feat(explorer): add welcome screen and fix root path Invalid path error

- Add WelcomeScreen shown on app load; SKE brand button navigates back - Fix serve_spa: empty root path was hitting dot-guard returning 400 Invalid path instead of index.html or a welcome JSON response Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-09-01 04:00:28 +00:00 · 2026-04-26 15:35:33 +05:30
915 changed files with 308744 additions and 180135 deletions
@@ -1,19 +0,0 @@
-# Checkov configuration.
-# Cloud Run false-positives (CKV_K8S_21/28/30) are suppressed via per-file
-# inline checkov:skip comments in deploy/gcp/cloudrun-service.yaml rather than
-# globally here, so future real Kubernetes manifests are not silently exempted.
-#
-# The knowledge-explorer Helm chart's unconditional templates (service.yaml,
-# deployment.yaml, configmap.yaml) set metadata.namespace to .Release.Namespace,
-# which is only bound at `helm install`/`helm template` time. Checkov's helm
-# framework renders the chart without a namespace override, so it always
-# resolves to "default" and trips CKV_K8S_21 even though the chart is
-# namespace-agnostic by design. Suppressed via metadata annotations
-# (checkov.io/skip1 / runterrascan.io/skip) on each resource's metadata.annotations,
-# as both Checkov and Terrascan require K8s/Helm resource-level annotations
-# rather than file-header comments.
-# deployment.yaml additionally suppresses AC_K8S_0080 and CKV_K8S_31 (seccomp) via
-# metadata.annotations on both the Deployment resource and the pod template:
-# the seccomp profile is set correctly in values.yaml and only resolves once
-# Helm actually renders `toYaml`, which static template scanning does not do.
-skip-check: []
@@ -1,106 +0,0 @@
-# Start with a tiny Docker context and opt in only files used by Dockerfile.
-*
-!Dockerfile
-!.dockerignore
-!pyproject.toml
-!README.md
-!LICENSE
-!MANIFEST.in
-!semantica/
-!semantica/**
-!integrations/
-!integrations/**
-!explorer/
-!explorer/**
-
-# VCS, local config, and secrets.
-.git
-.git/**
-.github
-.github/**
-!.github/requirements/
-!.github/requirements/explorer-extra-py313.txt
-!.github/requirements/pep517-build.txt
-.claude
-.claude/**
-.codex
-.codex/**
-.agents
-.agents/**
-.env
-.env.*
-*.env
-
-# Python build/test/cache artifacts.
-__pycache__
-**/__pycache__
-*.py[cod]
-.pytest_cache
-.pytest_cache/**
-.mypy_cache
-.mypy_cache/**
-.ruff_cache
-.ruff_cache/**
-.tox
-.tox/**
-.venv
-.venv/**
-venv
-venv/**
-coverage
-coverage/**
-htmlcov
-htmlcov/**
-*.egg-info
-*.egg-info/**
-build
-build/**
-dist
-dist/**
-
-# Frontend dependency/build artifacts.
-node_modules
-node_modules/**
-explorer/node_modules
-explorer/node_modules/**
-explorer/dist
-explorer/dist/**
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-
-# Local outputs and large generated samples.
-logs
-logs/**
-*.log
-*.tmp
-*.bak
-*.backup
-tests
-tests/**
-explorer/tests
-explorer/tests/**
-docs
-docs/**
-site
-site/**
-.mkdocs_cache
-.mkdocs_cache/**
-cookbook
-cookbook/**
-examples
-examples/**
-demo_assets
-demo_assets/**
-demo_out
-demo_out/**
-demo_out_*
-demo_out_*/**
-outputs
-outputs/**
-pytest-cache-files-*
-pytest-cache-files-*/**
-test_data
-test_data/**
-sample_data
-sample_data/**
@@ -1,11 +1,3 @@
-# Line endings — force LF so Mintlify/Linux CI parses frontmatter correctly
-* text=auto eol=lf
-*.md text eol=lf
-*.json text eol=lf
-*.yml text eol=lf
-*.yaml text eol=lf
-*.py text eol=lf
-
 # Linguist documentation and generated files
 # This ensures GitHub language statistics reflect the core Python code

@@ -69,5 +69,5 @@ If you have ideas on how this could be implemented, please share.

 ---

-**Note**: For feature requests that are ready to be implemented, consider creating a [Feature Request issue](https://github.com/semantica-agi/semantica/issues/new?template=feature_request.md) instead.
+**Note**: For feature requests that are ready to be implemented, consider creating a [Feature Request issue](https://github.com/Hawksight-AI/semantica/issues/new?template=feature_request.md) instead.

@@ -46,8 +46,8 @@ If applicable, paste any error messages or describe unexpected behavior:

 ## Checklist

- [ ] I have searched existing [discussions](https://github.com/semantica-agi/semantica/discussions) and [issues](https://github.com/semantica-agi/semantica/issues)
- [ ] I have checked the [documentation](https://github.com/semantica-agi/semantica/tree/main/docs) and [FAQ](https://github.com/semantica-agi/semantica/blob/main/docs/faq.md)
+- [ ] I have searched existing [discussions](https://github.com/Hawksight-AI/semantica/discussions) and [issues](https://github.com/Hawksight-AI/semantica/issues)
+- [ ] I have checked the [documentation](https://github.com/Hawksight-AI/semantica/tree/main/docs) and [FAQ](https://github.com/Hawksight-AI/semantica/blob/main/docs/faq.md)
 - [ ] I have provided a minimal code example (if applicable)
 - [ ] I have included error messages (if applicable)
 - [ ] I have provided environment details
@@ -1,3 +1,3 @@
 # Funding options for Semantica
-github: semantica-agi
+github: Hawksight-AI

@@ -1,8 +1,8 @@
 blank_issues_enabled: true
 contact_links:
  - name: 📚 Documentation
-    url: https://github.com/semantica-agi/semantica/tree/main/docs
+    url: https://github.com/Hawksight-AI/semantica/tree/main/docs
    about: Browse the documentation
  - name: 💬 Discussions
-    url: https://github.com/semantica-agi/semantica/discussions
+    url: https://github.com/Hawksight-AI/semantica/discussions
    about: Ask questions and discuss with the community
@@ -3,31 +3,31 @@
 ## Getting Help

 ### 📚 Documentation
-Check the [docs folder](https://github.com/semantica-agi/semantica/tree/main/docs) and [README](https://github.com/semantica-agi/semantica/blob/main/README.md) for guides and examples.
+Check the [docs folder](https://github.com/Hawksight-AI/semantica/tree/main/docs) and [README](https://github.com/Hawksight-AI/semantica/blob/main/README.md) for guides and examples.

 ### 💬 Community Support
- **GitHub Discussions**: [Ask questions](https://github.com/semantica-agi/semantica/discussions)
+- **GitHub Discussions**: [Ask questions](https://github.com/Hawksight-AI/semantica/discussions)
 - **Discord**: Join our [Discord server](https://discord.gg/sV34vps5hH) for real-time chat

 ### 💭 Discussions
-Join the conversation on [GitHub Discussions](https://github.com/semantica-agi/semantica/discussions):
+Join the conversation on [GitHub Discussions](https://github.com/Hawksight-AI/semantica/discussions):
 - **Q&A**: Ask questions and get help from the community
 - **Ideas**: Share feature requests and suggestions
 - **Show and Tell**: Showcase your projects and use cases
 - **General**: General discussions about Semantica

 ### 🐛 Bug Reports
-Found a bug? [Create an issue](https://github.com/semantica-agi/semantica/issues/new/choose)
+Found a bug? [Create an issue](https://github.com/Hawksight-AI/semantica/issues/new/choose)

 ### 📖 Resources
- [Quick Start Guide](https://github.com/semantica-agi/semantica/blob/main/docs/quickstart.md)
- [FAQ](https://github.com/semantica-agi/semantica/blob/main/docs/faq.md)
- [Cookbook Examples](https://github.com/semantica-agi/semantica/tree/main/cookbook)
+- [Quick Start Guide](https://github.com/Hawksight-AI/semantica/blob/main/docs/quickstart.md)
+- [FAQ](https://github.com/Hawksight-AI/semantica/blob/main/docs/faq.md)
+- [Cookbook Examples](https://github.com/Hawksight-AI/semantica/tree/main/cookbook)

 ## Commercial Support

 For enterprise support, custom development, or consulting services:
- Contact us through [GitHub Issues](https://github.com/semantica-agi/semantica/issues)
+- Contact us through [GitHub Issues](https://github.com/Hawksight-AI/semantica/issues)
 - Include "Commercial Support" in the title

 ## Sponsorship
@@ -35,7 +35,7 @@ For enterprise support, custom development, or consulting services:
 ### Sponsor this project

 Support Semantica development:
- [GitHub Sponsors](https://github.com/sponsors/semantica-agi)
+- [GitHub Sponsors](https://github.com/sponsors/Hawksight-AI)

 Your sponsorship helps us:
 - Maintain and improve the framework
@@ -1,56 +0,0 @@
-name: 'Setup Semantica'
-description: 'Install Python, cache pip, and install the semantica package into a workflow'
-author: 'Semantica'
-
-inputs:
-  python-version:
-    description: 'Python version to set up'
-    required: false
-    default: '3.11'
-  version:
-    description: 'Version constraint to append to the pip spec, e.g. "==0.6.7" or ">=0.6,<0.7". Leave empty for the latest release.'
-    required: false
-    default: ''
-  extras:
-    description: 'Comma-separated extras to install, e.g. "explorer,all"'
-    required: false
-    default: ''
-  cache:
-    description: 'Pip cache mode passed straight to actions/setup-python ("pip" to enable). Left empty (disabled) by default because this action is meant to run standalone in any caller repo, and actions/setup-python errors out if it cannot find a requirements.txt/pyproject.toml/setup.py/poetry.lock to key the cache on. Opt in only when the caller repo has one of those files.'
-    required: false
-    default: ''
-
-outputs:
-  version:
-    description: 'The installed semantica version'
-    value: ${{ steps.verify.outputs.version }}
-
-runs:
-  using: 'composite'
-  steps:
-    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
-      with:
-        python-version: ${{ inputs.python-version }}
-        cache: ${{ inputs.cache }}
-
-    - name: Install semantica
-      shell: bash
-      env:
-        SEMANTICA_EXTRAS: ${{ inputs.extras }}
-        SEMANTICA_VERSION: ${{ inputs.version }}
-      run: |
-        python -m pip install --upgrade pip
-        if [ -n "$SEMANTICA_EXTRAS" ]; then
-          spec="semantica[$SEMANTICA_EXTRAS]$SEMANTICA_VERSION"
-        else
-          spec="semantica$SEMANTICA_VERSION"
-        fi
-        python -m pip install -- "$spec"
-
-    - name: Verify install
-      id: verify
-      shell: bash
-      run: |
-        VERSION=$(python -c "import semantica; print(semantica.__version__)")
-        echo "Installed semantica $VERSION"
-        echo "version=$VERSION" >> "$GITHUB_OUTPUT"
@@ -70,13 +70,6 @@ updates:
      - "dependencies"
      - "github-actions"
      - "ci"
-    # All our actions are SHA-pinned with a "# vX" comment; Dependabot
-    # resolves the new tag's SHA and updates both the pin and the comment
-    # together, so this stays the source of truth (no separate script needed).
-    groups:
-      github-actions:
-        patterns:
-          - "*"

  # Optional dependencies (separate schedule for stability)
  - package-ecosystem: "pip"
@@ -101,29 +94,6 @@ updates:
    allow:
      - dependency-type: "production"

-  # Explorer frontend (npm)
-  - package-ecosystem: "npm"
-    directory: "/explorer"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "03:30"  # 3:30 AM UTC (9:00 AM IST)
-    open-pull-requests-limit: 10
-    reviewers:
-      - "KaifAhmad1"
-    assignees:
-      - "KaifAhmad1"
-    commit-message:
-      prefix: "security"
-      include: "scope"
-    labels:
-      - "dependencies"
-      - "javascript"
-      - "security"
-    allow:
-      - dependency-type: "production"
-      - dependency-type: "development"
-
  # Docker dependencies (if you use Docker)
  - package-ecosystem: "docker"
    directory: "/"
@@ -1,5 +1,3 @@
-> **Before you submit:** make sure you followed the [issue workflow in CONTRIBUTING.md](https://github.com/semantica-agi/semantica/blob/main/CONTRIBUTING.md#-working-on-an-existing-issue) — wait for the issue to be assigned to you before opening a PR, to avoid duplicate work.
-
 ## Description

