Detector development

The canonical detector declaration lives in src/mcp/facade/detector-catalog.ts. Every detector-shaped exported symbol in the scanned roots must be claimed exactly once. The declaration includes identity, plain-language purpose, family, technique, implementation files, disposition, execution surface, bundle, overlaps, and framework version boundaries.

Adding source without a catalog entry fails the detector-registry gate. Adding a catalog entry without a real export also fails. A detector can be declared as default, manual, external, dormant, or not actually a detector; deliberate absence stays visible instead of disappearing from inventory.

Before shipping, provide a truth set or fixture that can falsify the rule, test precision-sensitive cases, state blind spots in returned evidence, map severity through the finding policy, and verify the result renders in the Findings surface. Do not expose internal readiness phrases in marketing copy.