Proof-tier receipts
Every finding that survives to the PR carries one of three tier pills:| Tier | What it means | How it’s earned |
|---|---|---|
| VERIFIED | Checked by execution or backed by a signed receipt | A deterministic check ran (secret scan, AST rule, executed/refuted assertion) and the finding was confirmed against ground truth |
| GROUNDED | Anchored to cited code / evidence in the diff | The finding quotes specific code that exists at the cited location; the grounding gate matched the quote to the source |
| MODEL | Model judgment, no external witness | A specialist’s reasoning the deterministic layer could not independently confirm — still useful, but explicitly labeled as opinion |
The grounding gate
Between a specialist producing a finding and that finding posting, Harmonia runs the grounding gate: the finding must be anchored to the code it claims to be about.| Check | Outcome |
|---|---|
Finding’s path:line exists in the diff | Eligible to anchor |
Finding’s path:line is hallucinated | Dropped |
| Cited code quote matches the source (whitespace-normalized) | Earns GROUNDED |
| Cited code quote paraphrases / doesn’t match | Demoted to MODEL or dropped |
| Claimed unsafe pattern actually present | Confirmed; eligible for VERIFIED if a check ran |
| Claimed pattern absent | Suppressed before it reaches you |
Grounding is content-matched, not line-counted. Models routinely miscount line numbers but quote code verbatim, so the gate matches the quoted code against the source to anchor the finding precisely — including to deleted lines (
side: LEFT) when the finding’s subject is removed code.Agreement still escalates severity
Multiple specialists flagging the same code is a strong signal, and it raises severity (independent of proof tier):| Inputs | Severity |
|---|---|
| 1 specialist, low confidence | Info |
| 1 specialist, high confidence | Warning |
| 2+ specialists agree | Warning or Critical (by category) |
| Specialist + deterministic check confirms | Critical |
The verdict
The verdict follows from severity, with the grounding gate having already removed unwitnessed Critical claims:- Any Critical that cleared the grounding gate → Request changes
- Otherwise → Approve
Advisory cap
To prevent comment dilution, Harmonia surfaces the top few low-severity (Info / nit) findings inline and aggregates the rest into a single “advisory nits” line in the summary. The remainder are recorded in telemetry, not posted. Switchprofile to assertive if you want low-severity findings surfaced more aggressively.
Tuning what posts
The proof-tier and grounding logic is fixed — it’s the believability guarantee, not a knob. What you can tune viasigilix.json:
profile—"chill"(default, only must-fix) vs"assertive"(include nits + style). Shifts what each specialist flags in the first place.rules.<role>— Per-specialist prompt addendum. Influences what each specialist chooses to flag.deterministicChecks— Regex rules whose severity you set explicitly. These post at the severity you declare and earn a deterministic (VERIFIED-class) receipt — they bypass model judgment entirely.
Telemetry
Every finding’s lifecycle is recorded: which proof tier it earned, whether the grounding gate matched / demoted / dropped it, any agreement escalation, final severity, and whether it was posted, suppressed, or aggregated. Telemetry is internal — used for monitoring and prompt-engineering.Read next
Believability Pipeline
The five gates a finding earns before it can post.
Synthesizer
How Harmonia runs the grounding gate and stamps proof-tier receipts.