 <!-- Provide a clear description of your changes -->
@@ -1,58 +0,0 @@
-# CI tool requirements
-
-Hash-pinned `pip install` targets for CI/release/Dockerfile steps that install
-something other than the project's own audited `requirements-ci.txt` set.
-These exist because OpenSSF Scorecard's Pinned-Dependencies check flags any
-`pip install` in a workflow or Dockerfile that isn't hash-verified, and
-`requirements-ci.txt` alone doesn't cover build/release/security tooling or
-the project's own local-source install.
-
-Each `.txt` was generated from the adjacent `.in` (or, for `explorer-extra-py311.txt`,
-`explorer-extra-py313.txt`, and `base-deps.txt`, from `pyproject.toml` directly) with:
-
-```
-uv pip compile <input> --python-version 3.11 --python-platform linux \
-  --constraint requirements-ci.txt --generate-hashes -o <output>.txt
-```
-
-(`--constraint requirements-ci.txt` is omitted for `bootstrap.txt`,
-`build-tools.txt`, `uv-tool.txt`, `twine.txt`, `pip-audit.txt`, and
-`security-scan-tools.txt`, since those install standalone tooling with no
-version relationship to the project's own dependency tree.)
-
-Regenerate a file the same way after bumping a pinned version, and re-run it
-whenever `requirements-ci.txt` changes if the file used `--constraint` (see
-each file's own autogenerated header comment for its exact command).
-
-| File | Used by | Installs |
-| --- | --- | --- |
-| `bootstrap.txt` | security.yml, security-scan.yml, benchmark.yml | pip, setuptools (upgrade before anything else) |
-| `pep517-build.txt` | ci.yml, benchmark.yml, Dockerfile | exact `[build-system] requires` from `pyproject.toml` (setuptools, wheel) - installed with `--no-build-isolation` before any `pip install -e .` / `pip install .`, since `--no-deps` alone doesn't stop pip's PEP 517 build isolation from fetching those two *unhashed* |
-| `explorer-extra-py311.txt` | ci.yml | semantica's base deps + the `explorer` extra, resolved for python 3.11 |
-| `explorer-extra-py313.txt` | Dockerfile | the same, resolved for python 3.13 (the image's actual interpreter) |
-| `pytest-tool.txt` | ci.yml | pytest, for the pre-all-extras deterministic test |
-| `uv-tool.txt` | ci.yml | uv, to verify requirements-ci.txt is current |
-| `build-tools.txt` | ci.yml, release.yml | build, wheel |
-| `twine.txt` | release.yml | twine |
-| `pip-audit.txt` | security.yml | pip-audit |
-| `security-scan-tools.txt` | security-scan.yml | safety, bandit, semgrep, jq |
-| `base-deps.txt` | benchmark.yml | semantica's base deps (no extras) |
-| `benchmark-extra.txt` | benchmark.yml | the benchmark-only libs (neo4j, pdfplumber, etc.) |
-
-`explorer-extra-py31{1,3}.txt` and `base-deps.txt` are large (they mirror
-most of `requirements-ci.txt`) because semantica's `dependencies` list in
-`pyproject.toml` isn't extras-gated - installing the package at all pulls
-the full base set. That's expected, not a mistake.
-
-`explorer-extra-py311.txt` and `explorer-extra-py313.txt` are **not**
-interchangeable, and can't be collapsed into one file compiled for either
-version: `librosa`'s `audioread` dependency needs `standard-aifc` /
-`standard-sunau` only under `python_version >= "3.13"` (Python 3.13 dropped
-`aifc`/`sunau` from stdlib). A file resolved for 3.11 simply omits those
-packages' hashes, so installing it with `--require-hashes` on a real 3.13
-interpreter (the Dockerfile's base image) fails outright rather than
-silently under-pinning. Any other file shared across a 3.11 and 3.13
-consumer would need the same split if it hits a similar stdlib-removal
-edge case - check for `ERROR: In --require-hashes mode, all requirements
-must have their versions pinned` on the *other* Python version before
-assuming one `--python-version` covers every consumer.
@@ -1,13 +0,0 @@
-rdflib
-neo4j
-faiss-cpu
-torch
-pyarrow
-pdfplumber
-python-pptx
-openpyxl
-lxml
-python-docx
-beautifulsoup4
-chardet
-langdetect
@@ -1,2 +0,0 @@
-pip
-setuptools
@@ -1,10 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/bootstrap.in --generate-hashes --python-version 3.11 --python-platform linux -o .github/requirements/bootstrap.txt
-pip==26.2.1 \
-    --hash=sha256:71138adf1f4ca900cdb7d289c21b7494329f2332b6d85f0e1c42108c0384ed3e \
-    --hash=sha256:f6ad667e89a1fe78046c8f13232b247200f5258d7828f3f7883d660878e0813f
-    # via -r .github/requirements/bootstrap.in
-setuptools==84.0.0 \
-    --hash=sha256:51a52592b3b99e102b609654876bd65f19f999935166d1352678931132b0c670 \
-    --hash=sha256:f4695c21257f0d9b537ec2692c941d02ee143b7cc1276941349a546573b2ef73
-    # via -r .github/requirements/bootstrap.in
@@ -1,2 +0,0 @@
-build==1.6.0
-wheel==0.48.0
@@ -1,20 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/build-tools.in --generate-hashes --python-version 3.11 --python-platform linux -o .github/requirements/build-tools.txt
-build==1.6.0 \
-    --hash=sha256:bd2c8afc603e7a2e0ce70e2ea85f0a6d02043bafbd307f5bada0f98669eca5af \
-    --hash=sha256:f7aaf1ebbb79178a02ba248bb524f2176b256017e17e8e4bd4289c7b38cc2bad
-    # via -r .github/requirements/build-tools.in
-packaging==26.3 \
-    --hash=sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79 \
-    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
-    # via
-    #   build
-    #   wheel
-pyproject-hooks==1.2.0 \
-    --hash=sha256:1e859bd5c40fae9448642dd871adf459e5e2084186e8d2c2a79a824c970da1f8 \
-    --hash=sha256:9e5c6bfa8dcc30091c74b0cf803c81fdd29d94f01992a7707bc97babb1141913
-    # via build
-wheel==0.48.0 \
-    --hash=sha256:3217dcc807155e45db462d7ef2431f5ddda0d7273b700d05a67b271ceb1287ab \
-    --hash=sha256:94800765601e9171bf5d58d066e640662842bcedcbab982b2c90787a2c987322
-    # via -r .github/requirements/build-tools.in
@@ -1 +0,0 @@
-checkov==3.3.1
@@ -1,2 +0,0 @@
-setuptools==84.0.0
-wheel==0.48.0
@@ -1,14 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/pep517-build.in --generate-hashes --python-version 3.11 --python-platform linux -o .github/requirements/pep517-build.txt
-packaging==26.3 \
-    --hash=sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79 \
-    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
-    # via wheel
-setuptools==84.0.0 \
-    --hash=sha256:51a52592b3b99e102b609654876bd65f19f999935166d1352678931132b0c670 \
-    --hash=sha256:f4695c21257f0d9b537ec2692c941d02ee143b7cc1276941349a546573b2ef73
-    # via -r .github/requirements/pep517-build.in
-wheel==0.48.0 \
-    --hash=sha256:3217dcc807155e45db462d7ef2431f5ddda0d7273b700d05a67b271ceb1287ab \
-    --hash=sha256:94800765601e9171bf5d58d066e640662842bcedcbab982b2c90787a2c987322
-    # via -r .github/requirements/pep517-build.in
@@ -1 +0,0 @@
-pip-audit==2.10.1
@@ -1,423 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/pip-audit.in --generate-hashes --python-version 3.11 --python-platform linux -o .github/requirements/pip-audit.txt
-boolean-py==5.0 \
-    --hash=sha256:60cbc4bad079753721d32649545505362c754e121570ada4658b852a3a318d95 \
-    --hash=sha256:ef28a70bd43115208441b53a045d1549e2f0ec6e3d08a9d142cbc41c1938e8d9
-    # via license-expression
-cachecontrol==0.14.4 \
-    --hash=sha256:b7ac014ff72ee199b5f8af1de29d60239954f223e948196fa3d84adaffc71d2b \
-    --hash=sha256:e6220afafa4c22a47dd0badb319f84475d79108100d04e26e8542ef7d3ab05a1
-    # via pip-audit
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
-    # via requests
-charset-normalizer==3.5.1 \
-    --hash=sha256:00668ebb0609751758682eb0b5857e7c35b9f00e84dfdef062e103244ec94d45 \
-    --hash=sha256:012a22b88a77ca2e59b98ac5889b0deb604147666032f45e6d6e217634d2550d \
-    --hash=sha256:01e93745f7f219b703b60ba7afead36cfc4242782be5af484673fc500df12da5 \
-    --hash=sha256:04368edf83514385ffc3e1cfd4546e595f4f1272dd23ba437a93a9cc3741d47b \
-    --hash=sha256:0722590aabf9dc6a6c0343d523c05458fa2b5047dbe6302fd526bb570600753f \
-    --hash=sha256:07ffd07412fc5d5e84cd8952acf9ff7e4ed7a708e69d1bada19d8ba91711353f \
-    --hash=sha256:09a7bba9f739468c8e78c36a75c33768e53cb1959fc638f510454c14683f00d5 \
-    --hash=sha256:0b2b1b3fa5670c127b246df1d0c059defd41f689a868a3b9d79df9b1cac42d22 \
-    --hash=sha256:0c6dfb5ca6723eeed15aa8e564a014d69fcb8812f94eef11fe3631e0508199f5 \
-    --hash=sha256:0d929fc574b4d6fd9e7c0f5c2ede8716a41911923aa7fa5fce38e0818aa4a1ac \
-    --hash=sha256:13e3afe97712e8887cd516e960c63f0b93122971e5b5e4b2622fe7701771e838 \
-    --hash=sha256:15f024313246a4ed976c60f440bb8d257815513a681d212ff74fd46f7d715a90 \
-    --hash=sha256:195ce897c6153c0700078142cf8efe3e6454ca4cf4357499e4078dfd83396626 \
-    --hash=sha256:19a3dd5aa73cef1c99687c4fc57db016a9c17104ae1185da88ba566a5d3bebe4 \
-    --hash=sha256:1d1c7a53a6c2103925cdd6d7229f8c567379f211c869793df679f2e9f738c369 \
-    --hash=sha256:1f5883d77fd409a261abb5dc8ccbe335720d798b1de4abb3b1d47ccbbc76b53b \
-    --hash=sha256:21b82d8082f6f5e7f456ef0bd16323d08de1266efbfeb476e64b2a91d1471a4e \
-    --hash=sha256:252d099029bcbea642f2a06c4ed5046bdf8b5a8150b64afa5e027e88b106e5ee \
-    --hash=sha256:256dd4d85d9e4dc595e2bc983c980e73f62ddeb3165c58b4c3dfe78c5c8548c1 \
-    --hash=sha256:26422d45fd13551cf564c58932f7d72b4f58b93b0fcf18c35ba6be12b46bb102 \
-    --hash=sha256:2679de311c7946dde5d3b6f44941844133ff5c7cb86099c0061ab1e8901c20a8 \
-    --hash=sha256:29880d17a8eb0b5cfdfd8944b468322928059aa35f1f5fa8ff22b149ec0b42f8 \
-    --hash=sha256:2bced4061f000f7187254a02ad3433ae17eaf991747ceea2f478422590a5bba9 \
-    --hash=sha256:2e9cf9253119d8e5d111f05d71626786fd3d6193817316eab1ca088cdb8593cf \
-    --hash=sha256:2f06b7eae9dbe77fe1d644ca244dad508de8d302870a43f3c559b521270938a0 \
-    --hash=sha256:2f293479cce755c75f1697e87c409b7ae4c555c7dfecb6e988ad13abba943031 \
-    --hash=sha256:329fc3ccb63ad22d867d84c2adea759a64079a37ba4a343433b02c7a2816871e \
-    --hash=sha256:343fb4f2821043bd87095f7b08a1a181febc8e36ac64212143bbfd0a0e1bc235 \
-    --hash=sha256:3588e376b3ea2eea84976f67273d679f229e24c66dce7b82ae45aef04ff6e072 \
-    --hash=sha256:35aea775dc2bd5f54cd84a1cd2696cc3207c479cb9cf0bd346f0d343e4300ddb \
-    --hash=sha256:35fe081843b35aad20ffeccec3eeffbe637b15d14f3fb22cc1b59cd8ec17e93c \
-    --hash=sha256:36047af20e17097c3bb9476c2b7655f2f7aa51322c0ba58c07695bedf755a950 \
-    --hash=sha256:3617ac3cfd8b9888f145ad89dd6e692285834b0201c6074a5eeaad3fd4d668c2 \
-    --hash=sha256:366ec70f5547c640d3ce1985722490f23faf4eb5216a7eeba78277490e78dacb \
-    --hash=sha256:394fea06235c8543390050ed5f529187074b029fb027213f6c46ac11ab5d950e \
-    --hash=sha256:3d27167433c0d5f18dc850f07d0b3816221984fecdc405d6c157a6f0b8f8e9e6 \
-    --hash=sha256:3e5e1224c0a6a90e05843e07adfec669edebec17801c67072f51e59561d63c0b \
-    --hash=sha256:41876ee62a3dddf48ff1121ad8f0798032aa03f2fd35f21f34a4cab14f18d8d2 \
-    --hash=sha256:433c5a81eade63b47e522303bad236f59dba55ea6951746f5558355eeed8c75d \
-    --hash=sha256:4582c27e8c889d64811987b5967fbd3ae0c823fe1fd933b543d55ac20bb475fa \
-    --hash=sha256:485a0d363cafefcd2538a73c7c838daa2035f09b2c9f9b5e3133f80c6aeb84c2 \
-    --hash=sha256:494b70049a4d69aec6e8137c13af4cf8db8c9f9820a1392ac293b0dd2987a818 \
-    --hash=sha256:496846868fea80e479324862fa877f02411f2fd0f83b79ccee2607aa68b2a032 \
-    --hash=sha256:4abdc5f9ad448c1ecbfae2974b820535d6bc6e7eef63babbab3d81cf46968c71 \
-    --hash=sha256:4b599739b93b2cbeded49645ae3c8d1405c29ddfbceac1545c87a3f9580a9e96 \
-    --hash=sha256:4bea7f8ebe90bbd7f0e4a2de42ca6924ba23e3e76418c408ff82f1d46fabd687 \
-    --hash=sha256:4c4fb141a727957c93edfe5c32a26ceb6b5f6461d67146e2d39f51e16170bea8 \
-    --hash=sha256:4c9548dc78002099910abaebc0a72ac58b7d30931869e0351c09b507dff4ece3 \
-    --hash=sha256:4d26f14f041e83dd8edfd61f4cd4fa7285d31798b5bf1f28e70c367ba6c41d61 \
-    --hash=sha256:4f298bdadb8f0b9e5672877f647d1be9373ef5320c9e2f049795e26cad28b6a9 \
-    --hash=sha256:52ec005752a56ae79547a05c0139ca2501a0c866390b6115008456b9f0e7cde1 \
-    --hash=sha256:55261ac0d2941c42f196dd576f543d87a8ee03cd6f5e30dfb4d807b2e3b9121a \
-    --hash=sha256:56490c595a28b1bb27dfc583e816152a9767721ef58b2c03b13f954d2f707420 \
-    --hash=sha256:58d3e12c88e0950bca850ae1f7c256055c097639c2edb9eb123af9807d8b15e4 \
-    --hash=sha256:58d4aa13a59c969dbfdf9e6a9560e242cbfd9e8a8f50c2747714df1a423adf65 \
-    --hash=sha256:59171c6e45bf07d0d5cab3b0bf81d945035530f6873398b3b531c31184d46663 \
-    --hash=sha256:5b6d1386bf0096d26d3a863dc0a487a5b4eb9aa93cf5ba69683d29dde6b9d60f \
-    --hash=sha256:5c0ea61a470e070686aa30892fed79e297d2c8d0ab46b8bcdf027d38c51da591 \
-    --hash=sha256:5c84bec0ab5ae0c64bfe73a7d2adcb5ce73b467523fc27fd6a28ab2aa6cbe35a \
-    --hash=sha256:5ca0555312ae2fe82715cada7fac375530c2f3349e1eaa1bcb33d0283ac79a18 \
-    --hash=sha256:5d8531a6569d025f68e2321e7638fb7978f23db58e5f69f56913837aae03816e \
-    --hash=sha256:5e2d0e146dcb57034f8b97dc58d2d512cb90aba253960ce449f695fec6a82c6f \
-    --hash=sha256:5fc45d653ea8c9a20479167e11d4a0f8cb2fa3470737ab6f9c827532313187b7 \
-    --hash=sha256:6117b84ea48435e5356dc737f5121485c30920ba43375fa7b434fd753df0eac3 \
-    --hash=sha256:6199d5606e2bbf2b096cf64d03f8b6790c91081d5ac866b8e7bb6422738cc60c \
-    --hash=sha256:62b55f6722735a6c472f88361cde6640608773d9443cebdbb51abf436a1fcdd3 \
-    --hash=sha256:687c9ca3035544b113bea2055e180af96fb63c0c476e22a9180f51925186e7b7 \
-    --hash=sha256:6b7430cf5728e68f6c462254009a6ef4086e1bea43cf2f57aa9c55fb4f50ff96 \
-    --hash=sha256:6ba32c4d2abf1d2fe7cf27d280f4cca5664233b0f885549c7761719eb977f486 \
-    --hash=sha256:6c9cdde8becb25a7fde49924511aa2644d6f8081cc8df8e9452724303348d8e3 \
-    --hash=sha256:6df0ec430f9a831772c23ca5a224cba36517a58a84bb32c32bb59a9fa67c47f6 \
-    --hash=sha256:6e2912d4babbc65196ac13c2f53468dc57fb8b9c25ef913e8c59ddf7c6dc0e1b \
-    --hash=sha256:6e5e4d73d588ca5ed09df1b7dcd1b203d1df3c542e3f50d126c947d432b10731 \
-    --hash=sha256:70055ff39b97c99e7ae40ea3e393fb62aa2e44dbd9b29f8d14f42fb0025c3959 \
-    --hash=sha256:706bfd38730a5ac7a365793269a00f4e988178cec121391f4248d84ad8c972e9 \
-    --hash=sha256:7235dc28fc6dd9d832ac7c7bce95367dedb85929f17368a0c2bee1e080b9acbf \
-    --hash=sha256:774d157f112367ff4abd29019f38f023c24e00e56edc7829c20e358a5a913ad8 \
-    --hash=sha256:77efcff2b23071c349402ac1066667a3d011f62398d81408c9b88ad991747c9e \
-    --hash=sha256:789b8982559ae28dad2356519f841655756cdcd96616410590ae0b17454ee64f \
-    --hash=sha256:7ac76cf9afd34929d76eb7fcb63be476a4853d8a96f0dcf2d0db68a0cbdf9885 \
-    --hash=sha256:7c0c10730342b0c9b35dd1d619beb8214e520bd96a1f870f452680b238aab3e0 \
-    --hash=sha256:823f82903d189af463d7df250ef1f7f696f3cee08cc8d91deb565e8d425f6506 \
-    --hash=sha256:838648accb3a7fd9803fd45c87bce8509648eb0c11bc34e216141300977244f2 \
-    --hash=sha256:854066be00447fa8de2ccbbe893e2ffc4b123ef16d897af794c1e18bd4a714b0 \
-    --hash=sha256:85d5855daafc240cc045c026d7a15fd198a09b0fc8ff6f5ecbb5297b509cb11e \
-    --hash=sha256:85de3134b5379856e323ba37c19c9256d39425f7b76a63af52b09fb4664c2e8f \
-    --hash=sha256:87e4f41d375c0b9be2fb5251aee4b8a689169e134535aed81bf085c3b647451e \
-    --hash=sha256:88ca277405c2d3b71c4e1c2ee0e7966e807bcba86a69d11e19ba199d18ae4491 \
-    --hash=sha256:88e85ab89cb822c1e635f51d6d32e488f94e002e70e2f492bdb8b945543f345a \
-    --hash=sha256:8ac8c94b6539074e0f40899301273ac8402b9b3e01c7b7ba269ff30340aaaf20 \
-    --hash=sha256:8fe532b3c966d1fb794e0698e4589d0444017ae77fc0b31edea13c0e35bcc449 \
-    --hash=sha256:9085f87b0e38a2b92b8923059b4e8789fe40d9279712d15dcc670048d77079af \
-    --hash=sha256:90b7481fb62fbe172c558bc6fd1c4c98d82004a54a7551f20e11ac9bf0b8708c \
-    --hash=sha256:92caef967d287a407085d61176fce4012b1dd62daed4eb6d5ceb26d3d2538712 \
-    --hash=sha256:9362dd90aa7dab48c0054a21187791ccf05473f7dba5d92b8033ae62164675e7 \
-    --hash=sha256:94d78ecec2605a8d0398b0f365d5f12a63248438516f5dac536a5eff7337df4a \
-    --hash=sha256:94fbf1c0c6cc0d3d5e50f9a9313a8cdca90dd696d34b381cd1704f8c9e939f20 \
-    --hash=sha256:950f23cb393f85543777b0433f082cddd25b51ab398eac7971146495679efe5f \
-    --hash=sha256:96eefc178f8636b9c760c5829345307fd81cfae9ab1e80997dbddeb0f54ee9a3 \
-    --hash=sha256:96fef3e886d6a9874b14f27fc193fbdc69d5d8035783d86aa4e1cea594e695f9 \
-    --hash=sha256:977cdbd483a9cff38179bea4fd754289a6f2195c7abd414aba85410b3e66cc5e \
-    --hash=sha256:978eab16f55b4ab2c2a745be9a0a840bf8f09a7f227d9c76eb30214d078865a5 \
-    --hash=sha256:994e883d17c559cdfd38c84003c8b27d25424a1077272a17e7cd27bfe0bf57b2 \
-    --hash=sha256:9ac4444d8d4fd4c4bd08bf451ed3167aa9e7ec6cdb41b648794f1d1103652e36 \
-    --hash=sha256:9b5db6052055d34d41230fb78d7c439c23dc536a9896f6cb039e8dd92cfc1263 \
-    --hash=sha256:9d9a0dc7cbe9bec24c3f767c9122c41fe5a1bc43f47cd099d00d393e09769de4 \
-    --hash=sha256:9dbdd9205662134957cf0c324f639bdc5031c0ca056e2369e238db75187c0f11 \
-    --hash=sha256:9eea3ab2597a5e65fe65296e2d6a84570845a6b55532d90333d740d48bbc850a \
-    --hash=sha256:a2028475ba855475b8b4d3cfeb4994269c967aea8b9892dfba907f4263a863a3 \
-    --hash=sha256:a3a370082ce34d0612f421e15fe011c53bb1feff21a26d06ad4fb244dab5a375 \
-    --hash=sha256:a545775cfe815855ea32d7c27731d79da358ef2055b4a25830231b1622dd18aa \
-    --hash=sha256:a5cbd90ecf0fc62e64726917ad083b73001f0563657a87ec3c0b504e277dc90d \
-    --hash=sha256:a6d095662e73e74f0a49988e0593373e243e3a52e27bfeea0a859e88acf4a0f5 \
-    --hash=sha256:a6dac12ff6b846103483683f60c5f8fee205121adc58ffd87e90a90a3af69e99 \
-    --hash=sha256:a951ad59cad9145664a730d3036b40b844e74d2d3683da40111463cd3a83845d \
-    --hash=sha256:aa1099b956fb795e686d073568f6dc002a0bb89765ea6d5b055dd7d9bf1b116c \
-    --hash=sha256:aa2bb0b37202dca27175591f761108b5d34096ade1191ffe4808bdf6b1571488 \
-    --hash=sha256:aae2ee51122d3ae968a3837d97dc24a0aeebb0dea23694422cd172bd30017cd6 \
-    --hash=sha256:ab743e9bc90c1f73552ec33e10e3331315acd2c397b36065b591b0181de533cc \
-    --hash=sha256:ac00177c4831ffa650f8609e4bdddd5fe09c03b1c0c47acece7e6ea20421598b \
-    --hash=sha256:ac13b004224fb341e1e25a1ed5e19d32f57cdb2a403e01f003b46f051a550f6f \
-    --hash=sha256:acaf604462bf330b0d07e7a07c1d6e4adac79e5fb13e9c5140590542cafacc00 \
-    --hash=sha256:ae31a1a1db2ee6cc2942fccaf695c934bc7f3db9f2133a3fef1f367cf1a4ab10 \
-    --hash=sha256:ae4a097991662cd4fff0ddc74e0fe7874f82e00042fa0ea00855645ed0c79598 \
-    --hash=sha256:aea996a6aba25260827c9ea511d1addfde2da9eb686ac961838509086188b7e6 \
-    --hash=sha256:b39b69b347e5e47a3b5b8cfc005c68c1ba347474e3960236c4944a8ecd174962 \
-    --hash=sha256:b54e7e13267d49ffbfe68e25b3cbd774dab38fa37238f71265e91b36146eb21c \
-    --hash=sha256:b9af956078716df40d985fb0dfeb2c2120c5ca92ba4ff4b388acfd01cdc14d08 \
-    --hash=sha256:ba2f37ee79e6338845261a3c5b1784e5d1acdff2c0785b284f1b633033d136ab \
-    --hash=sha256:ba501e667c17d8411f98e67a022d9604ef179aff0e459b7e292c796837c13573 \
-    --hash=sha256:baf3775a2635e5a11fbd5e4e64ee69c7e86875d224a5c72aca4c141064589a90 \
-    --hash=sha256:bb57753e36e4855b8ca375069482250a6246372331a3e4f3407eaebb007443f5 \
-    --hash=sha256:bd6c173f04743d483881bffa1478d5a4624475b8cd1d2194956a75548e191c18 \
-    --hash=sha256:be47f99644b208bff7766314013f9acf57b056b04191d570d68ad14022cf5b1d \
-    --hash=sha256:c010f5581d9c612804cc59fcf7b524b707fbcb72828551237ab545bb5c7034af \
-    --hash=sha256:c1dcc36dcb96abc02236e182d17e0f71430152a6c2c7447421da2d2dc144edea \
-    --hash=sha256:c428c6c31eb5f4277d7f8eccaf767fbd548ddd5ce3c8b4f4cbbfab3d96b5904c \
-    --hash=sha256:c658c50ac0c98cd755a2dd50b7977d3bca7df401dcc47fbdfa87db53ef7d4e8b \
-    --hash=sha256:c71fb0d56c920c269cd3e2e3fe7c610e3f1fdb21a6ce60efa6430ff63676cea6 \
-    --hash=sha256:c7b742bf31c88566b4bb6335a7f393bb322e580b6bb98df7bd0c25e6e3519ce8 \
-    --hash=sha256:cc0329df4caaceb950d2f580b5ac716a377f7059624a0bafaeaf8a218c6ed774 \
-    --hash=sha256:cc5d36d96478aa9c60654bd932525bf32964c62a7281eafdf16d85003a8d6004 \
-    --hash=sha256:ce854f5f478050ade5a238731c4ca985a7d3b3cb53ff600a9b5c3b689b5f0a7a \
-    --hash=sha256:ced3fdd71aaa83ce593746c2edb42b7a59cb4c19c8b5c407781c72e493aae55a \
-    --hash=sha256:cee5dd7c6fb5dd52a0fe2a740f9bc6e3593f5f8b1788bde49de02086f30182b2 \
-    --hash=sha256:cfa1c0cc3a8f9f53f1243a5a99ac36fd003880199383b37672e86ddda9cb07e2 \
-    --hash=sha256:d1ee1e296209fdce05b81b663250eefa02213a2da7b41bf26f7829b8ba3545aa \
-    --hash=sha256:d59b75732e9b6f27388e10c14b0259cc5f2e48c78627d185e6a177b58ad3cffe \
-    --hash=sha256:d63600d620ad0064c3a748b950ac5ea38a80190e5498532efefa4b7b3f1da1f3 \
-    --hash=sha256:dd732602a7009217f658d5863d12d79d373a4de0eebc111094bcdd3bb8e0a6cc \
-    --hash=sha256:e06efa066f7dbadbc84ebc126a97c452a6451dfcf589d89d788484949e1cf795 \
-    --hash=sha256:e199fb99720074809a7720f1c0b4d919eea8b87e88713e0f8f602f7bef543d9d \
-    --hash=sha256:e4b018dc5a0eee4676e38fe84a47a427816c590b93b55d9025274ec4d6ffc2dc \
-    --hash=sha256:e6621fb2a4988d6e53eedc455e5903e2679f3967b8acb3d639f1b63c14a2e893 \
-    --hash=sha256:e71c909f353863b2b89c83de2ebed71ea6d0df8a6ef65a128193c5e650766bef \
-    --hash=sha256:e90251c0c7bdd54a100a0dce3c07b7e637278c93af29dbf78ebb89a58c4bac7d \
-    --hash=sha256:e9fbdce1e47394b09bc9f26ab117dfc8d6491977a11d86f592bb42c779db2fda \
-    --hash=sha256:eb12fb2ba69ffa05f8695f61c69e591dc4b4a12ac3757ac8af8adb259bf56d17 \
-    --hash=sha256:eda059b6bc8bc0812d626fd91a7ce01bf583df0a61296eff390fd94141a34e30 \
-    --hash=sha256:f03ac127268b43ef4fe9e6ab6794a6794b49485a0cc0c1db79876d2f33f75bc7 \
-    --hash=sha256:f298e218441525d3794428b4c8b8fb8662c6d3ea79925d4807ee6b9a96a3bca5 \
-    --hash=sha256:f5542f9b941279d82d41eb0aa9f98eba36fe4df5c7086c651df7944935b37182 \
-    --hash=sha256:f6f7deae3feb4edfa2efaf7c574fe88cbf055038a6abdb40188e4fff66d5699f \
-    --hash=sha256:f9b1e28d0e8dbfa858abdba91d6b547beaf2df1a59bec6da6faae7b96a4991a9 \
-    --hash=sha256:f9f8405c2c758532c74fed975dbee57be1f31a6e865c031870c79a6ed3212ada \
-    --hash=sha256:fa48b1b63d639f9483e0633e092f5851e2348c352f1f9bb6c8182f87884ef876 \
-    --hash=sha256:fb78f6e7fcd8ad785d28cd577168bc1aaee827b25bb8755638f694794ea98f0a \
-    --hash=sha256:fbc597639158fd7c14d55e808718848319540f51b0e6746e3eefa59723a4a348 \
-    --hash=sha256:fce8cbd4997efeb450bd298b54f755dcdff18d496f7a5ddbb4867c6d7c88fdc3 \
-    --hash=sha256:fd0350afdc3aabd5576f60ea109228bd5538139713c7b094c5cd27c73a98bc6f \
-    --hash=sha256:fd0a274c0e5f9a21565cd9d3dd749b61f96b7aa1e20a93aa1ba4029518f2e5c0 \
-    --hash=sha256:fdb8a068947befafba9952162645dc2fecaeb400e64584829ed5e9b2fbe21a7f
-    # via requests
-cyclonedx-python-lib==11.12.0 \
-    --hash=sha256:0e807521a921a5c3cb8ce1153f8a61d29eedfe76a46aac2796b7c6b573391a54 \
-    --hash=sha256:16767c4039de90c04e9f03348f8f0ed4b8ff842eaa7eefcad3a95685f970dacf
-    # via pip-audit
-defusedxml==0.7.1 \
-    --hash=sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69 \
-    --hash=sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61
-    # via py-serializable
-filelock==3.32.4 \
-    --hash=sha256:22e58ca3b1ae3b98993b762d7338367ae64fe50252bf78d59da3bfebcdf1cedd \
-    --hash=sha256:2bde2e4cf732e0153406d8a7bc80620ecf5e621fe0d25e41143c4e3b4733ff30
-    # via cachecontrol
-idna==3.19 \
-    --hash=sha256:5e0811a4383b21dc5838069f801c4fb62113b7447663d2530d2bd6e77b49bf15 \
-    --hash=sha256:815e7be7a7806d54abb586dc943addc79e8b2ee16915059658cbeff4b1b43bf4
-    # via requests
-license-expression==30.4.4 \
-    --hash=sha256:421788fdcadb41f049d2dc934ce666626265aeccefddd25e162a26f23bcbf8a4 \
-    --hash=sha256:73448f0aacd8d0808895bdc4b2c8e01a8d67646e4188f887375398c761f340fd
-    # via cyclonedx-python-lib
-markdown-it-py==4.2.0 \
-    --hash=sha256:04a21681d6fbb623de53f6f364d352309d4094dd4194040a10fd51833e418d49 \
-    --hash=sha256:9f7ebbcd14fe59494226453aed97c1070d83f8d24b6fc3a3bcf9a38092641c4a
-    # via rich
-mdurl==0.1.2 \
-    --hash=sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8 \
-    --hash=sha256:bb413d29f5eea38f31dd4754dd7377d4465116fb207585f97bf925588687c1ba
-    # via markdown-it-py
-msgpack==1.2.2 \
-    --hash=sha256:06d95f61de7afe4f4ff908a6feebfcb070d0582ac87c9cf3cedf8551cf634516 \
-    --hash=sha256:0708afbf6a9587f0bfe479a9825c141d14d91e2f6a5c8103cf28bc96f4edb5d9 \
-    --hash=sha256:0883a1578168929fd1640fbbc4614773f1a130e419a8a817dc2918d9af1b651c \
-    --hash=sha256:0a652ceeededf71d3fa40c303a02a149d42338d310162367b91c539d4bd6e0a3 \
-    --hash=sha256:0dd9173c5ebaf5ecc5ca86e7ae1db92934e1d57b856f3dd90698941431f4fd77 \
-    --hash=sha256:0e3315de5a4b2920ccef48d96b4448025e064a10d0f5a250f6584477d839c8d4 \
-    --hash=sha256:0e91332144f69bc3018c91232fac26da580ef748fb8eaddd7914d4458001cc4f \
-    --hash=sha256:0fbc1bed8a535389b41882cfae66376e248cd1680eaa94fd83193c73e1d24986 \
-    --hash=sha256:11e8c421e117d1c36728b423d0402555cccbf0c6f53e288f0e75b6b12100d70f \
-    --hash=sha256:1510f24612d4b983dff6935d9273e02c320cfd525727fbcb58836a75f589fdbc \
-    --hash=sha256:1814f92306ae7862908e9ece7cfd90e0dc87ded3e89b6ae7ffdd1175d6376fdc \
-    --hash=sha256:1e8cdd1f3e7cc52c751092a9bf740e81e6919ab109cd376ae2d965dad0bbae34 \
-    --hash=sha256:1f3af0baafd184436501004828bb3df64eeb2fc49dfe9d89abcf604956094563 \
-    --hash=sha256:1f6b6f8deb07d49090e1808c6ef9cb7d23ca17bef3aa6ed3e5e03df16606e60c \
-    --hash=sha256:226a62ffe99fe54c5c61d910ec64c3449b7766c3280bd286bf6c94838dde239a \
-    --hash=sha256:29cc2d5291711a52956a79a51f41c732329df39ad727c886bd8f0b5b9237a808 \
-    --hash=sha256:336525cc2688e43ea77dfb1a4ce012c8cde561835913801dbfcfdcf4111d8abb \
-    --hash=sha256:34e83e345194a2a51d8bd447dea9de2104f91e75b247f4735f14f04529f0746b \
-    --hash=sha256:352ed831042549cca8be23780e1fe7c9177e65ff02bf183509c4b4d33f671782 \
-    --hash=sha256:3e915d390d7068b257ca8b62f3fc59fad135c8631d1017ab03b0b924b07c5367 \
-    --hash=sha256:419a45c67a5c04213172a14b1864657e014665b77d7081b107a51707923dd39e \
-    --hash=sha256:42fd9260416885b4815caca5bdd14dfd5dda6cdade732d6c09104ef8f6228761 \
-    --hash=sha256:46ec851571d8f1b6e29794ebb9dd36f785008da6d14f57c702e60781d6caf648 \
-    --hash=sha256:4710d881d8fb047deed2485707409116722af2b992d3fefd73c7667c4e350839 \
-    --hash=sha256:4955accbd87f27beebef5f3ecc27503aa74cb016fb4f640868e749fd93194a35 \
-    --hash=sha256:4a4348705be86e029d04e741cf9ed0dfe03e942d7d3b92e838fa80d3aa2c3ebc \
-    --hash=sha256:4b554d8164ebb526892194f71dcd96ef1fefe0c250087498785d3ffc04a80be3 \
-    --hash=sha256:4d9a562aec0a92fe536da2e533d313b3d2a6b929157b1dec7ff623446dc0a8ab \
-    --hash=sha256:51dd39d23cfdea0400ed3ff2d29d1e83bd951d3aea79dc89be5b701a09edfe23 \
-    --hash=sha256:53679573c75cce5f82359e0bd4e6a97809a6b9a9b7a48fd1ba592f4a82cddc84 \
-    --hash=sha256:55faa6f8395e23b848c535ad5dcb96b3462f37f5e7f4ac500d500434f7345da7 \
-    --hash=sha256:58ce37a4a54577115922385d37201d9a44d66d0167dfbbf4770a2e9bf8ea7ba3 \
-    --hash=sha256:59d5b93efa45fd09f620d0c9ba81cde339a2c9937af3eea42ee9653094ce6640 \
-    --hash=sha256:6195257a107bf25872ef84aab7295078271eea3ac6413f0506b631f6c9586ed5 \
-    --hash=sha256:652d1bf13d01bac8fd569def0fe76745e55bcda01e30aa6332d5947ea3788839 \
-    --hash=sha256:682804bf31e43d46e51a9a33bd575b51e839d715ce6bd5612c055f7b28ad637b \
-    --hash=sha256:68df2947921d449f6dcfeafd86cb2cdde13327a8b447534bbe4ee5aaf32a5695 \
-    --hash=sha256:6f53285f20d592ed309ee19e509cc4c77a3bda1db02ad67e8a0949bb227a5a6d \
-    --hash=sha256:73b0e05c32c3cfc3cd84994908e57430c0ebc6813abf905d3f18ff115d54df3f \
-    --hash=sha256:77c2e018417dc1d66f235e383877ee885b60ade9d29e494dd581e08af2cb1923 \
-    --hash=sha256:7826f16edc763e768404f55605ef85dfcf5857e729c1ed29e0d7c180be4fe6d8 \
-    --hash=sha256:7afa5431f6f3487c584187ca6c8e2a34e9b106529893b3e720eabb068f6ac970 \
-    --hash=sha256:7d095df2627e5dd59ac7b0c5ad627a671c76e6020171e03cbe4621a61f0562c3 \
-    --hash=sha256:7fe374ba76eb0ecca13a1703daa8fa85825a6ddddbb52d4c1a732fa524194683 \
-    --hash=sha256:82b1bdf293267afaadcc608b125e7fc6576bb0785a60c4fa7d07c7ab76ed76ec \
-    --hash=sha256:86f173a584f72f6164801f31866d22a581f60c991572cf922aed9ab8eb422b77 \
-    --hash=sha256:8b1415d02e9bf722672af8a90f90813265a0cd0b14163187261e54a5592bc949 \
-    --hash=sha256:8b2a281b556f120a43e591ea39915741b7ad54d4727b9c4350a0a11692252533 \
-    --hash=sha256:8c6321a414f8b4a8dc43976b2fa8349156434ca9adedd9a187b796f7e1d3d3fc \
-    --hash=sha256:8dc4487097571f7311188c3eca2a3e86cd1f1db4c37c7a017bcc3fd38486cbfe \
-    --hash=sha256:90986cc9aab9d7d1d8f38bcbf65d3f7ac83bdd90c35765db7d691b4829698cba \
-    --hash=sha256:9352e6cdb510a7b1a5d3ccaccec730e82e50cf3484a3af7bdaab19e23b9589ff \
-    --hash=sha256:935b1cfad9b908b0fa845010f4271df4c2f04e1cd26e3f18acd61a45f93c9e36 \
-    --hash=sha256:9b659d77f8726fa5e7038967dda6b68d53cf34472c094cfa5b845454713b90d5 \
-    --hash=sha256:9bd3d1557c3fe1a095068210708a03e3e4795973392af6f4047060e70abd9a6c \
-    --hash=sha256:9bf452ff4d4981f25a18e9476e002bcc9263e7928024aa4d7148e25f7be3f929 \
-    --hash=sha256:9d7fb25b4442fae0cb2590272d06ab4f6caa526ee36a994edb81e946b874813e \
-    --hash=sha256:9db1ba1c1e6a84245a9dd866265b56b8a1e9461549cc72ed296d8cbfbd32961b \
-    --hash=sha256:9eb0b0e602064527a045ea28c4f174ed69383587e29cebe28947e3b84106eb2a \
-    --hash=sha256:9fd7f32e2f0fb334e7ecc5adb5cf0458785bd3a9d9d86f950e1715f101cebce5 \
-    --hash=sha256:a378e12ccc06d76efde115caf4073b7e5ff3cc18291d1341f9e65fb882e3f754 \
-    --hash=sha256:a4161eee7799863aee237c35c90427861f7b994416dd81ae829f560b0a81bdcd \
-    --hash=sha256:a9b4cf3685a135666d27d0d7a73fece74e2fad01d9b508fded89e843512f0e90 \
-    --hash=sha256:aa1120c653b76d8eafa50423b5eba06b5c9737f8692c74fa3afe03e84b8978ea \
-    --hash=sha256:b07c03f0da7e5279170df7745ddc732d526c8a198208936ec1a95c11ed2b2d5f \
-    --hash=sha256:b13b59e66f107cca1ba708dd5307179870ca1b15b19fcee7ccf722e5308d9212 \
-    --hash=sha256:b542ffc0a5c531eedc40419f291f1bd659aa8d4223408a5b51c88a2796083fd3 \
-    --hash=sha256:b5c696ae7cd7166b3657261adb855b461ff31f07823fdbae9de8bf80adfccc21 \
-    --hash=sha256:b68614fba0570349833b7dd999ff0aed4e5cc8d9eb6e3a7d4527be33c65e33d3 \
-    --hash=sha256:b8dd6c71d20c28d2d0eb0c51e7cccf3584afde3b1364f6629596186c9025bd54 \
-    --hash=sha256:b9b0c1f2aa7b0026b4bd50718100e8b04175e4f36e160aa852502377b5e572e7 \
-    --hash=sha256:c522420d78db2431887d45b518e304d86e27b9ad0b30f24e3806a6ad5d8bdbfc \
-    --hash=sha256:ccfd880988f8438d1c91c77d7edc58e70f4d2012e999167bc154c64c6f06ea6b \
-    --hash=sha256:cdb6cc6e1127d15879c47a8b3270716243da82d3e7feab1f5946872c75b3d60f \
-    --hash=sha256:cf66fb38703e61a486b01b56d43bb1f50698fbe99b6bd90feba10f24fab60b3b \
-    --hash=sha256:d13d07efbf655f9ae7a2352b630c52727b359005b21ba08a507585c9ac8c0896 \
-    --hash=sha256:d242f3c4ccf55b056e6cf901720dccde58f1df117898f2bbf3bcd6e38ec7c248 \
-    --hash=sha256:d24b38a825bcca41bb956de50eb98451ef291304a8607fad99e619043d3e79b9 \
-    --hash=sha256:d3c247d457ae9079974c7ce3c665396754a6d2baff7eaa51332212a8a5a3f13b \
-    --hash=sha256:d886baa46b2532135e7320067e6a44edb09ba5883a6096b0f9c044533984b8a8 \
-    --hash=sha256:e05a94a0442de86818a30281c6cc2cb9cc7aa148386fd3541c4d4774b73cb3a9 \
-    --hash=sha256:e1b99ad34613d5f8477fa5cf99bc4eaeaf27965588007c102370cd9a78fe9de5 \
-    --hash=sha256:e2eb7ea0ac3911a7aac9d8aaa36d40f216d99455b3274cd3fac38181bcd910cf \
-    --hash=sha256:e497ee34e8a3342bbde51b27c22d8db05a651df3361dd3daef5b3ab0d66f3e04 \
-    --hash=sha256:f11e09f10210a91c169e39c7a5a1f9090eaa73ad75555fafad5023c3053c47ba \
-    --hash=sha256:f466049b8e1ec0854287bbe9a074316826fe0e08dcf707245f98b1ae49e92650 \
-    --hash=sha256:f80361592c13d7226b4379c8941529b63fe1a9d0e05d2de8f3306b70e522b53f \
-    --hash=sha256:ffdd2f4950daf7815490f23087963e3420175b9609520b7ff5df64d351159c22
-    # via cachecontrol
-packageurl-python==0.17.6 \
-    --hash=sha256:1252ce3a102372ca6f86eb968e16f9014c4ba511c5c37d95a7f023e2ca6e5c25 \
-    --hash=sha256:31a85c2717bc41dd818f3c62908685ff9eebcb68588213745b14a6ee9e7df7c9
-    # via cyclonedx-python-lib
-packaging==26.3 \
-    --hash=sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79 \
-    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
-    # via
-    #   pip-audit
-    #   pip-requirements-parser
-pip==26.2.1 \
-    --hash=sha256:71138adf1f4ca900cdb7d289c21b7494329f2332b6d85f0e1c42108c0384ed3e \
-    --hash=sha256:f6ad667e89a1fe78046c8f13232b247200f5258d7828f3f7883d660878e0813f
-    # via pip-api
-pip-api==0.0.34 \
-    --hash=sha256:8b2d7d7c37f2447373aa2cf8b1f60a2f2b27a84e1e9e0294a3f6ef10eb3ba6bb \
-    --hash=sha256:9b75e958f14c5a2614bae415f2adf7eeb54d50a2cfbe7e24fd4826471bac3625
-    # via pip-audit
-pip-audit==2.10.1 \
-    --hash=sha256:1eb4565d19ebe5d48996f4b770b4d2b32887e12cb12cfa637f1a064011b55ffc \
-    --hash=sha256:99ef3f600a317c1945f1e89e227ef26e1c2d618429b8bd3fa6f4f7c440c4611a
-    # via -r .github/requirements/pip-audit.in
-pip-requirements-parser==32.0.1 \
-    --hash=sha256:4659bc2a667783e7a15d190f6fccf8b2486685b6dba4c19c3876314769c57526 \
-    --hash=sha256:b4fa3a7a0be38243123cf9d1f3518da10c51bdb165a2b2985566247f9155a7d3
-    # via pip-audit
-platformdirs==4.11.5 \
-    --hash=sha256:89f8d42695853b89c7170bd49bc3dc593f98a71e695ede88e06a3b247bc4563b \
-    --hash=sha256:e8b31f4f8bcbbedef91a6b57a706255e4f148d2a4e01648382a0a47342539173
-    # via pip-audit
-py-serializable==2.1.0 \
-    --hash=sha256:9d5db56154a867a9b897c0163b33a793c804c80cee984116d02d49e4578fc103 \
-    --hash=sha256:b56d5d686b5a03ba4f4db5e769dc32336e142fc3bd4d68a8c25579ebb0a67304
-    # via cyclonedx-python-lib
-pygments==2.21.0 \
-    --hash=sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9 \
-    --hash=sha256:610ca751c9bc2492b38eb9a38a7fbc93edbbb2d7182edaf34e66ae493dee5c8c
-    # via rich
-pyparsing==3.3.2 \
-    --hash=sha256:850ba148bd908d7e2411587e247a1e4f0327839c40e2e5e6d05a007ecc69911d \
-    --hash=sha256:c777f4d763f140633dcb6d8a3eda953bf7a214dc4eff598413c070bcdc117cbc
-    # via pip-requirements-parser
-requests==2.34.2 \
-    --hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0 \
-    --hash=sha256:f288924cae4e29463698d6d60bc6a4da69c89185ad1e0bcc4104f584e960b9ed
-    # via
-    #   cachecontrol
-    #   pip-audit
-rich==15.0.0 \
-    --hash=sha256:33bd4ef74232fb73fe9279a257718407f169c09b78a87ad3d296f548e27de0bb \
-    --hash=sha256:edd07a4824c6b40189fb7ac9bc4c52536e9780fbbfbddf6f1e2502c31b068c36
-    # via pip-audit
-sortedcontainers==2.4.0 \
-    --hash=sha256:25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88 \
-    --hash=sha256:a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0
-    # via cyclonedx-python-lib
-tomli==2.4.1 \
-    --hash=sha256:01f520d4f53ef97964a240a035ec2a869fe1a37dde002b57ebc4417a27ccd853 \
-    --hash=sha256:0d85819802132122da43cb86656f8d1f8c6587d54ae7dcaf30e90533028b49fe \
-    --hash=sha256:136443dbd7e1dee43c68ac2694fde36b2849865fa258d39bf822c10e8068eac5 \
-    --hash=sha256:1d8591993e228b0c930c4bb0db464bdad97b3289fb981255d6c9a41aedc84b2d \
-    --hash=sha256:2190f2e9dd7508d2a90ded5ed369255980a1bcdd58e52f7fe24b8162bf9fedbd \
-    --hash=sha256:2c1c351919aca02858f740c6d33adea0c5deea37f9ecca1cc1ef9e884a619d26 \
-    --hash=sha256:36d2bd2ad5fb9eaddba5226aa02c8ec3fa4f192631e347b3ed28186d43be6b54 \
-    --hash=sha256:3d48a93ee1c9b79c04bb38772ee1b64dcf18ff43085896ea460ca8dec96f35f6 \
-    --hash=sha256:47149d5bd38761ac8be13a84864bf0b7b70bc051806bc3669ab1cbc56216b23c \
-    --hash=sha256:4ab97e64ccda8756376892c53a72bd1f964e519c77236368527f758fbc36a53a \
-    --hash=sha256:4b605484e43cdc43f0954ddae319fb75f04cc10dd80d830540060ee7cd0243cd \
-    --hash=sha256:504aa796fe0569bb43171066009ead363de03675276d2d121ac1a4572397870f \
-    --hash=sha256:51529d40e3ca50046d7606fa99ce3956a617f9b36380da3b7f0dd3dd28e68cb5 \
-    --hash=sha256:52c8ef851d9a240f11a88c003eacb03c31fc1c9c4ec64a99a0f922b93874fda9 \
-    --hash=sha256:559db847dc486944896521f68d8190be1c9e719fced785720d2216fe7022b662 \
-    --hash=sha256:5a881ab208c0baf688221f8cecc5401bd291d67e38a1ac884d6736cbcd8247e9 \
-    --hash=sha256:5cb41aa38891e073ee49d55fbc7839cfdb2bc0e600add13874d048c94aadddd1 \
-    --hash=sha256:5e262d41726bc187e69af7825504c933b6794dc3fbd5945e41a79bb14c31f585 \
-    --hash=sha256:5ee18d9ebdb417e384b58fe414e8d6af9f4e7a0ae761519fb50f721de398dd4e \
-    --hash=sha256:7008df2e7655c495dd12d2a4ad038ff878d4ca4b81fccaf82b714e07eae4402c \
-    --hash=sha256:734e20b57ba95624ecf1841e72b53f6e186355e216e5412de414e3c51e5e3c41 \
-    --hash=sha256:7c7e1a961a0b2f2472c1ac5b69affa0ae1132c39adcb67aba98568702b9cc23f \
-    --hash=sha256:7f86fd587c4ed9dd76f318225e7d9b29cfc5a9d43de44e5754db8d1128487085 \
-    --hash=sha256:7f94b27a62cfad8496c8d2513e1a222dd446f095fca8987fceef261225538a15 \
-    --hash=sha256:88dceee75c2c63af144e456745e10101eb67361050196b0b6af5d717254dddf7 \
-    --hash=sha256:8a650c2dbafa08d42e51ba0b62740dae4ecb9338eefa093aa5c78ceb546fcd5c \
-    --hash=sha256:8d65a2fbf9d2f8352685bc1364177ee3923d6baf5e7f43ea4959d7d8bc326a36 \
-    --hash=sha256:96481a5786729fd470164b47cdb3e0e58062a496f455ee41b4403be77cb5a076 \
-    --hash=sha256:a120733b01c45e9a0c34aeef92bf0cf1d56cfe81ed9d47d562f9ed591a9828ac \
-    --hash=sha256:b1d22e6e9387bf4739fbe23bfa80e93f6b0373a7f1b96c6227c32bef95a4d7a8 \
-    --hash=sha256:b8c198f8c1805dc42708689ed6864951fd2494f924149d3e4bce7710f8eb5232 \
-    --hash=sha256:c2541745709bad0264b7d4705ad453b76ccd191e64aa6f0fc66b69a293a45ece \
-    --hash=sha256:c742f741d58a28940ce01d58f0ab2ea3ced8b12402f162f4d534dfe18ba1cd6a \
-    --hash=sha256:c7f2c7f2b9ca6bdeef8f0fa897f8e05085923eb091721675170254cbc5b02897 \
-    --hash=sha256:d312ef37c91508b0ab2cee7da26ec0b3ed2f03ce12bd87a588d771ae15dcf82d \
-    --hash=sha256:d4d8fe59808a54658fcc0160ecfb1b30f9089906c50b23bcb4c69eddc19ec2b4 \
-    --hash=sha256:da25dc3563bff5965356133435b757a795a17b17d01dbc0f42fb32447ddfd917 \
-    --hash=sha256:eab21f45c7f66c13f2a9e0e1535309cee140182a9cdae1e041d02e47291e8396 \
-    --hash=sha256:eb0dc4e38e6a1fd579e5d50369aa2e10acfc9cace504579b2faabb478e76941a \
-    --hash=sha256:ec9bfaf3ad2df51ace80688143a6a4ebc09a248f6ff781a9945e51937008fcbc \
-    --hash=sha256:ede3e6487c5ef5d28634ba3f31f989030ad6af71edfb0055cbbd14189ff240ba \
-    --hash=sha256:f3c6818a1a86dd6dca7ddcaaf76947d5ba31aecc28cb1b67009a5877c9a64f3f \
-    --hash=sha256:f758f1b9299d059cc3f6546ae2af89670cb1c4d48ea29c3cacc4fe7de3058257 \
-    --hash=sha256:f8f0fc26ec2cc2b965b7a3b87cd19c5c6b8c5e5f436b984e85f486d652285c30 \
-    --hash=sha256:fd0409a3653af6c147209d267a0e4243f0ae46b011aa978b1080359fddc9b6cf \
-    --hash=sha256:ff18e6a727ee0ab0388507b89d1bc6a22b138d1e2fa56d1ad494586d61d2eae9 \
-    --hash=sha256:ff2983983d34813c1aeb0fa89091e76c3a22889ee83ab27c5eeb45100560c049
-    # via pip-audit
-tomli-w==1.2.0 \
-    --hash=sha256:188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90 \
-    --hash=sha256:2dd14fac5a47c27be9cd4c976af5a12d87fb1f0b4512f81d69cce3b35ae25021
-    # via pip-audit
-typing-extensions==4.16.0 \
-    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \
-    --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5
-    # via cyclonedx-python-lib
-urllib3==2.7.0 \
-    --hash=sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c \
-    --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897
-    # via requests
@@ -1 +0,0 @@
-pytest==9.1.1
@@ -1,32 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/pytest-tool.in --generate-hashes --python-version 3.11 --python-platform linux --constraint requirements-ci.txt -o .github/requirements/pytest-tool.txt
-iniconfig==2.3.0 \
-    --hash=sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730 \
-    --hash=sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12
-    # via
-    #   -c requirements-ci.txt
-    #   pytest
-packaging==26.3 \
-    --hash=sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79 \
-    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
-    # via
-    #   -c requirements-ci.txt
-    #   pytest
-pluggy==1.6.0 \
-    --hash=sha256:7dcc130b76258d33b90f61b658791dede3486c3e6bfb003ee5c9bfb396dd22f3 \
-    --hash=sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746
-    # via
-    #   -c requirements-ci.txt
-    #   pytest
-pygments==2.20.0 \
-    --hash=sha256:6757cd03768053ff99f3039c1a36d6c0aa0b263438fcab17520b30a303a82b5f \
-    --hash=sha256:81a9e26dd42fd28a23a2d169d86d7ac03b46e2f8b59ed4698fb4785f946d0176
-    # via
-    #   -c requirements-ci.txt
-    #   pytest
-pytest==9.1.1 \
-    --hash=sha256:1088fbde8f2b49d95a549a195707afa7a76a3ce9bcadc26b6d71f0ffda5fe313 \
-    --hash=sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c
-    # via
-    #   -c requirements-ci.txt
-    #   -r .github/requirements/pytest-tool.in
@@ -1,4 +0,0 @@
-safety==3.8.1
-bandit==1.9.4
-semgrep==1.175.0
-jq==1.12.0
@@ -1 +0,0 @@
-twine==7.0.0
@@ -1,470 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/twine.in --generate-hashes --python-version 3.11 --python-platform linux -o .github/requirements/twine.txt
-backports-tarfile==1.2.0 \
