{label}
+{value}
+{context}
+ {children} +
+
+
+ );
+}
+
+function MetricCard({
+ label,
+ value,
+ context,
+ tone = "neutral",
+ children,
+}: {
+ label: string;
+ value: string;
+ context: string;
+ tone?: "positive" | "negative" | "caution" | "neutral";
+ children?: ReactNode;
+}) {
+ return (
+
+
+ {title}
+{detail}
+
+ Base {score.baseScore.toFixed(1)}
+
+ Adapter {score.adapterScore.toFixed(1)}
+
+ );
+ }
+ if (score.confidenceInterval) {
+ return (
+
+ Pairs {score.pairCount ?? "unavailable"}
+
+
+ Interval {score.confidenceInterval.low.toFixed(3)} to{" "}
+ {score.confidenceInterval.high.toFixed(3)}
+
+
+ );
+ }
+ return null;
+}
+
+function RegressionContract({ report }: { report: SftGuardReport }) {
+ const regression = report.regression;
+ if (!regression) {
+ return (
+
+
+ );
+ }
+
+ const targetPassed = regression.target.status === "PASS";
+ const retentionPassed = regression.retention.status === "PASS";
+
+ return (
+
+
+
+
+
+
+ );
+}
+
+function AuditContract({ report }: { report: SftGuardReport }) {
+ if (!report.audit) return null;
+ const audit = report.audit;
+ return (
+
+
+ );
+}
+
+function FaultCoveragePanel({ report }: { report: SftGuardReport }) {
+ const coverage = report.faultCoverage;
+ if (!coverage) {
+ return (
+
+
+ );
+ }
+
+ const coveragePercent =
+ coverage.expectedFaultClasses === 0
+ ? 0
+ : (coverage.detectedFaultClasses / coverage.expectedFaultClasses) * 100;
+ return (
+ Not part of this artifact
+No fault matrix attached
++ Open the checked-in fault-matrix sample or import a compatible report + to inspect detection coverage and clean-control behavior. +
+
+
+ );
+}
+
+function CoverageBar({
+ label,
+ value,
+ target,
+ inverse = false,
+}: {
+ label: string;
+ value: number;
+ target: string;
+ inverse?: boolean;
+}) {
+ return (
+
+
+
+ {coverage.detectedFaultClasses}
+ of {coverage.expectedFaultClasses}
+
+
+
+ + {coverage.carryForward ? "Carry-forward allowed" : "Carry-forward blocked"} +
++ This reports deterministic synthetic coverage of SFTGuard’s own + checks—not coverage of unknown real-world faults. +
+
+
+
+
+ );
+}
+
+function IssueSummary({ issues }: { issues: ReportIssue[] }) {
+ const categoryCounts = useMemo(() => {
+ const counts = new Map
+ {label}
+ {target}
+
+ {value.toFixed(1)}%
+
+
+
+
+
+ );
+ }
+
+ return (
+ <>
+ No reported issues
+The artifact contains no issue records.
+
+ {categoryCounts.map(([category, count]) => (
+
+ {category} {count}
+
+ ))}
+
+
+
+
+
+
+ );
+}
+
+function ProvenancePanel({ report }: { report: SftGuardReport }) {
+ const provenance = report.provenance;
+ const values: Array<{
+ label: string;
+ value: string | null;
+ isHash?: boolean;
+ }> = [
+ { label: "Tool version", value: provenance.toolVersion },
+ { label: "Protocol commit", value: provenance.protocolCommit, isHash: true },
+ {
+ label: "Implementation",
+ value: provenance.implementationCommit,
+ isHash: true,
+ },
+ { label: "Input SHA-256", value: provenance.inputSha256, isHash: true },
+ {
+ label: "Declared artifact SHA-256",
+ value: provenance.artifactSha256,
+ isHash: true,
+ },
+ {
+ label: "Digest verification",
+ value:
+ provenance.integrityStatus === "verified"
+ ? "Verified"
+ : provenance.integrityStatus === "mismatch"
+ ? "Mismatch"
+ : "Unverified — digest not recomputed",
+ },
+ { label: "Runtime", value: provenance.runtime },
+ ];
+ const replayTone =
+ provenance.deterministicReplay === null
+ ? "replay-unknown"
+ : provenance.deterministicReplay
+ ? "replay-pass"
+ : "replay-fail";
+ const replayTitle =
+ provenance.deterministicReplay === null
+ ? "Unavailable"
+ : provenance.deterministicReplay
+ ? "Matched"
+ : "Not matched";
+ const replayDetail =
+ provenance.deterministicReplay === null
+ ? "The artifact does not declare a replay result"
+ : provenance.deterministicReplay
+ ? "Canonical payload reproduced"
+ : "Reproduction claim is blocked";
+ return (
+ | Signal | +Severity | +Outcome | +Count | +
|---|---|---|---|
|
+ {issue.title}
+ {issue.id}
+ {issue.detail} + |
+ + + {issue.severity} + + | +
+ |
+ {issue.count} | +
+
+ );
+}
+
+function BoundaryPanel({ report }: { report: SftGuardReport }) {
