themis library

The 3D-asset shield (libs/themis/3d-shield/src, ~6K lines): multi-view-rendering, neural-embeddings, point-cloud-comparison, voxel-occupancy-comparison, uv-texture-analysis, character-recognition, product-brand-detection, architectural-work-detection, and asset-library-deduplication. Protects AI-generated meshes, environments, and branded objects.

The adjudication mechanics behind Metis academic-integrity verdicts (§8.17) (libs/themis/academic-integrity/src, ~4K lines, organized into subdirs): signals/ (the signal taxonomy), classifier/ (calibrated policy + severity→ action map), appeals/ (appeals workflow), bias/ (bias monitor), verdict/ (audit persistence), and an orchestrator/. Owns how academic-integrity signals become defensible, appealable verdicts — distinct from the originality Shield.

Accountability monitors (libs/themis/accountability/src): a governance-integrity-monitor, governance-promise-accountability tracker, governance-quality-index, a secure-whistleblower-protection-system, and a veritas-governance-accountability-bridge. (Note: this dir contains untracked/leftover build artifacts on disk — .js.map/.d.ts.map — alongside source, not committed to git.)

Governance AI assistants (libs/themis/ai/src, ~8K lines): a constitutional-advisor-agent, governance-proposal-analyst-agent, governance-facilitator-agent, autonomous-governance-delegate-agent, and a parliamentary-procedure-assistant. LLM-driven agents that operate over the governance platform.

Governance analytics engines (libs/themis/analytics/src): a governance-health-monitor, voter-behavior-analytics-engine, proposal-outcome-analytics-engine, power-distribution-analysis-engine, and a governance-intelligence-reports-engine. The metrics/observability layer over governance activity.

Dispute-handling engines (libs/themis/arbitration/src): a decentralized-arbitration-court, multi-tier-escalation-engine, structured-mediation-protocol, restorative-justice-framework, and a dispute-management-system. The in-platform conflict-resolution machinery.

Copyright audio-fingerprinting primitives (libs/themis/audio-fingerprint/src, ~1.5K lines): perceptual-hash, neural-fingerprint, content-id, segment-matching, stem-matching, transform-matching, and identifier-resolution. Direct-copy detection feeding the music shield.

The cross-media character shield (libs/themis/character-shield/src): a character-database, visual-character-matching, profile-matching, archetype-differentiation, and cross-media-compound-detection. Matches a character identity across visual, text, voice, and animation modalities.

Civic / e-government governance (libs/themis/civic/src): a digital-democracy-platform, e-government-governance-layer, election-management-system, participatory-budgeting-platform, and a legislative-monitoring-system. Applies the primitives to public-sector governance.

Community-organization governance (libs/themis/community/src, ~11K lines): managers for association, housing-association, labor-union, and sports-club governance plus a community-organization-toolkit-manager. Member-organization governance patterns.

Cross-media compound detection (libs/themis/compound-detector/src, ~2K lines): media-decomposition, cross-correlation, and ip-holder-cross-reference — correlates separate originality matches (e.g. a character that matches across image and voice and text) into a single compounded risk signal.

Constitution authoring and computational law (libs/themis/constitutions/src, ~11K lines): charter-authoring, clause-library, amendment-lifecycle, version-control, jurisdictional-compliance, an ai-drafting module, a computational-law-compiler, smart-contract-generation, and a governance-rule-simulator. Turns governance rules into versioned, machine-checkable artifacts.

The governance substrate (libs/themis/core/src): a barrel re-exporting four subsystems — database/ (document storage + migrations), events/ (a Kafka service plus an audit-anchor / hash-chain tamper-evident event log), graph/ (governance graph schema, queries, service), and types/ (the shared vocabulary: proposal-vote, member-role, organization, framework, deliberation, dispute-resolution, treasury-fiscal, governance-metrics). Every other governance library builds on these types.

Corporate governance (libs/themis/corporate/src): a digital-board-management-platform, committee-governance-manager, proxy-voting-infrastructure, shareholder-engagement-manager, fiduciary-duty-monitoring-engine, and ESG compliance/integration engines. Board-and-shareholder governance.

