[hyperpolymath]

What & why

The two v0.5 engine-depth items you asked for — "1 then 2":

1. CreateFile fix action (mechanical) — the missing-file half of plasma fix.
2. Content facts + file-matches-pattern (the one with a real design decision) — content-aware policy conditions.

1 — CreateFile

A required file at a concrete path (not a glob) that's missing is now created with obvious placeholder content, never overwriting an existing file. A required file named by a glob (LICENSE*, README* — no single filename to derive) stays manual. Idempotent.

$ plasma fix . --policy needs-security.toml --apply
  APPLIED: SECURITY.md     # created with a "# TODO" placeholder

2 — Content facts + file-matches-pattern

The design decision I flagged, and how I resolved it so the v0.4 wire contracts stay frozen:

• FactSet gains an opt-in, additive file_contents map (collect_opts, valid-UTF-8 files ≤ 1 MiB). It's skip_serializing_if empty, so the default plasma facts snapshot is byte-identical to before — verified by test.
• Content is collected only when needed: plasma check/fix turn it on automatically iff the policy uses file-matches-pattern (Policy::needs_content); plasma facts --with-contents forces it. The evaluator stays pure — it only ever reads the FactSet it's handed.
• file-matches-pattern's regex is validated at load (InvalidRegex), so evaluation stays total; the condition is false when a file's content wasn't collected (binary/oversized/off) — a defined semantics, documented.

[[rules]]
id = "no-todo-in-main"
modality = "prohibition"
subject = { type = "repo" }
resource = { type = "file", path = "main.rs" }
condition = { type = "file-matches-pattern", path = "main.rs", pattern = "TODO|FIXME" }
action = { type = "present" }

Verification

• cargo test --workspace — 100 tests (8 new: CreateFile plan+apply, file-matches-pattern match/no-match/no-content, invalid-regex load rejection, content opt-in serialization, oversized-content skip)
• cargo clippy --workspace --all-targets -- -D warnings and cargo fmt --check clean
• Live demos: file-matches-pattern flags a TODO in main.rs; CreateFile generates a missing SECURITY.md; default plasma facts still omits file_contents
• plasma check . self-check: 0 violations, 110 rules satisfied

Notes

• New dep: regex (MIT/Apache) in plasma-engine.
• Wire contracts unchanged; docs/interchange-contracts.adoc documents file_contents as opt-in/additive.
• Remaining roadmap: UpdateField fix action; integration surfaces (git hooks, CI action, .plasma.toml pinning); release facts; modify-rules stays reserved.

🤖 Generated with Claude Code

https://claude.ai/code/session_01JSVSF9HhKUhDrEV4xkMEXq

---

Generated by Claude Code