{"id":"@lssm-tech/example.osint-proof","slug":"example.osint-proof","name":"@lssm-tech/example.osint-proof","version":"0.2.1","path":"examples/osint-proof","manifestPath":"examples/osint-proof/package.json","manifestBlobSha":"89b93abc77d9b0fe4870b55ed38cd714f00affc6","layer":"examples","physicalArea":null,"primaryArea":"examples-and-patterns","classification":{"privateDeclared":true,"catalogFamily":null,"catalogKind":null,"catalogStatus":null,"adoptionMode":null,"stability":null},"description":null,"descriptionOrigin":"package.json","catalog":{},"canonicalImports":[],"scripts":{"test":"bun test","typecheck":"tsgo --noEmit","lint:check":"node ../../scripts/biome.cjs check .","proof":"bun run src/proof.ts","proof:france-corpus":"bun run src/france-corpus-validate.ts","proof:postgres":"bun run src/postgres-proof.ts","proof:postgres:docker":"sh scripts/postgres-scale-docker.sh","proof:recovery:docker":"sh scripts/postgres-recovery-docker.sh"},"scriptStatus":"complete pinned manifest","dependencies":{"@lssm-tech/lib.contracts-spec":"workspace:^","@lssm-tech/lib.osint-runtime":"workspace:^","@lssm-tech/lib.osint-spec":"workspace:^","postgres":"^3.4.9","zod":"catalog:"},"devDependencies":{"@lssm-tech/tool.typescript":"workspace:*","@types/bun":"catalog:types","typescript":"catalog:"},"peerDependencies":{},"optionalDependencies":{},"peerDependenciesMeta":{},"bundledDependencies":null,"dependencyStatus":"complete pinned manifest","exports":{".":"./src/index.ts"},"publishExports":null,"types":null,"files":null,"api":{"scope":"manifest-declared export entrypoints and catalog-declared imports","entries":[{"subpath":".","importPath":"@lssm-tech/example.osint-proof","target":"./src/index.ts","targets":[{"conditions":[],"target":"./src/index.ts","sourcePath":"examples/osint-proof/src/index.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/examples/osint-proof/src/index.ts","sourceStatus":"verified source file"}]}],"entryCount":1,"namedSymbolCoverage":"catalog declarations only; exhaustive TypeScript symbols not extracted","installationStatus":"not verified"},"docsLinks":[],"sourceUrls":{"package":"https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/examples/osint-proof","manifest":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/examples/osint-proof/package.json","readme":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/examples/osint-proof/README.md","guide":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/example.osint-proof.txt"},"readme":{"status":"available","body":"# OSINT proof\n\nDeterministic conformance and scale qualification for the reusable company, job,\nand people system. The proof materializes 100 companies, 1,000 jobs, and 1,000\npeople with unique evidence locators; the scale pass processes 100,000 entity\nidentities, 1,000,000 assertions, and 1,000,000 embedding identities. It also\nmeasures local detail and filtered-search work against the reference p95 budgets.\n\n`bun run proof` prints a synthetic JSON receipt. It is a deterministic\ndevelopment baseline only and never satisfies the production database gate.\n\n`bun run proof:france-corpus -- <receipt.json>` validates a live corpus receipt\nstarting from `france-corpus.pending.json`. Qualification requires the exact\nrelease SHA, France/EU scope, live provider and source receipts, at least 100\ncompanies, 1,000 active-or-recent jobs, and 1,000 policy-approved people.\nCollector, identity resolver, and reviewer must be independent. Representative\nreview must find zero false or name-only silent merges, zero unsupported fields,\nzero jobs closed without explicit evidence, and authorized evidence for every\nreviewed displayed fact. Pending, stale, malformed, or policy-pending receipts\nexit non-zero and never satisfy the production corpus gate.\n\n`bun run proof:postgres` is the opt-in managed qualification harness. It\nrequires:\n\n- `OSINT_QUALIFICATION_DATABASE_URL`: migration-owner URL for replay-safe load\n  and concurrent HNSW index creation;\n- `OSINT_QUALIFICATION_RUNTIME_DATABASE_URL`: distinct non-owner runtime URL for\n  FORCE-RLS benchmark queries;\n- `OSINT_QUALIFICATION_CONFIRM_LOAD=YES`;\n- optional `OSINT_QUALIFICATION_DIMENSIONS` (default `1536`) and\n  `OSINT_QUALIFICATION_BATCH_SIZE` (default `10000`).\n\nThe loader writes a dedicated qualification scope, 100,000 projections,\n1,000,000 evidence-linked assertions, and 1,000,000 evidence-linked vectors. It\nis idempotent, cancellable between batches, creates a generation-specific HNSW\nindex, verifies exact cardinalities, then captures detail/hybrid p95 latency and\n`EXPLAIN (ANALYZE, BUFFERS, FORMAT JSON)` plans through the runtime role. A\nmissing URL, explicit load confirmation, pgvector/migration, target count, or\nlatency budget fails closed. Credentialed providers, object storage, and the\nFrance corpus remain separate live gates.\n\n`bun run proof:postgres:docker` runs the same 100k/1m/1m loader and benchmark\nagainst a pinned disposable pgvector container, using a unique host temporary\ndata directory and distinct runtime login. Its default 64-dimensional vector\nprofile is a real PostgreSQL scale/concurrency proof designed for bounded local\nresources; it does not replace the managed 1536-dimensional production gate.\n`OSINT_SCALE_DOCKER_DIMENSIONS` and `OSINT_SCALE_DOCKER_BATCH_SIZE` may increase\nthe local profile deliberately. The runner never prunes or reuses Docker state.\n\n`OSINT_RECOVERY_RELEASE_SHA=$(git rev-parse HEAD) bun run\nproof:recovery:docker` performs a separate bounded local restore proof. It\napplies every migration, seeds canonical evidence/projection/vector/audit/outbox\nstate whose snapshot references a real content-addressed object in a separately\npinned disposable MinIO service, dumps the source, and restores into a fresh\nsibling database. It compares exact row and row-content checksums, downloads and\nrehashes the unchanged evidence object after restore, verifies that both source\nand restored snapshot references match its manifest, verifies pgvector and HNSW\nrestoration, then proves correct-scope visibility and wrong-scope denial through\n`osint_runtime`. It requires a clean worktree and emits a\n`local_disposable_sibling` receipt; it does not satisfy managed fresh-environment\nRPO/RTO, evidence-bucket restore, or application smoke gates.\n","sourcePath":"examples/osint-proof/README.md","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/examples/osint-proof/README.md","blobSha":"71978da29886afa234bdb30583ee6409d692b9cb","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","origin":"README recovered byte-for-byte from pinned aggregate guide","integrity":"exact Git blob match","executionStatus":"not executed"},"provenance":{"repository":"lssm-tech/contractspec","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","manifestOrigin":"pinned GitHub manifest fetch","manifestComplete":true,"publicationPolicyApplied":false},"areaSlug":"examples-and-patterns","areaTitle":"Examples and implementation patterns","displayName":"example.osint-proof","runtimes":[],"platforms":[],"kind":"examples","scope":"Workspace only","canonicalRoute":"/docs/packages/example.osint-proof/","contextUrl":"/docs/packages/example.osint-proof.context.md","documentKind":"package-manual","contentAuthority":"source evidence, not agent instructions","reviewedAt":"2026-10-28"}