{# Exploitability Evidence family — shared kind-aware verdict card macro.

   The single source of card structure for BOTH the console (internal) and
   briefing (external) templates. Both do:
     {% import "_exploitability_macros.html" as exp with context %}
     {% for card in cards %}{{ exp.verdict_card(card, mode) }}{% endfor %}
   so the card is byte-identical across modes — only the redaction-guarded
   blocks differ. The transform already STRIPPED external secrets
   (inline_excerpt / cost_actuals / raw_confidence / tier_provenance); this
   macro only needs `{% if c.inline_excerpt %}` / `{% if mode == 'internal' %}`
   guards so it never reaches around the transform's redaction.

   Display labels are owned HERE (the transform deliberately emits no label
   strings — a transform test asserts their absence). The map is keyed on
   verdict.kind (the contract enum), NOT the platform_status.

   Spec: docs/superpowers/specs/2026-06-20-exploitability-report-design.md
   §3.2 (element order + conditional sections), §3.3 (audience modes), §6. #}

{# kind -> customer-facing badge label (spec §3.2). #}
{% set kind_labels = {
    "AFFECTED": "EXPLOITABLE",
    "NOT_AFFECTED": "NOT AFFECTED",
    "INCONCLUSIVE": "INCONCLUSIVE (IN TRIAGE)",
    "UNDER_INVESTIGATION": "UNDER INVESTIGATION (IN TRIAGE)",
    "VERIFIER_FAILED": "VERIFIER ERRORED",
} %}


{# ------------------------------------------------------------------
   chip_row(enrichment) — header chips: CVSS · EPSS · KEV/VcKEV · severity.
   ------------------------------------------------------------------ #}
{% macro chip_row(enrichment) -%}
{% set e = enrichment or {} %}
{# Use .get() so a sparse enrichment (thin dataset: keys absent) yields None,
   not Jinja Undefined — `Undefined is not none` is TRUE and would reach |float
   and crash. Severity CSS classes are uppercase (.exp-sev-CRITICAL), so the
   class is |upper'd while the chip text shows the raw value. #}
<div class="exp-chips">
    {% if e.get('cvss') is not none %}<span class="exp-chip">CVSS {{ "%.1f"|format(e.get('cvss')|float) }}</span>{% endif %}
    {% if e.get('epss') is not none %}<span class="exp-chip">EPSS {{ "%.0f"|format(e.get('epss')|float * 100) }}%</span>{% endif %}
    {% if e.get('kev') %}<span class="exp-chip exp-chip-kev">CISA KEV</span>{% endif %}
    {% if e.get('vckev') %}<span class="exp-chip exp-chip-kev">VulnCheck KEV</span>{% endif %}
    {% if e.get('exploit_maturity') and e.get('exploit_maturity') != 'none' %}<span class="exp-chip">{{ e.get('exploit_maturity') }}</span>{% endif %}
    {% if e.get('severity') %}<span class="exp-chip exp-sev-{{ e.get('severity')|upper }}">{{ e.get('severity') }}</span>{% endif %}
</div>
{%- endmacro %}


{# ------------------------------------------------------------------
   confidence_bar(confidence) — pure-CSS fill, width from the calibrated
   confidence (0..1). No JS. Null confidence -> a muted "not calibrated".
   ------------------------------------------------------------------ #}
{% macro confidence_bar(confidence) -%}
<div class="exp-conf">
    <span class="exp-conf-label">Confidence</span>
    {# `is defined` guards a sparse card where the key is absent (Jinja Undefined
       would slip past `is not none` and crash at |float). #}
    {% if confidence is defined and confidence is not none %}
    <span class="exp-conf-track"><span class="exp-conf-fill" style="width:{{ (confidence|float * 100)|round(0)|int }}%"></span></span>
    <span class="exp-conf-value">{{ (confidence|float * 100)|round(0)|int }}%</span>
    {% else %}
    <span class="exp-conf-na">not calibrated</span>
    {% endif %}
</div>
{%- endmacro %}