Emergency-governance and resilience (libs/themis/crisis/src, ~12K lines): a continuity-of-government-engine, emergency-powers-governance-framework, democratic-resilience-framework, leadership-succession-governance, state-building-post-conflict-governance, pandemic-public-health-crisis-governance, and a governance-failure-analysis-engine. Covers state recovery and emergency decision-making.

A TS library (libs/themis/cross-media-governance/src/..., ~1,790 lines of src across four capability modules plus the barrel; description "Themis cross-media governance primitives for training data, memorization, red-team, and opt-out controls"). The index.ts barrel enumerates eight media types (image, text, video, model_3d, music, motion, voice, character) and four capabilities, each backed by a real module. training-data-audit.ts runs ThemisCrossMediaTrainingDataAuditor.audit(): per-media license, fair-use, and consent rules (Getty/Shutterstock exclusion, mocap performer consent, voice-corpus consent, character-rights clearance) that roll up into a complianceScore and a pass/manual_review/block deployment gate. memorization-testing.ts and red-team-framework.ts score model output against reference probes with real cosineSimilarity, ngramOverlap, and frame-similarity math and per-media thresholds, classifying memorization and copyright/likeness vulnerabilities. unified-opt-out-registry.ts is an in-memory Map registry with a verify/revoke lifecycle whose verifyDeploymentCompliance() cross-checks datasets against active opt-outs. Honest caveats: the model that actually generates probe outputs is an injected seam (ThemisCrossMediaMemorizationGenerator/RedTeamGenerator), the registry is in-memory with no persistence or crypto, and describeThemisCrossMediaGovernance() still reports scaffoldComplete: true. It is the originality-shield's model-governance surface — auditing what a generative model was trained on and whether it regurgitates protected works — beside @themis/universal-risk-scoring.

On-chain DAO machinery (libs/themis/dao/src, ~13K lines): a dao-proposal-lifecycle-manager, dao-proposal-quality-gates, dao-constitution-designer, dao-delegation-strategy-engine, dao-subdao-architecture-manager, dao-cross-chain-governance-coordinator, dao-legal-wrapper-advisor, and a dao-governance-template-library. The crypto-native counterpart to @themis/frameworks.

Decision-science engines (libs/themis/decisions/src): an mcda-engine (multi-criteria decision analysis), prediction-market-engine, futarchy-execution-engine, and a decision-quality-tracker. Supplies the quantitative decision tooling that voting and deliberation feed into.

Pre-vote deliberation tooling (libs/themis/deliberation/src): an argument-mapping-engine, opinion-clustering-engine, citizen-assembly-engine, participatory-process-designer, discussion-platform, an ai-deliberation-assistant, and tech-enhanced-deliberation. Models how groups reason before they vote.

A thin facade (libs/themis/design-shield/src, ~49 lines). Exports scanThemisDesignShield(), which simply calls buildThemisOriginalityShieldVerdict from @themis/originality-shields with a mediaFamily: 'design' config for V2 UGC decals/logos/custom championships. No detector logic of its own — it specializes the shared evaluator.

Digital / platform / technology governance (libs/themis/digital/src, ~19K lines): ai-governance-systems, algorithmic-governance-framework, autonomous-systems-governance, data-governance-frameworks, platform-governance-models, internet-governance-engine, open-source-governance-models, and technology-standards-governance. Governs technology itself.

A thin routing adapter (libs/themis/dispute-resolution/src, ~786 lines) that sends governance / DAO / moderation disputes into the Concordia mediation domain (Phase 179.7.2). Exports routeThemisDispute / shouldRouteToConcordia plus DSA "statement of reasons" builders (buildThemisDsaStatementOfReasons), moderation-appeal and tournament-result dispute flows. Honest about its scope: it routes and formats, it does not adjudicate.

The environment / level shield (libs/themis/environment-shield/src): architectural-detection, level-layout-comparison, and environmental-aesthetics-comparison. Protects game layouts, virtual worlds, and architectural designs.

Environmental / commons governance (libs/themis/environmental/src, ~13K lines): climate-governance-frameworks, natural-resource-governance, environmental-impact-governance, digital-commons-governance, intergenerational-governance-mechanisms, and an operational-commons-governance-engine. Long-horizon and shared-resource governance.

