Repository: mozilla/cargo-vet (language: python)

Issue:
Clarify which audits are recommended when `X` `implies` `Y` criteria
## Context

In my experience, engineers performing semi-automated crate updates are sometimes confused which criteria to audit for.  For example, an engineer may see the following message from `cargo vet`:

```
$ tools/crates/create_update_cl.py --no-upload single skrifa
...Updating skrifa@0.19.0 to a newer version...
$ tools/crates/run_cargo_vet.py check
...Vetting Failed!

1 unvetted dependencies:
  skrifa:0.19.1 missing ["safe-to-deploy", "crypto-safe", "ub-risk-2"]

recommended audits for safe-to-deploy, crypto-safe, ub-risk-2:
    Command                              Publisher  Used By   Audit Size
    cargo vet diff skrifa 0.19.0 0.19.1  rsheeter   chromium  12 files changed, 1317 insertions(+), 220 deletions(-)

estimated audit backlog: 1537 lines

Use |cargo vet certify| to record the audits.
```

The crate [has been previously audited](https://source.chromium.org/chromium/chromium/src/+/main:third_party/rust/chromium_crates_io/supply-chain/audits.toml;l=1171-1182;drc=d89e1c184ad53a7b09cf6f69f45a16e8b5695c98) as `does-not-implement-crypto` and `ub-risk-0` and the delta doesn't change those properties.  But `cargo vet`'s message recommends auditing for `crypto-safe` and `ub-risk-2` instead (which have a transitive `implies` relationship: `ub-risk-0` implies `ub-risk-1` which implies `ub-risk-2`; and `does-not-implement-crypto` implies `crypto-safe` - see [here](https://source.chromium.org/chromium/chromium/src/+/main:third_party/rust/chromium_crates_io/supply-chain/audits.toml;l=23-39;drc=d89e1c184ad53a7b09cf6f69f45a16e8b5695c98) and [here](https://source.chromium.org/chromium/chromium/src/+/main:third_party/rust/chromium_crates_io/supply-chain/audits.toml;l=21;drc=d89e1c184ad53a7b09cf6f69f45a16e8b5695c98)).

To reduce the confusion, we've tried to cover this in our documentation:

* https://github.com/google/rust-crate-audits/blob/main/auditing_standards.md#audits-should-be-as-precise-as-possible
* [`tools/crates/create_update_cl.md`](https://chromium-review.googlesource.com/c/chromium/src/+/5558983/2/tools/crates/create_update_cl.md):

    ```
    - Also note that `cargo vet` will list the _minimum_ required criteria
      and `audits.toml` can and should record stricter certification if
      possible. In particular:
         - Record `does-not-implement-crypto` instead of `crypto-safe` if the
           crate does not implement crypto.
         - Record a lower-numbered `ub-risk-N` if appropriate.    
    ```

But, it would be great if `cargo vet`'s output could also somehow be tweaked to avoid this kind of confusion (since the doc guidance is easy to miss, but the output of `cargo vet` is looked at each time a crate is updated).  Can we discuss if and how `cargo vet`'s output could be changed?

FWIW this confusion (in light of `does-not-implement-crypto` vs `crypto-safe`) has also been touched upon in https://github.com/mozilla/cargo-vet/issues/417 but that other issue focuses more on delta audit workflow surfacing the properties of the baseline audit.

## Concrete proposal

I would like to propose changing this part of the output:

    ```
    recommended audits for safe-to-deploy, crypto-safe, ub-risk-2:
    ```

Into:

    ```
    recommended audits for safe-to-deploy, crypto-safe (or does-not-implement-crypto), ub-risk-2 (or ub-risk-0, or ub-risk 1):
    ```

It seems possible to derive the new text based on the `implies` relationship that `cargo vet` already recognizes between the audit criteria.

I haven't yet tried looking at `cargo vet`'s source code to see where such change could be made.  Obviously we wouldn't want to change all criteria => string conversions - hopefully it won't be too difficult to identify which ones can use the new, expanded wording (?).

WDYT?


Discussion / hints:

Fix patch:
diff --git a/src/criteria.rs b/src/criteria.rs
index ac08ee56..86d40014 100644
--- a/src/criteria.rs
+++ b/src/criteria.rs
@@ -177,6 +177,16 @@ impl CriteriaMapper {
     pub fn criteria_index(&self, criteria_name: CriteriaStr<'_>) -> usize {
         self.index[criteria_name]
     }
+
+    /// Yields the indices for all criteria which imply the given criteria.
+    pub fn implied_by_indices(&self, criteria_idx: usize) -> impl Iterator<Item = usize> + '_ {
+        self.all_criteria_iter()
+            .enumerate()
+            .filter(move |&(idx, implies_set)| {
+                implies_set.has_criteria(criteria_idx) && criteria_idx != idx
+            })
+            .map(|(idx, _)| idx)
+    }
 }
 
 impl CriteriaSet {
diff --git a/src/resolver.rs b/src/resolver.rs
index 3990ee10..1c79cb57 100644
--- a/src/resolver.rs
+++ b/src/resolver.rs
@@ -1979,9 +1979,26 @@ impl<'a> ResolveReport<'a> {
 
         let mut suggestions_by_criteria = SortedMap::<CriteriaName, Vec<SuggestItem>>::new();
         for s in suggestions.clone().into_iter() {
+            // Generate a suggestion for which criteria to use for the given
+            // suggestion. For each criteria, also list out others which would
+            // imply the required criteria to surface the full set of options.
             let criteria_names = self
                 .criteria_mapper
-                .criteria_names(&s.suggested_criteria)
+                .minimal_indices(&s.suggested_criteria)
+                .map(|criteria_idx| {
+                    let name = self.criteria_mapper.criteria_name(criteria_idx);
+                    let implied_by = self
+                        .criteria_mapper
+                        .implied_by_indices(criteria_idx)
+                        .map(|idx| format!("or {}", self.criteria_mapper.criteria_name(idx)))
+                        .collect::<Vec<_>>();
+
+                    if implied_by.is_empty() {
+                        name.to_owned()
+                    } else {
+                        format!("{} ({})", name, implied_by.join(", "))
+                    }
+                })
                 .collect::<Vec<_>>()
                 .join(", ");
 