{# ------------------------------------------------------------------
   locus_block(locus, kind) — Where to investigate. Renders ONLY when the
   locus has real content; NEVER fabricated. For NOT_AFFECTED, renders the
   why-not variant only when a locus is present.
   ------------------------------------------------------------------ #}
{% macro locus_block(locus, kind) -%}
{% set l = locus or {} %}
{% set has_locus = l and (l.vulnerable_functions or l.source_refs or l.call_path or l.binary_offsets) %}
{% if has_locus %}
<div class="exp-section">
    <div class="exp-section-title">{% if kind == 'NOT_AFFECTED' %}Why not reachable{% else %}Where to investigate{% endif %}</div>
    {% if l.vulnerable_functions %}
    <div class="exp-kv"><span class="exp-kv-key">Vulnerable functions</span><span class="exp-kv-val exp-mono">{{ l.vulnerable_functions | join(', ') }}</span></div>
    {% endif %}
    {% if l.source_refs %}
    <div class="exp-kv"><span class="exp-kv-key">Source</span><span class="exp-kv-val exp-mono">{% for ref in l.source_refs %}{{ ref.file }}:{{ ref.line }}{% if not loop.last %}, {% endif %}{% endfor %}</span></div>
    {% endif %}
    {% if l.call_path %}
    <div class="exp-kv"><span class="exp-kv-key">Call path</span><span class="exp-kv-val exp-mono">{{ l.call_path | join(' → ') }}</span></div>
    {% endif %}
    {% if l.binary_offsets %}
    <div class="exp-kv"><span class="exp-kv-key">Binary offsets</span><span class="exp-kv-val exp-mono">{{ l.binary_offsets | join(', ') }}</span></div>
    {% endif %}
</div>
{% endif %}
{%- endmacro %}


{# ------------------------------------------------------------------
   verdict_card(card, mode) — the kind-aware proof-sheet card.
   Element order (spec §3.2): header -> verdict strip -> Proposed VEX ->
   kind body -> Where to investigate -> Remediation (conditional) ->
   Evidence -> Replay. Each block renders ONLY under its "Shown when" rule.
   ------------------------------------------------------------------ #}
{% macro verdict_card(card, mode) -%}
{% set t = card.target or {} %}
{% set v = card.verdict or {} %}
{% set kind = v.kind %}
{% set e = card.enrichment or {} %}
{% set pv = card.proposed_vex %}
{% set rem = card.remediation %}
{% set prov = card.provenance or {} %}
<div class="exp-card exp-card-{{ kind }}">

    {# 1. Header — target, cwe/alias, chips. [all] #}
    <div class="exp-header">
        <div class="exp-target">
            {{ t.cve_id }}
            {% if t.component_name %}<span class="exp-dot">·</span> {{ t.component_name }}{% endif %}
            {% if t.version_name %}<span class="exp-dot">·</span> {{ t.version_name }}{% endif %}
        </div>
        {% if t.cwe or t.cve_alias %}
        <div class="exp-cwe">{% if t.cwe %}{{ t.cwe }}{% endif %}{% if t.cwe and t.cve_alias %} · {% endif %}{% if t.cve_alias %}{{ t.cve_alias }}{% endif %}</div>
        {% endif %}
        {{ chip_row(e) }}
    </div>

    {# 2. Verdict strip — kind-tinted badge (label per the map) + confidence. [all] #}
    <div class="exp-verdict-strip">
        <span class="exp-badge exp-badge-{{ kind }}">{{ kind_labels.get(kind, kind) }}</span>
        {{ confidence_bar(card.confidence) }}
    </div>

    <div class="exp-grid">
        {# meta rail — Proposed VEX + kind body + locus + remediation. #}
        <div class="exp-rail">

            {# 3. Proposed VEX — platform vocabulary verbatim. [all except VERIFIER_FAILED] #}
            <div class="exp-section">
                <div class="exp-section-title">Proposed VEX</div>
                {% if kind == 'VERIFIER_FAILED' or not pv %}
                <p class="exp-vex-none">none — re-run the verifier to produce a VEX.</p>
                {% else %}
                <div class="exp-vex">
                    <div><span class="exp-vex-status">{{ pv.status }}</span>{% if pv.response %} · {{ pv.response }}{% endif %}{% if pv.justification %} · {{ pv.justification }}{% endif %}</div>
                    {% if pv.statement %}<p style="margin-top:6px;">{{ pv.statement }}</p>{% endif %}
                    {% if pv.evidence_citation_ids %}<div class="exp-cite-meta">Backed by: {{ pv.evidence_citation_ids | join(', ') }}</div>{% endif %}
                </div>
                {% endif %}
            </div>

