cli

const (
	ExitAdmitted     = 0
	ExitRejected     = 1
	ExitInconclusive = 2
	ExitAborted      = 130
)

Exit codes. They are the harness's contract with any caller.

const DefaultEvidenceLimit = 100

DefaultEvidenceLimit is how many findings "--evidence top" keeps. A report of a well-kept brownfield repository runs past a megabyte of JSON, which is a whole context window for the agents that read it; the ordered top of the set plus the summary is a few tens of kilobytes and every omitted row remains resolvable by fingerprint.

const DefaultVerifyTimeout = 20 * time.Minute

DefaultVerifyTimeout bounds a change admission run. Repository audits are unbounded by default because their cost scales with the codebase.

Twenty minutes because ten was not enough for this harness to judge its own release commit on a CI runner: the race suite of a repository whose tests build git fixtures and run the full pipeline is six minutes on its own. A timeout bounds cost and never quality, so the budget is set where a real change on a real repository fits, and the report says where the time went.

const Version = "0.10.0"

Version is the harness version recorded in every report.