Add reproducibility badge verification gate

reproducibility-badge-verification-gate/README.md

@@ -0,0 +1,24 @@
+# Reproducibility Badge Verification Gate
+
+Self-contained community and reputation module for SCIBASE issue #15.
+
+The gate evaluates whether a project should receive a primary reproducibility badge based on independent reproduction evidence. It checks required artifact hashes, executable environment digests, output matches, test results, run-log checksums, conflict disclosures, author/collaborator conflicts, and the number of valid independent reproduction runs required for bronze, silver, or gold badges.
+
+## Run
+
+```bash
+npm run check
+npm test
+npm run demo
+```
+
+The demo writes reviewer artifacts to `reports/`:
+
+- `reproducibility-badge-packet.json`
+- `reproducibility-badge-report.md`
+- `summary.svg`
+- `demo.mp4`
+
+## Scope
+
+This slice is intentionally narrow. It does not implement leaderboards, badge renewal, endorsement rings, review civility, review timeliness credits, mentorship scoring, anonymous identity escrow, or broad reputation transparency receipts. It focuses on primary badge issuance from independently verified reproducibility evidence.

reproducibility-badge-verification-gate/acceptance-notes.md

@@ -0,0 +1,10 @@
+# Acceptance Notes
+
+- Dependency-free Node.js module with deterministic output.
+- Synthetic data only; no private identities, credentials, payment data, or external services.
+- Badge decisions are `pass`, `revise`, or `hold`.
+- `pass` means the requested badge level has enough independent successful reproduction evidence.
+- `revise` means evidence may support a lower badge or needs more non-blocking disclosure.
+- `hold` means no badge should be issued until blocker findings are fixed.
+- Blockers cover conflicted reproducers, missing artifact checksums, environment/output mismatches, failed tests, missing reproducer disclosures, unknown artifacts, unsupported roles, and too few independent runs.
+- Demo artifacts are generated locally under `reports/`.

reproducibility-badge-verification-gate/demo.js

@@ -0,0 +1,83 @@
+const fs = require("node:fs")
+const path = require("node:path")
+const { spawnSync } = require("node:child_process")
+const { evaluateBadgePortfolio } = require("./index")
+const { badgePolicy, projects } = require("./sample-data")
+
+const reportsDir = path.join(__dirname, "reports")
+fs.mkdirSync(reportsDir, { recursive: true })
+
+const packet = evaluateBadgePortfolio({ projects, policy: badgePolicy })
+const { summary } = packet
+
+fs.writeFileSync(
+  path.join(reportsDir, "reproducibility-badge-packet.json"),
+  `${JSON.stringify(packet, null, 2)}\n`,
+)
+
+const markdown = [
+  "# Reproducibility Badge Verification Report",
+  "",
+  `Generated projects: ${summary.totalProjects}`,
+  `Passed: ${summary.passed}`,
+  `Needs revision: ${summary.revise}`,
+  `Held: ${summary.held}`,
+  `Valid independent runs: ${summary.validIndependentRuns}`,
+  `Audit digest: \`${packet.audit.digest}\``,
+  "",
+  "## Badge Decisions",
+  ...packet.decisions.flatMap((decision) => [
+    "",
+    `### ${decision.id}: ${decision.title}`,
+    `- Status: ${decision.status}`,
+    `- Requested badge: ${decision.requestedBadge}`,
+    `- Recommended badge: ${decision.recommendedBadge}`,
+    `- Required artifacts: ${decision.evidence.requiredArtifacts}`,
+    `- Reproduction runs: ${decision.evidence.reproductionRuns}`,
+    `- Valid independent runs: ${decision.evidence.validIndependentRuns}`,
+    `- Unique valid institutions: ${decision.evidence.uniqueValidInstitutions}`,
+    `- Findings: ${decision.findings.map((finding) => finding.code).join(", ") || "none"}`,
+    `- First action: ${decision.reviewerActions[0]?.message || "none"}`,
+  ]),
+  "",
+]
+
+fs.writeFileSync(path.join(reportsDir, "reproducibility-badge-report.md"), markdown.join("\n"))
+
+const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="960" height="540" viewBox="0 0 960 540">
+  <rect width="960" height="540" fill="#111827"/>
+  <text x="48" y="78" fill="#f9fafb" font-family="Arial" font-size="34" font-weight="700">Reproducibility Badge Verification</text>
+  <text x="48" y="124" fill="#cbd5e1" font-family="Arial" font-size="18">Independent evidence packet for SCIBASE community reputation issue #15</text>
+  <rect x="48" y="170" width="250" height="150" rx="14" fill="#15803d"/>
+  <text x="78" y="230" fill="#f0fdf4" font-family="Arial" font-size="56" font-weight="700">${summary.passed}</text>
+  <text x="78" y="270" fill="#dcfce7" font-family="Arial" font-size="22">issue badge</text>
+  <rect x="355" y="170" width="250" height="150" rx="14" fill="#b45309"/>
+  <text x="385" y="230" fill="#fffbeb" font-family="Arial" font-size="56" font-weight="700">${summary.revise}</text>
+  <text x="385" y="270" fill="#fef3c7" font-family="Arial" font-size="22">revise evidence</text>
+  <rect x="662" y="170" width="250" height="150" rx="14" fill="#be123c"/>
+  <text x="692" y="230" fill="#fff1f2" font-family="Arial" font-size="56" font-weight="700">${summary.held}</text>
+  <text x="692" y="270" fill="#ffe4e6" font-family="Arial" font-size="22">hold badge</text>
+  <text x="48" y="390" fill="#e5e7eb" font-family="Arial" font-size="20">Checks: independent runs, artifact hashes, environment digest, output match, test pass, disclosures, conflicts.</text>
+  <text x="48" y="430" fill="#9ca3af" font-family="Arial" font-size="16">Digest ${packet.audit.digest.slice(0, 24)}...</text>
+</svg>
+`
+fs.writeFileSync(path.join(reportsDir, "summary.svg"), svg)
+
+const ffmpeg = spawnSync("ffmpeg", [
+  "-y",
+  "-f",
+  "lavfi",
+  "-i",
+  "color=c=0x111827:s=960x540:d=6:r=15",
+  "-vf",
+  "drawbox=x=48:y=170:w=250:h=150:color=0x15803d@1:t=fill,drawbox=x=355:y=170:w=250:h=150:color=0xb45309@1:t=fill,drawbox=x=662:y=170:w=250:h=150:color=0xbe123c@1:t=fill,drawbox=x=48:y=370:w=864:h=18:color=0x22c55e@1:t=fill",
+  "-pix_fmt",
+  "yuv420p",
+  path.join(reportsDir, "demo.mp4"),
+], { stdio: "ignore" })
+
+if (ffmpeg.status !== 0) {
+  console.warn("ffmpeg video generation failed; summary.svg and JSON/Markdown reports were still generated.")
+}
+
+console.log(`Wrote reproducibility badge artifacts to ${reportsDir}`)