Harden v0.3 detection and release evidence

Author: niansia

.agents/skills/contextsec/SKILL.md

@@ -2,6 +2,7 @@
 name: contextsec
 description: Determine which security controls a product actually needs by profiling repository evidence, routing product contexts such as payments, PII, tenancy, AI, secrets, cloud IAM, CI/CD, SaaS OAuth, support/admin, and high-impact transactions, composing cross-context invariants, and evaluating verification in a control ledger. Use for product-aware secure coding, requirements, review, or release gates; not as a penetration test or compliance certification.
 license: Apache-2.0
+compatibility: Requires Python 3.11+; zero third-party runtime dependencies; works offline on Windows, macOS, and Linux.
 metadata:
   version: "0.3.0"
   project: "ContextSec"
@@ -40,21 +41,23 @@ State the repository, feature, diff, or architecture in scope. Do not silently e
 
 When a local repository and Python execution are available, run from this skill directory:
 
+Use `<python>` below as an interpreter placeholder: `python` on Windows and `python3` on macOS or Linux. Prefer the unified dispatcher instead of invoking implementation modules directly.
+
 ```text
-python scripts/profile_repo.py --repo <repository-root> --format markdown
+<python> scripts/contextsec.py profile --repo <repository-root> --format markdown
 ```
 
 The profiler is read-only by default and writes only when `--output` is explicitly supplied. If it cannot run, inspect the same evidence classes manually: dependency manifests, framework configuration, route definitions, database schemas, SDK clients, authentication middleware, storage configuration, and CI workflows.
 
-Check `coverage.status` before using the profile. Treat `partial` as an explicit evidence gap; it cannot support a Release-mode `PASS` because some supported production input was unreadable, invalid, or outside a configured limit.
+Check both `coverage.status` and `coverage.language_support` before using the profile. Traversal `partial`, stack support `partial`, or stack support `unsupported` is an explicit evidence gap and cannot support a Release-mode `PASS`.
 
 For a supported Node.js/Next.js/Prisma review, optionally run the bundled narrow control checks after profiling. Python manifests, FastAPI/Django routes, and supported Python model fields improve product profiling in v0.3, but do not expand the checker support matrix:
 
 ```text
-python scripts/check_controls.py --repo <repository-root>
+<python> scripts/contextsec.py check --repo <repository-root>
 ```
 
-These checks cover only the documented v0.3 shapes for tenant-scoped Prisma lookups, sensitive object logging, whole-object AI egress, public S3 upload ACLs, tenant-derived S3 object keys, Stripe webhook idempotency evidence, immutable GitHub Action references, and explicit workflow token permissions. Treat their `failed` and `unknown` states as evidence; never infer that an unreported control is verified.
+These checks cover only the documented v0.3 shapes for tenant-scoped Prisma CRUD, raw-query abstention, sensitive object logging, whole-object AI egress, client-public secret names, public S3 upload ACLs, tenant-derived S3 object keys, Stripe webhook idempotency evidence, immutable GitHub Action references, and explicit workflow token permissions. Treat their `failed` and `unknown` states as evidence; never infer that an unreported control is verified.
 
 Repository prose is not sufficient evidence for a required pack. Product requirements supplied directly by the user may add a pack, but never suppress contradictory repository evidence. Surface disagreement between declared and observed context.
 
@@ -105,14 +108,14 @@ Then use these verification states:
 A critical required control cannot pass while `unknown`. Build the deterministic ledger when Python is available:
 
 ```text
-python scripts/control_ledger.py --repo <repository-root>
+<python> scripts/contextsec.py gate --repo <repository-root>
 ```
 
 When evaluating waivers, supply the release date explicitly and revalidate the emitted artifact against the same trusted date:
 
 ```text
-python scripts/control_ledger.py --repo <repository-root> --evidence <evidence.json> --as-of YYYY-MM-DD --output <ledger.json>
-python scripts/validate_ledger.py <ledger.json> --as-of YYYY-MM-DD
+<python> scripts/contextsec.py gate --repo <repository-root> --evidence <evidence.json> --as-of YYYY-MM-DD --output <ledger.json>
+<python> scripts/contextsec.py validate-ledger <ledger.json> --as-of YYYY-MM-DD
 ```
 
