fix(extract): read "has the same meaning as" statutory-import definitions

DEFINITION_MEANING_TAIL matched only the participle forms — `has the meaning
given|set forth|ascribed|assigned|…`. The common statutory/GDPR-import idiom
`"Controller" has the same meaning as in the GDPR` (and `… as set forth in the
DPA`) has the adjective "same" before "meaning" and the connector "as", so the
term went unregistered and STRUCT-006 falsely reported it as used-but-undefined.
Added an optional `same` adjective and an `as (in|set|used|defined|…)` connector
branch. Decoy guard: `has the same meaning` with no quoted subject (ordinary
prose) still defines nothing.

Zero golden churn (no corpus fixture uses this form). 2 regression tests.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: clay-good

README.md

@@ -4,7 +4,7 @@
 
 **Vaulytica is the second pair of eyes you can cite.**
 
-`1,111 deterministic rules` · `20 cross-document checks` · `5 pre-disclosure checks` · `3 execution-readiness reconciliations` · `5 derived-deadline families` · `16 document sub-domains` · `88 state-law overlays (non-compete · security deposit · usury · will formalities)` · `10 export formats` · `0 servers` · `0 AI` · `5,838 passing tests` · `v9.41.0` · `MIT`
+`1,111 deterministic rules` · `20 cross-document checks` · `5 pre-disclosure checks` · `3 execution-readiness reconciliations` · `5 derived-deadline families` · `16 document sub-domains` · `88 state-law overlays (non-compete · security deposit · usury · will formalities)` · `10 export formats` · `0 servers` · `0 AI` · `5,840 passing tests` · `v9.41.0` · `MIT`
 
 ![Vaulytica landing page — "Drop legal docs. Get a report. Nothing leaves your browser."](docs/images/hero.png)
 
@@ -1332,7 +1332,7 @@ npm run dev          # open the printed URL
 npm run build        # static site → dist/
 npm run typecheck    # tsc --noEmit
 npm run lint         # eslint
-npm run test         # vitest — 5,838 tests, ~35s
+npm run test         # vitest — 5,840 tests, ~35s
 npm run coverage     # vitest + V8 coverage, enforces the regression floor
 npm run accuracy     # v5 Ground Truth harness → tools/accuracy/SCOREBOARD.md
 npm run mutation     # Stryker mutation score (scoped to extractors; slow, off the per-push path)

src/extract/definitions.test.ts

@@ -551,6 +551,30 @@ describe("meaning-by-reference definitions", () => {
     );
     expect(map.entries).toHaveLength(0);
   });
+
+  it("registers a term defined with 'has the same meaning as' (statutory import)", () => {
+    const map = extractDefinitions(
+      buildTree([
+        "Definitions",
+        '"Sensitive Data Category" has the same meaning as in the GDPR.',
+        "Body",
+        "The processor treats each Sensitive Data Category with heightened care.",
+        "A Sensitive Data Category requires explicit consent.",
+      ]),
+    );
+    expect(map.entries.map((e) => e.term)).toContain("Sensitive Data Category");
+    expect(map.undefined_capitalized.map((e) => e.term)).not.toContain("Sensitive Data Category");
+  });
+
+  it("does not read 'has the same meaning' without a quoted subject as a definition", () => {
+    const map = extractDefinitions(
+      buildTree([
+        "Body",
+        "The word herein has the same meaning as it does in common usage everywhere.",
+      ]),
+    );
+    expect(map.entries).toHaveLength(0);
+  });
 });
 
 describe("construed-accordingly derivative terms", () => {

src/extract/definitions.ts

@@ -149,9 +149,12 @@ const DEFINITION_TRAILING_PARENTHETICAL =
  * otherwise defined herein shall have the meaning given in the MSA")
  * contributes nothing — its subject is not a Title-Case term list.
  * The tail tolerates periods inside numeric citations (`45 CFR § 160.103`).
+ * The `same` adjective + `as` connector cover the statutory-import idiom
+ * `"Controller" has the same meaning as in the GDPR` / `… as set forth in
+ * the DPA`, which the participle-only verb list missed.
  */
 const DEFINITION_MEANING_TAIL =
-  /\b(?:shall\s+|will\s+)?(?:each\s+)?ha(?:ve|s)\s+the\s+(?:respective\s+)?meanings?\s+(?:given|set\s+forth|set\s+out|ascribed|assigned|specified|defined|stated)\b(?:[^.;]|\.(?=\d))*/g;
+  /\b(?:shall\s+|will\s+)?(?:each\s+)?ha(?:ve|s)\s+the\s+(?:respective\s+|same\s+)?meanings?\s+(?:given|set\s+forth|set\s+out|ascribed|assigned|specified|defined|stated|as\s+(?:in|set|used|defined|given|ascribed|specified|that))\b(?:[^.;]|\.(?=\d))*/g;
 
 /**
  * The derivative-form convention: `"Processing" means …, and "Process" and