The fashion / design shield (libs/themis/fashion-shield/src): textile-pattern-comparison, trade-dress-matching, design-patent-comparison, and brand-element-detection. Protects textile patterns, trade dress, design patents, and brand elements (the recent trade-dress-matching work).

A catalog of governance-framework engines (libs/themis/frameworks/src), one file per model: direct-democracy, representative-democracy, liquid-democracy, bicameral-governance, consensus-governance, holacracy, sociocracy-3, conviction-voting, futarchy, plus a hybrid-framework-composer that combines them. ~7.7K lines of real model-specific logic (≈11K with specs).

Public-goods funding mechanisms (libs/themis/funding/src): a quadratic-funding-engine, augmented-bonding-curve-engine, retroactive-public-goods-funding, continuous-governance-funding-streams, and a hypercert-impact-certificate-system. Implements the named crypto-economic funding designs.

Harmonic-similarity primitives (libs/themis/harmonic-analysis/src): chord-extraction, harmonic-comparison, and protectability-scoring. A music analysis input to @themis/music-shield.

Voter-identity and eligibility primitives (libs/themis/identity/src): decentralized-identity-integration, an eligibility-engine, governance-credential-issuer, and a sybil-resistance-engine. Establishes who may participate before a vote is counted.

The cross-domain bridge library (libs/themis/integrations/src, ~20K lines): named bidirectional bridges to AJE, Iris, Kuan-Yin, Lakshmi, Maat, Maya, Metis, Sophia, and Veritas (e.g. iris-themis-governance-assistant, maat-themis-organizational-governance, veritas-themis-intelligence-pipeline, sector-specific-governance-bridges). This is where the governance platform connects to the rest of Oshun.

International-relations governance (libs/themis/international/src, ~12K lines): diplomatic-governance-models, treaty-governance-lifecycle, trade-governance-systems, international-financial-governance, global-commons-governance, sovereignty-models, international-organizations-governance-engine, and an international-collective-action-engine. Cross-border governance.

Justice-system modelling (libs/themis/justice/src): a judicial-system-architecture-engine, judicial-independence-framework, criminal-justice-governance-models, access-to-justice-governance, legal-traditions-comparison-engine, transitional-justice-governance-engine, and a reparations-governance-framework. Models legal institutions and traditions rather than running a court.

The governance knowledge base (libs/themis/knowledge/src, ~27K lines, the largest single library): taxonomies and comparison engines such as political-systems-taxonomy, electoral-systems-knowledge-base, governance-theory-engine, governance-pattern-library, governance-case-study-library, historical-governance-timeline, political-philosophy-knowledge-base, party-systems-and-competition-models, and several comparison/transition-analysis engines. The reference library the rest of the platform reasons against.

Lyric-similarity primitives (libs/themis/lyric-analysis/src): text-analysis, joint-analysis (combining lyric + audio signals), and filtering-thresholds. The lyrics analysis input to the music shield.

Melodic-similarity primitives (libs/themis/melodic-analysis/src): pitch-extraction, contour-analysis, ngram-matching, similarity-metrics, and an invariance module (transposition/tempo invariance). Music analysis input to the music shield.

Generative-model compliance controls (libs/themis/model-governance/src): license-verification, an opt-out-registry, membership-inference and verbatim-reproduction (memorization) tests, canary-testing, and a red-team-framework. Governs the training-data and memorization side of the models the Shield protects against.

The motion / animation shield (libs/themis/motion-shield/src): a choreography-database, pose-sequence-matching, joint-trajectory-comparison, dance-move-classification, performer-style-analysis, and a performer-consent-verification module. Covers choreography, performer style, and mocap consent.

The AI-music copyright shield (libs/themis/music-shield/src): a pipeline, a decision-engine, a validation-corpus, and the music-shield orchestrator. Composes the music analysis primitives (harmonic/melodic/rhythmic/spectral/ structural/vocal/lyric + audio-fingerprint) into a scan→score→review→publish gate.

Nonprofit and cooperative governance (libs/themis/nonprofit/src): managers for nonprofit-board, cooperative, benefit-corporation, grant, fiscal-sponsorship, and mondragon-federation governance. Mission-driven organization patterns.

