coverage

type Entry struct {
	// ID is stable and append-only. Where a typed source already exists (a rule
	// id, a surface category const, a typed exclusion) it is derived from that
	// source rather than hand-typed; hand-written prose carries a namespaced
	// slug. Renaming or removing an id is a breaking change and needs an ADR.
	ID string `json:"id"`
	// Claim is the one-line answer, at most MaxClaimBytes. It is what the agent
	// reads without asking for anything else, so it must stand alone.
	Claim string `json:"claim"`
	// Detail is the full prose, served only when the agent names this entry's id.
	// An entry whose claim already says everything carries no detail, and the
	// index reports that as a fact rather than sending the agent after nothing.
	Detail string `json:"detail,omitempty"`
}

type IndexEntry struct {
	ID        string `json:"id"`
	Claim     string `json:"claim"`
	Status    Status `json:"status"`
	HasDetail bool   `json:"has_detail"`
}

type Manifest struct {
	Language string
	// Deterministic holds the classes codefit detects with coded patterns
	// (certainty 1.0): hardcoded secrets, SQL/command injection, weak crypto, ...
	Deterministic []Entry
	// Reasoning holds the classes codefit maps as surface for the agent to
	// reason about: IDOR, broken authz, over-fetching, ...
	Reasoning []Entry
	// NotCovered holds, explicitly, what codefit does not audit: race
	// conditions, architectural design flaws, business-logic correctness, ...
	NotCovered []Entry
	// DeliveredElsewhere holds capabilities the PRD promises under one identifier
	// that codefit delivers under ANOTHER — the capability exists, but not as a
	// rule carrying the promised id (N+1 is promised as DB-201 and shipped as the
	// provider's nplus1 surface category). It is a third answer, not a variant of
	// the other two (ADR 0057).
	DeliveredElsewhere []Entry
}

type Status string