[spec-enforcer] Enforce specifications for jsonutil, scanfindings

[github-actions]

Specification Test Enforcement

This PR adds/updates specification-driven tests for the following packages:

Package	Tests Added	Tests Passing	Spec Sections Covered
jsonutil	2	2	Public API, Error handling, Usage examples
scanfindings	6	6	Types, Public API, Usage examples
actionpins	0	0	reviewed existing spec tests

Test Derivation

All tests are derived from README.md specifications, not from implementation source code.

Validation

• go build ./pkg/jsonutil/...
• go test -v -run 'TestSpec' ./pkg/jsonutil/
• go build ./pkg/scanfindings/...
• go test -v -run 'TestSpec' ./pkg/scanfindings/
• make fmt was attempted, but repository formatting could not complete because make fmt-cjs failed in this environment before the final aggregate target finished.

Spec-Implementation Mismatches

• scanfindings README.md documents exported Sort(findings []Finding) and CountAtLeast(findings []Finding, min SeverityLevel) int functions, but those exported functions are not present in the current package source. The generated spec test file records this as SPEC_MISMATCH.

Round-Robin State

• Run mode: round-robin
• Packages processed this run: actionpins, jsonutil, scanfindings
• Next packages in rotation: semverutil, setutil, sliceutil
• Total eligible packages: 36 (with README.md)

---

Auto-generated by Package Specification Enforcer workflow

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

Generated by 📋 Package Specification Enforcer · pi · gpt54 · 18 AIC · ⌖ 19.6 AIC · ⊞ 8.7K · ◷

• expires on Aug 30, 2026, 7:10 AM UTC-08:00