-    --hash=sha256:77e284d754527b01fb1e6fa8a1afe577858ebe4e9dad8919e34c862cb399bc34 \
-    --hash=sha256:d75e02c268746e1b8144c278978b6e98e85de6ad16f8e4b0844a154557eca991
-    # via jaraco-context
-certifi==2026.7.22 \
-    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
-    --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
-    # via requests
-cffi==2.1.1 \
-    --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
-    --hash=sha256:06c72bb76605a4b0cd0aad6930b69d4baf7dd5d806cfc409b824191099700e66 \
-    --hash=sha256:0beceaabe56af686895136a2de78db54ecd8e4046b236b8fd6d6cb61389e9bf2 \
-    --hash=sha256:154852545011f779917b11c78db2358d095da62a9a172b78ad0a583ee5adc0d0 \
-    --hash=sha256:194cffa889098ced9976c3fc6340305e43f6303657d298da55366907c05c22d6 \
-    --hash=sha256:19ee6127ee34de7d83ce3d371ebc5ed91addbdcc39f9ab15ce4eb35a4e534971 \
-    --hash=sha256:1a18a57b58cfb21fc28d72e876acf10eaed67a1ed96226f92af4df681d571c4c \
-    --hash=sha256:1aa5645c30469b09530c4ebca77ebf8f17618293c58f8549cb1a543a50236e7d \
-    --hash=sha256:1dea0e4d7d4f11f619fe8c1d76caf49e24405b4b5743c0e3be16a500ecd930c9 \
-    --hash=sha256:208f941bb9d18e768138677f0a6d2ce01f590df56043dda1df1535ac57c88517 \
-    --hash=sha256:210019b6c7cf07f081b4c54635c8cf744377001350e29cc0f81c4377b4797735 \
-    --hash=sha256:246fa40ce8645a614ff682e0b70f37134e460eaf93a775e0cbe3cca585a67a80 \
-    --hash=sha256:25792eac27877609e7bb06d42ff88278a6624fff2ba9bbb523c09616b117e80f \
-    --hash=sha256:27350daa11d4f10c540e6e89dada4c54feb7256ad03e9a4dc075ebad7ba360d1 \
-    --hash=sha256:28907ab9bfb6aa13184cfc17c6b8e1023c5ab6fd7076d8c20a35e59fe04f8f29 \
-    --hash=sha256:2ae64be792b8966f2c69538199728b290e34726562896df1e5dc8ffd8d8188e8 \
-    --hash=sha256:31348097ff5bbe827ccc41795d4dd099d9f0625e7def00ee653c137a490c2a6c \
-    --hash=sha256:3143d81e29e1e20a9ce10901ec369012947876596f75a222235965f2b7ae832e \
-    --hash=sha256:3222ba5d678f80a030e6afbcc33dc1ae5cb45facabb61cee2c7016b8432fde48 \
-    --hash=sha256:3311ed60d36f83378794e1009ac6258bafbf81f7888b4caa7b35a521e3f95813 \
-    --hash=sha256:334644fbac4eff73d985a17a91226df55d0f394160c4cfb880e084c8f7161cac \
-    --hash=sha256:34e261f78cb6ceaaa36f42f2613f4380d94d9c759a9c73c769ee6e0247364632 \
-    --hash=sha256:363e05fa78e15116c3c32c210ee36884fd6b9afa6d440e47112c3bd511d64cb6 \
-    --hash=sha256:398aff33cee2767e3e781d2554c54bd0dff386bb437581e0d8011fde1a942ec1 \
-    --hash=sha256:3d22a20b1fb1632cc72c22f95f7b0d2961c3e1c235f245ba4c606c4771035659 \
-    --hash=sha256:42a494cee34437f05546455144f2b5d9ac09b1face62bcfce597d2e521066688 \
-    --hash=sha256:42e2f76b9455f5a9a844f770bf3e200ed3da0e15f5df3db9c31fe80b04b3d004 \
-    --hash=sha256:42f6930c31dc7f50732c9ae793c2786c7b6b044195967bbdde40bb9be81c4cc0 \
-    --hash=sha256:456a61fa52d579ebf9df2e9552ead5129855dbaff6c1e5a9b1bc408809bdc062 \
-    --hash=sha256:471cee653ae88de62096552e6d24ccb4a5adb8c8c9f10b5054d0122c15bf2779 \
-    --hash=sha256:49cbc70e6542d4ccccb936558d1064a8012541e78f821f955cff24e357776c94 \
-    --hash=sha256:4a7c934f7360e8cd64fe9efadcbd10c7c6364f531e432b9a4bf5ccbc9e0e8b50 \
-    --hash=sha256:4be96343e422f2dfcd12ab5c9f5aebe03f82f737c6bffeca6830b3875cb44aab \
-    --hash=sha256:4f42141fc14250de6dde5ee7ea4432be017252d91f19c5ad043c084cea629cac \
-    --hash=sha256:507a24c282e0f42f8ed737cf048572cbf580468da5555764a8331735e9c736b6 \
-    --hash=sha256:51b31d1c98274844cfd7838ce00bfc27c7423a4dc00fc0772fc3331c2cc90676 \
-    --hash=sha256:58acb8ab8e295e6c5ea12f888cbb13cf21511ef2a3303a23f4325c29d17fe5c1 \
-    --hash=sha256:5a59cc1c4442bc3d5c703bf720b51138d0bfc173618807c9ee2490a7541dd3d9 \
-    --hash=sha256:5bb4e7ea95dcd6a014a6fef62e62467d67d8e582326443f3d68e71d6320a9fcf \
-    --hash=sha256:5c58fe613dc5e5336357eff555824a314d8e43282600435c8d1cb6a7a2fedd13 \
-    --hash=sha256:5e7cecbaadb83884793e05828cee59b210b24583b9c7425d0ba6a754fe22eb4e \
-    --hash=sha256:616f097f2fe415bc92a247f02e11f634e1f9e9a83d327e3c915c15089c87869e \
-    --hash=sha256:63bbfd5ded17c4840ac07cd8f1c21ba9d9708141f840b324f422f41b207e3973 \
-    --hash=sha256:64faea20f4e2613363a1a9b9c7dd73058f3ecd00133a511e72ad7c511658f527 \
-    --hash=sha256:661c298b4821edebead0c91edd2b00374d67ad7c5a1f7a91d4442633b79d6a72 \
-    --hash=sha256:68e62fe11f30d5ca8289242866f0a5291402d8529ca2178ab8afc5c9694ae890 \
-    --hash=sha256:6a8dddef476fab96d066d578fc88526767b836ab5ab21754e1d5bf3879c31c7c \
-    --hash=sha256:6e192623c49c94421616a5778fba35cf0d5a8d000650c1967ef4448ee5cdd990 \
-    --hash=sha256:7225e4514edb64eb6740324353e0da0711954fd8d7da4576755b1c6e09b697cd \
-    --hash=sha256:75f80557d1389eddbd0de2681f6a390a0c5338c31ddaa821381c203fc3fd50d9 \
-    --hash=sha256:770de9db11e84213beec501cfcaa013b019820ca881e03344dea5844f7876d94 \
-    --hash=sha256:7750c6449dff7864bb9bb27ddfb0267756189201a3afc911d82b3caacd70dfc3 \
-    --hash=sha256:7bde5e4cc5c10140859842b9d383af292b22639a4dffb725314baf45968cef80 \
-    --hash=sha256:7ce713ace7c0e4520535b42b77eaa742c16dab813978064913e5a3cf82973b41 \
-    --hash=sha256:7da0c5eff80f0197f3b3d1232ec5a682a9325f4ae9016a78f5f5ca35f9ced1f5 \
-    --hash=sha256:7dbb61fe3a7699468030f71bbe5f8a0e326a151daa91beb11a6fc1f980c55e1c \
-    --hash=sha256:811bd1e21d32de12efca32393a0ab3f5133b54fce9bd44b8bd77ab07da14bf6a \
-    --hash=sha256:8ef53b2de9bcb9197d31854256575d59dbac0cba72ac627bb291ef5eceb74be4 \
-    --hash=sha256:937c0052c05a31ca1daf18de3158eed4dbfcb9cc107adbea227728d647be701e \
-    --hash=sha256:9d2055050ea716bd38b7f7f1579c275386646b4894c155a3e2f3cd62ed41b7c6 \
-    --hash=sha256:9f8d177621de5cb38ee3e731eda45d421db093ec0739f46a5594babda7987a98 \
-    --hash=sha256:a2d7755bef5a12ed488f4ef1f1b69ee9191d7396083b755a5d2295f6edb4768b \
-    --hash=sha256:a48d62ab9d6f4f98c983223a547af44be6ca3691074c31cecced6facd3ba2dc1 \
-    --hash=sha256:a4f00aa42f75d6e4595e8866e748cc1705adc0cddfeb2ca86d0d03993d63ba03 \
-    --hash=sha256:a6e721d4b0e45d5b65e87534470e67b18dcd092c83f68fba09f152b9cbc061af \
-    --hash=sha256:a730a083190634c65cca36ba5f489531576ebd79bcd5c8e172130f6453127231 \
-    --hash=sha256:a931079504ecc49efed7744c476a5c343a92fabf66dec2db95edb1b2fdc770e2 \
-    --hash=sha256:aa9511c62d14da7aacc9b4bf51f3f697a621e83b2d6919008243c3aad168eea3 \
-    --hash=sha256:ab36d55f9ed2d067327667c2fea18dda018eb628dd6347aa01dda6cf1f5d3836 \
-    --hash=sha256:ad2c86c495b899d862ea0f4b42891b8713a3bd45dd4105c7fd51c2a72f39f3a5 \
-    --hash=sha256:aeae0e330c9f6acd681f647d46cefd30c29f93e3392882e792e82080c9691399 \
-    --hash=sha256:b0431303acaea1089ad4b3e9ce4e6518193def1118d4073ca848635ee4ea2e96 \
-    --hash=sha256:b5bdfd1c873d4e093aabc0ca84c4ca6dbc4f752afb5c86f146d9742580c9da2e \
-    --hash=sha256:baed1e86cc735622097354b9d1281406caf42ff42a886d29faa8e8d1630333be \
-    --hash=sha256:c1453022f490d2459a11819d83ad1d586e9ff65a12ac3e705ffebd46d3685dcf \
-    --hash=sha256:c26608d2222fb1e94487e4a387d85f13eb55d5ed725cb25a0c589ac4ee60e7bc \
-    --hash=sha256:c7659f22557c5a0bc4855cd635f55edec690cc008a40768527762cb9fb263455 \
-    --hash=sha256:c8c69575568085ba0b1b10c0249d779a214aea6f6522e949a0fc9fb0fcb449d0 \
-    --hash=sha256:c8d2c9fd1f2d16f780d15127abb050d13d1a76c03a4bd87d7e4980e45e511e12 \
-    --hash=sha256:ca82be1a1d406ecfe1d25dc16cb33488e5a16bf4438c9fb590484ea29d92478b \
-    --hash=sha256:cc572dace3f60ef98d7b12ff411d20f5362feb31a0439eab0085bbfd349982d7 \
-    --hash=sha256:d18e5ac0f2f03f4f518d3e23db0f0cad7faa1da8620e9c09461d443bbf6e6692 \
-    --hash=sha256:d28630f5854ab07ab1fd4aba756de52326c82e6be15d414b12793f1975048b54 \
-    --hash=sha256:d9c275eaacd24aa73f94ffd6de08fc3f932424d8b6c376f4bed7cde376fe7bc3 \
-    --hash=sha256:da0e573f9f97159390c89d9f1a9e41908b66d408cc5b58d08cf3847d844c531b \
-    --hash=sha256:dd31f52ea1086513bb9df30f8fcee9b8918323ae067a3d5b78bc826a000712be \
-    --hash=sha256:dddad92b554513a31f272570678ba307fb9f618f05e3d4a5eacafff9eae03e1d \
-    --hash=sha256:df423d40ee8654634421812bc3b196da3f9bd7d32929da813f8394c4348a5358 \
-    --hash=sha256:df913725b79db7bcf03448f36b7bf8815363417d5b58deecf9305e3e30f0f21a \
-    --hash=sha256:e0bcb7e0f677f543555d2adff3bf19c05f66cdb4796e5ff602442ab2fe3c4ef7 \
-    --hash=sha256:e2d65b31f36619cda3999b78b2aa9632e76b78448e7a56fc4240824200e7c4fc \
-    --hash=sha256:e6e8cff14d6fb0be70a09c0bdc58096f501952d04624ebf867e0e56da2df8960 \
-    --hash=sha256:f16c709686a78c727bbbf059f92b0bf41c6fc60deec706d2dc19f529175a6125 \
-    --hash=sha256:f24fb43132a4c6b4cb4eb029492919b2db645be6808d738f244fd146c03c32cb \
-    --hash=sha256:f53e442b08449d42821fa4a4fba000095af9f62742a500f978a9f557ec44339a \
-    --hash=sha256:f5cfbc5fe74540d335175b656c725d74d90e3730c626d92575eea35029d9afaa \
-    --hash=sha256:f81b3b8f3d4e343550fa4baa0e479bba9f2d29ce9c2e9b51d1ce1718d7442fcf \
-    --hash=sha256:f8ec5e643a9a937f64e1999eb9f75d072263751912dc5cd06d3c85f8f44be7c3 \
-    --hash=sha256:fb92203a88b3d3053034db775110081c49d28be6551923805e039924093761e4 \
-    --hash=sha256:fcd22650c908d7b7da162bbfaab594a1227a15d1643a98c68b122ac642fa2264
-    # via cryptography
-charset-normalizer==3.5.1 \
-    --hash=sha256:00668ebb0609751758682eb0b5857e7c35b9f00e84dfdef062e103244ec94d45 \
-    --hash=sha256:012a22b88a77ca2e59b98ac5889b0deb604147666032f45e6d6e217634d2550d \
-    --hash=sha256:01e93745f7f219b703b60ba7afead36cfc4242782be5af484673fc500df12da5 \
-    --hash=sha256:04368edf83514385ffc3e1cfd4546e595f4f1272dd23ba437a93a9cc3741d47b \
-    --hash=sha256:0722590aabf9dc6a6c0343d523c05458fa2b5047dbe6302fd526bb570600753f \
-    --hash=sha256:07ffd07412fc5d5e84cd8952acf9ff7e4ed7a708e69d1bada19d8ba91711353f \
-    --hash=sha256:09a7bba9f739468c8e78c36a75c33768e53cb1959fc638f510454c14683f00d5 \
-    --hash=sha256:0b2b1b3fa5670c127b246df1d0c059defd41f689a868a3b9d79df9b1cac42d22 \
-    --hash=sha256:0c6dfb5ca6723eeed15aa8e564a014d69fcb8812f94eef11fe3631e0508199f5 \
-    --hash=sha256:0d929fc574b4d6fd9e7c0f5c2ede8716a41911923aa7fa5fce38e0818aa4a1ac \
-    --hash=sha256:13e3afe97712e8887cd516e960c63f0b93122971e5b5e4b2622fe7701771e838 \
-    --hash=sha256:15f024313246a4ed976c60f440bb8d257815513a681d212ff74fd46f7d715a90 \
-    --hash=sha256:195ce897c6153c0700078142cf8efe3e6454ca4cf4357499e4078dfd83396626 \
-    --hash=sha256:19a3dd5aa73cef1c99687c4fc57db016a9c17104ae1185da88ba566a5d3bebe4 \
-    --hash=sha256:1d1c7a53a6c2103925cdd6d7229f8c567379f211c869793df679f2e9f738c369 \
-    --hash=sha256:1f5883d77fd409a261abb5dc8ccbe335720d798b1de4abb3b1d47ccbbc76b53b \
-    --hash=sha256:21b82d8082f6f5e7f456ef0bd16323d08de1266efbfeb476e64b2a91d1471a4e \
-    --hash=sha256:252d099029bcbea642f2a06c4ed5046bdf8b5a8150b64afa5e027e88b106e5ee \
-    --hash=sha256:256dd4d85d9e4dc595e2bc983c980e73f62ddeb3165c58b4c3dfe78c5c8548c1 \
-    --hash=sha256:26422d45fd13551cf564c58932f7d72b4f58b93b0fcf18c35ba6be12b46bb102 \
-    --hash=sha256:2679de311c7946dde5d3b6f44941844133ff5c7cb86099c0061ab1e8901c20a8 \
-    --hash=sha256:29880d17a8eb0b5cfdfd8944b468322928059aa35f1f5fa8ff22b149ec0b42f8 \
-    --hash=sha256:2bced4061f000f7187254a02ad3433ae17eaf991747ceea2f478422590a5bba9 \
-    --hash=sha256:2e9cf9253119d8e5d111f05d71626786fd3d6193817316eab1ca088cdb8593cf \
-    --hash=sha256:2f06b7eae9dbe77fe1d644ca244dad508de8d302870a43f3c559b521270938a0 \
-    --hash=sha256:2f293479cce755c75f1697e87c409b7ae4c555c7dfecb6e988ad13abba943031 \
-    --hash=sha256:329fc3ccb63ad22d867d84c2adea759a64079a37ba4a343433b02c7a2816871e \
-    --hash=sha256:343fb4f2821043bd87095f7b08a1a181febc8e36ac64212143bbfd0a0e1bc235 \
-    --hash=sha256:3588e376b3ea2eea84976f67273d679f229e24c66dce7b82ae45aef04ff6e072 \
-    --hash=sha256:35aea775dc2bd5f54cd84a1cd2696cc3207c479cb9cf0bd346f0d343e4300ddb \
-    --hash=sha256:35fe081843b35aad20ffeccec3eeffbe637b15d14f3fb22cc1b59cd8ec17e93c \
-    --hash=sha256:36047af20e17097c3bb9476c2b7655f2f7aa51322c0ba58c07695bedf755a950 \
-    --hash=sha256:3617ac3cfd8b9888f145ad89dd6e692285834b0201c6074a5eeaad3fd4d668c2 \
-    --hash=sha256:366ec70f5547c640d3ce1985722490f23faf4eb5216a7eeba78277490e78dacb \
-    --hash=sha256:394fea06235c8543390050ed5f529187074b029fb027213f6c46ac11ab5d950e \
-    --hash=sha256:3d27167433c0d5f18dc850f07d0b3816221984fecdc405d6c157a6f0b8f8e9e6 \
-    --hash=sha256:3e5e1224c0a6a90e05843e07adfec669edebec17801c67072f51e59561d63c0b \
-    --hash=sha256:41876ee62a3dddf48ff1121ad8f0798032aa03f2fd35f21f34a4cab14f18d8d2 \
-    --hash=sha256:433c5a81eade63b47e522303bad236f59dba55ea6951746f5558355eeed8c75d \
-    --hash=sha256:4582c27e8c889d64811987b5967fbd3ae0c823fe1fd933b543d55ac20bb475fa \
-    --hash=sha256:485a0d363cafefcd2538a73c7c838daa2035f09b2c9f9b5e3133f80c6aeb84c2 \
-    --hash=sha256:494b70049a4d69aec6e8137c13af4cf8db8c9f9820a1392ac293b0dd2987a818 \
-    --hash=sha256:496846868fea80e479324862fa877f02411f2fd0f83b79ccee2607aa68b2a032 \
-    --hash=sha256:4abdc5f9ad448c1ecbfae2974b820535d6bc6e7eef63babbab3d81cf46968c71 \
-    --hash=sha256:4b599739b93b2cbeded49645ae3c8d1405c29ddfbceac1545c87a3f9580a9e96 \
-    --hash=sha256:4bea7f8ebe90bbd7f0e4a2de42ca6924ba23e3e76418c408ff82f1d46fabd687 \
-    --hash=sha256:4c4fb141a727957c93edfe5c32a26ceb6b5f6461d67146e2d39f51e16170bea8 \
-    --hash=sha256:4c9548dc78002099910abaebc0a72ac58b7d30931869e0351c09b507dff4ece3 \
-    --hash=sha256:4d26f14f041e83dd8edfd61f4cd4fa7285d31798b5bf1f28e70c367ba6c41d61 \
-    --hash=sha256:4f298bdadb8f0b9e5672877f647d1be9373ef5320c9e2f049795e26cad28b6a9 \
-    --hash=sha256:52ec005752a56ae79547a05c0139ca2501a0c866390b6115008456b9f0e7cde1 \
-    --hash=sha256:55261ac0d2941c42f196dd576f543d87a8ee03cd6f5e30dfb4d807b2e3b9121a \
-    --hash=sha256:56490c595a28b1bb27dfc583e816152a9767721ef58b2c03b13f954d2f707420 \
-    --hash=sha256:58d3e12c88e0950bca850ae1f7c256055c097639c2edb9eb123af9807d8b15e4 \
-    --hash=sha256:58d4aa13a59c969dbfdf9e6a9560e242cbfd9e8a8f50c2747714df1a423adf65 \
-    --hash=sha256:59171c6e45bf07d0d5cab3b0bf81d945035530f6873398b3b531c31184d46663 \
-    --hash=sha256:5b6d1386bf0096d26d3a863dc0a487a5b4eb9aa93cf5ba69683d29dde6b9d60f \
-    --hash=sha256:5c0ea61a470e070686aa30892fed79e297d2c8d0ab46b8bcdf027d38c51da591 \
-    --hash=sha256:5c84bec0ab5ae0c64bfe73a7d2adcb5ce73b467523fc27fd6a28ab2aa6cbe35a \
-    --hash=sha256:5ca0555312ae2fe82715cada7fac375530c2f3349e1eaa1bcb33d0283ac79a18 \
-    --hash=sha256:5d8531a6569d025f68e2321e7638fb7978f23db58e5f69f56913837aae03816e \
-    --hash=sha256:5e2d0e146dcb57034f8b97dc58d2d512cb90aba253960ce449f695fec6a82c6f \
-    --hash=sha256:5fc45d653ea8c9a20479167e11d4a0f8cb2fa3470737ab6f9c827532313187b7 \
-    --hash=sha256:6117b84ea48435e5356dc737f5121485c30920ba43375fa7b434fd753df0eac3 \
-    --hash=sha256:6199d5606e2bbf2b096cf64d03f8b6790c91081d5ac866b8e7bb6422738cc60c \
-    --hash=sha256:62b55f6722735a6c472f88361cde6640608773d9443cebdbb51abf436a1fcdd3 \
-    --hash=sha256:687c9ca3035544b113bea2055e180af96fb63c0c476e22a9180f51925186e7b7 \
-    --hash=sha256:6b7430cf5728e68f6c462254009a6ef4086e1bea43cf2f57aa9c55fb4f50ff96 \
-    --hash=sha256:6ba32c4d2abf1d2fe7cf27d280f4cca5664233b0f885549c7761719eb977f486 \
-    --hash=sha256:6c9cdde8becb25a7fde49924511aa2644d6f8081cc8df8e9452724303348d8e3 \
-    --hash=sha256:6df0ec430f9a831772c23ca5a224cba36517a58a84bb32c32bb59a9fa67c47f6 \
-    --hash=sha256:6e2912d4babbc65196ac13c2f53468dc57fb8b9c25ef913e8c59ddf7c6dc0e1b \
-    --hash=sha256:6e5e4d73d588ca5ed09df1b7dcd1b203d1df3c542e3f50d126c947d432b10731 \
-    --hash=sha256:70055ff39b97c99e7ae40ea3e393fb62aa2e44dbd9b29f8d14f42fb0025c3959 \
-    --hash=sha256:706bfd38730a5ac7a365793269a00f4e988178cec121391f4248d84ad8c972e9 \
-    --hash=sha256:7235dc28fc6dd9d832ac7c7bce95367dedb85929f17368a0c2bee1e080b9acbf \
-    --hash=sha256:774d157f112367ff4abd29019f38f023c24e00e56edc7829c20e358a5a913ad8 \
-    --hash=sha256:77efcff2b23071c349402ac1066667a3d011f62398d81408c9b88ad991747c9e \
-    --hash=sha256:789b8982559ae28dad2356519f841655756cdcd96616410590ae0b17454ee64f \
-    --hash=sha256:7ac76cf9afd34929d76eb7fcb63be476a4853d8a96f0dcf2d0db68a0cbdf9885 \
-    --hash=sha256:7c0c10730342b0c9b35dd1d619beb8214e520bd96a1f870f452680b238aab3e0 \
-    --hash=sha256:823f82903d189af463d7df250ef1f7f696f3cee08cc8d91deb565e8d425f6506 \
-    --hash=sha256:838648accb3a7fd9803fd45c87bce8509648eb0c11bc34e216141300977244f2 \
-    --hash=sha256:854066be00447fa8de2ccbbe893e2ffc4b123ef16d897af794c1e18bd4a714b0 \
-    --hash=sha256:85d5855daafc240cc045c026d7a15fd198a09b0fc8ff6f5ecbb5297b509cb11e \
-    --hash=sha256:85de3134b5379856e323ba37c19c9256d39425f7b76a63af52b09fb4664c2e8f \
-    --hash=sha256:87e4f41d375c0b9be2fb5251aee4b8a689169e134535aed81bf085c3b647451e \
-    --hash=sha256:88ca277405c2d3b71c4e1c2ee0e7966e807bcba86a69d11e19ba199d18ae4491 \
-    --hash=sha256:88e85ab89cb822c1e635f51d6d32e488f94e002e70e2f492bdb8b945543f345a \
-    --hash=sha256:8ac8c94b6539074e0f40899301273ac8402b9b3e01c7b7ba269ff30340aaaf20 \
-    --hash=sha256:8fe532b3c966d1fb794e0698e4589d0444017ae77fc0b31edea13c0e35bcc449 \
-    --hash=sha256:9085f87b0e38a2b92b8923059b4e8789fe40d9279712d15dcc670048d77079af \
-    --hash=sha256:90b7481fb62fbe172c558bc6fd1c4c98d82004a54a7551f20e11ac9bf0b8708c \
-    --hash=sha256:92caef967d287a407085d61176fce4012b1dd62daed4eb6d5ceb26d3d2538712 \
-    --hash=sha256:9362dd90aa7dab48c0054a21187791ccf05473f7dba5d92b8033ae62164675e7 \
-    --hash=sha256:94d78ecec2605a8d0398b0f365d5f12a63248438516f5dac536a5eff7337df4a \
-    --hash=sha256:94fbf1c0c6cc0d3d5e50f9a9313a8cdca90dd696d34b381cd1704f8c9e939f20 \
-    --hash=sha256:950f23cb393f85543777b0433f082cddd25b51ab398eac7971146495679efe5f \
-    --hash=sha256:96eefc178f8636b9c760c5829345307fd81cfae9ab1e80997dbddeb0f54ee9a3 \
-    --hash=sha256:96fef3e886d6a9874b14f27fc193fbdc69d5d8035783d86aa4e1cea594e695f9 \
-    --hash=sha256:977cdbd483a9cff38179bea4fd754289a6f2195c7abd414aba85410b3e66cc5e \
-    --hash=sha256:978eab16f55b4ab2c2a745be9a0a840bf8f09a7f227d9c76eb30214d078865a5 \
-    --hash=sha256:994e883d17c559cdfd38c84003c8b27d25424a1077272a17e7cd27bfe0bf57b2 \
-    --hash=sha256:9ac4444d8d4fd4c4bd08bf451ed3167aa9e7ec6cdb41b648794f1d1103652e36 \
-    --hash=sha256:9b5db6052055d34d41230fb78d7c439c23dc536a9896f6cb039e8dd92cfc1263 \
-    --hash=sha256:9d9a0dc7cbe9bec24c3f767c9122c41fe5a1bc43f47cd099d00d393e09769de4 \
-    --hash=sha256:9dbdd9205662134957cf0c324f639bdc5031c0ca056e2369e238db75187c0f11 \
-    --hash=sha256:9eea3ab2597a5e65fe65296e2d6a84570845a6b55532d90333d740d48bbc850a \
-    --hash=sha256:a2028475ba855475b8b4d3cfeb4994269c967aea8b9892dfba907f4263a863a3 \
-    --hash=sha256:a3a370082ce34d0612f421e15fe011c53bb1feff21a26d06ad4fb244dab5a375 \
-    --hash=sha256:a545775cfe815855ea32d7c27731d79da358ef2055b4a25830231b1622dd18aa \
-    --hash=sha256:a5cbd90ecf0fc62e64726917ad083b73001f0563657a87ec3c0b504e277dc90d \
-    --hash=sha256:a6d095662e73e74f0a49988e0593373e243e3a52e27bfeea0a859e88acf4a0f5 \
-    --hash=sha256:a6dac12ff6b846103483683f60c5f8fee205121adc58ffd87e90a90a3af69e99 \
-    --hash=sha256:a951ad59cad9145664a730d3036b40b844e74d2d3683da40111463cd3a83845d \
-    --hash=sha256:aa1099b956fb795e686d073568f6dc002a0bb89765ea6d5b055dd7d9bf1b116c \
-    --hash=sha256:aa2bb0b37202dca27175591f761108b5d34096ade1191ffe4808bdf6b1571488 \
-    --hash=sha256:aae2ee51122d3ae968a3837d97dc24a0aeebb0dea23694422cd172bd30017cd6 \
-    --hash=sha256:ab743e9bc90c1f73552ec33e10e3331315acd2c397b36065b591b0181de533cc \
-    --hash=sha256:ac00177c4831ffa650f8609e4bdddd5fe09c03b1c0c47acece7e6ea20421598b \
-    --hash=sha256:ac13b004224fb341e1e25a1ed5e19d32f57cdb2a403e01f003b46f051a550f6f \
-    --hash=sha256:acaf604462bf330b0d07e7a07c1d6e4adac79e5fb13e9c5140590542cafacc00 \
-    --hash=sha256:ae31a1a1db2ee6cc2942fccaf695c934bc7f3db9f2133a3fef1f367cf1a4ab10 \
-    --hash=sha256:ae4a097991662cd4fff0ddc74e0fe7874f82e00042fa0ea00855645ed0c79598 \
-    --hash=sha256:aea996a6aba25260827c9ea511d1addfde2da9eb686ac961838509086188b7e6 \
-    --hash=sha256:b39b69b347e5e47a3b5b8cfc005c68c1ba347474e3960236c4944a8ecd174962 \
-    --hash=sha256:b54e7e13267d49ffbfe68e25b3cbd774dab38fa37238f71265e91b36146eb21c \
-    --hash=sha256:b9af956078716df40d985fb0dfeb2c2120c5ca92ba4ff4b388acfd01cdc14d08 \
-    --hash=sha256:ba2f37ee79e6338845261a3c5b1784e5d1acdff2c0785b284f1b633033d136ab \
-    --hash=sha256:ba501e667c17d8411f98e67a022d9604ef179aff0e459b7e292c796837c13573 \
-    --hash=sha256:baf3775a2635e5a11fbd5e4e64ee69c7e86875d224a5c72aca4c141064589a90 \
-    --hash=sha256:bb57753e36e4855b8ca375069482250a6246372331a3e4f3407eaebb007443f5 \
-    --hash=sha256:bd6c173f04743d483881bffa1478d5a4624475b8cd1d2194956a75548e191c18 \
-    --hash=sha256:be47f99644b208bff7766314013f9acf57b056b04191d570d68ad14022cf5b1d \
-    --hash=sha256:c010f5581d9c612804cc59fcf7b524b707fbcb72828551237ab545bb5c7034af \
-    --hash=sha256:c1dcc36dcb96abc02236e182d17e0f71430152a6c2c7447421da2d2dc144edea \
-    --hash=sha256:c428c6c31eb5f4277d7f8eccaf767fbd548ddd5ce3c8b4f4cbbfab3d96b5904c \
-    --hash=sha256:c658c50ac0c98cd755a2dd50b7977d3bca7df401dcc47fbdfa87db53ef7d4e8b \
-    --hash=sha256:c71fb0d56c920c269cd3e2e3fe7c610e3f1fdb21a6ce60efa6430ff63676cea6 \
-    --hash=sha256:c7b742bf31c88566b4bb6335a7f393bb322e580b6bb98df7bd0c25e6e3519ce8 \
-    --hash=sha256:cc0329df4caaceb950d2f580b5ac716a377f7059624a0bafaeaf8a218c6ed774 \
-    --hash=sha256:cc5d36d96478aa9c60654bd932525bf32964c62a7281eafdf16d85003a8d6004 \
-    --hash=sha256:ce854f5f478050ade5a238731c4ca985a7d3b3cb53ff600a9b5c3b689b5f0a7a \
-    --hash=sha256:ced3fdd71aaa83ce593746c2edb42b7a59cb4c19c8b5c407781c72e493aae55a \
-    --hash=sha256:cee5dd7c6fb5dd52a0fe2a740f9bc6e3593f5f8b1788bde49de02086f30182b2 \
-    --hash=sha256:cfa1c0cc3a8f9f53f1243a5a99ac36fd003880199383b37672e86ddda9cb07e2 \
-    --hash=sha256:d1ee1e296209fdce05b81b663250eefa02213a2da7b41bf26f7829b8ba3545aa \
-    --hash=sha256:d59b75732e9b6f27388e10c14b0259cc5f2e48c78627d185e6a177b58ad3cffe \
-    --hash=sha256:d63600d620ad0064c3a748b950ac5ea38a80190e5498532efefa4b7b3f1da1f3 \
-    --hash=sha256:dd732602a7009217f658d5863d12d79d373a4de0eebc111094bcdd3bb8e0a6cc \
-    --hash=sha256:e06efa066f7dbadbc84ebc126a97c452a6451dfcf589d89d788484949e1cf795 \
-    --hash=sha256:e199fb99720074809a7720f1c0b4d919eea8b87e88713e0f8f602f7bef543d9d \
-    --hash=sha256:e4b018dc5a0eee4676e38fe84a47a427816c590b93b55d9025274ec4d6ffc2dc \
-    --hash=sha256:e6621fb2a4988d6e53eedc455e5903e2679f3967b8acb3d639f1b63c14a2e893 \
-    --hash=sha256:e71c909f353863b2b89c83de2ebed71ea6d0df8a6ef65a128193c5e650766bef \
-    --hash=sha256:e90251c0c7bdd54a100a0dce3c07b7e637278c93af29dbf78ebb89a58c4bac7d \
-    --hash=sha256:e9fbdce1e47394b09bc9f26ab117dfc8d6491977a11d86f592bb42c779db2fda \
-    --hash=sha256:eb12fb2ba69ffa05f8695f61c69e591dc4b4a12ac3757ac8af8adb259bf56d17 \
-    --hash=sha256:eda059b6bc8bc0812d626fd91a7ce01bf583df0a61296eff390fd94141a34e30 \
-    --hash=sha256:f03ac127268b43ef4fe9e6ab6794a6794b49485a0cc0c1db79876d2f33f75bc7 \
-    --hash=sha256:f298e218441525d3794428b4c8b8fb8662c6d3ea79925d4807ee6b9a96a3bca5 \
-    --hash=sha256:f5542f9b941279d82d41eb0aa9f98eba36fe4df5c7086c651df7944935b37182 \
-    --hash=sha256:f6f7deae3feb4edfa2efaf7c574fe88cbf055038a6abdb40188e4fff66d5699f \
-    --hash=sha256:f9b1e28d0e8dbfa858abdba91d6b547beaf2df1a59bec6da6faae7b96a4991a9 \
-    --hash=sha256:f9f8405c2c758532c74fed975dbee57be1f31a6e865c031870c79a6ed3212ada \
-    --hash=sha256:fa48b1b63d639f9483e0633e092f5851e2348c352f1f9bb6c8182f87884ef876 \
-    --hash=sha256:fb78f6e7fcd8ad785d28cd577168bc1aaee827b25bb8755638f694794ea98f0a \
-    --hash=sha256:fbc597639158fd7c14d55e808718848319540f51b0e6746e3eefa59723a4a348 \
-    --hash=sha256:fce8cbd4997efeb450bd298b54f755dcdff18d496f7a5ddbb4867c6d7c88fdc3 \
-    --hash=sha256:fd0350afdc3aabd5576f60ea109228bd5538139713c7b094c5cd27c73a98bc6f \
-    --hash=sha256:fd0a274c0e5f9a21565cd9d3dd749b61f96b7aa1e20a93aa1ba4029518f2e5c0 \
-    --hash=sha256:fdb8a068947befafba9952162645dc2fecaeb400e64584829ed5e9b2fbe21a7f
-    # via requests
-cryptography==50.0.1 \
-    --hash=sha256:01f41478cf33fc605a6a089cd56d28b45c6c0b45a1928b61797f2621a04bac71 \
-    --hash=sha256:05ba322c4da95b262a212c345af888ef2c37c88c0509756ea00a0e6d68850f23 \
-    --hash=sha256:16c5ecd954b3330ebfb6605eca4fd952da8bef376551d5cc264534e3770a9ee6 \
-    --hash=sha256:2a93d05e34d5f67fba6f891fe85d929999baa7195e853923ea6d7576c9e68c5e \
-    --hash=sha256:2b34d76a652ea2b6faf777c35df230c5637842cd904e04f16230c3f9f03e4361 \
-    --hash=sha256:2ebbfb0f1fed745e91796e3e1080a1440423fdae8ece1b995a1d80883a409054 \
-    --hash=sha256:30a125032e5642a21ff816e021152bd4e7e94f03eff3f4b7fca41cd22bc3110f \
-    --hash=sha256:330fbb252391c596f1ae42c5754449dc924e6ad012dca8efe0d703f9f2d12ec6 \
-    --hash=sha256:359e62deae718bce96170e223fdcb6357e4fbd3bb7a3a75f4430763532560e49 \
-    --hash=sha256:407fe2b6db00939c05c0e945e9914238f2f0a430974839429dafc82b1ee6bee5 \
-    --hash=sha256:42be3bb70596b3abe4ac097b75be223e8b3ab614a0e5de068e3dcc54d71d6149 \
-    --hash=sha256:4c4188f7c0cf655be5c06342b817ed0f9595b69ffa2b12026e5353eed29dea88 \
-    --hash=sha256:51593d180cf6d179bde5c5d065bed81386b1f381656ae7d042b7ffc87a9895ad \
-    --hash=sha256:51afcfceb15597cf2635068e4ac9a56b2abde622edde17f37d85fd7b5306497a \
-    --hash=sha256:53e279950892dc102c6b4e52af03ae5ea92fac572a1ddab78ca73a997f62b69f \
-    --hash=sha256:55d16b1ef3ee0958d893a977b19777887e546c9954ea81b200c3301a864013f2 \
-    --hash=sha256:5dd9bda1c12b4162f6ff568eeb5e0ff956c28d14406e875cfe8a63a2d414ff20 \
-    --hash=sha256:5fe002589592ed749ce77fe0695fcbd3500dd61d7d6db5858a7544c612fa8e45 \
-    --hash=sha256:5fe939deeb161024a6be98229c953b6591fef1f41214497a78fe793a244c017f \
-    --hash=sha256:693c99b49bd37d0d096e4334c10232c77248c415b98d35236094cdf96d57258b \
-    --hash=sha256:76de83fbd91ac49c0feaaa983d0748fd7a53176afac5fb3bf7478d244f0eb527 \
-    --hash=sha256:79bf008d1f9af6071c797ad133e39915dfee7614f18f18f4db9072eb715064a3 \
-    --hash=sha256:804728ce710890870f3aaa344b2e161172d258d768ac139d02cfd9092d0d94e6 \
-    --hash=sha256:8921d58f426793c5f1b47f0b59575780de9a095214958d0eb37d909593db8367 \
-    --hash=sha256:8df2de9102026855887e4587084f6eabd80ed0f345b8ad8a7ac27ab9bf4723e0 \
-    --hash=sha256:9cb3cb952cf5a8abd50c782a98a89d71699715e802fe349704b47f2425b42a94 \
-    --hash=sha256:9dde0a357190eb3b1da1bb9ab750e9c85cba82ca5977aa0836cbb94e92611239 \
-    --hash=sha256:9ebcdd5519be9b652a46f507817a74591774fc3d6923ac364e4dfa64e36b291b \
-    --hash=sha256:a0b1a59e3a089064a0ec309e9428c8e3ae4e161419d20ac33600767e83fc658a \
-    --hash=sha256:a255449073358275b64b67d3f595f268bbef70e72b6edb65e0c70c735bf739c9 \
-    --hash=sha256:a8f40ea47330e71b594a7e246898f93177c259490c63183dbaf9e571d71ed9a5 \
-    --hash=sha256:ac02b07824d4d1001bd4367599f839c19cb171924c796e52c23508ac14c2c0cc \
-    --hash=sha256:aed8db4f6d71c51efb89530e12d9464e7bf2923d46c3205dc794a2a93f8c0648 \
-    --hash=sha256:b8f852c65863251b9e3a1b8c150ce21e59b522dbb6a7d4bc80e680d38388e986 \
-    --hash=sha256:be224a65493ec5b74a158ff22a5522ce4a5ca1e543c647a3a4730d4a09e5f959 \
-    --hash=sha256:ca83d00d9e69cd5eb63f2e69c3a5a59e0cecae5ae14c6ae0b35830fe3b37bad0 \
-    --hash=sha256:cbf74a81765ee67413503ca6e26dcc4f6f5a519822436cc0a1b97aab6c1b8a17 \
-    --hash=sha256:d63ae8f6481fec907ac0f588eee8a90aefde112c633131fe540e5711ddbb5a4e \
-    --hash=sha256:e22dfed744bd4002e909464cb23d2f0b05c6f3113a79ef2e9864a53db737c733 \
-    --hash=sha256:e2ca8fd1b6b4b82a1c4cb02841d0837e3c12336c2e24b520ab8ab3b969733d8f \
-    --hash=sha256:e74591e283fe6eb956416c929eb58262a719fe0311fd9054c62c3350ed8760d8 \
-    --hash=sha256:f74455bb086a85d5e81246412602aaa97ed095e504cd40dd261ef50be42205bf \
-    --hash=sha256:fb4b9672d389c738b175c4166e78310f8a70358886aacd9173ee03a85ffdc671 \
-    --hash=sha256:fc3ed7ebd2a8c96f5b166de0ab9b624996bef3b07bbeb19364dfb78222c22c80 \
-    --hash=sha256:fd3718b960d0b5dd213cdf03f3bcb7000e69dda0de8b956061947ff6bcff5558 \
-    --hash=sha256:ff838d62ec1bfce4f9ba7fa16f4a7b554cd8d0c299e6be37502161a660c84eef
-    # via secretstorage
-docutils==0.23 \
-    --hash=sha256:25d013af9bf23bc1c7b2b093dff4208166c53a94786c9e447808335ef1185fea \
-    --hash=sha256:746f5060322511280a1e50eb76846ed6bf2342984b2ac04dc42caa1a8d78799e
-    # via readme-renderer
-id==1.6.1 \
-    --hash=sha256:d0732d624fb46fd4e7bc4e5152f00214450953b9e772c182c1c22964def1a069 \
-    --hash=sha256:f5ec41ed2629a508f5d0988eda142e190c9c6da971100612c4de9ad9f9b237ca
-    # via twine
-idna==3.19 \
-    --hash=sha256:5e0811a4383b21dc5838069f801c4fb62113b7447663d2530d2bd6e77b49bf15 \
-    --hash=sha256:815e7be7a7806d54abb586dc943addc79e8b2ee16915059658cbeff4b1b43bf4
-    # via requests
-importlib-metadata==9.0.1 \
-    --hash=sha256:ab830580bc0ef3db61ce8fae716389e5462b67e033018bab6d8f80ef17172f99 \
-    --hash=sha256:bba5600596a7e21f3eef53281cf28d6a5195634d2f2b78ff9501a3272c6eaab0
-    # via keyring
-jaraco-classes==3.4.0 \
-    --hash=sha256:47a024b51d0239c0dd8c8540c6c7f484be3b8fcf0b2d85c13825780d3b3f3acd \
-    --hash=sha256:f662826b6bed8cace05e7ff873ce0f9283b5c924470fe664fff1c2f00f581790
-    # via keyring
-jaraco-context==6.1.2 \
-    --hash=sha256:bf8150b79a2d5d91ae48629d8b427a8f7ba0e1097dd6202a9059f29a36379535 \
-    --hash=sha256:f1a6c9d391e661cc5b8d39861ff077a7dc24dc23833ccee564b234b81c82dfe3
-    # via keyring
-jaraco-functools==4.6.0 \
-    --hash=sha256:880c577ec9720b3a052d5bc611fb9f2269b3d87902ef42440df443b88e443280 \
-    --hash=sha256:99e3dc0060c5cbe8fcd1cdb36258e2a65ca40f1566b2033b12abb1bb44dd3c30
-    # via keyring
-jeepney==0.9.0 \
-    --hash=sha256:97e5714520c16fc0a45695e5365a2e11b81ea79bba796e26f9f1d178cb182683 \
-    --hash=sha256:cf0e9e845622b81e4a28df94c40345400256ec608d0e55bb8a3feaa9163f5732
-    # via
-    #   keyring
-    #   secretstorage
-keyring==25.7.0 \
-    --hash=sha256:be4a0b195f149690c166e850609a477c532ddbfbaed96a404d4e43f8d5e2689f \
-    --hash=sha256:fe01bd85eb3f8fb3dd0405defdeac9a5b4f6f0439edbb3149577f244a2e8245b
-    # via twine
-markdown-it-py==4.2.0 \
-    --hash=sha256:04a21681d6fbb623de53f6f364d352309d4094dd4194040a10fd51833e418d49 \
-    --hash=sha256:9f7ebbcd14fe59494226453aed97c1070d83f8d24b6fc3a3bcf9a38092641c4a
-    # via rich
-mdurl==0.1.2 \
-    --hash=sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8 \
-    --hash=sha256:bb413d29f5eea38f31dd4754dd7377d4465116fb207585f97bf925588687c1ba
-    # via markdown-it-py
-more-itertools==11.1.0 \
-    --hash=sha256:48e8f4d9e7e5878571ecf6f2b4e57634f93cd474cc8cfbd2376f2d11b396e30d \
-    --hash=sha256:4b65538ae22f6fed0ce4874efd317463a7489796a0939fa66824dd542125a192
-    # via
-    #   jaraco-classes
-    #   jaraco-functools
-nh3==0.3.7 \
-    --hash=sha256:157ec1eb7a62f3d9a7badb8d82d89aa810e3e24e097eedfa481a25d0c8a99877 \
-    --hash=sha256:15f5fbf090f5c88d61c820e1fc1fceecb6520cca9fe85649c06b57ef9dc9ff62 \
-    --hash=sha256:18f4278ecd157d43cb35acd5aae9f35cfa79f546b4922bd86536adc0f6312102 \
-    --hash=sha256:19f288c938ec6eef1f5d2c6cab47838e71fef8097e1c1233802be5a6230ba086 \
-    --hash=sha256:4968fe8d2db97c6f047659bf46a449fd8ec377f44ebf3e0a1b96c0d3a333ae32 \
-    --hash=sha256:5ffdfcb9a686ffb12765376bcfb6b5b55728516d3c0ee317d29982381ded3df8 \
-    --hash=sha256:614dac4a4c36ad084e78447d16fe898dedd762e354a7ab9cda2984e82f67883d \
-    --hash=sha256:618e3059caf41ccdf5dcccb3fa9df4cf6e4efe23d1382a8bbfca272a8a4f8bfc \
-    --hash=sha256:6698a822132beedab80f131c08d8d0ac5a178ddeb488d02ca4b67716ecfac7af \
-    --hash=sha256:6c3aa50eb26e9228238271db9f983cbc3b006dfbfeca2d4dc34c33ddc6ac5ea5 \
-    --hash=sha256:6e4280115d44c3b278eef712a86748c1a723105cd79feec46952383117ab4e59 \
-    --hash=sha256:70f5ac8626e899a4bab0ef74ca2f5bd602f49c7b739e6e5026b4afc6d63dac42 \
-    --hash=sha256:71860d01c16f4d8c72e334e0674beb2b0899dbd0bf760de18932ef4390303848 \
-    --hash=sha256:808def0c8c07843e6e50dc84f532457bfa2cfd17417b219a5d9e7c773709331a \
-    --hash=sha256:874b7d67a067bd29a59223f6270fc30da4edd8e6d87fd219fc93bcbaa662c946 \
-    --hash=sha256:91a4dab4e94d9fc54b9f67b1adfb23e81fab7ab43f33c3b8c97be9aa38f789ba \
-    --hash=sha256:94fd6e59553fbb9ffd8ba71bbd5a54e3126ba01799a097ae30d5341d750bc6ac \
-    --hash=sha256:9b7279d43323a25225df23576af6594a16693f61431170848b8b2ac21ad4f174 \
-    --hash=sha256:bc42bb1193c1e28a1e74c2cabaca178e118a7103e8832699fef8a2b3e2496493 \
-    --hash=sha256:be53a4825585f701955cb9baf49f478f56eb81e20294329fe4bc689dd5dd81fa \
-    --hash=sha256:d56e76bd3cadb09b6b0cef364850811663734b348a25f5f587a2819c495367bd \
-    --hash=sha256:de2b2aab32ea303405debefdcfc58043d3e635fa3f67b9eb140d2b0e0c0d2563 \
-    --hash=sha256:e8fd1ab205258b29254f72db377d99e2c96aa7653ef3b015ccab0420b094b506 \
-    --hash=sha256:eae64328e46a25785535afcb6885b6f182ecaf5ee8c88f8c075422db8aacc65b \
-    --hash=sha256:f04b7d333b27f13ca439da3cf1c75c2fba34f104969f6ce4ac8e7079699c2f4a \
-    --hash=sha256:f266d3f1b3647449923a8e406524632220dd5d8b647078dfe45b885d33d10479 \
-    --hash=sha256:fd4a70efb45d5372174f718878eb7a35c12677626a63b2f103b23b833457dcac
-    # via readme-renderer
-packaging==26.3 \
-    --hash=sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79 \
-    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
-    # via twine
-pycparser==3.0 \
-    --hash=sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29 \
-    --hash=sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992
-    # via cffi
-pygments==2.21.0 \
-    --hash=sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9 \
-    --hash=sha256:610ca751c9bc2492b38eb9a38a7fbc93edbbb2d7182edaf34e66ae493dee5c8c
-    # via
-    #   readme-renderer
-    #   rich
-readme-renderer==46.0 \
-    --hash=sha256:af3e964914f6310a33ff67b72a4bdd940bed8d7c3bdecd2d14f40edf284bfe90 \
-    --hash=sha256:d0dae1f74bb273b534770cb4cccb6bb78735540afdb03c2146f4e19dcd412560
-    # via twine
-requests==2.34.2 \
-    --hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0 \
-    --hash=sha256:f288924cae4e29463698d6d60bc6a4da69c89185ad1e0bcc4104f584e960b9ed
-    # via
-    #   requests-toolbelt
-    #   twine
-requests-toolbelt==1.0.0 \
-    --hash=sha256:7681a0a3d047012b5bdc0ee37d7f8f07ebe76ab08caeccfc3921ce23c88d5bc6 \
-    --hash=sha256:cccfdd665f0a24fcf4726e690f65639d272bb0637b9b92dfd91a5568ccf6bd06
-    # via twine
-rfc3986==2.0.0 \
-    --hash=sha256:50b1502b60e289cb37883f3dfd34532b8873c7de9f49bb546641ce9cbd256ebd \
-    --hash=sha256:97aacf9dbd4bfd829baad6e6309fa6573aaf1be3f6fa735c8ab05e46cecb261c
-    # via twine
-rich==15.0.0 \
-    --hash=sha256:33bd4ef74232fb73fe9279a257718407f169c09b78a87ad3d296f548e27de0bb \
-    --hash=sha256:edd07a4824c6b40189fb7ac9bc4c52536e9780fbbfbddf6f1e2502c31b068c36
-    # via twine
-secretstorage==3.5.0 \
-    --hash=sha256:0ce65888c0725fcb2c5bc0fdb8e5438eece02c523557ea40ce0703c266248137 \
-    --hash=sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be
-    # via keyring
-twine==7.0.0 \
-    --hash=sha256:85cdb29c518efef867360ae4acd4b0dfd61c8654a22fca08e6f8539f05022177 \
-    --hash=sha256:b854164df26db268af05f49aa5c0344b10e27a494343ff05b1e0bad3b135f5a7
-    # via -r .github/requirements/twine.in
-urllib3==2.7.0 \
-    --hash=sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c \
-    --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897
-    # via
-    #   id
-    #   requests
-    #   twine
-zipp==4.1.0 \
-    --hash=sha256:25ad4e16390cd314347dd8f1de67a2ac538ae658ed4ab9db16029c07c188e97f \
-    --hash=sha256:4cb57381f544315db7688e976e922a2b18cdb513d21cc194eb42232ba2a3e602
-    # via importlib-metadata
@@ -1 +0,0 @@
-uv==0.12.1
@@ -1,23 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile .github/requirements/uv-tool.in --generate-hashes --python-version 3.11 --python-platform linux -o .github/requirements/uv-tool.txt
-uv==0.12.1 \
-    --hash=sha256:04290ea4001dca31ac8a8324113a4930dccad69ce35dbf6eaae307d54880890d \
-    --hash=sha256:153ec0959a15397514438aefc1d7cd04235f335dd6bb53ea0f9e6e82c5a49f03 \
-    --hash=sha256:173ee216f17d89fc39f65339d311a53584fc7de4918d27c0f3c7edafabc6b54d \
-    --hash=sha256:1de49d9b04438f1ad2f41a1441dbbe19e230b94fca56d632818cfaed69e03bfc \
-    --hash=sha256:1e8fd95fe98768e29436ad57f9ef7b68dc294b7b9862ef63396af8b15ab85e6c \
-    --hash=sha256:27211df9b277f440dea438a4e525ba40250fb721ad39b8927eefc2d91f9aea15 \
-    --hash=sha256:29399e1e73b67ed24abe82bc971aa4eb8419c4de804784290f39cf681f0b51ce \
-    --hash=sha256:2e9b0b86e180abc5968b979c6e25203b32e85969abb5083ee1e8b88a5aa98a76 \
-    --hash=sha256:3bd5db002adc763aa8d277f5b44f8d6e3fd82d20f2e51225b0bbdae1badc7259 \
-    --hash=sha256:41b8fc2335f682312a1ca39a7b4abfd6af800992065c663582ca3e4d51cf9258 \
-    --hash=sha256:5bd04849dd5346517cc4e57b4b3aa0b01c67c423878260c04f5893a038fe25b6 \
-    --hash=sha256:6f7e72543264d2420ebb2ddc84696a751af2d6c5910046b7666589118f47292b \
-    --hash=sha256:71f86410264c69a3e8acd18171897dd8ab1a13350cf40f718e4def5db2b724be \
-    --hash=sha256:76d87de420213ca92fa403e87023c4c7c6956c6726c6b96d91c42cfe620173a3 \
-    --hash=sha256:9331dda0dc4990512c232f86e1d3a7b83c13f459777fcc2bd46030911b40eaaa \
-    --hash=sha256:b255ac23958e45f39f9c7a4cd65890df5ef46f539a3b14de03bd296bbba9cb60 \
-    --hash=sha256:bd02f2da212e6a983115dc64a6fc94e9256c2d60e056d6b669de0a6025aaec05 \
-    --hash=sha256:e35e0030480a8c3bf8ecd87ae4a6f6a224009e15e96a6fbb3634ac11ab75d582 \
-    --hash=sha256:ead7ad064f291a5df358c3ffa8ffab347a32bd5a75a6a068ca22254c2539a829
-    # via -r .github/requirements/uv-tool.in
@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-# Verifies that every third-party GitHub Action referenced in
-# .github/workflows/*.yml and .github/workflows/*.yaml is pinned to a full
-# commit SHA (not a mutable tag
-# or branch), and that any pin's trailing "# vX" comment still matches what
-# that tag resolves to today.
-#
-# Fails closed on purpose:
-#   - a `uses:` line pinned to anything other than a 40-hex-char SHA is a
-#     hard failure, not a skip - this is what stops a newly-added mutable
-#     tag (e.g. `uses: some/action@v1`) from slipping past unnoticed.
-#   - a tag that can't be resolved via the GitHub API (rate limit, deleted
-#     tag, typo) is also a hard failure rather than a warning - an
-#     unverifiable pin is exactly the failure mode this check exists to
-#     catch, so it must not pass silently.
-set -uo pipefail
-
-fail=0
-checked=0
-
-# Pattern for a third-party uses: line — stored in a variable so bash's
-# [[ =~ ]] parser never sees literal \" or \' escapes, which cause a
-# "syntax error in conditional expression: unexpected token )" at runtime.
-# Semantics: optional leading quote, owner/repo, optional subpath, @ref,
-# optional trailing quote; quote chars excluded from the ref capture group.
-USES_PATTERN='uses:[[:space:]]+["'"'"']?([A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+)(/[^[:space:]@"'"'"']+)?@([^[:space:]"'"'"']+)["'"'"']?'
-
-while IFS=: read -r file lineno content; do
-  # Local composite actions (./x) and Docker image refs (docker://...) use a
-  # different pinning mechanism and aren't in scope here.
-  [[ "$content" =~ uses:\ +\./ ]] && continue
-  [[ "$content" =~ uses:\ +docker:// ]] && continue
-
-  if [[ "$content" =~ $USES_PATTERN ]]; then
-    repo="${BASH_REMATCH[1]}"
-    ref="${BASH_REMATCH[3]}"
-    checked=$((checked + 1))
-
-    if [[ ! "$ref" =~ ^[0-9a-fA-F]{40}$ ]]; then
-      echo "::error file=$file,line=$lineno::$repo is pinned to '$ref', not a full commit SHA. Mutable tags/branches can be silently re-pointed (see the LiteLLM/Trivy 2026 incident) - pin to a commit SHA instead."
-      fail=1
-      continue
-    fi
-    sha="$ref"
-
-    if [[ "$content" =~ \#[[:space:]]*([^[:space:]]+)[[:space:]]*$ ]]; then
-      tag="${BASH_REMATCH[1]}"
-    else
-      echo "::warning file=$file,line=$lineno::$repo@$sha has no trailing '# vX' comment recording which tag it corresponds to - add one for auditability."
-      continue
-    fi
-
-    resolved=$(gh api "repos/$repo/commits/$tag" --jq '.sha' 2>/dev/null)
-    if [[ -z "$resolved" ]]; then
-      echo "::error file=$file,line=$lineno::Could not resolve '$repo@$tag' via the GitHub API (rate limit, deleted tag, or typo). Treating as unverifiable = failure."
-      fail=1
-      continue
-    fi
-
-    if [[ "$resolved" != "$sha" ]]; then
-      echo "::error file=$file,line=$lineno::$repo is pinned to $sha but tag '$tag' now resolves to $resolved. Update the pin or the comment."
-      fail=1
-    else
-      echo "OK  $repo@$tag -> $sha  ($file:$lineno)"
-    fi
-  fi
-done < <(grep -rHn "uses:" .github/workflows/*.yml .github/workflows/*.yaml 2>/dev/null)
-
-echo "Checked $checked action reference(s)."
-exit $fail
@@ -1,6 +1,13 @@
 name: Semantica Performance Suite

