{
  "report_id": "governance-20260611-123326",
  "timestamp": "2026-06-11T12:33:26Z",
  "status": "warn",
  "severity_counts": {
    "P0": 0,
    "P1": 2,
    "P2": 0
  },
  "summary": {
    "module_count": 2,
    "capability_count": 2,
    "profile_capability_count": 0,
    "profile_backed_capability_count": 0,
    "generated_capability_count": 2,
    "evaluation_case_count": 12,
    "path_index_count": 2,
    "repair_suggestion_count": 2
  },
  "findings": [
    {
      "severity": "P1",
      "rule": "large-capability-contracts-too-thin",
      "target": "scripts",
      "message": "A large capability has too few contracts for its code surface.",
      "recommendation": "Add concrete boundary and risk contracts before trusting automatic extend/extract decisions.",
      "details": {
        "code_file_count": 14,
        "contract_count": 0,
        "minimum": 4
      }
    },
    {
      "severity": "P1",
      "rule": "large-capability-forbidden-density-too-low",
      "target": "scripts",
      "message": "A large capability has very few forbidden patterns or anti-patterns.",
      "recommendation": "Add forbidden patterns for duplicate implementations, bypassed public APIs, and misplaced local caches.",
      "details": {
        "code_file_count": 14,
        "forbidden_count": 0
      }
    }
  ],
  "repair_suggestions": [
    {
      "kind": "contract_completion",
      "target": "scripts",
      "suggestion": "Add scope, boundary, cross-capability, and risk contracts. Keep each contract concrete and enforceable.",
      "confidence": "high"
    },
    {
      "kind": "forbidden_pattern_completion",
      "target": "scripts",
      "suggestion": "Add forbidden patterns for duplicate implementation centers, bypassed public APIs, misplaced caches, and cross-layer writes.",
      "confidence": "medium"
    }
  ],
  "runtime_identity": {
    "skill_version": "0.4.0",
    "skill_git_commit": null,
    "installed_payload_digest": "a6d415b7b61b426b3b9b76d4f280e43303fecb02836c98f13800ea54c0ca5f73",
    "installed_payload_source": "example_fixture",
    "bundle_schema_compatibility": [
      1
    ],
    "report_schema_version": 3,
    "reuse_engine_api_version": 2,
    "architecture_governance_api_version": 2,
    "typed_finding_schema_version": 1,
    "gate_policy_version": 1,
    "change_flow_api_version": 1,
    "authorization_api_version": 1,
    "parser_versions": {
      "python": 1,
      "typescript": 1,
      "java": 1
    },
    "identity_digest": "f6c40637285745c88209d816e03973c1164f23e4479da36fa044dd5aa05e127c"
  }
}