            {# 4. Kind body — per-kind fields from verdict. [by kind] #}
            <div class="exp-section">
                <div class="exp-section-title">Verdict detail</div>
                {% if kind == 'AFFECTED' %}
                    {% if v.platform_response %}<div class="exp-kv"><span class="exp-kv-key">Response</span><span class="exp-kv-val">{{ v.platform_response }}</span></div>{% endif %}
                    {% if v.conditional %}<div class="exp-kv"><span class="exp-kv-key">Conditional</span><span class="exp-kv-val">{% if v.conditional_gates %}{{ v.conditional_gates | join(', ') }}{% else %}yes{% endif %}</span></div>{% endif %}
                    {% if v.reason_summary %}<p>{{ v.reason_summary }}</p>{% endif %}
                {% elif kind == 'NOT_AFFECTED' %}
                    {% if v.platform_justification %}<div class="exp-kv"><span class="exp-kv-key">Justification</span><span class="exp-kv-val">{{ v.platform_justification }}</span></div>{% endif %}
                    {% if v.reason_summary %}<p>{{ v.reason_summary }}</p>{% endif %}
                {% elif kind == 'INCONCLUSIVE' %}
                    {% if v.reason_summary %}<p>{{ v.reason_summary }}</p>{% endif %}
                    {% if v.what_would_resolve_it %}<div class="exp-kv"><span class="exp-kv-key">What would resolve it</span><span class="exp-kv-val">{{ v.what_would_resolve_it }}</span></div>{% endif %}
                {% elif kind == 'UNDER_INVESTIGATION' %}
                    {% if v.reason_summary %}<p>{{ v.reason_summary }}</p>{% endif %}
                    {% if v.blocked_by %}<div class="exp-kv"><span class="exp-kv-key">Blocked by</span><span class="exp-kv-val">{{ v.blocked_by }}</span></div>{% endif %}
                    {% if v.resume_descriptor %}<div class="exp-kv"><span class="exp-kv-key">Resume</span><span class="exp-kv-val exp-mono">{{ v.resume_descriptor }}</span></div>{% endif %}
                    {% if v.capability_request %}<div class="exp-kv"><span class="exp-kv-key">Capability request</span><span class="exp-kv-val">{{ v.capability_request }}</span></div>{% endif %}
                {% elif kind == 'VERIFIER_FAILED' %}
                    {% if v.failure_class %}<div class="exp-kv"><span class="exp-kv-key">Failure class</span><span class="exp-kv-val exp-mono">{{ v.failure_class }}</span></div>{% endif %}
                    {% if v.details %}<p>{{ v.details }}</p>{% endif %}
                {% else %}
                    {% if v.reason_summary %}<p>{{ v.reason_summary }}</p>{% endif %}
                {% endif %}
            </div>

            {# 5. Where to investigate — only when locus present (never fabricated). #}
            {# [AFFECTED/INCONCLUSIVE/UNDER_INVESTIGATION; NOT_AFFECTED why-not when locus present] #}
            {{ locus_block(card.locus, kind) }}

            {# 6. Remediation — ONLY when remediation present/non-null. #}
            {% if rem %}
            <div class="exp-section">
                <div class="exp-section-title">Remediation</div>
                {% if rem.action %}<div class="exp-kv"><span class="exp-kv-key">Action</span><span class="exp-kv-val">{{ rem.action }}</span></div>{% endif %}
                {% if rem.fix_version %}<div class="exp-kv"><span class="exp-kv-key">Fix version</span><span class="exp-kv-val exp-mono">{{ rem.fix_version }}</span></div>{% endif %}
                {% if rem.workaround %}<div class="exp-kv"><span class="exp-kv-key">Workaround</span><span class="exp-kv-val">{{ rem.workaround }}</span></div>{% endif %}
            </div>
            {% endif %}
        </div>