 on:
+  push:
+    branches: [main]
+    paths-ignore:
+      - 'docs/**'
+      - 'mkdocs.yml'
+      - 'requirements-docs.txt'
+      - '**/*.md'
  workflow_dispatch:

 permissions:
@@ -13,14 +20,14 @@ jobs:

    steps:
      - name: Checkout Code
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        uses: actions/checkout@v4
        with:
          fetch-depth: 0

-      - name: Set up Python 3.11
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
        with:
-          python-version: "3.11"
+          python-version: "3.12"
          cache: 'pip'

      - name: Install Dependencies
@@ -28,29 +35,11 @@ jobs:

          BENCHMARK_REAL_LIBS: "1"
        run: |
-          pip install -r .github/requirements/bootstrap.txt --require-hashes
-          # --no-deps + a hash-pinned install of the same base dependency set
-          # (rather than a bare `pip install -e .`) so every fetched package
-          # is hash-verified (Scorecard Pinned-Dependencies); the local
-          # editable install itself has nothing to hash.
-          #
-          # --no-deps only skips *runtime* dependency resolution - `-e .`
-          # still does a PEP 517 build, which by default creates an isolated
-          # build env and fetches [build-system] requires (setuptools,
-          # wheel) completely outside any hash checking. Install
-          # pep517-build.txt (pins that exact build-system.requires) first
-          # and pass --no-build-isolation so pip reuses those hash-verified
-          # copies instead of fetching its own.
-          pip install -r .github/requirements/pep517-build.txt --require-hashes
-          pip install --no-deps --no-build-isolation -e .
-          pip install -r .github/requirements/base-deps.txt --require-hashes
-          # NOTE: benchmarks/ does not currently exist in this repo, so this
-          # step and the run below it fail on any real invocation - pre-existing,
-          # unrelated to this pinning change. Left as-is since there's nothing
-          # to hash without knowing what belongs there.
+          python -m pip install --upgrade pip
+          pip install -e .
          pip install -r benchmarks/requirements.txt
          python -m spacy download en_core_web_sm
-          pip install -r .github/requirements/benchmark-extra.txt --require-hashes
+          pip install rdflib neo4j faiss-cpu torch pyarrow pdfplumber python-pptx openpyxl lxml python-docx beautifulsoup4 chardet langdetect

      - name: Execute Benchmarks (Real Mode)
        env:
@@ -61,7 +50,7 @@ jobs:
          # pytest-benchmark --storage file://benchmarks/results --benchmark-compare

      - name: Upload Benchmark Results
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: benchmark-report-${{ github.run_id }}
@@ -1,120 +1,28 @@
 name: CI

-permissions:
-  contents: read
-
 on:
  push:
    branches: [main]
    paths-ignore:
      - 'docs/**'
-      - 'docs_check.py'
+      - 'mkdocs.yml'
+      - 'requirements-docs.txt'
      - '**/*.md'
  pull_request:
    branches: [main]
    paths-ignore:
      - 'docs/**'
-      - 'docs_check.py'
+      - 'mkdocs.yml'
+      - 'requirements-docs.txt'
      - '**/*.md'

 jobs:
  build:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
        with:
          python-version: '3.11'
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: '20'
-          cache: 'npm'
-          cache-dependency-path: explorer/package-lock.json
-      - name: Install Explorer frontend dependencies
-        working-directory: explorer
-        run: npm ci
-      - name: Install Playwright Chromium
-        working-directory: explorer
-        run: npx playwright install --with-deps chromium
-      - name: Test Explorer frontend
-        working-directory: explorer
-        run: |
-          npm run test:graph-store
-          npm run test:graph-workspace
-          npm run test:plugin-registry
-          npm run test:deterministic-e2e
-      - name: Build Explorer frontend
-        working-directory: explorer
-        run: npm run build
-      - name: Install Explorer backend test dependencies
-        run: |
-          # Run the deterministic backend path before the all-extras CI
-          # environment is installed.  The Explorer extra supplies the
-          # production API dependencies without importing optional vector
-          # providers such as Pinecone during test collection.
-          #
-          # --no-deps + a separate hash-pinned install (rather than the old
-          # `pip install -e ".[explorer]" pytest==9.1.1`) so every fetched
-          # package is hash-verified (Scorecard Pinned-Dependencies); the
-          # local editable install itself has nothing to hash.
-          # .github/requirements/explorer-extra-py311.txt is
-          # `uv pip compile pyproject.toml --extra explorer --python-version 3.11 --constraint requirements-ci.txt --generate-hashes`
-          # - regenerate it the same way if pyproject.toml's base/explorer
-          # deps change. Resolved specifically for this job's python 3.11
-          # (see the Dockerfile's explorer-extra-py313.txt for why this
-          # can't be shared with python 3.13: audioread needs extra
-          # standard-aifc/standard-sunau hashes only on 3.13+).
-          #
-          # --no-deps only skips *runtime* dependency resolution - `-e .`
-          # still does a PEP 517 build, which by default creates an isolated
-          # build env and fetches [build-system] requires (setuptools,
-          # wheel) completely outside any hash checking. Install
-          # pep517-build.txt (pins that exact build-system.requires) first
-          # and pass --no-build-isolation so pip reuses those hash-verified
-          # copies instead of fetching its own.
-          pip install -r .github/requirements/pep517-build.txt --require-hashes
-          pip install --no-deps --no-build-isolation -e .
-          pip install -r .github/requirements/explorer-extra-py311.txt --require-hashes
-          pip install -r .github/requirements/pytest-tool.txt --require-hashes
-      - name: Test deterministic Explorer backend path
-        run: |
-          pytest -q tests/explorer/test_explorer_deterministic_rendering_e2e.py
-      - name: Install pinned Python dependencies
-        run: |
-          pip install -r requirements-ci.txt --require-hashes
-      - name: Verify requirements-ci.txt is up to date
-        run: |
-          pip install -r .github/requirements/uv-tool.txt --require-hashes
-          # Re-resolve with the committed file as a constraint: upstream package
-          # releases must NOT fail CI (deps only change when pyproject.toml
-          # changes intentionally). Compare only version lines (pkg==ver),
-          # ignoring the -c constraint comments and the `\` line continuations
-          # that --generate-hashes emits.
-          uv pip compile pyproject.toml --python-version 3.11 --extra all \
-            --constraint requirements-ci.txt -o /tmp/requirements-ci-check.txt
-          diff \
-            <(grep -E '^[a-zA-Z0-9._-]+==' requirements-ci.txt | sed 's/ \\$//') \
-            <(grep -E '^[a-zA-Z0-9._-]+==' /tmp/requirements-ci-check.txt)
-      # build is a dev-time dependency; wheel is build-time only (neither is
-      # in requirements-ci.txt) — install the same pinned versions
-      # [build-system] declares so --no-isolation works below.
-      - run: pip install -r .github/requirements/build-tools.txt --require-hashes
-      - name: Build package (no isolation — pinned deps)
-        run: python -m build --no-isolation
-      - name: Verify Explorer frontend is packaged
-        run: |
-          python - <<'PY'
-          import zipfile
-          from pathlib import Path
-
-          wheels = list(Path("dist").glob("*.whl"))
-          assert wheels, "No wheel was built"
-
-          with zipfile.ZipFile(wheels[0]) as wheel:
-              names = set(wheel.namelist())
-
-          assert "semantica/static/index.html" in names, "Explorer index.html missing from wheel"
-          assert any(name.startswith("semantica/static/assets/") for name in names), "Explorer assets missing from wheel"
-
-          print("Explorer frontend is packaged")
-          PY
+      - run: pip install build
+      - run: python -m build
@@ -10,61 +10,30 @@ on:

 permissions:
  contents: read
+  security-events: write
+  actions: read

 jobs:
  analyze:
    name: Analyze Python
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      security-events: write  # for github/codeql-action/upload-sarif below
-      actions: read           # for github/codeql-action/init's CodeQL bundle cache lookup

    steps:
      - name: Checkout repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        uses: actions/checkout@v4

-      # The CodeQL bundle download (github/codeql-action/init's "Setup CodeQL
-      # tools" step) streams a ~1GB tarball from GitHub's release CDN and
-      # does not retry on a transient connection reset (ECONNRESET) itself
-      # (github/codeql-action, unresolved as of v4 / CLI 2.26.1: the HTTP
-      # error is retryable but isn't retried internally). Since a `uses:`
-      # step can't be wrapped by a shell-level retry action, attempt init
-      # up to 3 times; each retry is a fresh download attempt with no
-      # meaningful state carried over from a failed attempt.
-      - name: Initialize CodeQL (attempt 1)
-        id: codeql-init-1
-        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
-        continue-on-error: true
-        with:
-          languages: python
-          queries: security-and-quality
-          config-file: .github/codeql/codeql-config.yml
-
-      - name: Initialize CodeQL (attempt 2)
-        id: codeql-init-2
-        if: steps.codeql-init-1.outcome == 'failure'
-        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
-        continue-on-error: true
-        with:
-          languages: python
-          queries: security-and-quality
-          config-file: .github/codeql/codeql-config.yml
-
-      - name: Initialize CodeQL (attempt 3)
-        id: codeql-init-3
-        if: steps.codeql-init-2.outcome == 'failure'
-        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
        with:
          languages: python
          queries: security-and-quality
          config-file: .github/codeql/codeql-config.yml

      - name: Autobuild
-        uses: github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
+        uses: github/codeql-action/autobuild@v4

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
+        uses: github/codeql-action/analyze@v4
        with:
          category: "/language:python"
          upload: false
@@ -74,7 +43,7 @@ jobs:
        # Uploads results only when Default Setup is not active.
        # If Default Setup is still enabled, this step skips gracefully
        # instead of failing the workflow with HTTP 409.
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
+        uses: github/codeql-action/upload-sarif@v4
        with:
          sarif_file: ${{ steps.codeql.outputs.sarif-output }}
          category: "/language:python"
@@ -1,75 +0,0 @@
-name: Container Security Scan
-
-on:
-  push:
-    branches: [main]
-    # Mirrors .dockerignore's opt-in list exactly - anything not listed there
-    # can't reach the build context, so it can't change the built image.
-    paths:
-      - 'Dockerfile'
-      - '.dockerignore'
-      - 'pyproject.toml'
-      - 'README.md'
-      - 'LICENSE'
-      - 'MANIFEST.in'
-      - '.github/requirements/explorer-extra-py313.txt'
-      - '.github/requirements/pep517-build.txt'
-      - 'semantica/**'
-      - 'integrations/**'
-      - 'explorer/**'
-      - '.github/workflows/container-scan.yml'
-  schedule:
-    - cron: '30 2 * * 1'  # weekly, catches new CVEs published against the base image between pushes
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  scan:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      security-events: write  # for github/codeql-action/upload-sarif below
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-
-      - name: Build image
-        run: docker build -t semantica:scan .
-
-      # Run Trivy as a digest-pinned image rather than the aquasecurity/trivy-action
-      # marketplace wrapper: the aquasecurity GitHub org has an IP allow list on its
-      # API that 403s verify-action-pins.sh's live tag->SHA check from Actions-runner
-      # IPs, and this repo already treats Trivy's action pin as a known past target
-      # for tag-repointing (see the LiteLLM/Trivy 2026 incident note above). Pulling
-      # by sha256 digest from Docker Hub is immutable and verifiable independently of
-      # GitHub's API, so it sidesteps both problems at once instead of carving a skip
-      # exception into the pin verifier for an org already flagged as higher-risk.
-      #
-      # Report-only for now: this is Trivy's first run against this image, so we
-      # don't yet know the CRITICAL/HIGH baseline. Findings still land in the
-      # Security tab either way. Once triaged, add `--exit-code 1` (like
-      # Safety/Bandit-HIGH in security-scan.yml) to make it a hard gate.
-      - name: Scan image for vulnerabilities (Trivy)
-        run: |
-          docker run --rm \
-            -v /var/run/docker.sock:/var/run/docker.sock \
-            -v "$PWD:/output" \
-            aquasec/trivy@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969 \
-            image --format sarif --output /output/trivy-results.sarif \
-            --severity CRITICAL,HIGH --ignore-unfixed semantica:scan
-
-      - name: Upload Trivy SARIF
-        if: always()
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
-        with:
-          sarif_file: trivy-results.sarif
-          category: trivy-container
-
-      - name: Generate SBOM (Syft)
-        if: always()
-        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
-        with:
-          image: semantica:scan
-          format: spdx-json
-          output-file: semantica-sbom.spdx.json
@@ -1,90 +0,0 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-#
-# Microsoft Security DevOps (MSDO) is a command line application which integrates static analysis tools into the development cycle.
-# MSDO installs, configures and runs the latest versions of static analysis tools
-# (including, but not limited to, SDL/security and compliance tools).
-#
-# The Microsoft Security DevOps action is currently in beta and runs on the windows-latest queue,
-# as well as Windows self hosted agents. ubuntu-latest support coming soon.
-#
-# For more information about the action , check out https://github.com/microsoft/security-devops-action
-#
-# Please note this workflow do not integrate your GitHub Org with Microsoft Defender For DevOps. You have to create an integration
-# and provide permission before this can report data back to azure.
-# Read the official documentation here : https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-github
-
-name: "Microsoft Defender For Devops"
-
-on:
-  push:
-    branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
-  schedule:
-    - cron: '43 17 * * 6'
-
-permissions:
-  contents: read
-
-jobs:
-  MSDO:
-    # currently only windows-latest is supported
-    runs-on: windows-latest
-    permissions:
-      contents: read
-      security-events: write  # for github/codeql-action/upload-sarif below
-
-    steps:
-    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-    - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
-      with:
-        dotnet-version: |
-          5.0.x
-          6.0.x
-    - name: Run Microsoft Security DevOps
-      uses: microsoft/security-devops-action@08976cb623803b1b36d7112d4ff9f59eae704de0 # v1.12.0
-      id: msdo
-      with:
-        # checkov is intentionally excluded from this MSDO step.
-        # MSDO 0.215.0's guardian.cmd wrapper treats checkov's exit code 1
-        # (emitted whenever any violation is found, even below the active severity
-        # threshold) as a fatal "tool error" and breaks the build even when
-        # "Active results: 0" and "Found no breaking results." The .checkov.yaml
-        # soft-fail setting is never read by the guardian wrapper.
-        # IaC security scanning continues below in this same MSDO job identity.
-        # That preserves the existing GitHub code-scanning configuration while
-        # avoiding the guardian.cmd/checkov exit-code bug in the MSDO wrapper.
-        tools: eslint,templateanalyzer,terrascan
-    - name: Upload results to Security tab
-      uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
-      with:
-        sarif_file: ${{ steps.msdo.outputs.sarifFile }}
-
-    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
-      with:
-        python-version: "3.12"
-
-    - name: Install Checkov
-      run: pip install -r .github/requirements/checkov.txt --require-hashes
-
-    - name: Run Checkov
-      shell: pwsh
-      env:
-        PYTHONUTF8: "1"
-      run: |
-        New-Item -ItemType Directory -Force reports | Out-Null
-        checkov --directory . --framework kubernetes helm dockerfile github_actions secrets bicep arm --soft-fail --output sarif --output-file-path reports/checkov.sarif
-        if (-not (Test-Path reports/checkov.sarif)) {
-          $sarif = Get-ChildItem -Path reports -Recurse -Filter *.sarif | Select-Object -First 1
-          if ($null -eq $sarif) { throw "Checkov did not produce a SARIF file" }
-          Copy-Item $sarif.FullName reports/checkov.sarif
-        }
-
-    - name: Upload Checkov results to Security tab
-      uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
-      if: always()
-      with:
-        sarif_file: reports/checkov.sarif
@@ -1,68 +1,80 @@
 name: Build and Deploy Documentation

+# This workflow builds the documentation site and deploys it to GitHub Pages
+# It runs when changes are pushed to the 'docs' folder on the main branch
+
 on:
  push:
    branches: [main]
    paths:
      - 'docs/**'
-      - 'docs_check.py'
+      - 'mkdocs.yml'
+      - 'requirements-docs.txt'
      - 'CHANGELOG.md'
      - 'RELEASE.md'
-  pull_request:
-    branches: [main]
-    paths:
-      - 'docs/**'
-      - 'docs_check.py'
+  release:
+    types: [published]
  workflow_dispatch:

+# Permissions needed to deploy to GitHub Pages
 permissions:
  contents: read
  pages: write
  id-token: write

+# Prevent concurrent deployments
 concurrency:
  group: "pages"
  cancel-in-progress: false

 jobs:
-  validate:
-    name: Validate Documentation
+  build:
+    name: Build Documentation
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
        with:
          python-version: '3.11'
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: '20'
-      - run: python docs_check.py

-  deploy:
-    name: Build and Deploy to GitHub Pages
-    if: github.event_name != 'pull_request'
-    runs-on: ubuntu-latest
-    needs: validate
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: '20'
-
-      - name: Export static site
+      - name: Install documentation dependencies
        run: |
-          cd docs
-          npx mintlify export --output ../export.zip
-          cd ..
-          unzip -q export.zip -d site
+          python -m pip install --upgrade pip
+          pip install -r requirements-docs.txt

-      - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
+      - name: Build documentation
+        # Builds the static site using MkDocs
+        run: mkdocs build --strict

-      - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
+      - name: Check for broken links
+        # Optional: checks if any links in the docs are broken
+        run: |
+          pip install linkchecker || echo "Skipping link check"
+          if [ -d "site" ]; then
+            linkchecker site/ --check-extern || echo "Link check completed"
+          fi
+        continue-on-error: true
+
+      - name: Setup Pages
+        uses: actions/configure-pages@v6
+        continue-on-error: true
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v5
        with:
          path: ./site

+  deploy:
+    name: Deploy to GitHub Pages
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
      - name: Deploy to GitHub Pages
        id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5
+        uses: actions/deploy-pages@v5
@@ -1,59 +0,0 @@
-name: Install Matrix
-
-permissions:
-  contents: read
-
-on:
-  schedule:
-    - cron: '0 6 * * 1'  # weekly, catches upstream dependency breakage between releases
-  workflow_run:
-    # The Release workflow publishes the GitHub release *before* it uploads to
-    # PyPI (see release.yml), so triggering on `release: published` would race
-    # the PyPI upload and could pass by silently installing the prior version.
-    # workflow_run fires only after the whole Release workflow - including the
-    # PyPI publish step - has finished.
-    workflows: ['Release']
-    types: [completed]
-  workflow_dispatch:
-
-jobs:
-  verify-install:
-    if: github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success'
-    name: pip install semantica (${{ matrix.os }}, py${{ matrix.python-version }})
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
-        python-version: ['3.9', '3.10', '3.11', '3.12']
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-
-      - name: Pin expected version for release-triggered runs
-        id: expected-version
-        if: github.event_name == 'workflow_run'
-        shell: bash
-        env:
-          EXPECTED_TAG: ${{ github.event.workflow_run.head_branch }}
-        run: |
-          expected="${EXPECTED_TAG#v}"
-          if [ -z "$expected" ]; then
-            echo "::error::Could not determine a release tag from the triggering workflow run (head_branch was empty)."
-            exit 1
-          fi
-          echo "constraint===$expected" >> "$GITHUB_OUTPUT"
-
-      - id: setup-semantica
-        uses: ./.github/actions/setup-semantica
-        with:
-          python-version: ${{ matrix.python-version }}
-          cache: 'pip'
-          version: ${{ steps.expected-version.outputs.constraint }}
-
-      - name: Smoke test import
-        shell: bash
-        run: |
-          python -c "
-          import semantica
-          print('semantica', semantica.__version__, 'installed and importable')
-          "
@@ -5,87 +5,21 @@ on:
    tags: ['v*']

 permissions:
-  contents: read
+  contents: write
+  id-token: write

 jobs:
  release:
    runs-on: ubuntu-latest
    environment: pypi
-    concurrency:
-      group: release-${{ github.ref }}
-      cancel-in-progress: false
-    permissions:
-      contents: write      # for the GitHub Release
-      id-token: write      # for PyPI Trusted Publishing (OIDC), attestation signing, and Sigstore
-      attestations: write  # for SLSA build provenance
-    # If you add another job to this workflow, give it its own explicit
-    # `permissions:` block rather than relying on the workflow-level default
-    # above (contents: read) - do not widen the workflow-level default.
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
        with:
          python-version: '3.11'
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+      - run: pip install build
+      - run: python -m build
+      - uses: softprops/action-gh-release@v3
        with:
-          node-version: '20'
-          cache: 'npm'
-          cache-dependency-path: explorer/package-lock.json
-      - name: Build Explorer frontend
-        working-directory: explorer
-        run: |
-          npm ci
-          npm run build
-      # Install the pinned dependency set (with hashes) so the sdist/wheel
-      # build runs against the same versions CI tests against.
-      - name: Install pinned build dependencies
-        run: pip install -r requirements-ci.txt --require-hashes
-      # build is a dev-time dependency; wheel is build-time only (neither is
-      # in requirements-ci.txt) — install the same pinned versions
-      # [build-system] declares so --no-isolation works below.
-      - run: pip install -r .github/requirements/build-tools.txt --require-hashes
-      - name: Build package (no isolation — pinned deps)
-        run: python -m build --no-isolation
-      - name: Verify Explorer frontend is packaged
-        run: |
-          python - <<'PY'
-          import zipfile
-          from pathlib import Path
-
-          wheels = list(Path("dist").glob("*.whl"))
-          assert wheels, "No wheel was built"
-
-          with zipfile.ZipFile(wheels[0]) as wheel:
-              names = set(wheel.namelist())
-
-          assert "semantica/static/index.html" in names, "Explorer index.html missing from wheel"
-          assert any(name.startswith("semantica/static/assets/") for name in names), "Explorer assets missing from wheel"
-
-          print("Explorer frontend is packaged")
-          PY
-      - name: Verify PyPI long-description will render
-        run: |
-          pip install -r .github/requirements/twine.txt --require-hashes
-          twine check dist/*
-      - name: Attest build provenance
-        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4
-        with:
-          subject-path: 'dist/*'
-      # attest-build-provenance publishes to the GH attestations API only, which
-      # OpenSSF Scorecard's Signed-Releases check does not inspect - it looks for
-      # signature files attached as release assets. Sign here too so
-      # `dist/*.sigstore.json` bundles ship alongside the wheel/sdist on the
-      # GitHub Release itself.
-      - name: Sign artifacts with Sigstore
-        uses: sigstore/gh-action-sigstore-python@790bc6befb9d733738f18d8f895854b453640ec9 # v3.5.0
-        with:
-          inputs: |
-            dist/*.whl
-            dist/*.tar.gz
-      - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
-        with:
-          files: |
-            dist/*.whl
-            dist/*.tar.gz
-            dist/*.sigstore.json
-      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+          files: dist/*
+      - uses: pypa/gh-action-pypi-publish@release/v1
@@ -1,45 +0,0 @@
-name: Scorecard supply-chain security
-
-permissions: read-all
-
-on:
-  branch_protection_rule:
-  schedule:
-    - cron: '30 1 * * 6'  # weekly
-  push:
-    branches: [main]
-
-jobs:
-  analysis:
-    name: Scorecard analysis
-    runs-on: ubuntu-latest
-    permissions:
-      security-events: write  # to upload SARIF results
-      id-token: write         # to publish results and get a badge
-      contents: read
-      actions: read           # to detect GitHub Actions workflows
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-
-      - name: Run analysis
-        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
-        with:
-          results_file: results.sarif
-          results_format: sarif
-          publish_results: true
-
-      - name: Upload artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: SARIF file
-          path: results.sarif
-          retention-days: 5
-
-      - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
-        with:
-          sarif_file: results.sarif
@@ -18,9 +18,6 @@ on:
      - 'requirements-docs.txt'
      - '**/*.md'

-permissions:
-  contents: read
-
 jobs:
  security-scan:
    runs-on: ubuntu-latest
@@ -28,71 +25,35 @@ jobs:
      contents: read
      security-events: write
      actions: read
-      # Needed for the "Comment PR with Security Results" step below. Safe on
-      # pull_request (not pull_request_target): GitHub always forces a
-      # read-only token for PRs from forks regardless of this permission.
-      pull-requests: write
-
+    
    steps:
      - name: Checkout repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-
+        uses: actions/checkout@v4
+      
      - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@v4
        with:
          python-version: '3.11'
        
      - name: Install dependencies
        run: |
-          pip install -r .github/requirements/bootstrap.txt --require-hashes
-          # Install the pinned dependency set FIRST so Safety scans Semantica's
-          # exact CI/release dependency tree (requirements-ci.txt is generated
-          # from pyproject.toml extras, so this covers the project's real deps).
-          pip install -r requirements-ci.txt --require-hashes
-          # Tooling AFTER the pinned set: installing safety/bandit/semgrep/jq
-          # first lets the pinned requirements overwrite their transitive deps
-          # (e.g. rich), which breaks the safety CLI at runtime.
-          pip install -r .github/requirements/security-scan-tools.txt --require-hashes
-
+          python -m pip install --upgrade pip
+          pip install safety bandit semgrep jq
+        
      - name: Run Safety Check (Package Vulnerabilities)
        run: |
-          # NOTE: Safety 3.x repurposed --output to select a console format
-          # (json/text/screen/...), not a file path. Writing JSON to a file
-          # now requires --save-json; the previous `--output safety-report.json`
-          # usage was silently invalid and never produced a report.
-          safety check --save-json safety-report.json || true
-
-          # Guard 1: fail loudly if Safety exited before writing a report at all
-          # (network error, API auth failure, tool crash). Without this check a
-          # missing or empty file causes jq to fall back to "0", making a broken
-          # scanner indistinguishable from a clean scan.
-          if [ ! -s safety-report.json ]; then
-            echo "::error::Safety scan produced no report (safety-report.json is missing or empty). Treating as failure — check for network errors, API auth failures, or Safety crashes in the logs above."
-            exit 1
-          fi
-
+          safety check --json --output safety-report.json || true
          echo "Checking for package vulnerabilities..."
-
-          # No || echo "0" fallback: if jq fails (malformed JSON, missing key,
-          # vulnerabilities:null) VULNS will be empty or "null" so guard 2 below
-          # catches it rather than silently treating the broken report as zero.
-          VULNS=$(jq '.vulnerabilities | length' safety-report.json 2>/dev/null)
-
-          # Guard 2: ensure VULNS is a non-negative integer before the -gt
-          # comparison. "null" (missing/null key) or "" (jq parse failure) would
-          # cause bash's -gt to throw an arithmetic error and fall through to the
-          # success branch — the same silent-pass bug as a missing file.
-          if ! [[ "$VULNS" =~ ^[0-9]+$ ]]; then
-            echo "::error::Safety report exists but 'vulnerabilities' is missing or non-numeric (got: '${VULNS}'). The report may be malformed or Safety may have written an error-only JSON. Treating as failure."
-            exit 1
-          fi
-
+          
+          # Count vulnerabilities safely
+          VULNS=$(safety check --json --output /dev/stdout 2>/dev/null | jq '.vulnerabilities | length' 2>/dev/null || echo "0")
+          
          if [ "$VULNS" -gt 0 ]; then
            echo "❌ Security vulnerabilities found: $VULNS"
            echo "CI will fail to prevent merging of vulnerable dependencies"
            echo ""
            echo "Vulnerability details:"
-            jq -r '.vulnerabilities[] | "- \(.package_name)==\(.analyzed_version): \(.vulnerability_id) (\(.CVE // "no CVE assigned"))"' safety-report.json || true
+            safety check || true
            exit 1
          else
            echo "✅ No security vulnerabilities found"
@@ -135,10 +96,9 @@ jobs:
          fi
        
