/** * SMI-5876 Wave 1 — evidence-tier test matrix for jailbreak/ai_defence findings. * * Covers the design doc's §7 matrix beyond the existing regression-guard / * false-positive suites: * - EVIDENCE_TYPE_BY_PATTERN exhaustiveness + fail-closed default * - Hazard A (array-order tie no longer shadows a stronger directive) * - Hazard B (a multiline mention no longer suppresses a stronger line-local * directive in the same scan pass) * - #2 HTML-comment split equivalence (verb-half ∪ noun-half == original) * - score-floor: many mention-tier findings alone cannot fail a scan * - the three originally-reported FPs stay low-severity and passing * - the two directive patterns (J-N1 mode-frame, J-N3 persona-frame) that * replace the demoted bare patterns' coverage still reach critical * - acceptance fixture: this repo's own bundled SKILL.md (read from disk) * scans clean — the permanent regression test for the * corroboration-allowlist bug found during implementation * - corroboration allowlist + 40-line locality window (post-implementation * correction): a non-allowlisted high finding (pii) never corroborates; an * allowlisted one (data_exfiltration) corroborates within the window and * stops corroborating (but never stops FAILING the scan on its own) * beyond it * * Baseline-migration coverage (stale/absent rulesetVersion forces a re-scan, * no spurious hostile) lives in * packages/mcp-server/src/audit/security-audit.test.ts, next to the rest of * that module's baseline-comparability tests. */ export {}; //# sourceMappingURL=scanner-evidence-tiers.test.d.ts.map