up

src/Policy/__Libraries/StellaOps.Policy/Schemas/spl-sample@1.json

@@ -24,6 +24,10 @@
             "epss": 0.42,
             "kev": false
           },
+          "weighting": {
+            "reachability": 1.0,
+            "exploitability": 0.9
+          },
           "conditions": [
             {
               "field": "request.tenant",

src/Policy/__Libraries/StellaOps.Policy/Schemas/spl-schema@1.json

@@ -111,6 +111,24 @@
                       }
                     }
                   },
+                  "weighting": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "properties": {
+                      "reachability": {
+                        "type": "number",
+                        "minimum": 0,
+                        "maximum": 1,
+                        "description": "Multiplier to apply when reachability is present (default 1)."
+                      },
+                      "exploitability": {
+                        "type": "number",
+                        "minimum": 0,
+                        "maximum": 1,
+                        "description": "Multiplier to apply when exploitability evidence exists (default 1)."
+                      }
+                    }
+                  },
                   "conditions": {
                     "type": "array",
                     "items": {

src/Policy/__Libraries/StellaOps.Policy/TASKS.completed.md

@@ -8,3 +8,4 @@
 | POLICY-SPL-23-003 | DONE (2025-11-26) | Policy Guild | POLICY-SPL-23-002 | Layering/override engine + tests. | `SplLayeringEngine` merges base/overlay with deterministic output and metadata merge; covered by `SplLayeringEngineTests`. |
 | POLICY-SPL-23-004 | DONE (2025-11-26) | Policy Guild, Audit Guild | POLICY-SPL-23-003 | Explanation tree model + persistence hooks. | `PolicyExplanation`/`PolicyExplanationNode` produced from evaluation with structured nodes; persistence ready for follow-on wiring. |
 | POLICY-SPL-23-005 | DONE (2025-11-26) | Policy Guild, DevEx Guild | POLICY-SPL-23-004 | Migration tool to baseline SPL packs. | `SplMigrationTool` converts PolicyDocument to canonical SPL JSON; covered by `SplMigrationToolTests`. |
+| POLICY-SPL-24-001 | DONE (2025-11-26) | Policy Guild, Signals Guild | POLICY-SPL-23-005 | Extend SPL with reachability/exploitability predicates. | SPL schema/sample extended with reachability + exploitability, schema guard tests added. |