The shared Shield evaluator core (libs/themis/originality-shields/src, ~364 lines). Exports the Zod media-family / upload-kind / decision schemas (passed / review / blocked), the ThemisOriginalityShieldVerdict shape, and buildThemisOriginalityShieldVerdict() — the single function every per-media shield delegates to with its own config. The common scoring/verdict contract the media shields are thin specializations of.

Policy analysis and computational law (libs/themis/policy/src): a policy-analysis-engine, policy-simulation-engine, regulatory-monitoring-system, and a computational-law-engine. The policy-lifecycle complement to @themis/constitutions.

Privacy-preserving governance (libs/themis/privacy/src): zk-anonymous-voting, maci-anti-collusion-infrastructure, private-delegation-engine, confidential-governance-channels, verifiable-offchain-governance, and a v2-data-subject-rights module. Implements the cryptographic-privacy and data-rights side of voting.

Provenance and audit-trail primitives (libs/themis/provenance/src, ~2.4K lines): a generation-recorder, scan-recorder, decision-audit-trail, content-hash, training-data-provenance, and provenance-export. Records the who/what/when of every generation and scan for downstream audit.

The originality reference database (libs/themis/reference-db/src, ~16K lines, 32 files): a Drizzle schema plus migrations and a deep set of ingestion pipelines — musicbrainz-ingestion, acoustid-ingestion, midi-ingestion, lyric-ingestion, audio-feature-ingestion, public-domain-ingestion — with deduplication, protectability-annotation, jurisdiction-mapping, release-monitoring, and a seed-pipeline. The corpus the music shields match against.

The remediation pipeline (libs/themis/remediation/src, ~5K lines): a remediation-orchestrator plus constrained-regeneration, harmonic-reharmonization, melody-variation, lyric-reformulation, vocal-modification, and prompt-risk-assessment. Clears originality flags while preserving creative intent rather than just rejecting content.

Reputation and delegate-trust engines (libs/themis/reputation/src): an eigentrust-reputation-engine, delegate-scoring-system, participation-analytics-engine, and reputation-portability-engine. Provides the trust weights that liquid/delegated voting relies on.

The human-review queue (libs/themis/review-pipeline/src): a review-queue, reviewer-assignment, comparison-tools, decision-recording, and sla-monitoring. The human-in-the-loop path for borderline (review-decision) originality assessments.

Rhythmic-similarity primitives (libs/themis/rhythmic-analysis/src): rhythm-extraction and rhythm-comparison. The rhythm-track analysis input to the music shield.

Legal-risk scoring (libs/themis/risk-scoring/src, 27 files): jurisdiction analyzers (us-copyright-analysis, uk-cdpa-analysis, eu-copyright-analysis), case-law/precedent-citation, moral-rights-assessment, compound-similarity, confidence-interval, threshold-calibration, multi-jurisdiction-aggregation, and a composite-scorer. Turns raw similarity into a legally-framed risk verdict.

Sector-specific governance (libs/themis/sectors/src, ~23K lines, the broadest applied library): financial-monetary-governance, health-system-governance, urban-municipal-governance, property-land-governance, media-governance-frameworks, military-security-governance, civil-society-advocacy-governance, representation-inclusion-governance, and behavioral-governance-design. One engine per industry vertical.

Shield monitoring and continuous-improvement primitives (libs/themis/shield-analytics/src): a false-positive-tracker, false-negative-tracker, threshold-tuning-engine, post-publication-monitor, legal-landscape-monitor, model-training-feedback, and a dashboard-data-provider. Closes the loop on detector accuracy.

The Shield's HTTP/WebSocket surface (libs/themis/shield-api/src, ~20K lines / ~11K non-spec): a server/main/worker trio, runtime-handlers, runtime-queue, runtime-health, realtime-websocket, webhooks, metrics, an openapi spec, and integration adapters for Calliope, Euterpe, and Isis. The public contract and integration surface for platform consumers of the Shield.

A small TypeScript SDK (libs/themis/shield-client/src, ~691 lines, single module) wrapping the @themis/shield-api operations (scan, quickScan, batchScan, getResult, remediate, lookupReference, submitReview, getProvenance, getHealth, getStats) behind a typed fetch client. A facade over the API types, not its own logic.

Governance simulation/stress-testing (libs/themis/simulation/src): a governance-agent-based-simulation-framework, constitutional-design-simulation-engine, governance-resilience-stress-testing-engine, and a library of governance-prebuilt-simulation-scenarios. Lets a design be tested before it is adopted.