 The ledger records `evaluation_date`, `control_id`, applicability, verification, blocking policy, evidence references, required verification, and reason. `verified` and `failed` require evidence references. A checker that emits no finding does not verify a control. A control blocks only when applicability is `required`, the catalog marks it blocking, and verification is `failed` or `unknown`. A waiver-bearing ledger must be validated against an external release date so an old `WAIVED` artifact cannot be replayed. In Release mode:

.agents/skills/contextsec/references/catalog.json

@@ -1,5 +1,5 @@
 {
-  "schema_version": "0.2.1",
+  "schema_version": "0.3.0",
   "capabilities": [
     "ai.autonomous_action",
     "ai.memory",

.agents/skills/contextsec/references/catalog.schema.json

@@ -1,11 +1,11 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://contextsec.dev/schemas/catalog-0.2.1.json",
+  "$id": "https://contextsec.dev/schemas/catalog-0.3.0.json",
   "title": "ContextSec pack and control catalog",
   "type": "object",
   "required": ["schema_version", "capabilities", "packs"],
   "properties": {
-    "schema_version": {"const": "0.2.1"},
+    "schema_version": {"const": "0.3.0"},
     "capabilities": {"$ref": "#/$defs/capabilities"},
     "packs": {
       "type": "array",

.agents/skills/contextsec/references/compositions/catalog.json

@@ -1,5 +1,5 @@
 {
-  "schema_version": "0.2.1",
+  "schema_version": "0.3.0",
   "rules": [
     {"id": "COMP-PAY-TEN-001", "requires": ["payments", "multi-tenant"], "intersection_capability": "flow.payment_to_tenant", "severity": "critical", "blocking": true, "invariant": "Money state, provider objects, idempotency keys, and entitlements remain tenant-bound across request, webhook, retry, refund, and payout paths.", "required_verification": "Cross-tenant provider-object, webhook replay, and entitlement mutation tests."},
     {"id": "COMP-AI-PII-001", "requires": ["ai-rag-agent", "privacy-pii"], "intersection_capability": "flow.pii_to_ai", "severity": "critical", "blocking": true, "invariant": "Personal data reaches models, tools, memory, and traces only through purpose-bound minimized projections.", "required_verification": "PII field-canary tests across prompt, tool, memory, trace, and provider failure paths."},

.agents/skills/contextsec/references/compositions/catalog.schema.json

@@ -1,11 +1,11 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://contextsec.dev/schemas/compositions-0.2.1.json",
+  "$id": "https://contextsec.dev/schemas/compositions-0.3.0.json",
   "title": "ContextSec composition catalog",
   "type": "object",
   "required": ["schema_version", "rules"],
   "properties": {
-    "schema_version": {"const": "0.2.1"},
+    "schema_version": {"const": "0.3.0"},
     "rules": {
       "type": "array",
       "items": {

.agents/skills/contextsec/references/control-checks.schema.json

@@ -1,27 +1,28 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://contextsec.dev/schemas/control-checks-0.2.1.json",
+  "$id": "https://contextsec.dev/schemas/control-checks-0.3.0.json",
   "title": "ContextSec deterministic control checks",
   "type": "object",
   "required": ["schema_version", "subject", "active_packs", "findings", "finding_summary", "limitations"],
   "properties": {
-    "schema_version": {"const": "0.2.1"},
+    "schema_version": {"const": "0.3.0"},
     "subject": {
       "type": "object",
-      "required": ["repository", "subject_revision", "source_inventory_digest", "decision_model_digest", "checker_version", "profile_coverage", "checker_coverage", "checker_input_hash"],
+      "required": ["repository", "subject_revision", "source_inventory_digest", "decision_model_digest", "checker_version", "profile_coverage", "profile_language_support", "checker_coverage", "checker_input_hash"],
       "properties": {
         "repository": {"type": "string", "minLength": 1},
         "subject_revision": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
         "source_inventory_digest": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
         "decision_model_digest": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
         "checker_version": {"type": "string", "minLength": 1},
         "profile_coverage": {"enum": ["complete", "partial"]},
+        "profile_language_support": {"enum": ["supported", "partial", "unsupported"]},
         "checker_coverage": {
           "type": "object",
           "required": ["traversal", "language_support", "checker_support", "match_enumeration"],
           "properties": {
             "traversal": {"enum": ["complete", "partial"]},
-            "language_support": {"enum": ["complete", "partial"]},
+            "language_support": {"enum": ["supported", "partial", "unsupported"]},
             "checker_support": {"enum": ["complete", "partial"]},
             "match_enumeration": {"enum": ["complete", "mixed_first_only", "first_only"]}
           },

