Both halves of #98 have landed (#213, #214). The one remaining piece named explicitly in both PRs: AVE-2026-00074 currently sits at the floor basis because evidence_basis_engines had no member for "an external authority was queried and returned a determinate answer," the exact gap external_authority was added to close. The record's own detection_methodology already describes probing GitHub's users API, package registries, and RDAP, it just predates the vocabulary to say so.
This is a small, well-scoped change: add external_authority to AVE-2026-00074's evidence_basis_engines, confirm the derivation in write_verification_basis.py resolves it correctly, and confirm check_confidence_signal.py's fixture behavior updates as expected (it should stop firing on this record, since the floor clears).
Deliberately not bundled into either #213 or #214, both PRs named this as its own follow-up commit. Open to whoever wants to pick it up.
cc @narko4u @astrogilda — named as a follow-up in both #213 and #214, flagging directly in case either of you wants to pick it up.
Both halves of #98 have landed (#213, #214). The one remaining piece named explicitly in both PRs: AVE-2026-00074 currently sits at the floor basis because evidence_basis_engines had no member for "an external authority was queried and returned a determinate answer," the exact gap external_authority was added to close. The record's own detection_methodology already describes probing GitHub's users API, package registries, and RDAP, it just predates the vocabulary to say so.
This is a small, well-scoped change: add external_authority to AVE-2026-00074's evidence_basis_engines, confirm the derivation in write_verification_basis.py resolves it correctly, and confirm check_confidence_signal.py's fixture behavior updates as expected (it should stop firing on this record, since the floor clears).
Deliberately not bundled into either #213 or #214, both PRs named this as its own follow-up commit. Open to whoever wants to pick it up.
cc @narko4u @astrogilda — named as a follow-up in both #213 and #214, flagging directly in case either of you wants to pick it up.