Spectral / timbral primitives (libs/themis/spectral-analysis/src): spectral-extraction, timbral-fingerprinting, and sample-detection. Detects sampled/timbral reuse for the music shield.

Song-structure primitives (libs/themis/structural-analysis/src): section-segmentation, section-comparison, arrangement-analysis, energy-contour, and a structural-scorer. Compares overall arrangement for the music shield.

The text-originality shield (libs/themis/text-shield/src, 35 modules, ~10K lines): verbatim, near-duplicate, semantic, cross-language, source-attribution, common-phrase, narrative/quest-structure/ world-building/character-graph structural matchers, brand detection, a composite-scorer, and domain-adapters. Gates UGC names, logos, and championship text.

Non-Western and customary governance (libs/themis/traditional/src, ~13K lines): a customary-law-integration-framework, living-indigenous-governance-models, non-western-governance-operating-systems, religious-governance-models, and state-religion-governance-models. Models governance traditions outside the liberal-democratic default.

Transparency infrastructure (libs/themis/transparency/src): an immutable-governance-audit-trail, governance-open-data-portal, public-records-management, campaign-finance-transparency, and a lobbying-transparency-system. The public-visibility layer over governance records.

Treasury governance (libs/themis/treasury/src): a participatory-budget-governance-engine, spending-controls-engine, treasury-diversification-governance-engine, and a fiscal-transparency-dashboard. Governs how a collective's funds are allocated and controlled.

A TS library (libs/themis/universal-analytics/src/..., ~1,586 lines; description "Themis universal analytics primitives for cross-media shield monitoring") that is the observability and legal-watch layer over the cross-media shield. Three real modules sit under the index.ts barrel, all keyed on the nine-value THEMIS_UNIVERSAL_ANALYTICS_MEDIA_TYPES enum and the five-level pass → advisory → flag → high_risk → reject ladder shared with @themis/universal-risk-scoring. cross-media-dashboard-data-provider.ts records UniversalAnalyticsScanEvents into an in-memory store and computes real metrics — per-media false-positive/negative rates, cache-hit rate, average/p95/p99 latency percentiles, risk-level distributions, reference-work match summaries, and hour/day/week/month time-series buckets — while exportPrometheusMetrics() emits genuine Prometheus exposition text (themis_universal_scans_total, latency gauges, FP/FN rates). media-type-risk-comparison.ts ranks media types, model/domain pairs and reference works by flag rate, then derives baseline-vs -comparison trends with multiplier-gated warning/critical alerts. cross-media-legal-landscape-monitor.ts ingests deduplicated case-decision and legislative updates against a real hand-curated watchlist (Andersen v. Stability AI, Getty, NYT v. OpenAI, NO FAKES Act, ELVIS Act) and emits threshold-change recommendations. Honest caveats: state is in-memory and fed from outside, the legal monitor's UniversalLegalLandscapeSourceAdapter is an injectable seam with no real feed wired in, and describeThemisUniversalAnalytics() still reports scaffoldComplete: true.

A TS library (libs/themis/universal-provenance/src/index.ts, ~1.2K non-spec lines across three modules, ~1.8K with tests; description "Themis universal provenance primitives for cross-media generated content.") holding the cross-media audit-trail backbone for the Originality Shield. content-addressed-storage.ts is the core: SHA-256 content addressing for any payload (string, bytes, or canonicalUniversalJson of structured content), a UniversalContentHash of form sha256:<hex>, and an InMemoryUniversalContentAddressedStorage keeping content records plus an append-only, self-hashing provenance event log (appendEvent / getEventsByContentHash, each event carrying its own eventHash), with real verifyUniversalContentHash / verifyUniversalProvenanceEventHash checks. cross-media-project-linkage.ts links components (audio/lyrics/image/model_3d/character_profile/…) into one project, records per-component scans, and rolls up a UniversalProjectProvenanceView whose requiresCompoundReview fires when a project spans multiple media at ≥advisory risk. legal-discovery-interface.ts records generation, decision-chain and human-review provenance and answers a single-identifier query() with a full discovery response — including a completeness audit and a genuinely valid PDF-1.4 byte source from renderSimplePdfSource. Honest caveats: all three stores are InMemory* reference implementations (no DB persistence) and describeThemisUniversalProvenance() still reports scaffoldComplete: true. It is the cross-media generalisation of the legal-only @themis/provenance, paralleling how @themis/universal-risk-scoring generalises @themis/risk-scoring.