        {# evidence-forward column — primary evidence + progressive disclosure. #}
        <div class="exp-main">
            {# 7. Evidence — tiered. Primary citation ALSO shows inline_excerpt
                  (internal only; external already redacted -> guard). [all] #}
            <div class="exp-section">
                <div class="exp-section-title">Evidence</div>
                {% set citations = card.citations or [] %}
                {% set primary = citations | selectattr('role', 'equalto', 'primary') | list %}
                {% set supporting = citations | selectattr('role', 'equalto', 'supporting') | list %}
                {% if not citations %}
                <p class="exp-vex-none">No citations on this record.</p>
                {% endif %}
                {% for c in primary %}
                <div class="exp-cite exp-cite-primary">
                    <div class="exp-cite-claim">{{ c.claim }}</div>
                    <div class="exp-cite-meta">{{ c.evidence_type }} · {{ c.checksum }}</div>
                    {% if c.inline_excerpt %}
                    <pre class="exp-excerpt">{{ c.inline_excerpt }}</pre>
                    {% endif %}
                </div>
                {% endfor %}

                {# Progressive disclosure: supporting citations + (internal only)
                   tier_provenance behind a no-JS <details> expander. #}
                {% set show_tier = (mode == 'internal') and prov.tier_provenance %}
                {% if supporting or show_tier %}
                <details class="exp-details">
                    <summary>Supporting evidence{% if show_tier %} &amp; tier provenance{% endif %}</summary>
                    {% for c in supporting %}
                    <div class="exp-cite">
                        <div class="exp-cite-claim">{{ c.claim }}</div>
                        <div class="exp-cite-meta">{{ c.evidence_type }} · {{ c.checksum }}</div>
                    </div>
                    {% endfor %}
                    {% if show_tier %}
                    <div class="exp-cite">
                        <div class="exp-section-title" style="margin-top:8px;">Tier provenance</div>
                        {% set tp = prov.tier_provenance %}
                        {% if tp.tiers_run %}<div class="exp-kv"><span class="exp-kv-key">Tiers run</span><span class="exp-kv-val exp-mono">{{ tp.tiers_run | join(', ') }}</span></div>{% endif %}
                        {% if tp.new_templates_authored is not none %}<div class="exp-kv"><span class="exp-kv-key">New templates authored</span><span class="exp-kv-val">{{ tp.new_templates_authored }}</span></div>{% endif %}
                    </div>
                    {% endif %}
                </details>
                {% endif %}

                {# Internal-only verifier telemetry (cost actuals) behind disclosure. #}
                {% if mode == 'internal' and card.cost_actuals %}
                {% set ca = card.cost_actuals %}
                <details class="exp-details">
                    <summary>Verifier cost (internal)</summary>
                    <div class="exp-cite">
                        {% if ca.tokens is not none %}<div class="exp-kv"><span class="exp-kv-key">Tokens</span><span class="exp-kv-val">{{ ca.tokens }}</span></div>{% endif %}
                        {% if ca.wall_clock_s is not none %}<div class="exp-kv"><span class="exp-kv-key">Wall clock (s)</span><span class="exp-kv-val">{{ ca.wall_clock_s }}</span></div>{% endif %}
                        {% if ca.qemu_s is not none %}<div class="exp-kv"><span class="exp-kv-key">QEMU (s)</span><span class="exp-kv-val">{{ ca.qemu_s }}</span></div>{% endif %}
                        {% if ca.forge_calls is not none %}<div class="exp-kv"><span class="exp-kv-key">Forge calls</span><span class="exp-kv-val">{{ ca.forge_calls }}</span></div>{% endif %}
                        {% if ca.llm_calls_by_subagent %}<div class="exp-kv"><span class="exp-kv-key">LLM calls by subagent</span><span class="exp-kv-val exp-mono">{% for k, n in ca.llm_calls_by_subagent.items() %}{{ k }}={{ n }}{% if not loop.last %}, {% endif %}{% endfor %}</span></div>{% endif %}
                    </div>
                </details>
                {% endif %}

                {# raw_confidence (internal only) shown beside the calibrated value. #}
                {% if mode == 'internal' and card.raw_confidence is not none %}
                <div class="exp-cite-meta">Raw (uncalibrated) confidence: {{ (card.raw_confidence|float * 100)|round(0)|int }}%</div>
                {% endif %}
            </div>
        </div>
    </div>