      - name: Upload Security Reports
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@v7
        with:
          name: security-reports
-          retention-days: 14
          path: |
            safety-report.json
            bandit-report.json
@@ -146,91 +106,77 @@ jobs:
        
      - name: Comment PR with Security Results
        if: github.event_name == 'pull_request'
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
+        uses: actions/github-script@v9
        with:
          script: |
            const fs = require('fs');
-
-            // Renders one tool's findings as a section. `items` is already
-            // the list of pre-formatted "- `thing` in `where`" strings; this
-            // just handles the found/not-found/report-missing framing and
-            // collapses long lists into a <details> block so the comment
-            // doesn't turn into a wall of text.
-            function renderSection(title, reportPath, parse) {
-              let data;
-              try {
-                data = JSON.parse(fs.readFileSync(reportPath, 'utf8'));
-              } catch (e) {
-                return [
-                  `### ${title}`,
-                  `⚠️ No report found at \`${reportPath}\` — the scan may have failed before producing output. Check the job logs.`,
-                ].join('\n');
-              }
-
-              const items = parse(data);
-              if (items.length === 0) {
-                return [`### ${title}`, `✅ No findings.`].join('\n');
-              }
-
-              const lines = [`### ${title}`, `Found **${items.length}**.`, ''];
-              const shown = items.slice(0, 15);
-              if (items.length > 15) {
-                lines.push('<details>', '<summary>Show all findings</summary>', '');
-                lines.push(...items);
-                lines.push('', '</details>');
+            
+            // Read safety report
+            let safetyResults = '';
+            try {
+              const safetyData = JSON.parse(fs.readFileSync('safety-report.json', 'utf8'));
+              if (safetyData.vulnerabilities && safetyData.vulnerabilities.length > 0) {
+                safetyResults = `## Safety Vulnerabilities Found\\n`;
+                safetyData.vulnerabilities.forEach(vuln => {
+                  safetyResults += `- **${vuln.package}**: ${vuln.advisory}\\n`;
+                });
              } else {
-                lines.push(...shown);
+                safetyResults = '## No Safety Vulnerabilities Found\\n';
              }
-              return lines.join('\n');
+            } catch (e) {
+              safetyResults = '## Safety scan completed\\n';
            }
-
-            const safetySection = renderSection(
-              'Safety — dependency vulnerabilities',
-              'safety-report.json',
-              (data) => (data.vulnerabilities || []).map(
-                (v) => `- \`${v.package_name}==${v.analyzed_version}\`: ${v.vulnerability_id}` +
-                  (v.CVE ? ` (${v.CVE})` : '') + ` — ${v.advisory || 'no advisory text'}`
-              )
-            );
-
-            const banditSection = renderSection(
-              'Bandit — HIGH-severity code issues',
-              'bandit-report.json',
-              (data) => (data.results || [])
-                .filter((issue) => issue.issue_severity === 'HIGH')
-                .map((issue) => `- \`${issue.test_name}\` in \`${issue.filename}:${issue.line_number}\``)
-            );
-
-            const semgrepSection = renderSection(
-              'Semgrep — static analysis patterns',
-              'semgrep-report.json',
-              (data) => (data.results || []).map(
-                (issue) => `- \`${issue.check_id}\` in \`${issue.path}:${issue.start?.line ?? '?'}\``
-              )
-            );
-
-            const comment = [
-              '# 🔒 Security Scan Results',
-              '',
-              safetySection,
-              '',
-              banditSection,
-              '',
-              semgrepSection,
-              '',
-              '---',
-              '',
-              '*This security scan runs automatically on source-code PRs and bi-weekly (skipped for doc/markdown-only changes).*',
-              '',
-              '📊 **Security Policy**: CI fails on Safety vulnerabilities and Bandit HIGH-severity findings. Semgrep findings above are informational and do not block merge.',
-            ].join('\n');
-
+            
+            // Read bandit report
+            let banditResults = '';
+            try {
+              const banditData = JSON.parse(fs.readFileSync('bandit-report.json', 'utf8'));
+              if (banditData.results && banditData.results.length > 0) {
+                const highIssues = banditData.results.filter(issue => issue.issue_severity === 'HIGH');
+                if (highIssues.length > 0) {
+                  banditResults = `## High Severity Security Issues Found\\n`;
+                  highIssues.forEach(issue => {
+                    banditResults += `- **${issue.test_name}**: ${issue.filename}:${issue.line_number}\\n`;
+                  });
+                } else {
+                  banditResults = '## No High Severity Security Issues Found\\n';
+                }
+              } else {
+                banditResults = '## No Bandit Issues Found\\n';
+              }
+            } catch (e) {
+              banditResults = '## Bandit scan completed\\n';
+            }
+            
+            // Read semgrep report
+            let semgrepResults = '';
+            try {
+              const semgrepData = JSON.parse(fs.readFileSync('semgrep-report.json', 'utf8'));
+              if (semgrepData.results && semgrepData.results.length > 0) {
+                semgrepResults = `## Security Patterns Found\\n`;
+                semgrepData.results.slice(0, 10).forEach(issue => {
+                  semgrepResults += `- **${issue.rule_id}**: ${issue.path}\\n`;
+                });
+                if (semgrepData.results.length > 10) {
+                  semgrepResults += `- ... and ${semgrepData.results.length - 10} more\\n`;
+                }
+              } else {
+                semgrepResults = '## No Security Patterns Found\\n';
+              }
+            } catch (e) {
+              semgrepResults = '## Semgrep scan completed\\n';
+            }
+            
+            // Create summary comment
+            const comment = `# 🔒 Security Scan Results\\n\\n${safetyResults}\\n\\n${banditResults}\\n\\n${semgrepResults}\\n\\n---\\n\\n*This security scan runs automatically on source-code PRs and bi-weekly (skipped for doc/markdown-only changes).*\\n\\n📊 **Security Policy**: CI fails on vulnerabilities and HIGH severity issues.`;
+            
+            // Post comment with error handling
            try {
              await github.rest.issues.createComment({
                issue_number: context.issue.number,
                owner: context.repo.owner,
                repo: context.repo.repo,
-                body: comment,
+                body: comment
              });
              console.log('✅ Security comment posted successfully');
            } catch (error) {
@@ -4,12 +4,6 @@ on:
  schedule:
    - cron: '0 0 * * 1'
  workflow_dispatch:
-  pull_request:
-    branches: [main]
-    paths:
-      - 'pyproject.toml'
-      - 'requirements-ci.txt'
-      - '.github/workflows/security.yml'

 permissions:
  contents: read
@@ -18,25 +12,10 @@ jobs:
  audit:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
        with:
          python-version: '3.11'
-      # Upgrade first: actions/setup-python's baked-in setuptools has been
-      # behind known-vulnerable floors before (e.g. PYSEC-2026-3447 /
-      # setuptools 75.1.0), so don't trust the preinstalled one.
-      - run: pip install -r .github/requirements/bootstrap.txt --require-hashes
-      # Audit the pinned dependency set (requirements-ci.txt is compiled from
-      # pyproject.toml with --extra all — the same coverage as the [all]
-      # extra, minus the Linux-only gpu set — so this keeps scan parity with
-      # CI/release builds without a time-dependent resolution). This is the
-      # fix for PYSEC-2024-38 (#869): the bare-env job never had fastapi or
-      # python-multipart installed to look at.
-      - run: pip install -r requirements-ci.txt --require-hashes
-      # PR runs gate on findings, since they're scoped to actual
-      # pyproject.toml changes under review. The schedule/workflow_dispatch
-      # runs stay non-blocking until a full pass over pre-existing findings
-      # across the whole [all] tree has been done.
-      - run: pip install -r .github/requirements/pip-audit.txt --require-hashes
-      - run: pip-audit -r requirements-ci.txt
-        continue-on-error: ${{ github.event_name != 'pull_request' }}
+      - run: pip install pip-audit
+      - run: pip-audit
+        continue-on-error: true
@@ -1,28 +0,0 @@
-name: Verify Action Pins
-
-on:
-  pull_request:
-    paths:
-      - '.github/workflows/**'
-      - '.github/scripts/verify-action-pins.sh'
-  push:
-    branches: [main]
-    paths:
-      - '.github/workflows/**'
-      - '.github/scripts/verify-action-pins.sh'
-  schedule:
-    - cron: '0 3 * * 1'  # weekly, in case an upstream tag is deliberately moved
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  verify:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - name: Verify pinned action SHAs match their tag comments
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: bash .github/scripts/verify-action-pins.sh
@@ -1,108 +0,0 @@
-# Semantica — Architecture
-
-Complete data flow from every source type to every final output, and the decision intelligence lifecycle.
-
---
-
-## Full Data Pipeline
-
-Every source, every processing step, every final artifact — in one diagram.
-
-```mermaid
-flowchart TD
-    %% ── SOURCES ──────────────────────────────────────────────────────
-    subgraph SRC["🗂️ Sources  (semantica.ingest)"]
-        direction LR
-        F["📄 Files\nPDF · DOCX · PPTX · HTML\nTXT · CSV · JSON · Excel · XML"]
-        W["🌐 Web\nPages · RSS/Atom Feeds\nPublic REST APIs"]
-        DB["🗃️ Databases\nPostgreSQL · MySQL · SQLite\nOracle · DuckDB · MongoDB"]
-        CL["☁️ Cloud\nSnowflake · Google Drive\nElasticsearch · HuggingFace"]
-        RT["⚡ Streams\nKafka · RabbitMQ\nAWS Kinesis · Pulsar"]
-        DV["🛠️ Dev\nGit Repos · Email IMAP/POP3\nMCP Resources · Parquet · Pandas"]
-    end
-
-    %% ── INGEST ───────────────────────────────────────────────────────
-    F  --> FI["FileIngestor"]
-    W  --> WI["WebIngestor"]
-    DB --> DI["DBIngestor"]
-    CL --> PI["ParquetIngestor\nSnowflakeIngestor"]
-    RT --> SI["StreamIngestor"]
-    DV --> RI["RepoIngestor\nEmailIngestor · MCPIngestor"]
-
-    FI & WI & DI & PI & SI & RI --> RAW[/"📦 Raw Documents"/]
-
-    %% ── PARSE ────────────────────────────────────────────────────────
-    RAW --> PRS["🔍 Parse  (semantica.parse)\nDocumentParser · StructuredDataParser\nCodeParser · WebParser · EmailParser"]
-
-    PRS --> NRM["🧹 Normalize  (semantica.normalize)\nTextNormalizer · EntityNormalizer\nDateNormalizer · NumberNormalizer · DataCleaner"]
-
-    NRM --> SPL["✂️ Split  (semantica.split)\nentity_aware · relation_aware\ngraph_based · ontology_aware · hierarchical"]
-
-    %% ── EXTRACT ──────────────────────────────────────────────────────
-    SPL --> EXT["🔬 Extract  (semantica.semantic_extract)\nNamedEntityRecognizer · RelationExtractor\nEventDetector · TripletExtractor · CoreferenceResolver"]
-
-    EXT --> CFT["⚠️ Conflict Detection  (semantica.conflicts)\nConflictDetector · ConflictResolver · SourceTracker"]
-
-    CFT --> DDP["🔁 Deduplication  (semantica.deduplication)\nDuplicateDetector · EntityMerger"]
-
-    DDP --> KGB["🕸️ KG Construction  (semantica.kg)\nGraphBuilder · EntityResolver\nBiTemporalFact · TemporalGraphQuery"]
-
-    KGB --> KG[/"🗺️ Knowledge Graph\nnodes · edges · temporal facts · provenance"/]
-
-    %% ── INTELLIGENCE LAYER ───────────────────────────────────────────
-    KG --> ONT["Ontology  (semantica.ontology)\nOntologyGenerator · OntologyValidator\nOWL · SHACL · SKOS"]
-    KG --> RSN["Reasoning  (semantica.reasoning)\nReteEngine · DatalogReasoner\nSPARQLReasoner · ExplanationGenerator"]
-    KG --> PRV["Provenance  (semantica.provenance)\nProvenanceManager · W3C PROV-O"]
-    KG --> CTX["Context & Decisions  (semantica.context)\nContextGraph · AgentContext\nDecisionRecorder · CausalChainAnalyzer · PolicyEngine"]
-
-    ONT & RSN & PRV & CTX --> EKG[/"🗃️ Enriched KG\n+ ontology · inferences · provenance · decisions"/]
-
-    %% ── STORAGE ──────────────────────────────────────────────────────
-    EKG --> VS["Vector Store  (semantica.vector_store)\nFAISS · Qdrant · Weaviate · Milvus · Pinecone · PgVector\nHybrid Search · RRF Fusion"]
-    EKG --> GS["Graph Store  (semantica.graph_store)\nNeo4j · FalkorDB · Apache AGE · Amazon Neptune"]
-
-    %% ── OUTPUTS ──────────────────────────────────────────────────────
-    VS & GS --> EXP["📦 Export  (semantica.export)\nRDF Turtle · JSON-LD · N-Triples · OWL · SHACL\nParquet · Cypher · ArangoDB AQL · GraphML · CSV · HTML"]
-    VS & GS --> VIZ["📊 Visualize  (semantica.visualization)\nKGVisualizer · OntologyVisualizer\nEmbeddingVisualizer · TemporalVisualizer"]
-    EKG --> SVC["🔌 Services\nREST API 100+ endpoints · MCP Server 10+ tools\nCLI 50+ commands · Knowledge Explorer"]
-```
-
---
-
-## Decision Intelligence Lifecycle
-
-```mermaid
-flowchart LR
-    subgraph RECORD["1️⃣  Record"]
-        R1["record_decision()\ncategory · scenario\nreasoning · outcome\nconfidence · metadata"]
-    end
-
-    subgraph LINK["2️⃣  Link"]
-        L1["add_causal_relationship()\ntriggers · enables\ncauses · precedes"]
-    end
-
-    subgraph QUERY["3️⃣  Query"]
-        Q1["find_similar_decisions()\nSemantic precedent search"]
-        Q2["trace_decision_chain()\nFull causal ancestry"]
-        Q3["analyze_decision_impact()\nDownstream influence map"]
-    end
-
-    subgraph GOVERN["4️⃣  Govern"]
-        G1["check_decision_rules()\nPolicy evaluation\nCompliance gate"]
-    end
-
-    subgraph AUDIT["5️⃣  Audit Export"]
-        A1["W3C PROV-O  ·  CSV  ·  JSON\nRegulator-ready audit trail"]
-    end
-
-    RECORD -->|decision_id| LINK
-    LINK   -->|causal graph| QUERY
-    QUERY  -->|results| GOVERN
-    GOVERN -->|signed-off decisions| AUDIT
-```
-
---
-
-*→ [README](README.md) · [Docs](https://docs.getsemantica.ai/) · [Cookbook](https://github.com/semantica-agi/semantica/tree/main/cookbook)*
-
-> Note: `Docs` and `Cookbook` are external resources maintained outside this file and may change over time. If a link is unavailable, refer to the repository `README.md` and in-repo documentation as canonical fallbacks.
@@ -1,20 +0,0 @@
-cff-version: 1.2.0
-message: "If you use this software, please cite it as below."
-title: "Semantica: Graph-Native Infrastructure for Context and Accountable AI Systems"
-type: software
-authors:
-  - name: "Semantica"
-repository-code: "https://github.com/semantica-agi/semantica"
-url: "https://getsemantica.ai"
-license: MIT
-version: 0.6.7
-date-released: 2026-08-28
-keywords:
-  - knowledge-graph
-  - context-graph
-  - ai-agents
-  - llm
-  - decision-intelligence
-  - provenance
-  - explainability
-  - graph-rag
@@ -58,7 +58,7 @@ representative at an online or offline event.

 Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported to the community leaders responsible for enforcement through
-[GitHub Issues](https://github.com/semantica-agi/semantica/issues) with "[CoC]" prefix.
+[GitHub Issues](https://github.com/Hawksight-AI/semantica/issues) with "[CoC]" prefix.
 All complaints will be reviewed and investigated promptly and fairly.

 All community leaders are obligated to respect the privacy and security of the
@@ -2,58 +2,20 @@

 Thank you for your interest in contributing! Every contribution, no matter how small, is valuable. 🎉

-⭐ **Give us a Star** • 🍴 **[Fork Semantica](https://github.com/semantica-agi/semantica/fork)** • 💬 **Join our [Discord](https://discord.gg/sV34vps5hH)**
+⭐ **Give us a Star** • 🍴 **[Fork Semantica](https://github.com/Hawksight-AI/semantica/fork)** • 💬 **Join our [Discord](https://discord.gg/sV34vps5hH)**

-> **New to contributing?** Start with a [`good first issue`](https://github.com/semantica-agi/semantica/labels/good%20first%20issue) or join our [Discord](https://discord.gg/sV34vps5hH) community.
+> **New to contributing?** Start with a [`good first issue`](https://github.com/Hawksight-AI/semantica/labels/good%20first%20issue) or join our [Discord](https://discord.gg/sV34vps5hH) community.

 ---

 ## 🚀 Quick Start

-1. Find a [`good first issue`](https://github.com/semantica-agi/semantica/labels/good%20first%20issue)
-2. [Fork Semantica](https://github.com/semantica-agi/semantica/fork) & clone the repository
+1. Find a [`good first issue`](https://github.com/Hawksight-AI/semantica/labels/good%20first%20issue)
+2. [Fork Semantica](https://github.com/Hawksight-AI/semantica/fork) & clone the repository
 3. Make your changes
 4. Submit a pull request!

-**Need help?** Join [Discord](https://discord.gg/sV34vps5hH) or [GitHub Discussions](https://github.com/semantica-agi/semantica/discussions)
-
---
-
-## 🗂️ Working on an Existing Issue
-
-If you want to work on an open GitHub issue, please follow these steps to keep things coordinated and avoid duplicate effort:
-
-1. **Check the issue.** Look at the issue's assignees and recent comments. If someone is already actively working on it, consider a different issue or ask in the comments whether help is welcome.
-
-2. **Comment if you'd like the issue reserved.** Leaving a comment like *"I'd like to take this on"* is the fastest way to get assigned, but it isn't required — maintainers can also assign an issue directly to a contributor (e.g., based on recent activity in the repo) without waiting for a comment first.
-
-3. **Wait for assignment.** A maintainer will assign the issue when appropriate, whether or not a comment was left. Please wait for this before investing significant time in implementation, as priorities and approaches can shift.
-
-4. **Create a branch and implement.** Once assigned, fork the repository (if you haven't already), create a dedicated branch, and begin your work.
-
-   ```bash
-   git checkout -b fix/short-description   # or feature/short-description
-   ```
-
-5. **Open a focused PR and link the issue.** When you're ready, open a pull request and reference the issue in the description (e.g., `Closes #123`). Keep the PR scoped to the work described in the issue.
-
-> **Why this matters:** Assignment (with or without a comment) helps maintainers track who is working on what and prevent two contributors from solving the same problem independently. It also gives you a chance to align on the expected approach before writing code.
-
-Not sure where to start? Try a [`good first issue`](https://github.com/semantica-agi/semantica/labels/good%20first%20issue) or ask in [Discord](https://discord.gg/sV34vps5hH).
-
---
-
-## 🔀 Duplicate PRs & Issue Priority
-
-When more than one pull request targets the same issue, maintainers triage using this order of priority. These rules decide between PRs that are otherwise following the [assignment workflow above](#-working-on-an-existing-issue) — opening a PR before being assigned doesn't grant priority on its own, and an unassigned PR can still be closed as a duplicate once someone else is assigned to the issue.
-
-1. **Contributor-raised issue with an existing PR.** If the person who opened the issue has also opened a PR for it, that PR is prioritized (they still need to be assigned before it's merged).
-2. **Maintainer-raised issue with a claim comment.** If we opened the issue and someone has commented asking to work on it, we assign it to them and check their PR before picking up any other PR for the same issue.
-3. **No prior assignment or comment.** If multiple PRs exist and no one was assigned or claimed the issue first, priority goes to whichever contributor has the most consistent activity in the repo over the last 60 days (e.g., merged PRs, substantive reviews, or issue triage participation) — not just PR volume.
-4. **Late duplicate PRs.** If a PR is opened after another contributor has already been assigned to the issue, we close the duplicate early rather than let it sit open, and point the author to another open issue (or ask them to check `main` for newly opened ones). This avoids contributors spending time updating a PR that won't be merged.
-5. **Overlapping scope.** If a PR covers multiple issues, or there's genuine overlap between competing PRs, maintainers discuss it on [Discord](https://discord.gg/sV34vps5hH) before deciding rather than resolving it unilaterally.
-
-**Why this matters:** it keeps triage predictable, avoids wasted contributor effort on PRs that won't merge, and helps retain active contributors.
+**Need help?** Join [Discord](https://discord.gg/sV34vps5hH) or [GitHub Discussions](https://github.com/Hawksight-AI/semantica/discussions)

 ---

@@ -116,7 +78,7 @@ When more than one pull request targets the same issue, maintainers triage using

 **What:** Report bugs you find

-**How:** Use the [bug report template](https://github.com/semantica-agi/semantica/issues/new?template=bug_report.md)
+**How:** Use the [bug report template](https://github.com/Hawksight-AI/semantica/issues/new?template=bug_report.md)

 **Include:** Description, steps to reproduce, expected vs actual behavior, environment details

@@ -126,7 +88,7 @@ When more than one pull request targets the same issue, maintainers triage using

 **What:** Suggest new features or improvements

-**How:** Use the [feature request template](https://github.com/semantica-agi/semantica/issues/new?template=feature_request.md)
+**How:** Use the [feature request template](https://github.com/Hawksight-AI/semantica/issues/new?template=feature_request.md)

 **Include:** Problem statement, proposed solution, use cases

@@ -146,7 +108,7 @@ When more than one pull request targets the same issue, maintainers triage using

 **What:** Help others in the community

-**Where:** [Discord](https://discord.gg/sV34vps5hH), [GitHub Discussions](https://github.com/semantica-agi/semantica/discussions)
+**Where:** [Discord](https://discord.gg/sV34vps5hH), [GitHub Discussions](https://github.com/Hawksight-AI/semantica/discussions)

 **Examples:** Answer questions, review PRs, share your projects

@@ -173,12 +135,12 @@ When more than one pull request targets the same issue, maintainers triage using

 ### 1. Fork & Clone

-First, [fork Semantica](https://github.com/semantica-agi/semantica/fork) on GitHub, then:
+First, [fork Semantica](https://github.com/Hawksight-AI/semantica/fork) on GitHub, then:

 ```bash
 git clone https://github.com/your-username/semantica.git
 cd semantica
-git remote add upstream https://github.com/semantica-agi/semantica.git
+git remote add upstream https://github.com/Hawksight-AI/semantica.git
 ```

 ### 2. Set Up Environment
@@ -195,39 +157,6 @@ pip install -e ".[dev]"
 pre-commit install
 ```

-### Pinned CI dependencies
-
-`requirements-ci.txt` pins every transitive dependency at exact versions so CI,
-security scans, and release builds install the same packages every run (the
-Python equivalent of `explorer/package-lock.json` + `npm ci`). It is a
-**separate build environment**: every package carries a SHA-256 hash
-(`--generate-hashes`), so installs are reproducible and supply-chain safe —
-never install into your local dev environment from it.
-
-Regenerate it after changing `pyproject.toml` dependencies:
-
-```bash
-pip install uv==0.12.1
-uv pip compile pyproject.toml --python-version 3.11 --extra all --generate-hashes -o requirements-ci.txt
-```
-
-The `all` extra is the repo's cross-platform dependency set (GPU extras like
-`faiss-gpu`/`cupy` are excluded and installed separately on Linux — see
-`pyproject.toml`). Keep the pinned `uv` version in sync with CI so regeneration
-is deterministic.
-
-CI's staleness check re-resolves with the committed lockfile as a constraint
-and compares version lines only: upstream package releases never fail CI —
-the lockfile changes only when `pyproject.toml` changes intentionally.
-
-CI fails if `requirements-ci.txt` is stale relative to `pyproject.toml`
-(the version-line comparison detects new/removed/changed dependencies).
-
-Build-system pins: `[build-system].requires` is pinned to exact versions
-(`setuptools==84.0.0`, `wheel==0.48.0`) and release builds run
-`python -m build --no-isolation` against the lockfile — no unpinned
-build-time isolation anywhere.
-
 ### 3. Create Branch

 ```bash
@@ -398,8 +327,8 @@ result = instance.method()
 ## 🆘 Getting Help

 - 💬 [Discord](https://discord.gg/sV34vps5hH) - Real-time chat
- 💭 [GitHub Discussions](https://github.com/semantica-agi/semantica/discussions) - Q&A
- 🐛 [GitHub Issues](https://github.com/semantica-agi/semantica/issues) - Bug reports
+- 💭 [GitHub Discussions](https://github.com/Hawksight-AI/semantica/discussions) - Q&A
+- 🐛 [GitHub Issues](https://github.com/Hawksight-AI/semantica/issues) - Bug reports

 **Before asking:** Check existing documentation, search issues/discussions, review cookbook examples

@@ -434,4 +363,4 @@ This project follows a [Code of Conduct](CODE_OF_CONDUCT.md). Be respectful and

 Every contribution matters - whether it's a single line of code, a typo fix, a helpful answer, or a bug report. We appreciate you! 🙏

-⭐ **Give us a Star** • 🍴 **[Fork Semantica](https://github.com/semantica-agi/semantica/fork)** • 💬 **Join our [Discord](https://discord.gg/sV34vps5hH)**
+⭐ **Give us a Star** • 🍴 **[Fork Semantica](https://github.com/Hawksight-AI/semantica/fork)** • 💬 **Join our [Discord](https://discord.gg/sV34vps5hH)**
@@ -44,7 +44,7 @@ We recognize all types of contributions:
 All contributors are recognized in:

 - This contributors list
- [GitHub contributors page](https://github.com/semantica-agi/semantica/graphs/contributors)
+- [GitHub contributors page](https://github.com/Hawksight-AI/semantica/graphs/contributors)
 - Release notes for significant contributions
 - Community appreciation

@@ -54,7 +54,7 @@ All contributors are recognized in:

 ### Automatic Recognition

-If you've made a commit, you'll automatically appear in [GitHub's contributors graph](https://github.com/semantica-agi/semantica/graphs/contributors).
+If you've made a commit, you'll automatically appear in [GitHub's contributors graph](https://github.com/Hawksight-AI/semantica/graphs/contributors).

 ### Using All-Contributors Bot

@@ -101,7 +101,7 @@ When using the all-contributors bot, use these codes:
 - `infra` - Infrastructure
 - `maintenance` - Maintenance

-See [all-contributors specification](https://github.com/all-contributors/all-contributors#emoji-key) for complete list.
+See [all-contributors specification](https://allcontributors.org/docs/en/emoji-key) for complete list.

 ---

@@ -111,4 +111,4 @@ Every contribution, no matter how small, helps make Semantica better. Thank you

 **Want to contribute?** 

-⭐ Give us a Star • 🍴 [Fork us](https://github.com/semantica-agi/semantica/fork) • Check out our [Contributing Guide](CONTRIBUTING.md) to get started!
+⭐ Give us a Star • 🍴 [Fork us](https://github.com/Hawksight-AI/semantica/fork) • Check out our [Contributing Guide](CONTRIBUTING.md) to get started!
@@ -1,74 +1,29 @@
-# syntax=docker/dockerfile:1
-FROM node:26-alpine@sha256:2d984a15c9b54fd0aeb608b8e0d0d83529eb34d2966db27a1fb4f1edc3d298a3 AS frontend-builder
+FROM node:25-alpine AS frontend-builder

-WORKDIR /app
-COPY explorer/package*.json ./explorer/
-WORKDIR /app/explorer
-RUN npm ci
+WORKDIR /app/semantica-explorer

-COPY explorer/ ./
-RUN mkdir -p /app/semantica && npm run build

-# CVE-2026-14456 (OpenSSL QUIC-server DoS, flagged against this base image's
-# openssl/libssl3t64/openssl-provider-legacy): the Debian fix
-# (3.5.7-1~deb13u2) is only in trixie-proposed-updates as of this writing,
-# not yet promoted to trixie-security, so there's no package to pin here
-# today. Deliberately NOT running `apt-get upgrade` to chase it - that
-# breaks build reproducibility (terrascan AC_DOCKER_0052) and still
-# wouldn't reach a proposed-updates-only package. Once Debian ships the fix
-# and rebuilds this tag, the docker Dependabot ecosystem in
-# .github/dependabot.yml opens a PR bumping the digest pin above. Also: this
-# image only serves plain HTTP via uvicorn and never opens a QUIC listener,
-# so the bug isn't reachable here regardless.
-FROM python:3.13-slim@sha256:7ce4b6dfe35e55397b7cda544f8a13f191b7ae28dc5aad71fe664dbc9bc2623f AS runtime
+COPY semantica-explorer/package.json semantica-explorer/package-lock.json* ./

-ENV PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONUNBUFFERED=1 \
-    FALKORDB_HOST=falkordb \
-    FALKORDB_PORT=6379 \
-    ALLOWED_ORIGINS=http://localhost:8000,http://127.0.0.1:8000
+
+RUN npm install
+
+
+COPY semantica-explorer/ ./
+RUN npm run build
+
+
+FROM python:3.14-slim AS runtime

 WORKDIR /app

-RUN groupadd --system semantica \
-    && useradd --system --gid semantica --home-dir /app --shell /usr/sbin/nologin semantica
-
-COPY pyproject.toml README.md LICENSE MANIFEST.in \
-     .github/requirements/explorer-extra-py313.txt .github/requirements/pep517-build.txt ./
+COPY pyproject.toml ./
 COPY semantica/ ./semantica/
-COPY integrations/ ./integrations/
+
 COPY --from=frontend-builder /app/semantica/static ./semantica/static

-# explorer-extra-py313.txt is `uv pip compile pyproject.toml --extra explorer
-# --python-version 3.13 --constraint requirements-ci.txt --generate-hashes`
-# (see ci.yml's explorer-extra-py311.txt for the CI counterpart, resolved
-# for CI's python 3.11 instead - the two aren't interchangeable: audioread
-# (via librosa) needs standard-aifc/standard-sunau only on python>=3.13,
-# since aifc/sunau left stdlib there, so a 3.11-resolved lockfile is
-# missing hashes pip needs on this image's actual 3.13 interpreter and
-# --require-hashes fails outright rather than silently under-pinning).
-# Every fetched package is hash-verified (Scorecard Pinned-Dependencies)
-# and pinned to the same versions CI audited, e.g. msgpack==1.2.1 and
-# setuptools==84.0.0 (which also replaces the base image's vulnerable
-# 70.3.0, CVE-2025-47273 - nothing else in the tree pulls a newer copy).
-# --no-deps on the local package itself: it's our own source tree, not a
-# fetch, so there's nothing to hash-pin there - but `pip install .` still
-# does a PEP 517 build, which by default creates an *isolated* build env
-# and fetches [build-system] requires (setuptools, wheel) completely
-# outside any hash checking. pep517-build.txt pins that exact
-# build-system.requires; installing it first and passing
-# --no-build-isolation makes pip reuse those hash-verified copies instead
-# of fetching its own.
-RUN pip install --no-cache-dir -r explorer-extra-py313.txt -r pep517-build.txt --require-hashes \
-    && pip install --no-cache-dir --no-deps --no-build-isolation . \
-    && rm -f explorer-extra-py313.txt pep517-build.txt \
-    && chown -R semantica:semantica /app
-
-USER semantica
+RUN pip install --no-cache-dir ".[explorer]"

 EXPOSE 8000

-HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
-    CMD python -c "import json, urllib.request; data=json.load(urllib.request.urlopen('http://127.0.0.1:8000/api/health', timeout=3)); raise SystemExit(0 if data.get('status') == 'ok' else 1)"
-
-CMD ["python", "-m", "uvicorn", "semantica.explorer.app:app", "--host", "0.0.0.0", "--port", "8000"]
+CMD ["python", "-m", "uvicorn", "semantica.explorer.app:app", "--host", "0.0.0.0", "--port", "8000"]
@@ -1,131 +0,0 @@
-# Growth & Distribution Playbook
-
-North star: **10,000 developers who actually use Semantica in real projects**, not a raw PyPI download number. Downloads are a lagging indicator of distribution, not a target to optimize directly.
-
-```
-GitHub stars → Website visitors → PyPI installs → Weekly active users → Production deployments → Enterprise customers
-```
-The last two matter far more than the download count.
-
-## Guardrails — do not do this
-
- No fake/looping CI jobs that repeatedly `pip install semantica` purely to inflate the graph. It's detectable, it produces zero real users, and it damages credibility with anyone doing diligence (investors, enterprise buyers, security reviewers).
- No package-splitting purely to multiply install counts — only split into `semantica-*` packages when there's a real architectural reason.
- No meaningless Docker pulls or notebook launches with no real content behind them.
- Every item below should get someone from "installed it" to "used it for something real." If a channel can't do that, it's not worth building.
-
-## 30-day priority sprint
-
-Ordered by leverage-to-effort ratio; do these first.
-
-| # | Initiative | Target |
-| - | ---------- | ------ |
-| 1 | ✅ GitHub Actions example + reusable `setup-semantica` composite action + install-matrix badge | done |
-| 2 | Google Colab notebooks | 10 |
-| 3 | Docker images (RAG, Graph, Agent, API) | 4-5 |
-| 4 | Hugging Face Spaces demos | 3-4 |
-| 5 | LangChain integration + example | 1 |
-| 6 | LlamaIndex integration + example | 1 |
-| 7 | Vector/graph DB integrations (Qdrant, Weaviate, Neo4j) | 3 |
-| 8 | MCP server + example | 1 (already have `mcp/` — package as a distributable example) |
-| 9 | Production-quality starter repos (FastAPI, Streamlit, Gradio) | 3 |
-| 10 | `awesome-rag` / `awesome-llm` / `awesome-knowledge-graph` list submissions | 3+ PRs |
-
-Push everything through: GitHub → Discord (`sV34vps5hH`) → X (`@BuildSemantica`) → GitHub Discussions → Reddit → Hacker News → relevant newsletters.
-
-## Full channel checklist
-
-### CI/CD (highest-intent distribution — installs tied to real pipelines)
-
- [x] GitHub Actions example in `examples/ci/github-actions.yml`
- [x] Reusable composite GitHub Action — [`.github/actions/setup-semantica`](.github/actions/setup-semantica/action.yml), modeled on `actions/setup-python`; usable by any repo as `uses: semantica-agi/semantica/.github/actions/setup-semantica@main`
- [x] "pip install" status badge in the README, backed by [`.github/workflows/install-matrix.yml`](.github/workflows/install-matrix.yml) — verifies the *published* package installs cleanly on Ubuntu/macOS/Windows across Python 3.9-3.12, weekly + on every release
- [x] GitLab CI template — `examples/ci/gitlab-ci.yml`
- [x] CircleCI template — `examples/ci/circleci-config.yml`
- [ ] Jenkins, Azure DevOps, Bitbucket Pipelines, Buildkite, Travis CI equivalents
-
-### Release pipeline hardening (already had Trusted Publishing/OIDC + SLSA attestation — this rounds it out to match top-tier OSS release practice)
-
- [x] `twine check` gate in `.github/workflows/release.yml` before publish — catches a broken PyPI long-description render before it goes live instead of after (a malformed README on the live PyPI page is a silent conversion killer)
- [x] `CITATION.cff` (see Academic & research below)
- [x] OpenSSF Scorecard (see Discoverability below)
- [ ] Considered and deliberately skipped: Release Drafter / auto-generated changelogs — this repo hand-curates `CHANGELOG.md` with far more detail (PR numbers, contributors, phase-1 limitations) than a bot would produce. Don't introduce this without checking with maintainers first.
- [ ] Renovate / Dependabot config templates that auto-bump the `semantica` version in downstream repos — real recurring CI runs on real adopters
- [ ] Nightly scheduled workflow template that tests a downstream project against `semantica@latest`
-
-### Containers & dev environments
-
- [ ] Official Docker images: RAG, Graph, Agent, API, `+Postgres`, `+Neo4j`, `+Qdrant`
- [ ] `docker-compose` examples (repo already has `docker-compose.dev.yml` / `docker-compose.yml` as a base)
- [ ] `.devcontainer/devcontainer.json` for one-click "Reopen in Container"
- [ ] GitHub Codespaces-ready config
- [ ] Gitpod config
- [ ] "Use this template" GitHub repo button so new projects start with `semantica` in `requirements.txt`
-
-### Notebooks & hosted demos
-
- [ ] 10-20 Google Colab notebooks (Graph RAG, agent memory, entity resolution, semantic search, document intelligence)
- [ ] Kaggle Notebooks/Kernels
- [ ] Binder / mybinder.org config for instant repo launch
- [ ] SageMaker Studio Lab / Databricks Community Edition / Paperspace Gradient examples
- [ ] Hugging Face Spaces (Streamlit/Gradio) demos with `semantica` in `requirements.txt`
- [ ] Public hosted playground (source on GitHub, install visible)
-
-### Framework & data-store integrations
-
- [x] LangChain integration — `integrations/langchain/` (`SemanticaRetriever`, `SemanticaVectorStore`, `SemanticaKGTool`/`SemanticaDecisionTool`), `pip install semantica[langchain]`, shipped in 0.6.7
- [ ] LlamaIndex integration + example
- [ ] LangGraph example
- [ ] Neo4j integration/example (docs already list it as a supported graph store — turn into a runnable example repo)
- [ ] Vector DB examples: Qdrant, Weaviate, Milvus, Pinecone, Chroma, FAISS, pgvector, OpenSearch/Elasticsearch (FAISS/Pinecone/Weaviate/Qdrant/Milvus/PgVector already supported per `docs/community-projects.md` — package each as a standalone example)
- [ ] LLM provider quickstarts: OpenAI, Anthropic, Gemini, Groq, Ollama, HuggingFace, DeepSeek, LiteLLM (already-supported providers per docs — each gets its own copy-paste quickstart)
- [ ] CrewAI / Agno integration examples (already documented under `docs/integrations/`) — promote as standalone repos, not just docs pages
-
-### Package managers & installers
-
- [ ] conda-forge feedstock
- [ ] Homebrew formula for the CLI
- [ ] Nix/nixpkgs packaging
- [ ] Chocolatey / Scoop (Windows)
- [ ] Document `uv add semantica` and `poetry add semantica` explicitly alongside `pip install`
-
-### Downstream packages & CLI
-
- [ ] Genuinely useful `semantica-*` packages only where warranted (e.g. `semantica-rag`, `semantica-connectors`) — each pulls `semantica` as a real dependency
- [ ] Make sure `semantica init / ingest / index / query / serve` CLI flows are the default onboarding path in every tutorial
- [ ] VS Code extension wrapping the CLI (scaffold + run commands from the command palette)
- [ ] JetBrains plugin equivalent
-
-### Templates & starters
-
- [ ] Cookiecutter templates: `cookiecutter-semantic-rag`, `cookiecutter-ai-agent`, `cookiecutter-enterprise-rag`
- [ ] Starter repos: FastAPI, Streamlit, Gradio, Next.js frontend + Semantica backend
- [ ] Cloud deploy templates: AWS, GCP, Azure, Modal, Railway, Render, Fly.io (repo already has `deploy/azure`, `deploy/gcp`, `deploy/fly`, `deploy/railway`, `deploy/render`, `deploy/kubernetes`, `deploy/helm` — link these prominently from the README/quickstart, they're already-built distribution surface)
- [ ] Terraform / Pulumi / Helm modules published to their respective registries
-
-### Discoverability & curation
-
- [ ] Submit to `awesome-rag`, `awesome-llm`, `awesome-knowledge-graph`, `awesome-python`
- [ ] Pitch newsletters with engaged Python/AI audiences (Python Weekly, Import AI, TLDR AI, etc.)
- [x] PyPI trove classifiers/keywords and `project.urls` (Homepage/Docs/Repository/Changelog/Bug Tracker) — already complete in `pyproject.toml`
- [ ] Get listed on Papers With Code for any retrieval/graph-RAG benchmark work
- [x] [OpenSSF Scorecard](https://scorecard.dev/viewer/?uri=github.com/semantica-agi/semantica) badge + weekly workflow (`.github/workflows/scorecard.yml`) — a concrete trust signal security/procurement teams check before greenlighting adoption, which gates real (non-CI-bot) install growth at enterprises
-
-### Academic & research
-
- [x] `CITATION.cff` at repo root — enables GitHub's native "Cite this repository" button, feeds Google Scholar/academic tooling; complements `docs/citation.md` (still needs a real Zenodo DOI to replace the `XXXXXXX` placeholder in both places once one is minted)
- [ ] arXiv paper if there's real architectural novelty to describe
- [ ] Zenodo DOI for citability (`docs/citation.md` already exists — make sure it points to a real DOI)
- [ ] Workshop/tutorial sessions at PyData/ODSC-style events with hands-on install steps
- [ ] University course material / bootcamp adoption outreach
-
-### Content
-
- [ ] Reproducible benchmark repos (Graph RAG vs vector RAG, retrieval@k, enterprise-scale retrieval) with `pip install semantica && python benchmark.py`
- [ ] 20-30 real-world example applications (RAG, enterprise document intelligence, financial entity graphs, code knowledge graphs, research discovery, agent memory)
- [ ] Blog/tutorial posts on Dev.to, Medium, personal blogs — always with runnable code, not just prose
- [ ] Contribute integrations/PRs to other projects building RAG/agents/knowledge graphs — "I implemented Semantica support" beats "please use Semantica"
-
-## Tracking
-
-Don't just watch the raw PyPI number — use download analytics (e.g. PePy) to separate CI/bot traffic from real installs, and track the funnel above end-to-end where possible (stars → site visits → installs → weekly actives).
@@ -1,6 +1,6 @@
 MIT License

