SIS CLI

Compatibility and Deprecation Guide

This guide tracks compatibility windows for operator-visible identifiers and command-surface contracts.

Verdict trigger alias window

Runtime verdict policy parsing accepts the canonical root-semantic trigger IDs plus compatibility aliases from two prior naming generations. The current canonical family is root_*.

Alias mappings (both deprecated generations normalise to the root_* canonical):

gen 1 alias (pre-2026-04-03)	gen 2 alias (2026-04-03..2026-06-10)	canonical (current)
`native_root_vbscript_escalation`	`non_pdf_vbscript_escalation`	`root_format_mismatch_escalation`
`native_root_floor`	`non_pdf_root_floor`	`root_chain_floor`
`native_root_html_hta_escalation`	`non_pdf_native_html_hta_escalation`	`root_native_html_hta_escalation`
`lone_native_markup_mismatch`	`lone_non_pdf_markup_mismatch`	`lone_root_markup_mismatch`
`lone_unclaimed_native_detection`	`lone_unclaimed_non_pdf_detection`	`lone_unclaimed_root_detection`

Compatibility window:

gen 1 (native_root_*) alias acceptance started: 2026-04-03
gen 2 (non_pdf_*) alias acceptance started: 2026-06-10 (when root_* became canonical)
Guaranteed minimum support for both through: 2026-09-30

After the window, alias handling may be removed in a future migration with prior notice in docs/migrations.md.

Lint behaviour for aliases

policy-bundle-lint supports two operating modes for alias usage:

default mode: emits notices for deprecated alias IDs and passes lint
strict alias mode (--fail-on-deprecated-trigger-aliases): treats alias usage as a lint failure

Use strict alias mode in CI when you want canonical trigger IDs enforced ahead of alias sunset.

Command-surface compatibility

For sis query:

Multi-format findings/report query paths are stable for all supported roots.
PDF object-graph namespaces remain explicitly PDF-scoped.

For batch/path scanning:

default path glob for scan and query is *
use --glob '*.pdf' for explicit PDF-only narrowing

Migration source of truth

For compatibility changes, deprecation windows, and future removal notices, consult:

docs/migrations.md