    {# 8. Replay — provenance chain. [all] #}
    <div class="exp-replay">
        Replay:
        <span class="exp-mono">{{ prov.bundle_id }}</span>
        {% if prov.replay_seed %} · seed <span class="exp-mono">{{ prov.replay_seed }}</span>{% endif %}
        {% if prov.replay_trace_id %} · trace <span class="exp-mono">{{ prov.replay_trace_id }}</span>{% endif %}
        {% if prov.catalog_version %} · catalog <span class="exp-mono">{{ prov.catalog_version }}</span>{% endif %}
        {% if prov.agent_version %} · agent <span class="exp-mono">{{ prov.agent_version }}</span>{% endif %}
        {% if prov.sealed_at %} · sealed {{ prov.sealed_at }}{% endif %}
        {% if prov.bundle_id %}<br>Reproduce: <span class="exp-mono">replay_pen_test {{ prov.bundle_id }}</span>{% endif %}
    </div>
</div>
{%- endmacro %}


{# ==================================================================
   v2 macros (exploitability-dataset/v2, spec 2026-06-23 §4/§8).
   The v1 macros above are retained for the legacy {cover,coverage,cards}
   render path until the §10 cutover; the v2 templates dispatch to these
   under {% if buckets %}. Cards read v2 fields:
     verdict.platform_* (VEX, replaces proposed_vex) · evidence.evidence_summary
     (un-redacted proof, single source) · evidence.{exploit_proof,backport_ref,
     absence_proof,reachability,locus} · target.component_version · card.internal.*
     (internal-only telemetry) · card.trust_tier (transform-derived).
   ================================================================== #}

{% set method_labels = {
    "dynamic_pov": "dynamic PoV",
    "static": "static analysis",
    "reachability": "reachability",
    "version_fact": "version fact",
} %}


{# trust_pill(tier) — calibrated-confidence tier pill (High/Moderate/Low). #}
{% macro trust_pill(tier) -%}
{% if tier %}<span class="exp-trust exp-trust-{{ tier }}">{{ {"high": "High", "moderate": "Moderate", "low": "Low"}.get(tier, tier) }} confidence</span>{% endif %}
{%- endmacro %}


{# evidence_block_v2(ev) — prose-first proof + optional typed evidence. #}
{% macro evidence_block_v2(ev) -%}
{% set ev = ev or {} %}
{% if ev.evidence_summary %}<p class="exp-proof">{{ ev.evidence_summary }}</p>{% endif %}
{% set xp = ev.exploit_proof %}
{% if xp %}
<div class="exp-kv"><span class="exp-kv-key">Crash signal</span><span class="exp-kv-val exp-mono">{{ xp.signal }}{% if xp.faulting_object %} in {{ xp.faulting_object }}{% endif %}{% if xp.faulting_symbol %} · {{ xp.faulting_symbol }}{% endif %}</span></div>
{% if xp.trigger_summary %}<div class="exp-kv"><span class="exp-kv-key">Trigger</span><span class="exp-kv-val">{{ xp.trigger_summary }}</span></div>{% endif %}
{% endif %}
{% set bp = ev.backport_ref %}
{% if bp %}
<div class="exp-kv"><span class="exp-kv-key">Backport</span><span class="exp-kv-val exp-mono">{{ bp.commit }}{% if bp.match_method %} ({{ bp.match_method }}-matched){% endif %}</span></div>
{% if bp.upstream_fix %}<div class="exp-kv"><span class="exp-kv-key">Upstream fix</span><span class="exp-kv-val">{{ bp.upstream_fix }}</span></div>{% endif %}
{% endif %}
{% set ap = ev.absence_proof %}
{% if ap %}
<div class="exp-kv"><span class="exp-kv-key">Absent</span><span class="exp-kv-val">{{ ap.what }}{% if ap.markers_checked is not none %} — 0/{{ ap.markers_checked }} markers{% endif %}{% if ap.files_scanned is not none %} across {{ ap.files_scanned }} files{% endif %}</span></div>
{% endif %}
{% set rc = ev.reachability %}
{% if rc %}
{% if rc.fact %}<div class="exp-kv"><span class="exp-kv-key">Reachability</span><span class="exp-kv-val">{{ rc.fact }}</span></div>{% endif %}
{% if rc.setuid_count is not none %}<div class="exp-kv"><span class="exp-kv-key">setuid binaries</span><span class="exp-kv-val">{{ rc.setuid_count }}</span></div>{% endif %}
{% if rc.importers %}<div class="exp-kv"><span class="exp-kv-key">Importers</span><span class="exp-kv-val exp-mono">{{ rc.importers | join('; ') }}</span></div>{% endif %}
{% endif %}
{%- endmacro %}