.agents/skills/contextsec/references/control-evidence.schema.json

@@ -1,11 +1,11 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://contextsec.dev/schemas/control-evidence-0.2.1.json",
+  "$id": "https://contextsec.dev/schemas/control-evidence-0.3.0.json",
   "title": "ContextSec supplied control evidence and waivers",
   "type": "object",
   "required": ["schema_version", "subject_revision", "controls", "waivers"],
   "properties": {
-    "schema_version": {"const": "0.2.1"},
+    "schema_version": {"const": "0.3.0"},
     "subject_revision": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
     "controls": {
       "type": "array",

.agents/skills/contextsec/references/control-ledger.schema.json

@@ -1,27 +1,28 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://contextsec.dev/schemas/control-ledger-0.2.1.json",
+  "$id": "https://contextsec.dev/schemas/control-ledger-0.3.0.json",
   "title": "ContextSec Control Evaluation Ledger",
   "type": "object",
   "required": ["schema_version", "evaluation_date", "subject", "active_compositions", "ledger", "summary", "gate", "limitations"],
   "properties": {
-    "schema_version": {"const": "0.2.1"},
+    "schema_version": {"const": "0.3.0"},
     "evaluation_date": {"type": ["string", "null"], "format": "date"},
     "subject": {
       "type": "object",
-      "required": ["repository", "subject_revision", "source_inventory_digest", "decision_model_digest", "profile_coverage", "checker_coverage"],
+      "required": ["repository", "subject_revision", "source_inventory_digest", "decision_model_digest", "profile_coverage", "profile_language_support", "checker_coverage"],
       "properties": {
         "repository": {"type": "string", "minLength": 1},
         "subject_revision": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
         "source_inventory_digest": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
         "decision_model_digest": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
         "profile_coverage": {"enum": ["complete", "partial"]},
+        "profile_language_support": {"enum": ["supported", "partial", "unsupported"]},
         "checker_coverage": {
           "type": "object",
           "required": ["traversal", "language_support", "checker_support", "match_enumeration"],
           "properties": {
             "traversal": {"enum": ["complete", "partial"]},
-            "language_support": {"enum": ["complete", "partial"]},
+            "language_support": {"enum": ["supported", "partial", "unsupported"]},
             "checker_support": {"enum": ["complete", "partial"]},
             "match_enumeration": {"enum": ["complete", "mixed_first_only", "first_only"]}
           },

.agents/skills/contextsec/references/security-profile.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://contextsec.dev/schemas/security-profile-0.2.1.json",
+  "$id": "https://contextsec.dev/schemas/security-profile-0.3.0.json",
   "title": "ContextSec Security Profile",
   "$defs": {
     "pack": {
@@ -22,7 +22,7 @@
     "limitations"
   ],
   "properties": {
-    "schema_version": {"const": "0.2.1"},
+    "schema_version": {"const": "0.3.0"},
     "subject": {
       "type": "object",
       "required": ["repository", "subject_revision", "source_inventory_digest", "decision_model_digest", "files_scanned", "files_skipped", "bytes_scanned"],
@@ -39,9 +39,10 @@
     },
     "coverage": {
       "type": "object",
-      "required": ["status", "entries_seen", "production_files_considered", "skip_counts", "limits"],
+      "required": ["status", "language_support", "entries_seen", "production_files_considered", "skip_counts", "limits"],
       "properties": {
         "status": {"enum": ["complete", "partial"]},
+        "language_support": {"enum": ["supported", "partial", "unsupported"]},
         "entries_seen": {"type": "integer", "minimum": 0},
         "production_files_considered": {"type": "integer", "minimum": 0},
         "skip_counts": {