Cross-media reference-DB infrastructure (libs/themis/universal-reference-db/src, ~4.9K non-spec / ~7.5K total lines): a drizzle-schema, schema, and migrations, plus the population/ingestion modules character-reference-population, visual-reference-ingestion, face-reference-population, model-3d-reference-ingestion, text-reference-corpus, trademark-reference-population, and a unified-reference-query. The schema-plus-ingestion backbone for the non-music shields' reference indexes (more foundational than @themis/reference-db).

A TS library (libs/themis/universal-remediation/src/..., ~1,590 implementation lines across six modules; description "Themis universal remediation primitives for cross-media originality flags") that plans and drives the fix-and-rescan loop after the Originality Shields flag generated content. Four per-media engines — UniversalVisualRemediationEngine, UniversalTextRemediationEngine, UniversalVideoRemediationEngine, UniversalModel3DRemediationEngine — each take a scan summary on the pass→advisory→flag→high_risk→reject ladder, short-circuit to not_required when risk is low, otherwise map match types to deterministic operations (planTextRemediationOperations emits passage_rewrite/character_rename/plot_divergence; visual emits palette_shift/trademark_inpaint/negative_prompt_regeneration) and rescan up to maxRescanAttempts, returning cleared or still_flagged. UniversalRemediationOrchestrator dispatches by media type, escalates still_flagged→human_review through an injected escalator, and tracks per-media success-rate stats. It is honestly a scaffold — its descriptor self-reports scaffoldComplete: true. The control flow and operation-planning are real and deterministic, but no pixels, meshes, or audio are actually edited: engines emit asset descriptors (a contentToken string, negative-constraint prompt text, operationsApplied) and applyTextRemediation only inserts [rewritten passage…] placeholders. The detector that re-scores is an injected Scanner seam with nothing wired in, and only four of the nine enumerated media types have engines. It is the remediation counterpart to @themis/universal-risk-scoring.

A TS library (libs/themis/universal-review/src/..., ~1,293 lines; description "Themis universal human review primitives for cross-media originality assessments") providing the human-review layer of the Originality Shield. Three real modules sit under the index.ts barrel. universal-review-queue.ts owns triage: calculateUniversalReviewPriority() derives a 1–5 priority from risk level (reject/high_risk→1 … pass→5), then applies media escalators — celebrity_deepfake on visual/video, unconsented_face / memorized_training_sample, trademark_in_commerce, compound-media counts — with per-priority SLA due-dates (4h…7d) and an InMemoryUniversalReviewPriorityQueue that enqueues, locks, requeues timed-out locks, and completes. reviewer-pool-management.ts's UniversalReviewerPoolAssignmentEngine maps the nine media types to required expertise (adding ip_attorney for P1/high-risk/compound/trademark cases) and runs a greedy least-loaded set-cover over qualified reviewers, escalating on capacity_exhausted/no_qualified_reviewer/sla_breached. cross-media-review-interface.ts's API builds reviewer-UI payloads — synchronized playback, text-diff, split-screen, 3D overlay, motion timeline — plus route descriptors, failing loud via UniversalReviewInterfaceError. Honest caveats: describeThemisUniversalReview() still reports scaffoldComplete: true; the sole data source is in-memory, the queue is a BullMQ-shaped interface with an in-memory implementation (no broker wired), and diffTokens is a positional token compare, not a true LCS diff. It pairs with @themis/universal-risk-scoring: that lib scores risk, this one routes flagged work to qualified humans.

