-
make verifypasses locally (ruff lint, ruff format, mypy --strict, pytest with branch coverage >= 90%, pip-audit) -
CHANGELOG.mdupdated under[Unreleased]if behaviour changed
- A fixture that fails without the change and passes with it, under
tests/fixtures/ - The finding cites a real, quotable line from a published source, with the date it was retrieved. A rule this tool cannot cite is a rule it should not enforce.
- Severity is justified:
ERRORonly where the spec is unambiguous, andUNVERIFIABLErather than a guess where the payload alone cannot settle it
- Text and JSON reporters both updated, and the determinism tests still pass. Same input, same bytes out, is a promise this tool makes.