",
        "PUBLIC_BOUNDARY_MAP.json",
        "PUBLIC_ASSURANCE_CASE.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_DECISION_LOG.json",
        "docs/decision-log.md",
        "PUBLIC_RELEASE_METADATA.json"
      ],
      "failure_modes_prevented": [
        "implicit projection intent",
        "hidden design rationale",
        "decision summaries drifting away from release evidence"
      ]
    },
    {
      "id": "evidence-gaps-and-bounded-maturity",
      "summary": "Protects explicit public proof gaps, bounded maturity posture, and manual-review boundaries so the public surface does not imply evidence it does not yet have.",
      "commands": [
        "npm run check:evidence-gaps",
        "npm run check:release",
        "npm run check:adoption-readiness"
      ],
      "protects": [
        "PUBLIC_EVIDENCE_GAPS_REGISTER.json",
        "PUBLIC_RELEASE_METADATA.json",
        "PUBLIC_ADOPTION_READINESS.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_EVIDENCE_GAPS_REGISTER.json",
        "docs/evidence-gaps.md",
        "PUBLIC_RELEASE_METADATA.json"
      ],
      "failure_modes_prevented": [
        "unstated public proof gaps",
        "bounded maturity claims drifting away from release evidence",
        "reviewer/program expectations outrunning the real public surface"
      ]
    },
    {
      "id": "program-fit-and-reviewer-program-criteria",
      "summary": "Protects bounded reviewer/program-fit claims so outside evaluators can see why this public surface is credible without mistaking that for proof of acceptance, traction, or hosted-service maturity.",
      "commands": [
        "npm run check:program-fit",
        "npm run check:evaluation-packet",
        "npm run check:release"
      ],
      "protects": [
        "PUBLIC_PROGRAM_FIT_MAP.json",
        "PUBLIC_EVALUATION_PACKET.json",
        "PUBLIC_RELEASE_METADATA.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_PROGRAM_FIT_MAP.json",
        "docs/program-fit.md",
        "PUBLIC_PROJECT_PROFILE.json"
      ],
      "failure_modes_prevented": [
        "program-fit claims left implicit",
        "reviewer-program credibility drifting away from stronger release evidence",
        "support-program readiness overstated beyond the real public surface"
      ]
    },
    {
      "id": "publication-state-and-safety",
      "summary": "Protects bounded publication-state claims so maintainers and reviewers can see why this public surface remains coherent as a published GitHub repo without mistaking that for proof of adoption, approval, or hosted-service maturity.",
      "commands": [
        "npm run check:publication-readiness",
        "npm run check:evaluation-packet",
        "npm run check:release"
      ],
      "protects": [
        "PUBLIC_PUBLICATION_READINESS.json",
        "PUBLIC_EVALUATION_PACKET.json",
        "PUBLIC_RELEASE_METADATA.json"
      ],
      "strongest_surfaces": [
        "PUBLIC_PUBLICATION_READINESS.json",
        "docs/publication-readiness.md",
        "PUBLIC_LIMITATIONS_REGISTER.json"
      ],
      "failure_modes_prevented": [
        "publication-readiness claims left implicit",
        "public-release safety drifting away from stronger release evidence",
        "GitHub-publication readiness overstated beyond the real public surface"
      ]
    }
  ],
  "review_commands": [
    "npm run verify:repo",
    "npm run check:verification-matrix"
  ]
}