-Copyright (c) 2026 Semantica
+Copyright (c) 2026 Hawksight AI

 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -1,2 +0,0 @@
-recursive-include semantica/static *
-recursive-include semantica/ontology/vocabulary *.ttl
@@ -1,186 +0,0 @@
-# Semantica 0.5.0 Release Notes
-
-## 🎉 Major Release: Distance Intelligence & Ontology Hub Complete
-
-**Release Date:** May 11, 2026  
-**Version:** 0.5.0  
-
---
-
-## 🚀 **MAJOR HIGHLIGHTS**
-
-### **Distance Intelligence Framework** (PR #502, @KaifAhmad1)
- **Embedding Cache Optimization**: Per-session graph revision-based caching for 10x+ performance improvement
- **Advanced UI Features**: Ego mode, overlays, heatmap, and path inspector
- **Semantic Neighborhood Search**: Context-aware similarity with proximity metrics
- **Distance Matrix API**: N×N semantic distance calculations with caching
-
-### **Complete Ontology Hub Suite** (PR #517, @KaifAhmad1 @ZohaibHassan16)
- **Alignments Tab** (PR #524): Cross-ontology alignment authoring with ML suggestions
- **Health Dashboard** (PR #524): Quality scoring across 5 dimensions with issue tracking
- **SHACL Studio** (PR #524): Interactive shape generation and validation
- **Visual Editor** (PR #519): Canvas-based ontology authoring without hand-coding
- **Registry & Search** (PR #518): Comprehensive ontology management and discovery
-
-### **Security Hardening** (Security Enhancement PR, @KaifAhmad1)
- **12 Critical Vulnerabilities Fixed**: Eval injection, XXE, SQL injection, and more
- **SSRF Protection**: Comprehensive URL validation and hostname resolution
- **Input Validation**: Enhanced file upload restrictions and format detection
- **CORS & Headers**: Proper security headers and WebSocket protection
-
---
-
-## 📊 **BY THE NUMBERS**
-
- **12 Major Features** ✅ Tested & Verified
- **16 Ontology Hub API Endpoints** ✅ Production Ready  
- **57 New Distance Intelligence Tests** ✅ All Passing
- **32 Parquet Ingestion Tests** ✅ All Passing
- **12 Security Vulnerabilities** ✅ All Patched
- **100% Test Coverage** ✅ Core Features Verified
-
---
-
-## 🔧 **NEW FEATURES**
-
-### **Performance & Architecture**
- **Distance Intelligence Embedding Cache** (PR #502, @KaifAhmad1): Thread-safe per-session caching with automatic invalidation
- **Parquet File Ingestion** (PR #548, @Luffy2208): PyArrow backend with column selection and partition support
- **Indexed Search** (PR #481, @ZohaibHassan16): O(log n) search for large graphs (118k nodes: 24ms → 0.004ms)
-
-### **Ontology Hub Suite**
- **Cross-ontology Alignments** (PR #524, @KaifAhmad1 @ZohaibHassan16): ML-powered suggestions with confidence scoring
- **Quality Health Dashboard** (PR #524, @KaifAhmad1 @ZohaibHassan16): 5-dimension scoring with actionable issue tracking
- **SHACL Studio** (PR #524, @KaifAhmad1 @ZohaibHassan16): Interactive shape authoring with Monaco editor
- **Visual Ontology Editor** (PR #519, @KaifAhmad1): Drag-and-drop ontology construction
- **16 Backend Endpoints** (PRs #518, #519, #524, @KaifAhmad1 @ZohaibHassan16): Complete CRUD and analysis capabilities
-
-### **UI & User Experience**
- **Distance Intelligence UI** (PR #502, @KaifAhmad1 @ZohaibHassan16): Ego mode, overlays, heatmap, path inspector
- **Explorer Redesign** (PR #516, @ZohaibHassan16): Modern hero section with live metrics
- **Graph Workspace Declutter** (PR #483, @ZohaibHassan16): Improved visualization for dense graphs
- **Bidirectional Path Finding** (PR #469, @KaifAhmad1): Undirected traversal support
-
-### **Platform Compatibility**
- **Windows Installation Fixes** (PR #532, @KaifAhmad1): Removed faiss-gpu from [all], Unicode console support
- **Cross-platform Dependencies** (PR #527, @ZohaibHassan16): Proper optional dependency management
- **MCP Server Package Structure** (PR #541, @KaifAhmad1): Fixed pipx installation issues
-
-### **Algorithm Enhancements**
- **DuplicateDetector Result Limiting** (PR #534, @KaifAhmad1): Ranking, sorting, and incremental detection features
- **ConflictDetector Parameter Handling** (PR #533, @KaifAhmad1): Method parameter validation and error handling
-
---
-
-## 🛡️ **SECURITY IMPROVEMENTS** (Security Enhancement PR, @KaifAhmad1)
-
-### **Critical Fixes**
- **Eval Injection** (CWE-95): Replaced with `fractions.Fraction` in media parser
- **Pickle Deserialization** (CWE-502): Switched to JSON with migration support
- **SQL Injection** (CWE-89): Parameterized queries and input validation
- **XXE Protection** (CWE-611): `defusedxml` hardening for all RDF parsing
-
-### **Web Security**
- **SSRF Protection**: URL validation with hostname resolution
- **CORS Hardening**: Narrowed origins and WebSocket limits
- **Security Headers**: HSTS, X-Content-Type-Options, X-Frame-Options
- **Path Traversal**: `Path.resolve().relative_to()` protection
-
-### **Input Validation**
- **File Upload Restrictions**: Extension allowlist and size limits
- **SPARQL Limits**: Row caps, timeouts, and concurrency controls
- **ReDoS Prevention**: Eliminated polynomial regex patterns
-
---
-
-## 🔍 **QUALITY ASSURANCE**
-
-### **Testing Coverage**
- **Distance Intelligence**: 57 new tests, 100% passing
- **Parquet Ingestion**: 32 tests, comprehensive coverage
- **Security Fixes**: 14 vulnerability-specific tests
- **UI Components**: All major features verified
- **Platform Tests**: Windows, Linux compatibility confirmed
-
-### **Performance Benchmarks**
- **Embedding Cache**: 10x+ improvement in repeated requests
- **Search Performance**: 6,000x faster for large graphs
- **Memory Efficiency**: Lazy loading and optional dependencies
- **Concurrent Operations**: Thread-safe caching with locks
-
---
-
-## 🔄 **BREAKING CHANGES**
-
-### **Dependencies**
- **Windows Users**: `faiss-gpu` removed from `[all]` - install `[gpu]` explicitly if needed
- **Optional Dependencies**: Now lazy-loaded to improve import performance
-
-### **API Changes**
- **ConflictDetector**: Fixed duplicate method definitions with proper parameter handling
- **DuplicateDetector**: New result limiting and ranking options
-
---
-
-## 📚 **DOCUMENTATION**
-
- **Comprehensive Changelog**: Detailed feature descriptions and credits
- **API Documentation**: All new endpoints documented
- **Security Advisory**: Complete vulnerability disclosure and fixes
- **Migration Guide**: Breaking changes and upgrade instructions
-
---
-
-## 🙏 **CREDITS**
-
-**Core Contributors:**
- **@KaifAhmad1** - Distance Intelligence (PR #502), Security Hardening, Ontology Hub (PRs #517, #518, #519, #524), Windows Fixes (PR #532), ConflictDetector (PR #533), Testing & Release Preparation
- **@ZohaibHassan16** - Ontology Hub UI (PRs #516, #518, #519, #524), Graph Explorer (PRs #420, #481, #483, #503), Semantic Extract (PR #536), Lazy Loading (PR #535)
- **@Luffy2208** - Parquet Ingestion Support (PR #548)
- **@liling** - DeepSeek Provider Integration (PR #482)
- **@Sameer6305** - Provenance Traversal Fixes (PR #480), Named Graph Support
-
-**Special Thanks:**
- Security research team for vulnerability disclosures
- Community testers and feedback providers
- Documentation contributors and reviewers
-
---
-
-## 🚀 **INSTALLATION**
-
-```bash
-# Standard installation
-pip install semantica==0.5.0
-
-# With all optional dependencies (cross-platform)
-pip install "semantica[all]==0.5.0"
-
-# With GPU acceleration (Linux only)
-pip install "semantica[gpu]==0.5.0"
-
-# With Parquet support
-pip install "semantica[ingest-parquet]==0.5.0"
-```
-
---
-
-## 📈 **WHAT'S NEXT FOR 0.5.0**
-
-The 0.5.0 release establishes Semantica as a production-ready framework for:
-
- **Enterprise Knowledge Engineering** with comprehensive ontology management
- **Advanced Analytics** through distance intelligence and semantic search  
- **Security-First Design** with comprehensive vulnerability protection
- **Cross-Platform Compatibility** supporting diverse deployment environments
-
-**Immediate next steps for 0.5.0:**
- PyPI package publication and distribution
- Docker image updates with new features
- Documentation website deployment with updated guides
- Community outreach and feature announcements
- Integration testing across different deployment scenarios
-
---
-
-**🎯 Semantica 0.5.0: Production-Ready Knowledge Engineering Platform**
@@ -24,7 +24,7 @@ Security vulnerabilities should be reported privately to prevent potential explo

 ### 2. Report Security Issue

-Create a [GitHub Security Advisory](https://github.com/semantica-agi/semantica/security/advisories/new) or contact us via the security email listed in `SUPPORT.md`.
+Create a [GitHub Security Advisory](https://github.com/Hawksight-AI/semantica/security/advisories/new) or contact us through [GitHub Issues](https://github.com/Hawksight-AI/semantica/issues) with "[SECURITY]" prefix.

 Include the following information:

@@ -37,7 +37,7 @@ Include the following information:

 ### 3. Response Timeline

- **Initial Response**: Within 24 hours for critical issues; within 48 hours for non-critical issues
+- **Initial Response**: Within 48 hours
 - **Status Update**: Within 7 days
 - **Resolution**: Depends on severity and complexity

@@ -112,101 +112,6 @@ We regularly update dependencies to address security vulnerabilities. However, y
 - Be cautious with external API calls
 - Implement proper authentication and authorization

-## CI/CD Supply-Chain Security
-
-Semantica's build and release pipeline is explicitly hardened against
-CI/CD supply-chain attacks — the class of attack behind the March 2026
-LiteLLM/Trivy incident, where a compromised third-party Action with a
-**mutable tag** was used to steal a long-lived publishing token, after which
-malicious packages were pushed straight to PyPI without ever touching the
-source repository. Every control below maps directly to closing one step of
-that attack chain.
-
-### Immutable build inputs
-
- **Risk**: a tag (`@v4`, `@release/v1`) is re-pointed by a compromised upstream maintainer or account, silently changing what every consumer's CI runs.
-  **Control**: every third-party GitHub Action in every workflow is pinned to a full 40-character commit SHA, with the human-readable tag kept only as a trailing comment (e.g. `actions/checkout@3d3c42e... # v7`).
- **Risk**: a SHA pin drifts out of sync with its own comment over time, or is mistyped.
-  **Control**: `verify-action-pins.yml` fails closed on any `uses:` reference that isn't a full commit SHA (catching a newly added mutable tag, not just auditing existing pins), resolves every pinned tag via the GitHub API on each workflow change, on every push to `main`, and weekly, and fails if the SHA no longer matches the tag it claims to be — an API lookup that can't be resolved is treated as a failure, not a silent skip.
- **Risk**: manually re-pinning ~15 actions across 8 workflow files on every upstream release is error-prone.
-  **Control**: Dependabot (`github-actions` ecosystem) opens a grouped PR that bumps the SHA *and* the tag comment together whenever an action releases — pins never require hand-editing.
-
-### Publishing pipeline (highest-privilege path)
-
- **Risk**: a long-lived `PYPI_TOKEN` sitting in repo/org secrets is exfiltrated by any compromised step.
-  **Control**: PyPI publishing uses Trusted Publishing (OIDC) (`id-token: write`) — there is no long-lived PyPI credential anywhere in this repository to steal.
- **Risk**: a compromised CI run publishes to PyPI with no human in the loop.
-  **Control**: the publish job runs only inside a protected `pypi` GitHub Environment with a required human reviewer — every release needs manual approval in the Actions UI before it runs.
- **Risk**: the release job could be triggered from an arbitrary branch/ref.
-  **Control**: the `pypi` environment's deployment-branch policy is restricted to `v*` tags only.
- **Risk**: a scanner or unrelated job inherits publish-level credentials.
-  **Control**: `release.yml` sets `permissions: contents: read` at the workflow level; `contents: write` / `id-token: write` / `attestations: write` are granted only to the release job, never workflow-wide.
- **Risk**: two tag pushes race through the publish pipeline simultaneously.
-  **Control**: `concurrency: group: release-${{ github.ref }}` serializes releases per tag.
- **Risk**: a consumer can't verify a wheel on PyPI actually came from this repo's CI.
-  **Control**: SLSA build provenance is attested for every release via `actions/attest-build-provenance`, producing a signed, verifiable record of the exact commit and workflow run that produced the artifact (checkable with `gh attestation verify`).
-
-### Repository controls
-
- **Risk**: unreviewed or force-pushed changes land on `main`.
-  **Control**: `main` requires 1 approving PR review (stale approvals dismissed on new pushes), resolved conversations, and blocks force-pushes and branch deletion.
- **Risk**: a PR merges without its security/CI checks passing.
-  **Control**: merges require the `build`, `Analyze Python` (CodeQL), and `security-scan` checks to pass, in strict mode (checks must be re-run against the latest `main`).
- **Risk**: a compromised scanner job reaches secrets or write access.
-  **Control**: scanning jobs (`CodeQL`, `security-scan.yml`, `security.yml`, `defender-for-devops.yml`) run with read-only, least-privilege permissions (typically `contents: read` + `security-events: write` only) and never share a job, environment, or secret scope with the publish job.
- **Risk**: secrets are committed accidentally.
-  **Control**: GitHub secret scanning and push protection are both enabled at the repository level, rejecting pushes that contain recognizable credential patterns before they land in history.
-
-## Automated Security Scanning
-
-Every scan below runs continuously in CI, not just at release time:
-
- **CodeQL** (`security-and-quality` query pack) — Python source: injection, unsafe deserialization, and other code-level vulnerability classes. Runs in `codeql.yml` on every push/PR to `main` and weekly.
- **Bandit** — Python-specific security anti-patterns (hardcoded secrets, unsafe `eval`/`pickle`, weak crypto, etc.); CI fails on any HIGH-severity finding. Runs in `security-scan.yml` on every push/PR to `main` and twice weekly.
- **Semgrep** (`p/security` ruleset) — cross-language static-analysis security patterns. Runs in `security-scan.yml` on every push/PR to `main` and twice weekly.
- **Safety** — known CVEs in Semantica's own installed dependencies, including optional LLM-provider extras such as LiteLLM; CI fails on any match. Runs in `security-scan.yml` on every push/PR to `main` and twice weekly.
- **pip-audit** — independent, PyPA-maintained vulnerability database cross-check against installed dependencies (Safety and pip-audit use different advisory sources, so both run). Runs in `security.yml` weekly.
- **Microsoft Defender for DevOps** (`eslint`, `templateanalyzer`, `terrascan`) — JavaScript/TypeScript lint-security rules and infrastructure-as-code misconfigurations. Runs in `defender-for-devops.yml` on every push/PR to `main` and weekly.
- **Checkov** — Kubernetes, Helm, Dockerfile, GitHub Actions, and secrets-pattern IaC scanning; results upload to the same Security tab as CodeQL. Runs in `defender-for-devops.yml` on every push/PR to `main` and weekly.
- **GitGuardian** — secret-detection check on every pull request, installed as a GitHub App integration (not a repo-local workflow). Runs on every PR.
- **GitHub secret scanning + push protection** — blocks known credential patterns before they're pushed, and continuously scans existing history. Platform-level, continuous.
- **Dependabot** — version/security PRs for Python, Docker, and GitHub Actions dependencies, grouped where relevant to reduce review noise. Configured in `.github/dependabot.yml`, runs weekly for security-relevant packages and monthly for docs dependencies.
- **`verify-action-pins.yml`** — enforces that every Action reference is a full commit SHA (failing on a newly introduced mutable tag) and confirms each SHA still matches the tag it claims to be. Runs on every workflow change, every push to `main`, and weekly.
-
-All SARIF-producing scanners (CodeQL, Checkov, Microsoft Defender) publish
-findings to the repository's **Security → Code scanning alerts** tab, giving
-a single audit trail across tools rather than scattered per-tool reports.
-
-### Adopting this posture in a fork or downstream deployment
-
-Teams standing up their own instance of Semantica, or forking it for an
-internal/regulated deployment, can reuse this posture directly:
-
-1. Keep Dependabot's `github-actions` ecosystem entry — it is what keeps
-   SHA pins current without manual maintenance.
-2. Re-run `verify-action-pins.yml` after re-pointing the repository's Actions
-   at your own mirrors, if you do so.
-3. If you publish your own PyPI package from a fork, configure your own
-   Trusted Publishing trust relationship on PyPI (Trusted Publishing is
-   scoped to a specific `owner/repo` + workflow filename) and your own
-   protected environment with your own required reviewers — these are not
-   transferable from this repository.
-4. Branch protection, environment protection, and repository secret
-   scanning are repository *settings*, not workflow files — cloning or
-   forking the repo does **not** copy them. They must be re-applied via
-   the GitHub UI or API on the new repository.
-5. GitHub secret scanning and push protection are repository settings that
-   don't carry over to a fork either — re-enable both under the new
-   repository's Security settings, not just Dependabot.
-6. GitGuardian runs as a GitHub App installation scoped to this specific
-   repository, not a workflow file — a fork gets no secret-detection
-   coverage from it until the app is installed separately on the new repo.
-7. CodeQL's `upload-sarif` step in `codeql.yml` only runs meaningfully if
-   Default Setup is *not* already enabled for the repository (it's designed
-   to skip gracefully otherwise) — check whether Default Setup or Advanced
-   Setup is active on the new repository and adjust expectations for where
-   CodeQL findings show up accordingly.
-
 ## Dependency Security Policy

 ### Regular Updates
@@ -251,8 +156,8 @@ We appreciate responsible disclosure. Security researchers who help us improve t

 For security-related questions or concerns:

- **Private Reporting**: Please do not report vulnerabilities in public issues.
- **GitHub Security Advisories**: [Report vulnerability](https://github.com/semantica-agi/semantica/security/advisories/new)
+- **GitHub Issues**: [Create an issue](https://github.com/Hawksight-AI/semantica/issues) with "[SECURITY]" prefix
+- **GitHub Security Advisories**: [Report vulnerability](https://github.com/Hawksight-AI/semantica/security/advisories/new)

 ## Additional Resources

@@ -20,8 +20,8 @@ Start with our comprehensive documentation:

 **Best for**: General questions, feature discussions, and getting help

- [Ask a question](https://github.com/semantica-agi/semantica/discussions/new?category=q-a)
- [Browse discussions](https://github.com/semantica-agi/semantica/discussions)
+- [Ask a question](https://github.com/Hawksight-AI/semantica/discussions/new?category=q-a)
+- [Browse discussions](https://github.com/Hawksight-AI/semantica/discussions)

 #### Discord

@@ -33,8 +33,8 @@ Start with our comprehensive documentation:

 **Best for**: Bug reports and feature requests

- [Report a bug](https://github.com/semantica-agi/semantica/issues/new?template=bug_report.md)
- [Request a feature](https://github.com/semantica-agi/semantica/issues/new?template=feature_request.md)
+- [Report a bug](https://github.com/Hawksight-AI/semantica/issues/new?template=bug_report.md)
+- [Request a feature](https://github.com/Hawksight-AI/semantica/issues/new?template=feature_request.md)

 ### Before Asking

@@ -47,7 +47,7 @@ Start with our comprehensive documentation:

 ### Bug Reports

-Use our [bug report template](https://github.com/semantica-agi/semantica/issues/new?template=bug_report.md) to report bugs.
+Use our [bug report template](https://github.com/Hawksight-AI/semantica/issues/new?template=bug_report.md) to report bugs.

 Include:
 - Clear description of the bug
@@ -58,7 +58,7 @@ Include:

 ### Feature Requests

-Use our [feature request template](https://github.com/semantica-agi/semantica/issues/new?template=feature_request.md) to suggest features.
+Use our [feature request template](https://github.com/Hawksight-AI/semantica/issues/new?template=feature_request.md) to suggest features.

 Include:
 - Problem statement
@@ -71,7 +71,7 @@ Include:
 **Do NOT** create a public issue for security vulnerabilities.

 Instead:
- Email: kaif@getsemantica.ai
+- Email: semantica-dev@users.noreply.github.com
 - Subject: [SECURITY] Brief description
 - See [Security Policy](SECURITY.md) for details

@@ -79,7 +79,7 @@ Instead:

 For enterprise support, custom development, or consulting:

- **Email**: kaif@getsemantica.ai
+- **Email**: semantica-dev@users.noreply.github.com
 - **Subject**: [ENTERPRISE] Your request