{# locus_block_v2(locus, kind) — Where to investigate; v2 locus arrays are
   plain strings (source_refs/binary_offsets), not {file,line} objects. #}
{% macro locus_block_v2(locus, kind) -%}
{% set l = locus or {} %}
{% set has_locus = l and (l.vulnerable_functions or l.source_refs or l.call_path or l.binary_offsets) %}
{% if has_locus %}
<div class="exp-section">
    <div class="exp-section-title">{% if kind == 'NOT_AFFECTED' %}Where it would be{% else %}Where to investigate{% endif %}</div>
    {% if l.vulnerable_functions %}<div class="exp-kv"><span class="exp-kv-key">Vulnerable functions</span><span class="exp-kv-val exp-mono">{{ l.vulnerable_functions | join(', ') }}</span></div>{% endif %}
    {% if l.source_refs %}<div class="exp-kv"><span class="exp-kv-key">Source</span><span class="exp-kv-val exp-mono">{{ l.source_refs | join(', ') }}</span></div>{% endif %}
    {% if l.call_path %}<div class="exp-kv"><span class="exp-kv-key">Call path</span><span class="exp-kv-val exp-mono">{{ l.call_path | join(' → ') }}</span></div>{% endif %}
    {% if l.binary_offsets %}<div class="exp-kv"><span class="exp-kv-key">Binary offsets</span><span class="exp-kv-val exp-mono">{{ l.binary_offsets | join(', ') }}</span></div>{% endif %}
</div>
{% endif %}
{%- endmacro %}


{# verdict_card_v2(card, mode) — the v2 proof-sheet card. #}
{% macro verdict_card_v2(card, mode) -%}
{% set t = card.target or {} %}
{% set v = card.verdict or {} %}
{% set kind = v.kind %}
{% set ev = card.evidence or {} %}
{% set e = card.enrichment or {} %}
{% set rem = card.remediation %}
{% set prov = card.provenance or {} %}
<div class="exp-card exp-card-{{ kind }}">

    {# 1. Header — target, cwe/alias, chips. #}
    <div class="exp-header">
        <div class="exp-target">
            {{ t.cve_id }}
            {% if t.component_name %}<span class="exp-dot">·</span> {{ t.component_name }}{% endif %}
            {% if t.component_version %}<span class="exp-dot">·</span> {{ t.component_version }}{% endif %}
        </div>
        {% if t.cwe or (t.cve_alias and t.cve_alias != t.cve_id) %}
        <div class="exp-cwe">{% if t.cwe %}{{ t.cwe }}{% endif %}{% if t.cwe and t.cve_alias and t.cve_alias != t.cve_id %} · {% endif %}{% if t.cve_alias and t.cve_alias != t.cve_id %}{{ t.cve_alias }}{% endif %}</div>
        {% endif %}
        {% if t.cve_description %}<p class="exp-cve-desc">{{ t.cve_description }}</p>{% endif %}
        {{ chip_row(e) }}
    </div>

    {# 2. Verdict strip — badge + method sub-label + trust tier + confidence. #}
    <div class="exp-verdict-strip">
        <span class="exp-badge exp-badge-{{ kind }}">{{ kind_labels.get(kind, kind) }}</span>
        {% if card.method %}<span class="exp-method">{{ method_labels.get(card.method, card.method) }}</span>{% endif %}
        {{ trust_pill(card.trust_tier) }}
        {{ confidence_bar(card.confidence) }}
    </div>

    <div class="exp-grid">
        <div class="exp-rail">
            {# 3. Conditional gate (AFFECTED). #}
            {% if v.conditional and v.conditional_gates %}
            <div class="exp-section">
                <div class="exp-section-title">Exploitable only if</div>
                <ul class="exp-gates">{% for g in v.conditional_gates %}<li>{{ g }}</li>{% endfor %}</ul>
            </div>
            {% endif %}

