Structured representation of a single graph completeness gap as it
appears in summary.completeness_gaps. Each entry pairs the typed
GapKind (so SIEMs can filter by class of imprecision) with the
human-readable reason (so analysts can read it).
Per-finding wrapper that flattens the upstream Finding fields and
appends a stable fingerprint. The fingerprint matches the value
surfaced by SARIF partialFingerprints[primaryLocationLineHash] and
CloudEvents extension attribute tauditfindingfingerprint, so a SIEM
keying on any of the three sees the same identifier per finding.
See docs/finding-fingerprint.md for the contract.
Standalone authority-graph export — the document emitted by
taudit graph --format json. Versioned independently from the scan
report because downstream tools (tsign, axiom, runtime cells)
consume the graph without caring about findings.
Schema version of the standalone authority-graph export
(taudit graph --format json). Semver-stable: 1.x.y additions are
non-breaking; 2.0.0 means breaking changes.