Qualify Validation Finding Title

The validation finding title presents heuristic-derived counts as exact numbers: `185/464 API routes have no validation imports`. The check is file-level import matching in the first 30 lines — a useful heuristic that's ~76% accurate on the numerator across our test repos. The title should communicate approximation, not false precision. Additionally, the terminology says "routes" when the check operates on route *files* — one file can export multiple HTTP method handlers.

verdict PASSscore 8 / 8findings 5 (0 risk · 2 debt · 3 obs)duration 26mrejection cycles 0shipped May 26, 2026surface cli

Pipeline timeline

Intent to proven code in 26m across Think, Plan, Build, and Verify.

Think
1m
Plan
3m
Build
3m
Verify
6m

Assertion ledger

8 claims, each independently verified.

IDSaysMatcher
A001Warn title shows approximate count with tilde prefixverifiedok
A002Warn title says 'route files' instead of 'routes'verifiedok
A003Warn title uses 'may lack' language instead of 'have no'verifiedok
A004Warn title uses 'of' separator instead of slashverifiedok
A005Pass title says 'route files' instead of 'routes'verifiedok
A006Pass title includes 'detected' qualifierverifiedok
A007Pass title has no tilde since 100% coverage is exactverifiedok
A008Finding ID remains stable for downstream consumersverifiedok

Findings 5 total

debtpackages/cli/tests/engine/findings/rules/validation.test.tsclosed
All 8 @ana tags are stale — inherited from prior build cycle, none map to this contract's assertions
obspackages/cli/tests/engine/findings/rules/validation.test.tsclosed
No test asserts 'detected' keyword in pass title — A006 verified only by source inspection
obspackages/cli/tests/engine/findings/rules/validation.test.tsclosed
No test asserts absence of tilde in pass title — A007 verified only by source inspection
debtpackages/cli/src/engine/findings/rules/validation.tsclosed
Grammatically incorrect '1 API route files' in singular edge case — known, documented in spec as out of scope
obsclosed
Tilde qualifier partially addresses known false-positive inaccuracy in validation detection

Integrity seal

scopesha256:768825726e967...
contractsha256:ae36eca8dda83...
plansha256:477eb2bbcdbed...
specsha256:90a781b9c2e7b...
build-reportsha256:8756379b4c95e...
build-datasha256:434251d3e75b9...
verify-reportsha256:d8f40dbba15e2...
verify-datasha256:aa031f5f067bf...
audit cmd$ ana proof audit qualify-validation-title   → all hashes match