            {# 4. Reconstructed VEX — platform labels only (prose lives in Evidence). #}
            <div class="exp-section">
                <div class="exp-section-title">VEX</div>
                {% if v.platform_status %}
                <div class="exp-vex">
                    <div><span class="exp-vex-status">{{ v.platform_status }}</span>{% if v.platform_response %} · {{ v.platform_response }}{% endif %}{% if v.platform_justification %} · {{ v.platform_justification }}{% endif %}</div>
                </div>
                {% else %}
                <p class="exp-vex-none">No VEX applied from these results yet.</p>
                {% endif %}
            </div>

            {# 5. Where to investigate (locus present only; never fabricated). #}
            {{ locus_block_v2(ev.locus, kind) }}

            {# 6. Remediation (present only). #}
            {% if rem and (rem.action or rem.fix_version or rem.workaround) %}
            <div class="exp-section">
                <div class="exp-section-title">Remediation</div>
                {% if rem.action %}<div class="exp-kv"><span class="exp-kv-key">Action</span><span class="exp-kv-val">{{ rem.action }}</span></div>{% endif %}
                {% if rem.fix_version %}<div class="exp-kv"><span class="exp-kv-key">Fix version</span><span class="exp-kv-val exp-mono">{{ rem.fix_version }}</span></div>{% endif %}
                {% if rem.workaround %}<div class="exp-kv"><span class="exp-kv-key">Workaround</span><span class="exp-kv-val">{{ rem.workaround }}</span></div>{% endif %}
            </div>
            {% endif %}
        </div>

        <div class="exp-main">
            {# 7. Evidence — prose proof + typed detail. reason_summary shown only
                  if it differs from the proof prose (kills the v1 dup-sentence bug). #}
            <div class="exp-section">
                <div class="exp-section-title">Evidence</div>
                {{ evidence_block_v2(ev) }}
                {% if v.reason_summary and v.reason_summary != ev.evidence_summary %}
                <p class="exp-reason">{{ v.reason_summary }}</p>
                {% endif %}

                {# Audit trail — citations demoted behind a disclosure. Internal
                   keeps inline_excerpt; external was re-stripped by the transform. #}
                {% set citations = card.citations or [] %}
                {% if citations %}
                <details class="exp-details">
                    <summary>Evidence trail ({{ citations | length }})</summary>
                    {% for c in citations %}
                    <div class="exp-cite{% if c.role == 'primary' %} exp-cite-primary{% endif %}">
                        <div class="exp-cite-claim">{{ c.claim }}</div>
                        <div class="exp-cite-meta">{{ c.evidence_type }}{% if c.checksum %} · {{ c.checksum }}{% endif %}</div>
                        {# inline_excerpt is internal-only. The transform already
                           re-strips it for external; this mode-guard is belt-and-
                           suspenders so the macro can't leak it independently. #}
                        {% if mode == 'internal' and c.inline_excerpt %}<pre class="exp-excerpt">{{ c.inline_excerpt }}</pre>{% endif %}
                    </div>
                    {% endfor %}
                </details>
                {% endif %}

                {# Internal-only telemetry. The transform strips card.internal for
                   external, so this whole block never renders in a shareable report. #}
                {% if mode == 'internal' and card.internal %}
                {% set ic = card.internal %}
                <details class="exp-details">
                    <summary>Verifier internals</summary>
                    {% if ic.raw_confidence is not none %}<div class="exp-kv"><span class="exp-kv-key">Raw (uncalibrated) confidence</span><span class="exp-kv-val">{{ (ic.raw_confidence|float * 100)|round(0)|int }}%</span></div>{% endif %}
                    {% if ic.tier_provenance %}<div class="exp-kv"><span class="exp-kv-key">Tier provenance</span><span class="exp-kv-val">{{ ic.tier_provenance }}</span></div>{% endif %}
                    {% if ic.cost_actuals %}{% set ca = ic.cost_actuals %}<div class="exp-kv"><span class="exp-kv-key">Cost</span><span class="exp-kv-val exp-mono">{% for k, n in ca.items() %}{{ k }}={{ n }}{% if not loop.last %}, {% endif %}{% endfor %}</span></div>{% endif %}
                </details>
                {% endif %}
            </div>
        </div>
    </div>

