Check reference

Check a suppression's required reviewer record

Some obligation suppressions need an additional review record under project policy. This check finds qualifying suppressions that lack a recorded reviewer.

What the check observes

The check considers suppressed classes that belong to the requirement's baseline and meet the configured review-severity threshold. The default threshold is error. Each qualifying suppression needs a review block with a nonempty reviewed_by field. The implementation checks that field's presence; it does not structurally enforce that the reviewer differs from the suppressing actor.

Example: policy now requires review at warning severity

Illustrative case. A project tightens its suppression-review threshold. Existing applicable suppressions may have reasons and author identities but no review block. They now need substantive review, not merely a copied name.

# Requirement excerpt after an actual review
obligation_suppressions:
  - id: rate_limit_respected
    reason: "Offline input processing; network exposure is outside this component's boundary."
    suppressed_by: author-id
    review:
      reviewed_by: reviewer-id
      decision: accept

Resolve the finding

Inspect the effective class severity, baseline applicability, and project reviewer threshold.
Have an authorized reviewer assess the actual non-applicability argument and its assumptions, then record that decision with the real identity.
If independence is required, enforce it through the project's approval process. Do not assume the presence check verifies separation of duties or identity.

Run and interpret

proof audit --check obligation_suppression_reviewer --verbose

This is a specification-stage warning check. The default review threshold is error; project configuration can require review at warning severity as well. The absence of a finding below the threshold does not mean a separate review took place.

The check validates a required record field. It does not authenticate the actor, prove reviewer independence, judge the reason, or grant approval authority. Agent participation depends on applicable delegation policy, not on a blanket claim that only human authors can make or review requirements.

Continue from here

Write an inspectable rationale. Understand authority over intent.

Bring a suppression and the policy that determines who may accept it. Bring a change to Proof.