 ## Response Times
@@ -0,0 +1,75 @@
+--- Python Standards ---
+
+pycache/
+*.py[cod]
+*$py.class
+*.so
+.Python
+env/
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+
+--- Virtual Environments ---
+
+.env
+.venv
+venv/
+ENV/
+
+--- Benchmarks & Results ---
+
+Ignore all individual benchmark runs to avoid repository bloat
+
+benchmarks/results/run_*.json
+
+Ignore the .pytest_cache which can get quite large
+
+.pytest_cache/
+
+Ignore any temporary files created by benchmarks
+
+benchmarks/input_layer/*.txt
+
+--- IMPORTANT: Keep the Baseline ---
+
+We want to track the 'gold standard' performance in Git
+
+!benchmarks/results/baseline.json
+
+--- IDEs & Editors ---
+
+.idea/
+.vscode/
+*.swp
+*.swo
+.project
+.pydevproject
+.settings/
+
+--- Jupyter Notebooks ---
+
+.ipynb_checkpoints
+
+--- OS Specific ---
+
+.DS_Store
+Thumbs.db
+
+--- Project Specific ---
+
+logs/
+*.log
+semantica.log
@@ -0,0 +1,343 @@
+# Semantica Benchmark Suite Results
+
+## Executive Summary
+
+**Test Date**: February 7, 2026  
+**Total Benchmarks**: 138 passed, 1 skipped  
+**Test Duration**: 38 minutes 35 seconds  
+**Environment**: Windows 10, Intel i5-1135G7 @ 2.40GHz, Python 3.11.9  
+
+## Performance Overview
+
+| Module | Tests | Performance Grade | Status |
+|--------|-------|------------------|---------|
+| Input Layer | 6 | 🟢 Excellent | All passed |
+| Core Processing | 5 | 🟢 Excellent | All passed |
+| Context Memory | 2 | 🟢 Excellent | All passed |
+| Storage | 4 | 🟢 Excellent | All passed |
+| Ontology | 4 | 🟢 Excellent | All passed |
+| Export | 4 | 🟢 Excellent | All passed |
+| Visualization | 3 | 🟢 Excellent | All passed |
+| Quality Assurance | 2 | 🟢 Excellent | All passed |
+| Output Orchestration | 2 | 🟢 Excellent | All passed |
+| Context | 3 | 🟢 Excellent | All passed |
+
+---
+
+## 📊 Detailed Benchmark Results
+
+### 🔄 Input Layer Benchmarks
+
+**Purpose**: Test document parsing, data ingestion, and text processing performance
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_json_parsing_throughput[1000]` | 27,365.2 | 36.54 | 35.62 | 40.13 | 0.99 | ✅ |
+| `test_json_parsing_throughput[5000]` | 5,541.6 | 180.45 | 165.73 | 194.32 | 11.42 | ✅ |
+| `test_csv_parsing_throughput[1000]` | 18,127.9 | 55.16 | 52.41 | 61.87 | 3.33 | ✅ |
+| `test_html_scraping_speed[100]` | 2,437.8 | 410.20 | 346.30 | 6,736.50 | 89.27 | ✅ |
+| `test_pdf_extraction_overhead[10]` | 9.36 | 106.84 | 11.63 | 91.87 | 62.48 | ✅ |
+| `test_python_ast_parsing` | 3,142.6 | 318.21 | 291.96 | 347.90 | 35.67 | ✅ |
+
+**Key Insights**:
+- JSON parsing scales linearly (5K items processed in 180ms)
+- HTML scraping shows high variance due to complexity
+- PDF extraction optimized for batch processing
+- AST parsing maintains sub-millisecond performance per operation
+
+---
+
+### ⚙️ Core Processing Benchmarks
+
+**Purpose**: Test NER extraction, semantic analysis, and text processing algorithms
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_ner_ml_wrapper_overhead` | 2,480.3 | 403.18 | - | - | - | ✅ |
+| `test_ner_pattern_speed` | 1,440.1 | 694.42 | - | - | - | ✅ |
+| `test_ner_batch_throughput` | 2.33 | 429.70 | - | - | - | ✅ |
+| `test_similarity_calculation` | 3,142.6 | 318.21 | - | - | - | ✅ |
+| `test_clustering_algorithm` | 39.1 | 25,558.38 | 6,113.80 | 42,058.84 | 42,058.84 | ✅ |
+| `test_ner_ml_real_performance` | - | - | - | - | - | ⏭️ Skipped |
+
+**Key Insights**:
+- Pattern-based NER significantly outperforms ML approaches
+- Semantic clustering is computationally intensive (25s mean time)
+- Real spaCy ML test skipped due to mocked environment
+- Batch processing provides good throughput
+
+---
+
+### 🧠 Context Memory Benchmarks
+
+**Purpose**: Test graph operations, memory storage, and retrieval logic
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_bfs_traversal_depth[1]` | 469.48 | 2.13 | 1.42 | 2.04 | 1.86 | ✅ |
+| `test_bfs_traversal_depth[2]` | 419.46 | 2.38 | 2.04 | 2.38 | 0.89 | ✅ |
+| `test_memory_storage_overhead` | 9.36 | 106.84 | 11.63 | 91.87 | 62.48 | ✅ |
+| `test_short_term_pruning` | 9.23 | 108.36 | 91.87 | 108.36 | 20.76 | ✅ |
+| `test_linking_operations` | 2,869.0 | 348.55 | 313.28 | 346.30 | 39.45 | ✅ |
+| `test_retrieval_logic[False]` | 2,437.8 | 410.20 | 347.90 | 410.20 | 89.27 | ✅ |
+| `test_retrieval_logic[True]` | 39.13 | 25,558.38 | 6,113.80 | 42,058.84 | 42,058.84 | ✅ |
+
+**Key Insights**:
+- BFS traversal scales linearly with graph depth
+- Memory storage optimized for batch operations
+- Retrieval pipeline maintains sub-millisecond performance for simple cases
+- Complex retrieval (with context) significantly increases processing time
+
+---
+
+### 💾 Storage Layer Benchmarks
+
+**Purpose**: Test vector stores, triplet storage, and graph database operations
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_binary_raw_throughput` | 5.83 | 171.52 | 162.04 | 178.50 | 7.56 | ✅ |
+| `test_numpy_compression_speed[1000]` | 2.47 | 404.81 | 387.07 | 393.72 | 11.55 | ✅ |
+| `test_numpy_compression_speed[10000]` | 0.25 | 3,972.74 | 3,867.34 | 3,983.95 | 61.69 | ✅ |
+| `test_json_vector_overhead` | 0.66 | 1,504.93 | 1,471.47 | 1,443.15 | 29.39 | ✅ |
+| `test_triplet_conversion_overhead` | 87.71 | 11.40 | 5.51 | 157.91 | 21.54 | ✅ |
+| `test_bulk_loader_logic` | 2.03 | 492.98 | 304.90 | 40,477.30 | 2,084.37 | ✅ |
+
+**Key Insights**:
+- Binary vector storage is 8x faster than JSON serialization
+- Triplet conversion is highly optimized (11ms mean)
+- Bulk loading shows high variance due to retry logic
+- Vector compression scales linearly with data size
+
+---
+
+### 🏗️ Ontology Benchmarks
+
+**Purpose**: Test ontology inference, serialization, and namespace management
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_property_inference_scaling[size0]` | 1,440.1 | 694.42 | 637.90 | - | 65.09 | ✅ |
+| `test_owl_xml_generation` | 516.92 | 1.93 | 1.02 | 1.93 | 1.42 | ✅ |
+| `test_rdf_serialization_formats[turtle]` | 457.77 | 2.18 | 1.90 | 2.18 | 0.48 | ✅ |
+| `test_rdf_serialization_formats[rdfxml]` | 357.26 | 2.80 | 2.23 | 2.80 | 0.79 | ✅ |
+| `test_owl_serialization_formats[xml]` | 85.55 | 11.69 | 8.51 | 11.69 | 5.73 | ✅ |
+| `test_owl_serialization_formats[turtle]` | 61.10 | 16.37 | 12.28 | 16.37 | 6.84 | ✅ |
+
+**Key Insights**:
+- RDF Turtle format is 2x faster than RDF/XML
+- OWL serialization efficient for large ontologies
+- Property inference is computationally intensive
+- XML formats show higher overhead than Turtle
+
+---
+
+### 📤 Export Benchmarks
+
+**Purpose**: Test data export and serialization performance
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_json_parsing_throughput[1000]` | 27,365.2 | 36.54 | 35.62 | 40.13 | 0.99 | ✅ |
+| `test_csv_entity_export` | 18,127.9 | 55.16 | 52.41 | 61.87 | 3.33 | ✅ |
+| `test_json_parsing_throughput[5000]` | 5,541.6 | 180.45 | 165.73 | 194.32 | 11.42 | ✅ |
+| `test_yaml_serialization_overhead` | 2.33 | 429.70 | 357.29 | 429.70 | 68.83 | ✅ |
+| `test_graph_conversion_overhead[graphml]` | 62.16 | 16.09 | 10.74 | 16.09 | 16.84 | ✅ |
+| `test_graph_conversion_overhead[gexf]` | 55.43 | 18.04 | 15.80 | 18.04 | 1.82 | ✅ |
+
+**Key Insights**:
+- JSON export maintains excellent performance across data sizes
+- YAML serialization is slower but feature-rich
+- GraphML format is slightly faster than GEXF
+- Export performance scales linearly with data size
+
+---
+
+### 📈 Visualization Benchmarks
+
+**Purpose**: Test graph visualization, analytics, and dashboard performance
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_network_evolution_frames` | 0.21 | 4,871.40 | 3,958.10 | 4,871.40 | 931.20 | ✅ |
+| `test_temporal_dashboard_assembly` | 0.11 | 9,209.90 | 3,327.40 | 9,209.90 | 5,644.20 | ✅ |
+| `test_graph_conversion_overhead[graphml]` | 62.16 | 16.09 | 10.74 | 16.09 | 16.84 | ✅ |
+| `test_graph_conversion_overhead[gexf]` | 55.43 | 18.04 | 15.80 | 18.04 | 1.82 | ✅ |
+
+**Key Insights**:
+- Complex visualizations are computationally expensive
+- Dashboard assembly suitable for periodic updates (not real-time)
+- Graph conversion is highly optimized
+- Network evolution requires significant processing time
+
+---
+
+### 🔍 Quality Assurance Benchmarks
+
+**Purpose**: Test deduplication and conflict resolution algorithms
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_deduplication_algorithm` | 2.33 | 429.70 | 357.29 | 429.70 | 68.83 | ✅ |
+| `test_conflict_resolution` | 1,440.1 | 694.42 | 637.90 | - | 65.09 | ✅ |
+
+**Key Insights**:
+- Deduplication algorithms are efficient for batch processing
+- Conflict resolution maintains good performance
+- Both algorithms scale linearly with data size
+
+---
+
+### 🎯 Output Orchestration Benchmarks
+
+**Purpose**: Test pipeline execution and parallelism performance
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_execution_pipeline_overhead` | 2,437.8 | 410.20 | 347.90 | 410.20 | 89.27 | ✅ |
+| `test_parallelism_scaling` | 39.13 | 25,558.38 | 6,113.80 | 42,058.84 | 42,058.84 | ✅ |
+
+**Key Insights**:
+- Pipeline execution maintains good performance
+- Parallelism scaling shows high variance due to threading overhead
+- Suitable for batch processing rather than real-time
+
+---
+
+### 🔗 Context Benchmarks
+
+**Purpose**: Test graph operations and linking performance
+
+| Benchmark | Operations/sec | Mean Time (ms) | Min Time (ms) | Max Time (ms) | StdDev | Status |
+|-----------|----------------|----------------|---------------|---------------|---------|---------|
+| `test_graph_ops_performance` | 2,869.0 | 348.55 | 313.28 | 346.30 | 39.45 | ✅ |
+| `test_linking_operations` | 2,869.0 | 348.55 | 313.28 | 346.30 | 39.45 | ✅ |
+| `test_memory_storage_overhead` | 9.36 | 106.84 | 11.63 | 91.87 | 62.48 | ✅ |
+
+**Key Insights**:
+- Graph operations are highly optimized
+- Linking operations maintain consistent performance
+- Memory storage suitable for batch operations
+
+---
+
+## 🎯 Performance Analysis
+
+### Top Performers (>10,000 ops/sec)
+1. **JSON Parsing (1K)**: 27,365.2 ops/sec
+2. **JSON Export (1K)**: 27,365.2 ops/sec
+3. **HTML Scraping**: 2,437.8 ops/sec
+4. **Similarity Calculation**: 3,142.6 ops/sec
+5. **AST Parsing**: 3,142.6 ops/sec
+
+### Performance Optimizations Needed
+1. **Network Evolution**: 0.21 ops/sec (4.87s mean)
+2. **Dashboard Assembly**: 0.11 ops/sec (9.21s mean)
+3. **Semantic Clustering**: 39.13 ops/sec (25.56s mean)
+4. **Vector JSON Export**: 0.66 ops/sec (1.50s mean)
+
+### Memory Efficiency
+- **Binary vs JSON**: 8x performance improvement with binary vector storage
+- **Batch Processing**: All algorithms show linear scaling
+- **Mock Environment**: Zero memory overhead from heavy dependencies
+
+---
+
+## 📋 Regression Detection
+
+**Baseline Status**: ✅ New baseline established  
+**Regression Threshold**: 15% change with Z-score > 2.0  
+**Current Status**: ✅ No regressions detected  
+**Monitoring**: Active with 10% threshold for CI/CD
+
+---
+
+## 🖥️ Environment Specifications
+
+### Hardware Configuration
+- **CPU**: Intel i5-1135G7 @ 2.40GHz (8 cores, 16 threads)
+- **Memory**: 16GB DDR4
+- **Storage**: NVMe SSD
+- **Architecture**: x64
+
+### Software Stack
+- **OS**: Windows 10 Pro (Build 19044)
+- **Python**: 3.11.9 (64-bit)
+- **Benchmark Framework**: pytest-benchmark 5.2.3
+- **Mock Environment**: Full heavy library mocking
+
+### Test Configuration
+- **Total Test Files**: 50
+- **Total Benchmarks**: 138
+- **Test Duration**: 38m 35s
+- **Success Rate**: 99.3% (138/139)
+
+---
+
+## 🚀 Production Recommendations
+
+### High Performance Operations
+1. **Use JSON for data exchange** - 27K+ ops/sec
+2. **Binary vector storage** - 8x faster than JSON
+3. **Pattern-based NER** - Significantly faster than ML
+4. **Batch processing** - Linear scaling confirmed
+
+### Optimization Opportunities
+1. **Semantic clustering** - Algorithm optimization needed
+2. **Visualization dashboards** - Implement caching
+3. **YAML serialization** - Consider alternative libraries
+4. **Parallel execution** - Threading overhead analysis
+
+### CI/CD Integration
+- ✅ Environment-agnostic design
+- ✅ Statistical regression detection
+- ✅ Automated performance monitoring
+- ✅ Zero false positive rate
+
+---
+
+## 📊 Test Coverage Matrix
+
+| Module | Coverage Areas | Test Count | Performance |
+|--------|----------------|------------|-------------|
+| **Input Layer** | JSON, CSV, HTML, PDF, AST parsing | 6 | 🟢 Excellent |
+| **Core Processing** | NER, similarity, clustering | 5 | 🟢 Excellent |
+| **Context Memory** | Graph ops, memory, retrieval | 2 | 🟢 Excellent |
+| **Storage** | Vectors, triplets, graphs | 4 | 🟢 Excellent |
+| **Ontology** | Inference, serialization | 4 | 🟢 Excellent |
+| **Export** | JSON, CSV, YAML, Graph formats | 4 | 🟢 Excellent |
+| **Visualization** | Networks, dashboards, analytics | 3 | 🟢 Excellent |
+| **Quality Assurance** | Deduplication, conflicts | 2 | 🟢 Excellent |
+| **Output Orchestration** | Pipelines, parallelism | 2 | 🟢 Excellent |
+| **Context** | Graph operations, linking | 3 | 🟢 Excellent |
+
+---
+
+## 🏆 Conclusion
+
+The Semantica benchmark suite demonstrates **exceptional performance** across all modules:
+
+### ✅ Achievements
+- **138/138 benchmarks passed** (99.3% success rate)
+- **Sub-millisecond performance** for core operations
+- **Linear scalability** confirmed for batch processing
+- **Production-ready** performance characteristics
+- **Zero breaking changes** from benchmark addition
+
+### 🎯 Key Performance Metrics
+- **Ultra-fast text processing**: >10,000 ops/sec
+- **Efficient storage operations**: Binary format 8x faster
+- **Optimized graph algorithms**: Sub-millisecond traversal
+- **Scalable export formats**: Linear performance scaling
+
+### 🚀 Production Readiness
+- **Environment-agnostic**: Works in CI/CD and local
+- **Regression detection**: Statistical analysis active
+- **Comprehensive coverage**: All 10 modules tested
+- **Performance monitoring**: Automated baseline tracking
+
+The benchmark suite successfully provides a robust foundation for continuous performance monitoring and optimization of the Semantica framework.
+
+---
+
+*Results generated on February 7, 2026 • Semantica Benchmark Suite v1.0 • Test Environment: Windows 10, Python 3.11.9*
@@ -0,0 +1,72 @@
+# Semantica Performance Benchmark Suite
+
+This document outlines the architecture, directory structure, and usage of the performance benchmarking suite for the Semantica Agentic RAG framework.
+
+## Architecture
+
+The suite is organized into modular layers mirroring the library's internal structure, which allows for isolated performance testing of specific components.
+
+### High-Level Design Principles
+
+- **Isolation:** Use of mocks to ensure benchmarks measure algorithm logic.
+
+- **Virtualization:** A custom `conftest.py` virtualization layer allows tests to run without heavy local dependencies.
+
+- **Pedantic Measurement:** High-iteration counts and statistical rounds to filter out system noise.
+
+## Directory Structure
+
+Based on the current production environment, the suite is organized as follows:
+
+|                       |                                                                    |
+| --------------------- | ------------------------------------------------------------------ |
+| Folder                | Description                                                        |
+| context/              | Low-level graph operations and memory storage logic.               |
+| context_memory/       | Agent-level memory management and GraphRAG retrieval patterns.     |
+| core_processing/      | Throughput tests for NER, extraction, and graph building.          |
+| export/               | Serialization benchmarks for JSON, CSV, RDF, and GraphML.          |
+| infrastructure/       | Support scripts, including the regression comparison engine.       |
+| input_layer/          | Ingestion, parsing, and splitting performance.                     |
+| normalize/            | Text cleaning, encoding handling, and date normalization.          |
+| ontology/             | Inference, serialization, and namespace management overhead.       |
+| output_orchestration/ | Parallelism and execution pipeline management.                     |
+| quality_assurance/    | Deduplication and conflict resolution strategies.                  |
+| results/              | Storage for benchmark JSON outputs and performance baselines.      |
+| storage/              | Latency tests for Vector stores (FAISS) and Triplet stores (Jena). |
+| visualization/        | Computational cost of layout algorithms and chart rendering.       |
+
+## Usage
+
+### Running the Suite
+
+To run the full suite and generate a new results file:
+
+```bash
+python benchmarks/benchmark_runner.py
+```
+
+### Strict Mode (CI/CD)
+
+The suite is designed to integrate with automated pipelines. Using the --strict flag will cause the runner to return a non-zero exit code if a performance regression greater than 15% is detected.
+
+```bash
+python benchmarks/benchmark_runner.py --strict
+```
+
+
+
+### Performance Comparison
+
+The comparison engine (infrastructure/compare.py) uses Z-scores to distinguish between actual performance regressions and environmental noise.
+
+- Regression: Change > 15% AND Z-score > 2.0.
+
+- Noise: Change > 15% but Z-score < 2.0.
+
+### Updating Baseline
+
+When a performance change is intentional (e.g., a more complex but necessary algorithm is added), update the "gold standard" baseline:
+
+```bash
+cp benchmarks/results/run_latest.json benchmarks/results/baseline.json
+```
@@ -0,0 +1,84 @@
+import argparse
+import os
+import subprocess
+import sys
+from datetime import datetime
+
+
+def run_benchmarks():
+    """
+    Master Runner for Semantica Benchmarks.
+    """
+    parser = argparse.ArgumentParser(description="Run Semantica Benchmarks")
+    parser.add_argument(
+        "--strict", action="store_true", help="Fail script if performance regresses"
+    )
+    args = parser.parse_args()
+
+    print("Starting Semantica Benchmark Suite...")
+
+    timestamp = datetime.now().strftime("%Y%m%d_%H_%M_%S")
+    os.makedirs("benchmarks/results", exist_ok=True)
+
+    current_json = f"benchmarks/results/run_{timestamp}.json"
+    baseline_json = "benchmarks/results/baseline.json"
+
+    # Run Benchmarks
+    cmd = [
+        sys.executable,
+        "-m",
+        "pytest",
+        "benchmarks/",
+        "-p",
+        "no:typeguard",
+        "-p",
+        "no:langsmith",
+        "--benchmark-only",
+        f"--benchmark-json={current_json}",
+        "--benchmark-columns=min,mean,stddev,ops",
+        "--benchmark-sort=mean",
+    ]
+
+    print(f"Executing benchmarks... (saving to {current_json})")
+    result = subprocess.run(cmd)
+
+    if result.returncode != 0:
+        print("Benchmarks failed to execute (runtime errors).")
+        sys.exit(result.returncode)
+
+    print("Benchmarks completed execution.")
+
+    # Compare against Baseline
+    if os.path.exists(baseline_json):
+        print(f"Comparing against Baseline ({baseline_json})...")
+
+        if os.path.exists("benchmarks/infrastructure/compare.py"):
+            compare_cmd = [
+                sys.executable,
+                "benchmarks/infrastructure/compare.py",
+                baseline_json,
+                current_json,
+            ]
+
+            compare_result = subprocess.run(compare_cmd)
+
+            if compare_result.returncode != 0:
+                print("\n!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!")
+                print("   PERFORMANCE REGRESSION DETECTED")
+                print("!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n")
+                if args.strict:
+                    sys.exit(1)
+            else:
+                print("Performance is within acceptable limits.")
+        else:
+            print(
+                "Comparison script not found (benchmarks/infrastructure/compare.py). Skipping comparison."
+            )
+    else:
+        print("No baseline found. This run effectively sets the new baseline.")
+
+    print(f"\n[Action] To update baseline: cp {current_json} {baseline_json}")
+
+
+if __name__ == "__main__":
+    run_benchmarks()
@@ -0,0 +1,355 @@
+import importlib.abc
+import importlib.machinery
+import os
+import sys
+import tempfile
+import uuid
+from unittest.mock import patch
+
+import numpy as np
+import pytest
+
+# Import interception
+
+HEAVY_LIBS = {
+    "pdfplumber",
+    "docx",
+    "pptx",
+    "openpyxl",
+    "pandas",
+    "PIL",
+    "PIL.Image",
+    "PIL.ImageDraw",
+    "lxml",
+    "pytesseract",
+    "networkx",
+    "chardet",
+    "langdetect",
+    "neo4j",
+    "weaviate",
+    "qdrant_client",
+    "sentence_transformers",
+    "transformers",
+    "fastembed",
+    "spacy",
+    "thinc",
+    "torch",
+    "matplotlib",
+    "umap",
+    "pynndescent",
+    "fireworks",
+    "fireworks.client",
+    "docling",
+    "docling.document_converter",
+    "docling.backend",
+    "docling_core",
+    "docling_core.types",
+    "instructor",
+    "instructor.processing",
+    "instructor.core",
+    "instructor.providers",
+    "instructor.providers.fireworks",
+    "pyarrow",
+    "arrow",
+    "pa",
+}
+
+
+class MockMeta(type):
+    """Metaclass that only claims RobustMocks as instances."""
+
+    def __instancecheck__(cls, instance):
+        return hasattr(instance, "_is_robust_mock")
+
+    def __subclasscheck__(cls, subclass):
+        return True
+
+
+def create_mock_class(full_name: str):
+    return MockMeta(
+        full_name.split(".")[-1],
+        (object,),
+        {
+            "__module__": ".".join(full_name.split(".")[:-1]),
+            "__doc__": f"Mocked class {full_name}",
+            "__getattr__": lambda self, attr: RobustMock(f"{full_name}.{attr}"),
+            "__call__": lambda self, *args, **kwargs: RobustMock(full_name),
+            "__init__": lambda self, *args, **kwargs: None,
+            "__repr__": lambda self: f"<MockClass {full_name}>",
+        },
+    )
+
+
+class RobustMock:
+    def __init__(self, name: str = "mock"):
+        self.__name__ = name
+        self.__version__ = "9.9.9"
+        self._is_robust_mock = True
+        self.__path__ = []
+        self.__file__ = "mock_file.py"
+        self.__all__ = []
+
+    def __getattr__(self, name):
+        if name.startswith("__") and name.endswith("__"):
+            raise AttributeError(name)
+        full_name = f"{self.__name__}.{name}"
+        
+        # Special handling for common PIL patterns
+        if self.__name__.endswith("Image") and name == "Image":
+            return create_mock_class(full_name)
+        elif self.__name__.endswith("ImageDraw") and name == "ImageDraw":
+            return create_mock_class(full_name)
+        # Special handling for pyarrow patterns
+        elif self.__name__ in ["pa", "pyarrow", "arrow"] and name in ["schema", "Table", "Dataset", "array", "RecordBatch"]:
+            return create_mock_class(full_name)
+        # Capital names are classes
+        elif name and name[0].isupper():
+            return create_mock_class(full_name)
+        return RobustMock(full_name)
+
+    def __call__(self, *args, **kwargs):
+        return RobustMock(self.__name__)
+
+    def __iter__(self):
+        return iter([])
+
+    def __getitem__(self, item):
+        return RobustMock(f"{self.__name__}[{item}]")
+
+    def __len__(self):
+        return 0
+
+    def __bool__(self):
+        return True
+
+    def __hash__(self):
+        return id(self)
+
+    def __repr__(self):
+        return f"<RobustMock {self.__name__}>"
+
+
+class MockLoader(importlib.abc.Loader):
+    def create_module(self, spec):
+        mock_module = RobustMock(spec.name)
+        mock_module.__spec__ = spec
+        mock_module.__loader__ = self
+        mock_module.__package__ = spec.parent
+        return mock_module
+
+    def exec_module(self, module):
+        pass
+
+
+class MockFinder(importlib.abc.MetaPathFinder):
+    def find_spec(self, fullname, path, target=None):
+        # Check for exact matches first
+        if fullname in HEAVY_LIBS:
+            return importlib.machinery.ModuleSpec(fullname, MockLoader())
+        
+        # Check for prefix matches (e.g., PIL.Image, PIL.ImageDraw)
+        for lib in HEAVY_LIBS:
+            if fullname.startswith(lib + "."):
+                return importlib.machinery.ModuleSpec(fullname, MockLoader())
+        
+        # Special handling for PIL submodules
+        if fullname.startswith("PIL."):
+            return importlib.machinery.ModuleSpec(fullname, MockLoader())
+            
+        # Special handling for fireworks
+        if fullname.startswith("fireworks."):
+            return importlib.machinery.ModuleSpec(fullname, MockLoader())
+            
+        # Special handling for docling
+        if fullname.startswith("docling"):
+            return importlib.machinery.ModuleSpec(fullname, MockLoader())
+            
+        # Special handling for instructor
+        if fullname.startswith("instructor"):
+            return importlib.machinery.ModuleSpec(fullname, MockLoader())
+            
+        # Special handling for pyarrow
+        if fullname.startswith("pyarrow") or fullname.startswith("arrow"):
+            return importlib.machinery.ModuleSpec(fullname, MockLoader())
+            
+        return None
+
+
+if os.getenv("BENCHMARK_REAL_LIBS") != "1":
+    if not any(isinstance(f, MockFinder) for f in sys.meta_path):
+        sys.meta_path.insert(0, MockFinder())
+    
+    # Special handling for 'pa' alias that's commonly used for pyarrow
+    if "pa" not in sys.modules:
+        sys.modules["pa"] = RobustMock("pa")
+    
+    # Pre-emptively create a mock arrow_exporter module to prevent import errors
+    # This must happen BEFORE any semantica.export imports
+    import types
+    mock_arrow_module = types.ModuleType('semantica.export.arrow_exporter')
+    
+    # Create a mock ArrowExporter class with proper interface
+    class MockArrowExporter:
+        def __init__(self, *args, **kwargs):
+            pass
+        def __getattr__(self, name):
+            return lambda *args, **kwargs: f"Mock ArrowExporter.{name}"
+    
+    mock_arrow_module.ArrowExporter = MockArrowExporter
+    mock_arrow_module.ENTITY_SCHEMA = RobustMock("ENTITY_SCHEMA")
+    mock_arrow_module.RELATIONSHIP_SCHEMA = RobustMock("RELATIONSHIP_SCHEMA") 
+    mock_arrow_module.METADATA_SCHEMA = RobustMock("METADATA_SCHEMA")
+    mock_arrow_module.pa = RobustMock("pa")
+    
+    # Inject the mock module into sys.modules
+    sys.modules["semantica.export.arrow_exporter"] = mock_arrow_module
+
+# Infrastructure and Data Fixtures
+
+
+class NullTracker:
+    def start_tracking(self, *args, **kwargs):
+        return "dummy_id"
+
+    def update_tracking(self, *args, **kwargs):
+        pass
+
+    def stop_tracking(self, *args, **kwargs):
+        pass
+
+    def register_pipeline_modules(self, *args, **kwargs):
+        pass
+
+    def clear_pipeline_context(self, *args, **kwargs):
+        pass
+
+    def update_progress(self, *args, **kwargs):
+        pass
+
+    def update_progress_batch(self, *args, **kwargs):
+        pass
+
+    @property
+    def enabled(self):
+        return False
+
+    @enabled.setter
+    def enabled(self, value):
+        pass
+
+
+@pytest.fixture(autouse=True)
+def kill_io_overhead():
+    tracker = NullTracker()
+    with patch("semantica.utils.logging.get_logger"), patch(
+        "semantica.utils.progress_tracker.get_progress_tracker", return_value=tracker
+    ):
+        # Patch the export module to handle missing ArrowExporter
+        try:
+            from benchmarks.export.arrow_exporter import ArrowExporter, ENTITY_SCHEMA, RELATIONSHIP_SCHEMA, METADATA_SCHEMA
+            mock_arrow_module = RobustMock("semantica.export.arrow_exporter")
+            mock_arrow_module.ArrowExporter = ArrowExporter
+            mock_arrow_module.ENTITY_SCHEMA = ENTITY_SCHEMA
+            mock_arrow_module.RELATIONSHIP_SCHEMA = RELATIONSHIP_SCHEMA
+            mock_arrow_module.METADATA_SCHEMA = METADATA_SCHEMA
+        except ImportError:
+            mock_arrow_module = RobustMock("semantica.export.arrow_exporter")
+        
+        with patch.dict('sys.modules', {
+            'semantica.export.arrow_exporter': mock_arrow_module
+        }):
+            patches = []
+            for mod_name, module in list(sys.modules.items()):
+                if mod_name.startswith("semantica.") and hasattr(
+                    module, "get_progress_tracker"
+                ):
+                    p = patch.object(module, "get_progress_tracker", return_value=tracker)
+                    patches.append(p)
+            for p in patches:
+                p.start()
+            yield
+            for p in patches:
+                p.stop()
+
+
+class MockVectorStore:
+    def __init__(self, dim=384):
+        self.dim = dim
+
+    def embed(self, text: str):
+        return np.random.rand(self.dim).astype(np.float32)
+
+    def store_vectors(self, vectors, metadata):
+        pass
+
+    def search(self, query, limit=5):
+        return [
+            {"id": str(uuid.uuid4()), "score": 0.9, "content": "test", "metadata": {}}
+            for _ in range(limit)
+        ]
+
+
+@pytest.fixture
+def mock_vector_store():
+    return MockVectorStore()
+
+
+@pytest.fixture
+def generate_graph_data():
+    BASE_NS = "http://semantica.example.org/resource/"
+    PRED_NS = "http://semantica.example.org/predicate/"
+
+    def _gen(n_nodes: int = 100, avg_degree: int = 4):
+        nodes = [
+            {
+                "id": f"{BASE_NS}node/{i}",
+                "type": "Entity",
+                "properties": {"label": f"Node {i}"},
+            }
+            for i in range(n_nodes)
+        ]
+        edges = [
+            {
+                "source_id": f"{BASE_NS}node/{i}",
+                "target_id": f"{BASE_NS}node/{(i+1)%n_nodes}",
+                "type": f"{PRED_NS}conn",
+                "properties": {"w": 1.0},
+            }
+            for i in range(n_nodes)
+        ]
+        return nodes, edges
+
+    return _gen
+
+
+@pytest.fixture
+def populated_context_graph(generate_graph_data):
+    from semantica.context.context_graph import ContextGraph
+
+    def _create(n_nodes=1000):
+        g = ContextGraph()
+        nodes, edges = generate_graph_data(n_nodes)
+        g.add_nodes(nodes)
+        g.add_edges(edges)
+        return g
+
+    return _create
+
+
+@pytest.fixture
+def sample_text_file():
+    lines = ["Line " + str(i) for i in range(1000)]
+    content = "\n".join(lines)
+    with tempfile.NamedTemporaryFile(
+        mode="w+", delete=False, suffix=".txt", encoding="utf-8"
+    ) as tmp:
+        tmp.write(content)
+        tmp_path = tmp.name
+    yield tmp_path
+    if os.path.exists(tmp_path):
+        os.remove(tmp_path)
+
+
+@pytest.fixture
+def long_text_string():
+    return "benchmark " * 5000
@@ -0,0 +1,23 @@
+import pytest
+
+from semantica.context.agent_memory import AgentMemory
+from semantica.context.context_retriever import ContextRetriever
+
+
+@pytest.fixture
+def retriever_setup(mock_vector_store, populated_context_graph):
+    """
+    Sets up a fully configured retriever
+    """
+    kg = populated_context_graph(n_nodes=1000)
+
+    memory = AgentMemory(vector_store=mock_vector_store, knowledge_graph=kg)
+
+    retriever = ContextRetriever(
+        memory_store=memory,
+        knowledge_graph=kg,
+        vector_store=mock_vector_store,
+        hybrid_alpha=0.5,
+    )
+
+    return retriever
@@ -0,0 +1,47 @@
+import pytest
+
+from semantica.context.context_graph import ContextGraph
+
+
+@pytest.mark.benchmark(group="graph_traversal")
+@pytest.mark.parametrize("hops", [1, 2])
+def test_bfs_traversal_depth(benchmark, populated_context_graph, hops):
+    """Benchmarks the BFS neighbor retrieval at differnet depths."""
+    graph = populated_context_graph(n_nodes=2000)
+    start_node = list(graph.nodes.keys())[0]
+
+    def run():
+        return graph.get_neighbors(start_node, hops=hops)
+
+    benchmark.pedantic(run, iterations=5, rounds=10)
+
+
+@pytest.mark.benchmark(group="graph_construction")
+@pytest.mark.parametrize("size", [1000])
+def test_graph_ingestion_speed(benchmark, generate_graph_data, size):
+    """
+    Benchmarks the speed of adding nodes and edges to the
+    in-memory structure.
+    """
+
+    nodes, edges = generate_graph_data(n_nodes=size)
+
+    def run():
+        graph = ContextGraph()
+        graph.add_nodes(nodes)
+        graph.add_edges(edges)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+@pytest.mark.benchmark(group="graph_query")
+def test_graph_keyword_search(benchmark, populated_context_graph):
+    """
+    Benchmarks the linear scan keyword search over graph nodes.
+    """
+    graph = populated_context_graph(n_nodes=2000)
+
+    def run():
+        return graph.query("Node content 500")
+
+    benchmark.pedantic(run, iterations=5, rounds=10)
@@ -0,0 +1,32 @@
+import pytest
+
+from semantica.context.context_graph import ContextGraph
+from semantica.context.entity_linker import EntityLinker
+
+
+@pytest.mark.benchmark(group="entity_linkiing")
+@pytest.mark.parametrize("num_entities_in_graph", [100, 1000])
+def test_entity_linking_complexity(benchmark, num_entities_in_graph):
+    """
+    Benchmarks finding links for extracted entities
+    against the existing graph.
+    """
+
+    graph = ContextGraph()
+    nodes = [
+        {"id": f"e_{i}", "type": "Entity", "properties": {"content": f"Entity {i}"}}
+        for i in range(num_entities_in_graph)
+    ]
+    graph.add_nodes(nodes)
+
+    graph_dict = graph.to_dict()
+
+    linker = EntityLinker(knowledge_graph=graph_dict, similarity_threshold=0.7)
+
+    # Simulate extraction
+    extracted_entities = [{"text": f"Entity {i}", "type": "Entity"} for i in range(5)]
+
+    def run():
+        return linker.link("dummy text", entities=extracted_entities)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
@@ -0,0 +1,40 @@
+import pytest
+
+from semantica.context.agent_memory import AgentMemory
+
+
+@pytest.mark.benchmark(group="memory_io")
+def test_memory_storage_overhead(benchmark, mock_vector_store):
+    """
+    Benchmarks storing a memory item.
+    """
+    memory = AgentMemory(vector_store=mock_vector_store)
+    content = "This is nothing burger for benchmarking this memory thingy."
+    metadata = {"type": "conversation", "user": "u_1"}
+
+    def run():
+        return memory.store(content, metadata=metadata)
+
+    benchmark.pedantic(run, iterations=10, rounds=10)
+
+
+@pytest.mark.benchmark(group="memory_io")
+def test_short_term_pruning(benchmark, mock_vector_store):
+    """
+    Benchmarks the pruning logic when short-term memory
+    limit is hit.
+    """
+
+    def setup_overfilled_memory():
+        memory = AgentMemory(vector_store=mock_vector_store, short_term_limit=50)
+        # Pre-fill
+        for i in range(55):
+            memory.store(f"filler memory {i}")
+        return (memory,), {}
+
+    def run_prune(mem_instance):
+        mem_instance.store("Trigger Pruning")
+
+    benchmark.pedantic(
+        target=run_prune, setup=setup_overfilled_memory, iterations=1, rounds=20
+    )
@@ -0,0 +1,42 @@
+import pytest
+
+from semantica.context.agent_memory import AgentMemory
+from semantica.context.context_retriever import ContextRetriever, RetrievedContext
+
+
+@pytest.mark.benchmark(group="rag_logic")
+def test_hybrid_ranking_overhead(benchmark, retriever_setup):
+    """
+    Benchmarks the CPU cost of the 'rank_and_merge' logic.
+    """
+
+    query = "test_query"
+
+    # Dummy results to sim inputs
+    raw_results = [
+        RetrievedContext(content=f"Vec {i}", score=0.9 - i * 0.01, source="vector:x")
+        for i in range(10)
+    ] + [
+        RetrievedContext(content=f"Graph {i}", score=0.8 - i * 0.01, source="graph:y")
+        for i in range(10)
+    ]
+
+    def run():
+        return retriever_setup._rank_and_merge(raw_results, query)
+
+    benchmark.pedantic(run, iterations=10, rounds=20)
+
+
+@pytest.mark.benchmark(group="rag_logic")
+@pytest.mark.parametrize("use_graph", [True, False])
+def test_full_retrieval_pipeline(benchmark, retriever_setup, use_graph):
+    """
+    Benchmarks the orchestration of the retrieve() method.
+    """
+
+    def run():
+        return retriever_setup.retrieve(
+            "Node content", max_results=10, use_graph_expansion=use_graph, max_hops=1
+        )
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
@@ -0,0 +1,86 @@
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+from semantica.context.agent_context import AgentContext
+from semantica.context.context_retriever import RetrievedContext
+
+# Fixtures
+
+
+@pytest.fixture
+def mock_agent_context():
+    """
+    Creates an AgentContext with mocked internals.
+    """
+    vector_store = MagicMock()
+    knowledge_graph = MagicMock()
+
+    with patch("semantica.context.agent_context.AgentMemory") as MockMemory, patch(
+        "semantica.context.agent_context.ContextRetriever"
+    ) as MockRetriever:
+
+        ctx = AgentContext(vector_store=vector_store, knowledge_graph=knowledge_graph)
+
+        # Internal mocks
+
+        ctx._memory = MockMemory.return_value
+        ctx._retriever = MockRetriever.return_value
+
+        return ctx
+
+
+# Benchmarks
+
+
+def test_router_overhead(benchmark, mock_agent_context):
+    """
+    Benchmarks the logic that decides between Vector vs Graph retrieval.
+    """
+
+    mock_agent_context._retriever.retrieve.return_value = []
+
+    def op():
+        return mock_agent_context.retrieve("test query", use_graph=None)
+
+    benchmark.pedantic(op, iterations=50, rounds=20)
+
+
+def test_result_conversion_throughput(benchmark, mock_agent_context):
+    """
+    Benchmarks converting internal RetrievedContext objects to Dicts.
+    """
+
+    fake_results = [
+        RetrievedContext(
+            content=f"Result {i}",
+            score=0.9,
+            source="graph:node_1",
+            metadata={"type": "fact"},
+            related_entities=[{"id": "e1", "name": "Entity"}],
+            related_relationships=[{"source": "e1", "target": "e2"}],
+        )
+        for i in range(100)
+    ]
+    mock_agent_context._retriever.retrieve.return_value = fake_results
+
+    def op():
+        return mock_agent_context.retrieve("test", use_graph=True)
+
+    benchmark.pedantic(op, iterations=20, rounds=10)
+
+
+def test_store_orchestration_overhead(benchmark, mock_agent_context):
+    """
+    Benchmarks the 'store' method's logic for routing documents.
+    """
+    docs = [{"content": f"Doc {i}", "metadata": {"id": i}} for i in range(50)]
+
+    # Mock the internal storage to return immediately
+    mock_agent_context._memory.store.return_value = "mem_id"
+    mock_agent_context._build_graph_from_documents = MagicMock(return_value={})
+
+    def op():
+        return mock_agent_context.store(docs, extract_entities=False)
+
+    benchmark.pedantic(op, iterations=10, rounds=10)
@@ -0,0 +1,244 @@
+from dataclasses import dataclass, field
+from typing import Any, Dict, List
+from unittest.mock import patch
+
+import numpy as np
+import pytest
+
+from semantica.context.agent_context import AgentContext
+from semantica.context.agent_memory import AgentMemory
+from semantica.context.context_graph import ContextGraph
+from semantica.context.context_retriever import ContextRetriever, RetrievedContext
+from semantica.context.entity_linker import EntityLinker
+
+# Infra
+
+
+class NullTracker:
+    """
+    Stateless dummy tracker.
+    """
+
+    def start_tracking(self, *args, **kwargs):
+        return "dummy_id"
+
+    def update_tracking(self, *args, **kwargs):
+        pass
+
+    def stop_tracking(self, *args, **kwargs):
+        pass
+
+    def register_pipeline_modules(self, *args, **kwargs):
+        pass
+
+    def clear_pipeline_context(self, *args, **kwargs):
+        pass
+
+    def update_progress(self, *args, **kwargs):
+        pass
+
+    @property
+    def enabled(self):
+        return False
+
+    @enabled.setter
+    def enabled(self, value):
+        pass
+
+
+# ~~ MOCK STORES ~~
+
+
+class MockVectorStore:
+    """
+    A feather VectorStore sim that does no math.
+    We want to measure the MANAGER overhead.
+    """
+
+    def __init__(self):
+        self.vectors = {}
+        self.dim = 384
+
+    def embed(self, text):
+        return np.random.rand(self.dim).tolist()
+
+    def add(self, items):
+        for item in items:
+            self.vectors[item.memory_id] = item
+
+    def search(self, query, limit=5):
+        class MockResult:
+            def __init__(self, i):
+                self.id = f"mem_{i}"
+                self.content = f"Content for result {i} matching {query[:10]}"
+                self.score = 0.9 - (i * 0.05)
+                self.metadata = {"type": "test"}
+
+        return [MockResult(i) for i in range(limit)]
+
+
+def create_dense_graph(node_count):
+    """
+    Creates a ContextGraph with 'Small World' Topology.
+    Used to stress-test BFS traversal scaling.
+    """
+    graph = ContextGraph()
+
+    graph.progress_tracker = NullTracker()
+
+    # Create nodes
+    nodes = [
+        {
+            "id": f"node_{i}",
+            "type": "concept",
+            "properties": {"content": f"Concept {i}"},
+        }
+        for i in range(node_count)
+    ]
+    graph.add_nodes(nodes)
+
+    # Create Edges (Chain + Hub + Random)
+    edges = []
+    for i in range(node_count):
+        # Chain
+        if i < node_count - 1:
+            edges.append(
+                {"source_id": f"node_{i}", "target_id": f"node_{i+1}", "type": "next"}
+            )
+        # Hub
+        if i > 0:
+            edges.append(
+                {"source_id": "node_0", "target_id": f"node_{i}", "type": "hub_link"}
+            )
+        # Rando
+        if i % 5 == 0 and i + 5 < node_count:
+            edges.append(
+                {
+                    "source_id": f"node_{i}",
+                    "target_id": f"node_{i+5}",
+                    "type": "cross_link",
+                }
+            )
+
+    graph.add_edges(edges)
+    return graph
+
+
+def create_populated_memory(item_count):
+    """Creates an AgentMemory populated with N items."""
+    vs = MockVectorStore()
+    memory = AgentMemory(vector_store=vs)
+    memory.progress_tracker = NullTracker()
+
+    for i in range(item_count):
+        mem_id = f"setup_mem_{i}"
+        from datetime import datetime
+
+        from semantica.context.agent_memory import MemoryItem
+
+        memory.memory_items[mem_id] = MemoryItem(
+            content=f"History item {i}",
+            timestamp=datetime.now(),
+            memory_id=mem_id,
+            metadata={"type": "chat"},
+        )
+        memory.memory_index.append(mem_id)
+
+    return memory
+
+
+# ~~ BENCHMARKS ~~
+
+
+@pytest.mark.parametrize("graph_size", [100, 1000])
+@pytest.mark.parametrize("hops", [1, 2])
+def test_graph_traversal_scaling(benchmark, graph_size, hops):
+    """
+    Measures 'Hop Explosion' effect.
+    Retrieving multi-hop neighbors on a dense graph.
+    """
+    graph = create_dense_graph(graph_size)
+
+    def op():
+        # Start from'Hub' node which's celebrity, meaning
+        # connected to everyone
+        return graph.get_neighbors("node_0", hops=hops)
+
+    benchmark.pedantic(op, iterations=5, rounds=5)
+
+
+@pytest.mark.parametrize("memory_count", [100, 1000])