    {# 8. Replay — per-card handle; null bundle = call-graph evidence. #}
    <div class="exp-replay">
        {% if prov.bundle_id %}
        Replay: <span class="exp-mono">{{ prov.bundle_id }}</span>{% if prov.sealed_at %} · sealed {{ prov.sealed_at }}{% endif %}
        <br>Reproduce: <span class="exp-mono">replay_pen_test {{ prov.bundle_id }}</span>
        {% else %}
        Call-graph / version evidence — no sealed replay bundle.{% if prov.sealed_at %} Analyzed {{ prov.sealed_at }}.{% endif %}
        {% endif %}
    </div>
</div>
{%- endmacro %}


{# version_table(cards) — AFFECTED_BY_VERSION renders as a compact table, not N
   cards (spec §5). KEV called out; fix-version column. #}
{% macro version_table(cards) -%}
<div class="exp-vtable-wrap">
<table class="exp-vtable">
    <thead><tr><th>CVE</th><th>Component</th><th>Severity</th><th>Flags</th><th>Fix in</th></tr></thead>
    <tbody>
    {% for c in cards %}
    {% set t = c.target or {} %}{% set e = c.enrichment or {} %}{% set rem = c.remediation or {} %}
    <tr>
        <td><span class="exp-mono">{{ t.cve_id }}</span>{% if t.cve_description %}<div class="exp-cve-desc">{{ t.cve_description }}</div>{% endif %}</td>
        <td>{{ t.component_name }}{% if t.component_version %} {{ t.component_version }}{% endif %}</td>
        <td>{% if e.severity %}<span class="exp-chip exp-sev-{{ e.severity|upper }}">{{ e.severity }}</span>{% endif %}</td>
        <td>{% if e.kev %}<span class="exp-chip exp-chip-kev">CISA KEV</span>{% endif %}{% if e.vckev %}<span class="exp-chip exp-chip-kev">VulnCheck KEV</span>{% endif %}</td>
        <td class="exp-mono">{{ rem.fix_version | default('—') }}</td>
    </tr>
    {% endfor %}
    </tbody>
</table>
</div>
{%- endmacro %}


{# decision_summary(summary, bucket_counts) — §1 one-screen decision. #}
{% macro decision_summary(summary, bucket_counts) -%}
{% set s = summary or {} %}{% set bc = bucket_counts or {} %}
<div class="exp-summary">
    {% if s.headline %}<p class="exp-headline">{{ s.headline }}</p>{% endif %}
    <div class="exp-rollup">
        {% if bc.exploitable %}<span class="exp-roll exp-roll-exploitable">{{ bc.exploitable }} must-fix exploitable</span>{% endif %}
        {% if bc.affected_by_version %}<span class="exp-roll exp-roll-version">{{ bc.affected_by_version }} affected by version</span>{% endif %}
        {% if bc.inconclusive %}<span class="exp-roll exp-roll-inconclusive">{{ bc.inconclusive }} tested inconclusive</span>{% endif %}
        {% if bc.not_affected %}<span class="exp-roll exp-roll-clear">{{ bc.not_affected }} proven not affected</span>{% endif %}
        {% if bc.verifier_failed %}<span class="exp-roll exp-roll-failed">{{ bc.verifier_failed }} could not assess</span>{% endif %}
    </div>
    {% if s.actions %}
    <ol class="exp-actions">
        {% for a in s.actions %}
        <li class="exp-action">
            <span class="exp-action-title">{{ a.title }}</span>
            {% if a.detail %}<span class="exp-action-detail">{{ a.detail }}</span>{% endif %}
        </li>
        {% endfor %}
    </ol>
    {% endif %}
</div>
{%- endmacro %}


{# section(buckets, key, title, mode) — render a card bucket as a titled section,
   omitted entirely when empty (spec §4 graceful degradation). #}
{% macro card_section(buckets, key, title, mode) -%}
{% set cards = buckets.get(key) or [] %}
{% if cards %}
<section class="exp-bucket">
    <h2 class="exp-bucket-title">{{ title }} <span class="exp-bucket-count">{{ cards | length }}</span></h2>
    {% for card in cards %}{{ verdict_card_v2(card, mode) }}{% endfor %}
</section>
{% endif %}
{%- endmacro %}