Product
Refusal by design
The product is defined by what it refuses to do. It will not green a criterion it cannot cite, even when the rest of the chart looks strong.
Two verdicts, by construction.
The type that every result compiles against has no approved state. A criterion is proven or it is a gap. There is nowhere for a hopeful green to live.
/** Prove-or-refuse. There is deliberately no third "approved" verdict. */
export type Verdict = "proven" | "gap";How a green is earned
Pass one
Read the policy, then look for the span in the chart that meets it.
Pass two
Read the chart independently, then check it back against the policy.
Agreement
Only a verbatim span the chart contains turns the row green. Disagreement is a gap.
Proven to fail safe
An adversarial test feeds a chart with one requirement removed and asserts the row stays red. We mutate the engine to confirm the test can fail, so a passing test means the refusal is real, not an accident.