The cross-modality risk-aggregation kernel (libs/themis/universal-risk-scoring/src) that weights, combines, and classifies per-element risk signals across the eight media types it enumerates — visual, text, video, model_3d, character, motion, fashion, environment. Three real domain modules sit under the index.ts barrel. media-weight-tables.ts owns the weighting: a 34-value UniversalRiskWeightElement taxonomy (neural_embedding, trademark, memorization, verbatim, deepfake, trade_dress, choreography, …) and the per-media UNIVERSAL_RISK_WEIGHT_TABLES — e.g. visual weights neural_embedding/character at 0.25 and trademark at 0.10, text weights verbatim at 0.30 — with scoreUniversalRiskElements() returning the weight-table dot-product of a media type's element scores (rounded to six places) and assertUniversalRiskWeightTablesComplete() guarding table coverage. compound-risk-aggregation.ts owns the verdict: a five-level UNIVERSAL_RISK_LEVELS ladder (pass → advisory → flag → high_risk → reject) with UNIVERSAL_RISK_SCORE_THRESHOLDS, a classifyUniversalRiskScore() score→level mapper, and aggregateUniversalCompoundRisk() that rolls multiple per-media UniversalMediaRiskResults into one compound verdict. jurisdiction-rules.ts adds the legal overlay: UNIVERSAL_JURISDICTION_CODES (US/EU/UK), per-jurisdiction UNIVERSAL_JURISDICTION_RULES rule sets, and assessUniversalJurisdictionRisk() that re-weights a media result against a jurisdiction's rules. The describeThemisUniversalRiskScoring() descriptor still reports scaffoldComplete: true: this lib owns the weighting, aggregation, classification, and jurisdiction math and is fed per-element scores from outside — the detectors that produce those element scores (the work the per-media Shields do) are not wired in here. It is the generalisation of the legal-only @themis/risk-scoring into an all-media risk-aggregation surface.

The video-originality shield (libs/themis/video-shield/src, ~9K lines): frame-extraction, scene-boundary-detection, frame-visual-analysis, scene-embedding-comparison, shot-sequence-matching, montage-pattern-analysis, synthetic-video-detection, dialogue-comparison (speech-extraction), c2pa-provenance, and an audio-delegation to the music primitives. Gates V2 replay edits and championship media.

The visual-originality shield (libs/themis/visual-shield/src, 53 modules, ~19K lines — the largest shield): perceptual hashing, neural embeddings, face-embeddings/face-similarity, logos/trademark-text, style-attribution, deepfake-indicators, watermarks, memorization, protected-persons, character-recognition/character-silhouettes, plus Calliope and Isis integration modules. Scans V2 UGC decals, logos, and custom championships.

Vocal / voiceprint primitives (libs/themis/vocal-analysis/src): speaker-embedding, voice-print-construction, vocal-similarity, a voice-database, and an anti-impersonation module. Voice-likeness detection for the music shield.

The voting-systems library (libs/themis/voting/src): twelve tally/engine modules including ranked-choice-voting, condorcet-voting, approval-voting, quadratic-voting, token-weighted-voting, conviction-voting-engine, holographic-consensus, multi-sig-voting, vote-escrow-governance, optimistic-governance, delegation-engine, and a universal-ballot-system. Each implements its named electoral method rather than a generic counter.

A TS library (libs/themis/watermarking/src, ~2,600 lines across six modules; description "Themis content watermarking and authentication primitives for generated media") implementing the forensic-watermarking + provenance leg of the Originality Shield. invisible-image-watermark.ts is a real DCT mid-band spread-spectrum coder (8×8 luminance blocks, mulberry32-keyed block spreading, chip-summed correlation detection); invisible-audio-watermark.ts embeds spread-spectrum chips at an RMS-scaled amplitude and detects via per-bit SNR thresholding (mono + interleaved-multichannel); invisible-video-watermark.ts adds a temporal frame-mean channel plus per-frame fingerprints. Each carries a length-prefixed generationId/timestamp/modelId payload guarded by an FNV-1a checksum and magic word. c2pa-content-provenance.ts builds C2PA-style manifests with c2pa.actions, content-hash, and EU AI Act Article 50 disclosure assertions, signed with HMAC-SHA256 over canonical JSON (a symmetric platform-key scheme, not full X.509/COSE C2PA). watermark-extraction-service.ts fuses watermark + manifest evidence; leak-detection-pipeline.ts runs connectors → authorization policy → DMCA-notice/provenance/alert. Honest caveats: the index.ts descriptor still self-reports scaffoldComplete: true, and the leak pipeline's platform connectors (youtube_content_id, social_media_api, …) are injectable seams — only a static in-memory connector ships; real platform scanners plug in from outside.