20 lines
953 B
Markdown
20 lines
953 B
Markdown
# Delta Verdict Engine
|
|
|
|
## Module
|
|
Policy
|
|
|
|
## Status
|
|
VERIFIED
|
|
|
|
## Verification Summary
|
|
Full delta verdict computation verified across 3 test projects (2059 tests total, 0 failures):
|
|
- **WhatIfSimulationService**: hypothetical SBOM diffs (add/remove/upgrade/downgrade) with VEX override and reachability downgrade
|
|
- **DeltaVerdictBuilder**: content-addressed VerdictId, gate escalation (Critical->G4, High->G3), PassWithExceptions
|
|
- **ConsoleSimulationDiffService**: deterministic delta diff with severity breakdowns, rule impact, explain samples
|
|
- **SimulationAnalyticsService**: delta summary with outcome/severity change tracking, high-impact findings, determinism hashes
|
|
- **EffectiveDecisionMap**: materialized baseline decisions for delta comparison
|
|
- **PolicyEngineDeterminismTests**: same inputs produce identical verdict hashes, order-independent, concurrent-safe
|
|
|
|
## Evidence
|
|
- `docs/qa/feature-checks/runs/policy/delta-verdict-engine/run-002/`
|