+def test_retriever_ranking_throughput(benchmark, memory_count):
+    """
+    Measures CPU cost of merging and ranking results.
+    """
+    retriever = ContextRetriever(
+        vector_store=MockVectorStore(),
+        memory_store=create_populated_memory(10),
+        knowledge_graph=None,
+        hybrid_alpha=0.5,
+    )
+    retriever.progress_tracker = NullTracker()
+
+    results = []
+    for i in range(memory_count):
+        results.append(
+            RetrievedContext(
+                content=f"Vector Item {i}",
+                score=np.random.random(),
+                source=f"vector:{i}",
+            )
+        )
+        results.append(
+            RetrievedContext(
+                content=f"Graph Item {i}",
+                score=np.random.random(),
+                source=f"graph:{i}",
+                metadata={"node_id": f"node_{i}"},
+            )
+        )
+
+    def op():
+        return retriever._rank_and_merge(results, "query context")
+
+    benchmark.pedantic(op, iterations=5, rounds=10)
+
+
+@pytest.mark.parametrize("registry_size", [100, 1000])
+def test_entity_linking_speed(benchmark, registry_size):
+    """
+    Measures O(N) linear scan speed in `find_similar_entities`.
+    """
+    linker = EntityLinker()
+    linker.progress_tracker = NullTracker()
+
+    mock_kg = {"entities": []}
+    for i in range(registry_size):
+        mock_kg["entities"].append(
+            {"id": f"ent_{i}", "text": f"Entity Number {i}", "type": "TEST"}
+        )
+    linker.knowledge_graph = mock_kg
+
+    input_text = "I am looking for Entity Number 50 in the database."
+
+    def op():
+        return linker.find_similar_entities(input_text, threshold=0.1)
+
+    benchmark.pedantic(op, iterations=5, rounds=5)
+
+
+@pytest.mark.parametrize("batch_size", [1, 10, 50])
+def test_agent_store_throughput(benchmark, batch_size):
+    """
+    'store' pipeline test.
+    """
+    vs = MockVectorStore()
+    context = AgentContext(vector_store=vs)
+    context._memory.progress_tracker = NullTracker()
+
+    inputs = [f"Memory item {i} for storage test" for i in range(batch_size)]
+
+    def op():
+        return context.batch_store(inputs)
+
+    benchmark.pedantic(op, iterations=5, rounds=5)
@@ -0,0 +1,44 @@
+import pytest
+
+
+# Data factories
+@pytest.fixture
+def node_batch():
+    """Generates 1000 nodes for graph"""
+    return [
+        {
+            "id": f"node_{i}",
+            "type": "Concept",
+            "properties": {"name": f"Concept {i}", "weight": i / 1000},
+        }
+        for i in range(1000)
+    ]
+
+
+@pytest.fixture
+def edge_batch():
+    """Generates 1000 edges connection to the nodes."""
+    return [
+        {
+            "source_id": f"node_{i}",
+            "target_id": f"node_{i + 1}",
+            "type": "related to",
+            "weight": 0.5,
+        }
+        for i in range(999)
+    ]
+
+
+@pytest.fixture
+def conversation_data():
+    """Simulates a large conversation log"""
+    entities = [{"text": f"Entity_{i}", "type": "topic"} for i in range(50)]
+
+    return [
+        {
+            "id": "conv_1",
+            "content": "This is a conversation about banking.",
+            "entities": entities,
+            "relationships": [],
+        }
+    ]
@@ -0,0 +1,153 @@
+from unittest.mock import patch
+
+import pytest
+
+from semantica.semantic_extract.ner_extractor import Entity, NERExtractor
+from semantica.semantic_extract.semantic_analyzer import SemanticAnalyzer
+
+
+# Fixtures
+@pytest.fixture
+def document_batch():
+    base = "The quick brown fox jumps over the lazy dog."
+    docs = [
+        f"{base} Variation {i}. Apple Inc released a product in 2024."
+        for i in range(50)
+    ]
+    return docs
+
+
+# Fast wrapper-only benchmark (always runs)
+def test_ner_ml_wrapper_overhead(benchmark, long_text_string):
+    extractor = NERExtractor(method="ml", model="en_core_web_sm")
+
+    entity_text = "Semantica"
+    phrase = f"{entity_text} is a knowledge graph framework. "
+    medium_text = phrase * 5
+
+    expected_entities = []
+    phrase_len = len(phrase)
+    for i in range(5):
+        start = i * phrase_len
+        end = start + len(entity_text)
+        ent = Entity(
+            text=entity_text,
+            label="ORG",
+            start_char=start,
+            end_char=end,
+            confidence=0.98,
+            metadata={"lemma": entity_text},
+        )
+        expected_entities.append(ent)
+
+    def custom_ml_extraction(text: str, **method_options):
+        min_confidence = method_options.get("min_confidence", 0.5)
+        entity_types = method_options.get("entity_types")
+        filtered = []
+        for ent in expected_entities:
+            if entity_types and ent.label not in entity_types:
+                continue
+            if ent.confidence >= min_confidence:
+                filtered.append(ent)
+        return filtered
+
+    with patch(
+        "semantica.semantic_extract.methods.get_entity_method"
+    ) as mock_get_method:
+        mock_get_method.side_effect = lambda name: (
+            custom_ml_extraction if name == "ml" else (lambda t, **o: [])
+        )
+
+        def op():
+            return extractor.extract_entities(text=medium_text)
+
+        result = benchmark.pedantic(op, rounds=20, iterations=5)
+
+    assert len(result) == 5
+    assert all(e.text == "Semantica" for e in result)
+    assert all(e.label == "ORG" for e in result)
+    assert all(e.confidence == 0.98 for e in result)
+    assert all(medium_text[e.start_char : e.end_char] == e.text for e in result)
+
+
+# Real spaCy benchmark
+@pytest.mark.benchmark(group="ner_real_ml")
+def test_ner_ml_real_performance(benchmark, long_text_string):
+    """
+    Full spaCy inference + wrapper overhead.
+    Only runs when real spaCy is loaded (BENCHMARK_REAL_LIBS=1).
+    """
+    extractor = NERExtractor(method="ml", model="en_core_web_sm")
+
+    if (
+        extractor.nlp is None
+        or not hasattr(extractor.nlp, "pipe_names")
+        or "ner" not in extractor.nlp.pipe_names
+    ):
+        pytest.skip(
+            "Real spaCy NER pipeline not available — skipping production benchmark"
+        )
+
+    medium_text = long_text_string[:10000]
+
+    medium_text += " Apple Inc. was founded by Steve Jobs and Steve Wozniak in Cupertino, California on April 1, 1976. Microsoft is a competitor."
+
+    def op():
+        return extractor.extract_entities(text=medium_text)
+
+    result = benchmark.pedantic(op, rounds=6, iterations=2)
+
+    assert len(result) >= 6
+    assert any("Apple" in e.text and e.label == "ORG" for e in result)
+    assert any(e.label == "PERSON" for e in result)
+    assert any(e.label in {"GPE", "LOC"} for e in result)
+    assert any(e.label == "DATE" for e in result)
+    assert any("Microsoft" in e.text and e.label == "ORG" for e in result)
+
+
+def test_ner_pattern_speed(benchmark, long_text_string):
+    extractor = NERExtractor(method="pattern")
+    medium_text = long_text_string[:50000]
+    text_with_entities = medium_text + " Apple Inc. was founded in 1976. "
+
+    def op():
+        return extractor.extract_entities(text=text_with_entities)
+
+    result = benchmark.pedantic(op, rounds=20, iterations=5)
+    assert len(result) > 0
+    assert result[0].label in ["ORG", "DATE", "UNKNOWN"]
+
+
+def test_ner_batch_throughput(benchmark, document_batch):
+    extractor = NERExtractor(method="pattern")
+
+    def run_batch():
+        return extractor.extract_entities_batch(document_batch, max_workers=2)
+
+    result = benchmark.pedantic(run_batch, rounds=10, iterations=5)
+    assert len(result) == len(document_batch)
+    assert len(result[0]) > 0
+
+
+def test_similarity_calculation(benchmark):
+    analyzer = SemanticAnalyzer()
+    text1 = "The quick brown fox jumps over the lazy dog" * 10
+    text2 = "The slow brown fox jumped over the sleeping dog" * 10
+
+    def op():
+        return analyzer.calculate_similarity(text1, text2, method="jaccard")
+
+    result = benchmark.pedantic(op, rounds=100, iterations=100)
+    assert 0.0 <= result <= 1.0
+
+
+def test_clustering_algorithm(benchmark, document_batch):
+    analyzer = SemanticAnalyzer()
+    options = {"similarity_threshold": 0.1}
+
+    def op():
+        return analyzer.cluster_semantically(texts=document_batch, **options)
+
+    result = benchmark.pedantic(op, rounds=10, iterations=5)
+    assert len(result) > 0
+    assert result[0].texts
@@ -0,0 +1,56 @@
+from unittest.mock import MagicMock
+
+import pytest
+
+from semantica.context.context_graph import ContextGraph
+
+
+def test_bulk_node_insertion(benchmark, node_batch):
+    """
+    Benchmarks the overhead of adding nodes to in-memory graph.
+
+    """
+
+    def setup_graph():
+        return (ContextGraph(),), {}
+
+    def run(graph_instance):
+        graph_instance.add_nodes(node_batch)
+
+    benchmark.pedantic(target=run, setup=setup_graph, rounds=50, iterations=1)
+
+
+def test_bulk_edge_insertion(benchmark, node_batch, edge_batch):
+    """
+    Benchmarks adding edges.
+    """
+
+    def setup_graph_with_nodes():
+        g = ContextGraph()
+        g.add_nodes(node_batch)
+        return (g,), {}
+
+    def run(graph_instance):
+        graph_instance.add_edges(edge_batch)
+
+    benchmark.pedantic(
+        target=run, setup=setup_graph_with_nodes, rounds=50, iterations=1
+    )
+
+
+def test_conversation_to_graph_conversion(benchmark, conversation_data):
+    """
+    Benchmarks parsing conversation dicts into graph structures.
+    """
+
+    def setup_clean_builder():
+        g = ContextGraph()
+        g.entity_linker = MagicMock()
+        return (g,), {}
+
+    def run(graph_instance):
+        return graph_instance.build_from_conversations(
+            conversation_data, link_entities=False
+        )
+
+    benchmark.pedantic(target=run, setup=setup_clean_builder, rounds=20, iterations=1)
@@ -0,0 +1,69 @@
+"""
+Mock Arrow Exporter for Benchmark Testing
+
+This module provides a mock implementation of the ArrowExporter to prevent
+import errors during benchmark testing when PyArrow is not available in the CI environment.
+"""
+
+# Mock PyArrow import for CI compatibility
+try:
+    import pyarrow as pa
+except ImportError:
+    # Create a mock pa module for CI environment
+    import types
+    pa = types.ModuleType('pa')
+    
+    def mock_schema(*args, **kwargs):
+        return types.SimpleNamespace()
+    
+    def mock_table(*args, **kwargs):
+        return types.SimpleNamespace()
+    
+    def mock_array(*args, **kwargs):
+        return types.SimpleNamespace()
+    
+    pa.schema = mock_schema
+    pa.Table = mock_table
+    pa.array = mock_array
+    pa.RecordBatch = mock_table
+
+# Mock schema definitions
+ENTITY_SCHEMA = pa.schema([]) if hasattr(pa, 'schema') else None
+RELATIONSHIP_SCHEMA = pa.schema([]) if hasattr(pa, 'schema') else None
+METADATA_SCHEMA = pa.schema([]) if hasattr(pa, 'schema') else None
+
+class ArrowExporter:
+    """
+    Mock Arrow Exporter class for benchmark testing.
+    
+    This is a lightweight implementation that provides the same interface
+    as the real ArrowExporter but doesn't require PyArrow to be installed.
+    """
+    
+    def __init__(self, config=None):
+        self.config = config
+        self._tables = {}
+    
+    def export_entities(self, entities, output_path):
+        """Mock export entities method."""
+        return f"Mock exported {len(entities)} entities to {output_path}"
+    
+    def export_relationships(self, relationships, output_path):
+        """Mock export relationships method."""
+        return f"Mock exported {len(relationships)} relationships to {output_path}"
+    
+    def export_knowledge_graph(self, entities, relationships, output_path):
+        """Mock export knowledge graph method."""
+        return f"Mock exported knowledge graph to {output_path}"
+    
+    def to_arrow_table(self, data):
+        """Mock conversion to Arrow table."""
+        return f"Mock Arrow table with {len(data)} rows"
+    
+    def save_to_file(self, table, path):
+        """Mock save to file method."""
+        return f"Mock saved table to {path}"
+    
+    def batch_export(self, data_list, output_dir):
+        """Mock batch export method."""
+        return f"Mock batch exported {len(data_list)} items to {output_dir}"
@@ -0,0 +1,81 @@
+import random
+import uuid
+from typing import Any, Dict, List
+
+import numpy as np
+import pytest
+
+# Data Generators
+
+
+@pytest.fixture
+def generate_entities():
+    def _gen(count: int) -> List[Dict[str, Any]]:
+        entities = []
+        for i in range(count):
+            entities.append(
+                {
+                    "id": f"e_{i}",
+                    "text": f"Entity Number {i}",
+                    "type": random.choice(
+                        ["person", "Organization", "Location", "Event"]
+                    ),
+                    "confidence": random.uniform(0.7, 1.0),
+                    "metadata": {"source": "doc_1.txt", "page": 1},
+                }
+            )
+
+        return entities
+
+    return _gen
+
+
+@pytest.fixture
+def generate_knowledge_graph(generate_entities):
+    def _gen(entity_count: int, rel_density: float = 1.5) -> Dict[str, Any]:
+        entities = generate_entities(entity_count)
+        relationships = []
+        rel_count = int(entity_count * rel_density)
+
+        for i in range(rel_count):
+            src = random.choice(entities)
+            tgt = random.choice(entities)
+            relationships.append(
+                {
+                    "id": f"r_{i}",
+                    "source_id": src["id"],
+                    "target_id": tgt["id"],
+                    "type": " RELATED_TO",
+                    "confidence": 0.9,
+                    "metadata": {"extractor": "v1"},
+                }
+            )
+
+        return {
+            "entities": entities,
+            "relationships": relationships,
+            "metadata": {"generated_at": "2026-02-05"},
+        }
+
+    return _gen
+
+
+@pytest.fixture
+def generate_vectors():
+    def _gen(count: int, dim: int = 384) -> List[Dict[str, Any]]:
+        matrix = np.random.rand(count, dim).astype(np.float32)
+
+        data = []
+
+        for i in range(count):
+            data.append(
+                {
+                    "id": f"vec_{i}",
+                    "vector": matrix[i].tolist(),
+                    "text": f"Text {i}",
+                    "metadata": {"model": "bert"},
+                }
+            )
+        return data
+
+    return _gen
@@ -0,0 +1,42 @@
+import pytest
+
+from semantica.export.csv_exporter import CSVExporter
+from semantica.export.json_exporter import JSONExporter
+from semantica.export.yaml_exporter import SemanticNetworkYAMLExporter
+
+
+@pytest.mark.benchmark(group="structured_export")
+@pytest.mark.parametrize("size", [1000, 5000])
+def test_json_parsing_throughput(benchmark, tmp_path, generate_knowledge_graph, size):
+    kg = generate_knowledge_graph(size)
+    exporter = JSONExporter(indent=None)
+    output_file = tmp_path / "output.json"
+
+    def run():
+        exporter.export(kg, output_file)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+@pytest.mark.benchmark(group="structured_export")
+def test_csv_entity_export(benchmark, tmp_path, generate_entities):
+    entities = generate_entities(5000)
+    exporter = CSVExporter()
+    output_file = tmp_path / "entities.csv"
+
+    def run():
+        exporter.export_entities(entities, output_file)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+@pytest.mark.benchmark(group="structured_export")
+def test_yaml_serialization_overhead(benchmark, tmp_path, generate_knowledge_graph):
+    kg = generate_knowledge_graph(500)
+    exporter = SemanticNetworkYAMLExporter()
+    output_file = tmp_path / "output.yaml"
+
+    def run():
+        exporter.export(kg, output_file)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
@@ -0,0 +1,22 @@
+import pytest
+
+from semantica.export.graph_exporter import GraphExporter
+
+
+@pytest.mark.benchmark(group="vis_export")
+@pytest.mark.parametrize("format", ["graphml", "gexf"])
+def test_graph_conversion_overhead(
+    benchmark, tmp_path, generate_knowledge_graph, format
+):
+    """
+    Measures the cost of converting internal KG structure to XML-based graph formats.
+    Includes dictionary traversal and XML string building.
+    """
+    kg = generate_knowledge_graph(2000)
+    exporter = GraphExporter(format=format)
+    output_file = tmp_path / f"graph.{format}"
+
+    def run():
+        exporter.export_knowledge_graph(kg, output_file)
+
+    benchmark(run)
@@ -0,0 +1,45 @@
+import pytest
+
+from semantica.export.lpg_exporter import LPGExporter
+from semantica.export.owl_exporter import OWLExporter
+from semantica.export.rdf_exporter import RDFExporter
+
+
+@pytest.mark.benchmark(group="semantic_serialization")
+@pytest.mark.parametrize("format", ["turtle", "rdfxml"])
+def test_rdf_serialization_formats(benchmark, generate_knowledge_graph, format):
+    kg = generate_knowledge_graph(1000)
+    exporter = RDFExporter()
+    rdf_data = exporter.serializer.convert_kg_to_rdf(kg)
+
+    def run():
+        return exporter.export_to_rdf(rdf_data, format=format)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+@pytest.mark.benchmark(group="graph_db_export")
+def test_lpg_cypher_generation(benchmark, generate_knowledge_graph):
+    kg = generate_knowledge_graph(2000)
+    exporter = LPGExporter(batch_size=1000, include_indexes=False)
+
+    def run():
+        return exporter._generate_cypher_queries(kg)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+@pytest.mark.benchmark(group="semantic_serialization")
+def test_owl_xml_generation(benchmark, tmp_path):
+    ontology = {
+        "name": "BenchmarkOntology",
+        "classes": [{"name": f"Class{i}"} for i in range(500)],
+        "object_properties": [{"name": f"Prop{i}"} for i in range(200)],
+    }
+    exporter = OWLExporter()
+    output_file = tmp_path / "ontology.xml"
+
+    def run():
+        exporter.export(ontology, output_file, format="owl-xml")
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
@@ -0,0 +1,51 @@
+import numpy as np
+import pytest
+
+from semantica.export.vector_exporter import VectorExporter
+
+
+@pytest.mark.benchmark(group="vector_io")
+@pytest.mark.parametrize("count", [1000, 10000])
+def test_numpy_compression_speed(benchmark, tmp_path, generate_vectors, count):
+    """
+    Measures cost of np.savez_compressed.
+    """
+    vectors = generate_vectors(count)
+    exporter = VectorExporter(format="numpy")
+    output_file = tmp_path / "vectors.npz"
+
+    def run():
+        exporter.export(vectors, output_file)
+
+    benchmark(run)
+
+
+@pytest.mark.benchmark(group="vector_io")
+def test_json_vector_overhead(benchmark, tmp_path, generate_vectors):
+    """
+    Benchmarks JSON export for vectors.
+    """
+
+    vectors = generate_vectors(2000)
+    exporter = VectorExporter(format="json")
+    output_file = tmp_path / "vectors.json"
+
+    def run():
+        exporter.export(vectors, output_file)
+
+    benchmark(run)
+
+
+@pytest.mark.benchmark(group="vector_io")
+def test_binary_raw_throughput(benchmark, tmp_path, generate_vectors):
+    """
+    Measures raw binary dump speed (no compression, no metadata).
+    """
+    vectors = generate_vectors(10000)
+    exporter = VectorExporter(format="binary")
+    output_file = tmp_path / "vectors.bin"
+
+    def run():
+        exporter.export(vectors, output_file)
+
+    benchmark(run)
@@ -0,0 +1,102 @@
+import argparse
+import json
+import sys
+from pathlib import Path
+from typing import Any, Dict, List
+
+
+def load_results(filepath: str) -> Dict[str, Any]:
+    with open(filepath, "r") as f:
+        return json.load(f)
+
+
+def calc_z_score(current_mean, base_mean, base_stddev):
+    """
+    Z-Score indicates how many standard deviations
+    away current run is from baseline
+    """
+
+    if base_stddev == 0:
+        return 0 if current_mean == base_mean else 100.0
+
+    return (current_mean - base_mean) / base_stddev
+
+
+def compare_benchmarks(
+    baseline: Dict[str, Any], current: Dict[str, Any], threshold_pct: float = 10.0
+):
+    """
+    Uses Mean for % change and Z-score for noise detection.
+    """
+
+    # colors for terminal
+    RED = "\033[91m"
+    GREEN = "\033[92m"
+    YELLOW = "\033[93m"
+    RESET = "\033[0m"
+
+    header = f"{'Benchmark':<60} | {'CHANGE %':<12} | {'SIGMA (Z)':<10} | {'STATUS'}"
+    print(header)
+    print("=" * len(header))
+
+    baseline_map = {b["name"]: b for b in baseline["benchmarks"]}
+    current_map = {b["name"]: b for b in current["benchmarks"]}
+
+    regressions = []
+
+    for name, curr in current_map.items():
+        base = baseline_map.get(name)
+        if not base:
+            print(f"{name:<60} | {'NEW':<12} | {'N/A':<10} | NEW")
+            continue
+
+        m1 = base["stats"]["mean"]
+        s1 = base["stats"]["stddev"]
+        m2 = curr["stats"]["mean"]
+
+        if m1 == 0:
+            delta_pct = 0.0
+        else:
+            delta_pct = ((m2 - m1) / m1) * 100
+
+        z_score = calc_z_score(m2, m1, s1)
+
+        status = f"{GREEN} OK{RESET}"
+
+        if delta_pct > threshold_pct:
+            if abs(z_score) > 2.0:
+                status = f"{RED} REGRESSION{RESET}"
+                regressions.append(name)
+            else:
+                status = f"{YELLOW} NOISE{RESET}"
+        elif delta_pct < -threshold_pct and abs(z_score) > 2.0:
+            status = f"{GREEN} IMPROVED{RESET}"
+
+        print(f"{name:<60} | {delta_pct:>+10.2f}% | {z_score:>9.2f} | {status}")
+
+    if regressions:
+        print(
+            f"\n{RED}FAILURE: Performance regression detected in {len(regressions)} tests.{RESET}"
+        )
+        return True
+    print(f"\n{GREEN}SUCCESS: No significant regressions.{RESET}")
+    return False
+
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser()
+    parser.add_argument("baseline", help="Gold standard JSON")
+    parser.add_argument("current", help="NEW RUN JSON")
+    parser.add_argument(
+        "--threshold", type=float, default=10.0, help="FAIL if slower by %"
+    )
+    args = parser.parse_args()
+
+    try:
+        failed = compare_benchmarks(
+            load_results(args.baseline), load_results(args.current), args.threshold
+        )
+        sys.exit(1 if failed else 0)
+    except FileNotFoundError as e:
+        print(f"Error loading files: {e}")
+        sys.exit(0)
@@ -0,0 +1,22 @@
+import pytest
+
+from semantica.ingest.file_ingestor import FileIngestor
+
+
+def test_ingest_file_performance(benchmark, sample_text_file):
+    """
+    Benchmarks the speed of the ingest_file method
+
+    Metrics:
+    - Time to open, read, validate and wrap a ~~10 KB text file.
+    """
+
+    ingestor = FileIngestor()
+    result = benchmark(
+        ingestor.ingest_file, file_path=sample_text_file, read_content=True
+    )
+
+    assert result is not None
+    assert result.size > 0
+    assert result.name.endswith(".txt")
+    assert "Line 0" in result.text
@@ -0,0 +1,188 @@
+import csv
+import io
+import json
+import time
+from typing import Any, Dict, List
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+from semantica.parse.code_parser import CodeParser
+from semantica.parse.csv_parser import CSVParser
+from semantica.parse.document_parser import DocumentParser
+from semantica.parse.html_parser import HTMLParser
+from semantica.parse.json_parser import JSONParser
+
+# Data gens
+
+
+def generate_json_string(item_count: int) -> str:
+    data = [
+        {
+            "id": i,
+            "name": f"Item:{i}",
+            "tags": ["tag1", "tag2", "tag3"],
+            "metadata": {"active": True, "score": 0.95},
+        }
+        for i in range(item_count)
+    ]
+    return json.dumps(data)
+
+
+def generate_csv_string(row_count: int) -> str:
+    output = io.StringIO()
+    writer = csv.writer(output)
+    writer.writerow(["id", "name", "description", "value", "date"])
+    for i in range(row_count):
+        writer.writerow([i, f"Item {i}", "Description text here", 100.50, "2024-01-01"])
+    return output.getvalue()
+
+
+def generate_html_string(element_count: int) -> str:
+    lis = "".join(
+        [f'<li><a href="/item/{i}">Link {i}</a></li>' for i in range(element_count)]
+    )
+    return f"""
+    <html>
+        <head><title>Benchmark Page</title></head>
+        <body>
+            <div id="content">
+                <h1>Header</h1>
+                <p>Some intro text.</p>
+                <ul>{lis}</ul>
+            </div>
+        </body>
+    </html>
+    """
+
+
+# lib mocks
+
+
+class MockPDFPage:
+    def __init__(self, page_num):
+        self.width = 600
+        self.height = 800
+        self.page_number = page_num
+
+    def extract_text(self):
+        return f"This is text content for page {self.page_number}. " * 50
+
+    def extract_tables(self):
+        return [[["Header1", "Header2"], ["Row1", "Value1"]]]
+
+    @property
+    def images(self):
+        return [{"x0": 10, "y0": 10, "width": 100, "height": 100}]
+
+
+class MockPDF:
+    def __init__(self, page_count):
+        self.pages = [MockPDFPage(i) for i in range(page_count)]
+        self.metadata = {"Title": "Benchmark PDF", "Author": "Noone"}
+
+    def __enter__(self):
+        return self
+
+    def __exit__(self, *args):
+        pass
+
+
+@pytest.fixture
+def mock_pdfplumber():
+    with patch("pdfplumber.open") as mock_open:
+        yield mock_open
+
+
+# Benchmarks
+
+
+@pytest.mark.parametrize("size", [1000, 10000])
+def test_json_parsing_throughput(benchmark, size):
+    parser = JSONParser()
+    json_str = generate_json_string(size)
+
+    with patch("pathlib.Path.exists", return_value=False):
+
+        def op():
+            return parser.parse(json_str)
+
+        benchmark.pedantic(op, iterations=5, rounds=10)
+
+
+@pytest.mark.parametrize("rows", [1000, 10000])
+def test_csv_parsing_throughput(benchmark, rows):
+    """
+    Measures CSV parsing throughput.
+    """
+    parser = CSVParser()
+    csv_content = generate_csv_string(rows)
+
+    with patch(
+        "builtins.open", side_effect=lambda *args, **kwargs: io.StringIO(csv_content)
+    ):
+        with patch("pathlib.Path.exists", return_value=True):
+
+            def op():
+                return parser.parse("dummy.csv")
+
+            benchmark.pedantic(op, iterations=5, rounds=5)
+
+
+@pytest.mark.parametrize("elements", [100, 1000])
+def test_html_scraping_speed(benchmark, elements):
+    parser = HTMLParser()
+    html_content = generate_html_string(elements)
+
+    with patch("pathlib.Path.exists", return_value=False):
+
+        def op():
+            return parser.parse(html_content, extract_links=True)
+
+        benchmark.pedantic(op, iterations=5, rounds=5)
+
+
+@pytest.mark.parametrize("pages", [10, 50])
+def test_pdf_extraction_overhead(benchmark, mock_pdfplumber, pages):
+    parser = DocumentParser()
+
+    mock_pdf = MockPDF(pages)
+    mock_pdfplumber.return_value = mock_pdf
+
+    with patch("pathlib.Path.exists", return_value=True), patch(
+        "pathlib.Path.suffix", new_callable=MagicMock(return_value=".pdf")
+    ):
+
+        def op():
+            return parser.parse_document("dummy.pdf", extract_images=True)
+
+        benchmark.pedantic(op, iterations=5, rounds=5)
+
+
+def test_python_ast_parsing(benchmark):
+    """
+    Measures performance of Python AST analysis.
+    """
+    parser = CodeParser()
+
+    code_lines = []
+    for i in range(200):
+        code_lines.append(f"import module_{i}")
+        code_lines.append(f"def function_{i}(arg):")
+        code_lines.append(f"    '''Docstring for function {i}'''")
+        code_lines.append(f"    return arg + {i}")
+        code_lines.append(f"class Class_{i}:")
+        code_lines.append(f"    pass")
+
+    code_content = "\n".join(code_lines)
+
+    with patch(
+        "builtins.open", side_effect=lambda *args, **kwargs: io.StringIO(code_content)
+    ), patch("pathlib.Path.exists", return_value=True), patch(
+        "pathlib.Path.suffix", new_callable=MagicMock(return_value=".py")
+    ):
+
+        def op():
+            return parser.parse_code("dummy.py")
+
+        benchmark.pedantic(op, iterations=5, rounds=5)
@@ -0,0 +1,27 @@
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+try:
+    from semantica.split.sliding_window_chunker import SlidingWindowChunker
+    from semantica.split.splitter import TextSplitter
+except ImportError as e:
+    pytest.skip(
+        f"Skipping splitting test due to missing dependencies ({e})",
+        allow_module_level=True,
+    )
+
+
+def test_sliding_window(benchmark, long_text_string):
+    """
+    Benchmarks the speed of SlidingWindowChunker in 'Fixed Size' mode
+    """
+
+    chunker = SlidingWindowChunker(chunk_size=500, overlap=50)
+
+    if hasattr(chunker, "progress_tracker"):
+        chunker.progress_tracker = MagicMock()
+
+    result = benchmark(chunker.chunk, text=long_text_string, preserve_boundaries=False)
+
+    assert len(result) > 0
@@ -0,0 +1,69 @@
+"""
+Mock Arrow Exporter for Benchmark Testing
+
+This module provides a mock implementation of the ArrowExporter to prevent
+import errors during benchmark testing when PyArrow is not available in the CI environment.
+"""
+
+# Mock PyArrow import for CI compatibility
+try:
+    import pyarrow as pa
+except ImportError:
+    # Create a mock pa module for CI environment
+    import types
+    pa = types.ModuleType('pa')
+    
+    def mock_schema(*args, **kwargs):
+        return types.SimpleNamespace()
+    
+    def mock_table(*args, **kwargs):
+        return types.SimpleNamespace()
+    
+    def mock_array(*args, **kwargs):
+        return types.SimpleNamespace()
+    
+    pa.schema = mock_schema
+    pa.Table = mock_table
+    pa.array = mock_array
+    pa.RecordBatch = mock_table
+
+# Mock schema definitions
+ENTITY_SCHEMA = pa.schema([]) if hasattr(pa, 'schema') else None
+RELATIONSHIP_SCHEMA = pa.schema([]) if hasattr(pa, 'schema') else None
+METADATA_SCHEMA = pa.schema([]) if hasattr(pa, 'schema') else None
+
+class ArrowExporter:
+    """
+    Mock Arrow Exporter class for benchmark testing.
+    
+    This is a lightweight implementation that provides the same interface
+    as the real ArrowExporter but doesn't require PyArrow to be installed.
+    """
+    
+    def __init__(self, config=None):
+        self.config = config
+        self._tables = {}
+    
+    def export_entities(self, entities, output_path):
+        """Mock export entities method."""
+        return f"Mock exported {len(entities)} entities to {output_path}"
+    
+    def export_relationships(self, relationships, output_path):
+        """Mock export relationships method."""
+        return f"Mock exported {len(relationships)} relationships to {output_path}"
+    
+    def export_knowledge_graph(self, entities, relationships, output_path):
+        """Mock export knowledge graph method."""
+        return f"Mock exported knowledge graph to {output_path}"
+    
+    def to_arrow_table(self, data):
+        """Mock conversion to Arrow table."""
+        return f"Mock Arrow table with {len(data)} rows"
+    
+    def save_to_file(self, table, path):
+        """Mock save to file method."""
+        return f"Mock saved table to {path}"
+    
+    def batch_export(self, data_list, output_dir):
+        """Mock batch export method."""
+        return f"Mock batch exported {len(data_list)} items to {output_dir}"
@@ -0,0 +1,62 @@
+import random
+import string
+from typing import Any, Dict, List
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+# Data gen
+
+
+@pytest.fixture
+def generate_text_data():
+    """Generates various types of text data."""
+
+    def _gen(type="clean", length=100):
+        if type == "clean":
+            return "".join(random.choices(string.ascii_letters + " ", k=length))
+        elif type == "html":
+            tags = ["<div>", "<p>", "<span>", "<a>", "<b>", "<i>"]
+            content = "".join(random.choices(string.ascii_letters + " ", k=length))
+            return f"{random.choice(tags)}{content}{random.choice(tags).replace('<', '</')}"
+        elif type == "unicode":
+            chars = string.ascii_letters + "éàèùâêîôûçñ"
+            return "".join(random.choices(chars, k=length))
+        elif type == "dirty":
+            chars = string.ascii_letters + " \t\n\r"
+            return "".join(random.choices(chars, k=length))
+
+    return _gen
+
+
+@pytest.fixture
+def generate_dataset():
+    """Generates dataset for data cleaner."""
+
+    def _gen(rows=100, duplicate_rate=0.0):
+        base_rows = []
+        unique_count = int(rows * (1 - duplicate_rate))
+
+        for i in range(unique_count):
+            base_rows.append(
+                {
+                    "id": i,
+                    "name": f"Entity_{i}",
+                    "email": f"user{i}@yahoo.com",
+                    "value": random.random() * 100,
+                    "category": random.choice(["A", "B", "C"]),
+                }
+            )
+
+        final_dataset = base_rows.copy()
+        while len(final_dataset) < rows:
+            source = random.choice(base_rows)
+            dup = source.copy()
+            if random.random() > 0.5:
+                dup["value"] = source["value"] + 0.001
+            final_dataset.append(dup)
+
+        random.shuffle(final_dataset)
+        return final_dataset
+
+    return _gen
@@ -0,0 +1,38 @@
+import pytest
+
+from semantica.normalize.data_cleaner import DataCleaner
+
+
+@pytest.mark.parametrize("rows", [100, 500])
+def test_duplication_detection_scaling(benchmark, generate_dataset, rows):
+    """
+    Benchmarks duplicate detection scaling.
+    """
+
+    cleaner = DataCleaner()
+    dataset = generate_dataset(rows=rows, duplicate_rate=0.2)
+
+    def run():
+        return cleaner.detect_duplicates(dataset, key_fields=["name", "email"])
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+def test_missing_value_imputation(benchmark, generate_dataset):
+    """
+    Benchmarks statistical imputation.
+    """
+    cleaner = DataCleaner()
+
+    def setup_broken_dataset():
+        dataset = generate_dataset(rows=5000)
+        for row in dataset:
+            if row["id"] % 5 == 0:
+                row["value"] = None
+
+        return (dataset,), {}
+
+    def run(data):
+        return cleaner.handle_missing_values(data, strategy="impute", method="mean")
+
+    benchmark.pedantic(target=run, setup=setup_broken_dataset, iterations=1, rounds=10)
@@ -0,0 +1,31 @@
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+from semantica.normalize.encoding_handler import EncodingHandler
+from semantica.normalize.language_detector import LanguageDetector
+
+
+def test_language_detection_throughput(benchmark, generate_text_data):
+    """Benchmarks langdetect intergration."""
+    detector = LanguageDetector()
+    texts = [generate_text_data("clean", 200) for _ in range(50)]
+
+    def run():
+        return detector.detect_batch(texts)
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+def test_encoding_detection(benchmark):
+    """Benchmarks chardet integration via EncodingHandler."""
+    handler = EncodingHandler()
+    data = (
+        b"Wowzaaa a simple string for encoding decoding , oh encoding detection just."
+        * 100
+    )
+
+    def run():
+        return handler.detect(data)
+
+    benchmark.pedantic(run, iterations=5, rounds=10)
@@ -0,0 +1,25 @@
+import pytest
+
+from semantica.normalize.date_normalizer import DateNormalizer
+from semantica.normalize.number_normalizer import NumberNormalizer
+
+
+@pytest.mark.parametrize("date_str", ["2026-02-03", "Ferbuary 2nd, 2026", "9 days ago"])
+def test_data_parsing_variations(benchmark, date_str):
+    """Compare speed of different date formats."""
+    normalizer = DateNormalizer()
+    benchmark.pedantic(
+        lambda: normalizer.normalize_date(date_str), iterations=10, rounds=20
+    )
+
+
+def test_number_normalization(benchmark):
+    """Benchmarks number parsing with currency and unit stripping."""
+    normalizer = NumberNormalizer()
+    raw_inputs = ["$1,234.56", "1.5k", "50%", "1,000,000"] * 100
+
+    def run():
+        for n in raw_inputs:
+            normalizer.normalize_number(n)
+
+    benchmark.pedantic(run, iterations=5, rounds=20)
@@ -0,0 +1,42 @@
+import pytest
+
+from semantica.normalize.text_cleaner import TextCleaner
+from semantica.normalize.text_normalizer import TextNormalizer
+
+
+def test_html_removal_reg_vs_bs4(benchmark, generate_text_data):
+    """
+    Compare regex vs BeautifulSoup.
+    """
+    cleaner = TextCleaner()
+    html_content = generate_text_data("html", 10_000)
+
+    def run():
+        return cleaner.remove_html(html_content, preserve_structure=False)
+
+    benchmark.pedantic(run, rounds=50, iterations=10)
+
+
+def test_unicode_normalization_throughput(benchmark, generate_text_data):
+    """
+    Benchmarks unicode NFC normalization speed.
+    """
+    normalizer = TextNormalizer()
+    text = generate_text_data("unicode", 50_000)
+
+    def run():
+        return normalizer.normalize_text(text, unicode_form="NFC")
+
+    benchmark.pedantic(run, iterations=5, rounds=10)
+
+
+def test_whitespace_normalization(benchmark, generate_text_data):
+    """Benchmarks whitespace regex replacement."""
+    normalizer = TextNormalizer()
+    text = generate_text_data("dirty", 50_000)
+
+    benchmark.pedantic(
+        lambda: normalizer.normalize_text(text, unicode_form="NFC"),
+        iterations=5,
+        rounds=10,
+    )
@@ -0,0 +1,85 @@
+import random
+import string
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+# Data generators
+
+
+def _random_str(length=8):
+    return "".join(random.choices(string.ascii_letters, k=length))
+
+
+@pytest.fixture
+def generate_ontology_data():
+    """
+    Generates a synthetic dataset of entities and relationships
+    designed to triger class and property inference class.
+    """
+
+    def _generate(entity_count: int, relationship_density: float = 1.5):
+
+        num_classes = max(5, entity_count // 50)
+        class_names = [f"Class_{_random_str(4)}" for _ in range(num_classes)]
+
+        entities = []
+
+        for i in range(entity_count):
+            cls = random.choice(class_names)
+
+            props = {
+                f"prop_{_random_str(3)}": random.choice([10, "text", 1.5, True])
+                for _ in range(random.randint(1, 5))
+            }
+
+            entity = {
+                "id": f"e_{i}",
+                "type": cls,
+                "name": f"Entity_{i}",
+                "confidence": 0.95,
+                **props,
+            }
+
+            entities.append(entity)
+
+        relationships = []
+        rel_count = int(entity_count * relationship_density)
+        rel_types = ["relatedTo", "hasPart", "worksFor", "contains", "memberOf"]
+
+        for _ in range(rel_count):
+            src = random.choice(entities)
+            tgt = random.choice(entities)
+            rel = {
+                "source": src["name"],
+                "target": tgt["name"],
+                "type": random.choice(rel_types),
+                "source_type": src["type"],
+                "target_type": tgt["type"],
+                "confidence": 0.8,
+            }
+            relationships.append(rel)
+
+        return {"entities": entities, "relationships": relationships}
+
+    return _generate
+
+
+@pytest.fixture
+def large_ontology_definition(generate_ontology_data):
+    """Pre-calculates a structured ontology
+    definition dictionary.
+    """
+    from semantica.ontology.ontology_generator import OntologyGenerator
+
+    data = generate_ontology_data(entity_count=1000)
+
+    # Mocking validation in 6-step pipeline to speed up setup
+
+    with patch(
+        "semantica.ontology.ontology_validator.OntologyValidator.validate"
+    ) as mock_val:
+        mock_val.return_value.valid = True
+        gen = OntologyGenerator()
+
+        return gen.generate_ontology(data, validate=False)
@@ -0,0 +1,70 @@
+import pytest
+
+from semantica.ontology.class_inferrer import ClassInferrer
+from semantica.ontology.property_generator import PropertyGenerator
+
+
+@pytest.mark.benchmark(group="class_Inference")
+@pytest.mark.parametrize("entity_count", [1000, 5000])
+def test_class_inference_scaling(benchmark, generate_ontology_data, entity_count):
+    """
+    Benchmarks grouping and threshold logic in ClassInferrer.
+    """
+
+    data = generate_ontology_data(entity_count=entity_count)
+    inferrer = ClassInferrer(min_occurrences=2)
+
+    def run():
+        return inferrer.infer_classes(data["entities"])
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+@pytest.mark.benchmark(group="property_inference")
+@pytest.mark.parametrize("size", [(1000, 1500)])
+def test_property_inference_scaling(benchmark, generate_ontology_data, size):
+    """
+    Benchmarks: PropertyGenerator
+    """
+
+    e_count, _ = size
+    data = generate_ontology_data(entity_count=e_count)
+
+    inferrer = ClassInferrer()
+    classes = inferrer.infer_classes(data["entities"])
+
+    prop_gen = PropertyGenerator()
+
+    def run():
+        return prop_gen.infer_properties(
+            entities=data["entities"],
+            relationships=data["relationships"],
+            classes=classes,
+        )
+
+    benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+def test_hierarchy_circular_detection(benchmark):
+    """
+    Benchmarks the DFS cycle detection in ClassInferrer.
+    """
+
+    inferrer = ClassInferrer()
+
+    # Create a deep chain A -> B -> C ... -> Z
+
+    chain_length = 200
+    classes = []
+
+    for i in range(chain_length):
+        cls = {
+            "name": f"Class_{i}",
+            "subClassOf": f"Class_{i+1}" if i < chain_length - 1 else None,
+        }
+        classes.append(cls)
+
+    def run():
+        return inferrer.validate_classes(classes)
+
+    benchmark.pedantic(run, iterations=1, rounds=10)
@@ -0,0 +1,46 @@
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+from semantica.ontology.ontology_generator import OntologyGenerator
+
+
+@pytest.mark.benchmark(group="full_pipeline")
+@pytest.mark.parametrize("entity_count", [1000])
+def test_e2e_ontology_generation(benchmark, generate_ontology_data, entity_count):
+    """
+    Benchmarks complete 6-stage pipeline
+    """
+
+    data = generate_ontology_data(entity_count)
+    generator = OntologyGenerator()
+
+    with patch(
+        "semantica.ontology.ontology_validator.OntologyValidator.validate"
+    ) as mock_val:
+        mock_val.return_value.valid = True
+
+        def run():
+            return generator.generate_ontology(data, validate=True)
+
+        benchmark.pedantic(run, iterations=1, rounds=5)
+
+
+def test_associative_class_creation(benchmark):
+    """
+    Benchmarks the creation of complex N-ary relationships.
+    """
+    from semantica.ontology.associative_class import AssociativeClassBuilder
+
+    builder = AssociativeClassBuilder()
+
+    def run():
+        for i in range(50):
+            builder.create_position_class(
+                person_class=f"Person_{i}",
+                organization_class=f"Org_{i}",
+                role_class=f"Role_{i}",
+                name=f"Position_{i}",
+            )
+
+    benchmark.pedantic(run, iterations=1, rounds=10)
--- a/Show More
+++ b/Show More