Reproduce before you trust.

These are the exact v0.17.0 reports generated from the bundled intentionally broken fixture. Running npm run demo reproduces and byte-checks all three files locally.

v0.17.0 · DEMO CHECK PASS

Markdown reportHuman-readable findings and fixes JSON reportStructured automation output SARIF reportCode-scanning interchange format

Release record

160 / 160 packaged regression tests pass.
36 / 36 package files are covered by the internal SHA-256 manifest.
The known-good repository returns strict PASS.
The intentionally broken fixture returns expected FAIL: 3 errors and 2 warnings.
The public discovery benchmark was last rerun with v0.15.1; v0.17.0 does not claim a new corpus rerun.

This evidence proves deterministic package behavior on bounded fixtures. It is not a customer result, Shopify certification, precision/recall study, or proof that an event was billed.

v0.17.0 ZIP SHA-256
90fff941e70e9cc5439782bae4a768f423879cecb826b83c6b800a094ba8edb4