+ return (
+
+
+ Deterministic replay
+ {replayTitle} + {replayDetail} +-
+ {values.map(({ label, value, isHash = false }) => {
+ return (
+
- {label} +
- + {value === null + ? "Unavailable in artifact" + : isHash + ? shortHash(value) + : value} + +
+
+ );
+ })}
+
+
+
+
+
+
+ );
+}
+
+export default function App() {
+ const [selectedKey, setSelectedKey] = useState(
+ reportSourceKey(SAMPLE_REPORTS[0]),
+ );
+ const [importedReport, setImportedReport] = useStateClaim boundary
+Evidence, not certification
+-
+ {report.boundaries.claim.map((item) => (
+
- {item} + ))} +
Privacy boundary
+Local viewing, narrow display
+-
+ {report.boundaries.privacy.map((item) => (
+
- {item} + ))} +
+
+
+
+
+ SFTGuard
+ Local report viewer
+
+
+
+
+
+
+ );
+}
diff --git a/web/src/data/sample-audit.json b/web/src/data/sample-audit.json
new file mode 100644
index 0000000..9b39d28
--- /dev/null
+++ b/web/src/data/sample-audit.json
@@ -0,0 +1,54 @@
+{
+ "schemaVersion": "sftguard.report.v1",
+ "reportType": "audit",
+ "reportId": "sample-audit-mask-abstention",
+ "title": "Training data and mask audit",
+ "generatedAt": "2026-07-19T09:30:00.000Z",
+ "status": "ABSTAIN",
+ "summary": "Structural checks completed, but the tokenizer could not expose a trustworthy assistant-token mask. Release approval is withheld.",
+ "audit": {
+ "recordsScanned": 1280,
+ "checksPassed": 7,
+ "checksTotal": 8,
+ "supervisedTokens": null
+ },
+ "issues": [
+ {
+ "id": "template.mask_unavailable",
+ "category": "Template & mask",
+ "severity": "error",
+ "outcome": "ABSTAIN",
+ "count": 1,
+ "title": "Assistant-token mask unavailable",
+ "detail": "The selected tokenizer template did not expose a verifiable assistant-token mask. SFTGuard did not infer one."
+ },
+ {
+ "id": "data.exact_duplicate",
+ "category": "Data integrity",
+ "severity": "warning",
+ "outcome": "FAIL",
+ "count": 3,
+ "title": "Exact duplicate records",
+ "detail": "Three content hashes occurred more than once. Report data contains counts and hashes only."
+ }
+ ],
+ "provenance": {
+ "toolVersion": "0.1.0-sample",
+ "protocolCommit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+ "implementationCommit": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+ "inputSha256": "1111111111111111111111111111111111111111111111111111111111111111",
+ "artifactSha256": "2222222222222222222222222222222222222222222222222222222222222222",
+ "runtime": "Python 3.12 · local illustrative fixture",
+ "deterministicReplay": true
+ },
+ "boundaries": {
+ "claim": [
+ "Illustrative UI fixture, not checked confirmatory evidence.",
+ "An abstention means the evidence contract was incomplete; it is not a pass."
+ ],
+ "privacy": [
+ "No prompts, responses, model weights, or detected secret values are included.",
+ "Counts and content-addressed identifiers are illustrative placeholders."
+ ]
+ }
+}
diff --git a/web/src/data/sample-fault.json b/web/src/data/sample-fault.json
new file mode 100644
index 0000000..96df531
--- /dev/null
+++ b/web/src/data/sample-fault.json
@@ -0,0 +1,65 @@
+{
+ "schemaVersion": "sftguard.report.v1",
+ "reportType": "fault-matrix",
+ "reportId": "sample-fault-matrix-fail",
+ "title": "Synthetic fault-injection matrix",
+ "generatedAt": "2026-07-19T10:00:00.000Z",
+ "status": "FAIL",
+ "summary": "Eight of nine illustrative fault classes were detected. The macro-recall gate failed, so carry-forward remains blocked.",
+ "faultCoverage": {
+ "expectedFaultClasses": 9,
+ "detectedFaultClasses": 8,
+ "criticalRecallPercent": 100,
+ "macroRecallPercent": 88.9,
+ "cleanFalsePositiveRatePercent": 6.7,
+ "carryForward": false
+ },
+ "issues": [
+ {
+ "id": "data.exact_duplicate",
+ "category": "Data integrity",
+ "severity": "warning",
+ "outcome": "FAIL",
+ "count": 1,
+ "title": "Duplicate fault missed",
+ "detail": "The illustrative exact-duplicate case did not emit its required primary signal."
+ },
+ {
+ "id": "gate.macro_recall",
+ "category": "Fault coverage",
+ "severity": "error",
+ "outcome": "FAIL",
+ "count": 1,
+ "title": "Macro recall below gate",
+ "detail": "Observed 88.9% against the frozen 90% minimum."
+ },
+ {
+ "id": "gate.critical_recall",
+ "category": "Fault coverage",
+ "severity": "info",
+ "outcome": "PASS",
+ "count": 1,
+ "title": "Critical recall met",
+ "detail": "All illustrative critical fault classes emitted their expected primary signal."
+ }
+ ],
+ "provenance": {
+ "toolVersion": "0.1.0-sample",
+ "protocolCommit": "dddddddddddddddddddddddddddddddddddddddd",
+ "implementationCommit": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+ "inputSha256": "5555555555555555555555555555555555555555555555555555555555555555",
+ "artifactSha256": "6666666666666666666666666666666666666666666666666666666666666666",
+ "runtime": "Python 3.12 · local illustrative fixture",
+ "deterministicReplay": false
+ },
+ "boundaries": {
+ "claim": [
+ "Illustrative UI fixture; confirmatory seeds have not been represented here.",
+ "Synthetic fault detection does not establish coverage of unknown real-world failures."
+ ],
+ "privacy": [
+ "Injected strings and raw records are intentionally omitted.",
+ "Only expected and observed aggregate signals would appear in a real artifact."
+ ]
+ }
+}
diff --git a/web/src/data/sample-regression.json b/web/src/data/sample-regression.json
new file mode 100644
index 0000000..5af9c67
--- /dev/null
+++ b/web/src/data/sample-regression.json
@@ -0,0 +1,64 @@
+{
+ "schemaVersion": "sftguard.report.v1",
+ "reportType": "regression",
+ "reportId": "sample-regression-card-pass",
+ "title": "Adapter release regression card",
+ "generatedAt": "2026-07-19T09:45:00.000Z",
+ "status": "PASS",
+ "summary": "The adapter cleared the declared target gain and stayed inside the retention regression budget for this supplied evaluation contract.",
+ "regression": {
+ "target": {
+ "label": "Domain task accuracy",
+ "baseScore": 61.2,
+ "adapterScore": 73.6,
+ "deltaPercentagePoints": 12.4,
+ "minimumGainPercentagePoints": 5
+ },
+ "retention": {
+ "label": "General capability score",
+ "baseScore": 78.8,
+ "adapterScore": 78.2,
+ "deltaPercentagePoints": -0.6,
+ "maximumRegressionPercentagePoints": 2
+ }
+ },
+ "issues": [
+ {
+ "id": "regression.target_gain",
+ "category": "Target behavior",
+ "severity": "info",
+ "outcome": "PASS",
+ "count": 1,
+ "title": "Target gain cleared",
+ "detail": "Observed +12.4 percentage points against a preregistered +5.0 point minimum."
+ },
+ {
+ "id": "regression.retention_budget",
+ "category": "Retention",
+ "severity": "info",
+ "outcome": "PASS",
+ "count": 1,
+ "title": "Retention stayed in budget",
+ "detail": "Observed −0.6 percentage points against a maximum permitted regression of −2.0 points."
+ }
+ ],
+ "provenance": {
+ "toolVersion": "0.1.0-sample",
+ "protocolCommit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+ "implementationCommit": "cccccccccccccccccccccccccccccccccccccccc",
+ "inputSha256": "3333333333333333333333333333333333333333333333333333333333333333",
+ "artifactSha256": "4444444444444444444444444444444444444444444444444444444444444444",
+ "runtime": "Python 3.12 · local illustrative fixture",
+ "deterministicReplay": true
+ },
+ "boundaries": {
+ "claim": [
+ "Illustrative UI fixture, not a measured adapter result.",
+ "A pass applies only to the supplied target and retention evaluation records."
+ ],
+ "privacy": [
+ "No evaluation examples or model outputs are embedded.",
+ "The report contains only aggregate scores and placeholder hashes."
+ ]
+ }
+}
diff --git a/web/src/main.tsx b/web/src/main.tsx
new file mode 100644
index 0000000..d172db6
--- /dev/null
+++ b/web/src/main.tsx
@@ -0,0 +1,13 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import App from "./App";
+import "./styles.css";
+
+const root = document.getElementById("root");
+if (!root) throw new Error("SFTGuard viewer root element is missing.");
+
+createRoot(root).render(
+
+
+ Browser-local · no network path
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {statusCopy.eyebrow}
+{report.title}
+{report.summary}
+{statusCopy.action}
+
+ {report.status.slice(0, 1)}
+
+
+ {report.status}
+ {statusCopy.explanation}
+
+
+ Report
+ {report.reportId}
+
+ {report.generatedAt
+ ? `Generated ${displayDate(report.generatedAt)}`
+ : "Generated time unavailable in artifact"}
+
+ Evaluation contract results
+ Signals and issue categories
+ Fault coverage results
+ Artifact provenance
+ Claim and privacy boundaries
+