Test patch:
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.json.snap
index 6b202024..69ab6d86 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.json.snap
@@ -74,7 +74,7 @@ expression: json
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy)": [
         {
           "name": "dev-cycle",
           "notable_parents": "root",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.snap
index b7452f92..0d2d4302 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-cycle-unaudited.snap
@@ -12,7 +12,7 @@ recommended audits for safe-to-deploy:
     Command                          Publisher  Used By  Audit Size
     cargo vet inspect normal 10.0.0  UNKNOWN    root     100 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy):
     Command                             Publisher  Used By  Audit Size
     cargo vet inspect dev-cycle 10.0.0  UNKNOWN    root     100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.json.snap
index 645292c9..1dead9f1 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.json.snap
@@ -182,7 +182,7 @@ expression: json
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy)": [
         {
           "name": "dev-cycle-direct",
           "notable_parents": "root",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.snap
index c64965a4..8414a5b8 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty-deeper.snap
@@ -17,7 +17,7 @@ recommended audits for safe-to-deploy:
     cargo vet inspect both 10.0.0    UNKNOWN    root     100 lines
     cargo vet inspect normal 10.0.0  UNKNOWN    root     100 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy):
     Command                                       Publisher  Used By           Audit Size
     cargo vet inspect dev-cycle-direct 10.0.0     UNKNOWN    root              100 lines
     cargo vet inspect dev-cycle-indirect 10.0.0   UNKNOWN    dev-cycle-direct  100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.json.snap
index 645292c9..1dead9f1 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.json.snap
@@ -182,7 +182,7 @@ expression: json
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy)": [
         {
           "name": "dev-cycle-direct",
           "notable_parents": "root",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.snap
index c64965a4..8414a5b8 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-dev-detection-empty.snap
@@ -17,7 +17,7 @@ recommended audits for safe-to-deploy:
     cargo vet inspect both 10.0.0    UNKNOWN    root     100 lines
     cargo vet inspect normal 10.0.0  UNKNOWN    root     100 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy):
     Command                                       Publisher  Used By           Audit Size
     cargo vet inspect dev-cycle-direct 10.0.0     UNKNOWN    root              100 lines
     cargo vet inspect dev-cycle-indirect 10.0.0   UNKNOWN    dev-cycle-direct  100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.json.snap
index dbb32831..d64b945f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.json.snap
@@ -74,7 +74,7 @@ expression: json
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy)": [
         {
           "name": "third-dev",
           "notable_parents": "first",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.snap
index 33eba589..bbce7f28 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited-deeper.snap
@@ -12,7 +12,7 @@ recommended audits for safe-to-deploy:
     Command                                Publisher  Used By  Audit Size
     cargo vet inspect third-normal 10.0.0  UNKNOWN    first    100 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy):
     Command                             Publisher  Used By  Audit Size
     cargo vet inspect third-dev 10.0.0  UNKNOWN    first    100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.json.snap
index dbb32831..d64b945f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.json.snap
@@ -74,7 +74,7 @@ expression: json
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy)": [
         {
           "name": "third-dev",
           "notable_parents": "first",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.snap
index 33eba589..bbce7f28 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-haunted-no-unaudited.snap
@@ -12,7 +12,7 @@ recommended audits for safe-to-deploy:
     Command                                Publisher  Used By  Audit Size
     cargo vet inspect third-normal 10.0.0  UNKNOWN    first    100 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy):
     Command                             Publisher  Used By  Audit Size
     cargo vet inspect third-dev 10.0.0  UNKNOWN    first    100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.json.snap
index 702c4123..af6ab221 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.json.snap
@@ -214,7 +214,7 @@ expression: json
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy)": [
         {
           "name": "dev",
           "notable_parents": "root",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.snap
index dae9da34..b6d24cff 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__builtin-simple-deps-no-unaudited.snap
@@ -19,7 +19,7 @@ recommended audits for safe-to-deploy:
     cargo vet inspect normal 10.0.0            UNKNOWN    root     100 lines
     cargo vet inspect proc-macro 10.0.0        UNKNOWN    root     100 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy):
     Command                                  Publisher  Used By  Audit Size
     cargo vet inspect dev 10.0.0             UNKNOWN    root     100 lines
     cargo vet inspect dev-proc-macro 10.0.0  UNKNOWN    root     100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.json.snap
index 38c00cc1..82f667d0 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstB, thirdA, and thirdAB",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.snap
index b861ca6b..8b9efe84 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-strong-delta.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-core:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                             Publisher  Used By                      Audit Size
     cargo vet inspect third-core 5.0.0  UNKNOWN    firstB, thirdA, and thirdAB  25 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.json.snap
index c6c1d91e..7c523d78 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstB, thirdA, and thirdAB",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.snap
index 13300beb..4529666e 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak-via-weak-delta.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-core:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                 Publisher  Used By                      Audit Size
     cargo vet diff third-core 5.0.0 10.0.0  UNKNOWN    firstB, thirdA, and thirdAB  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.json.snap
index c6c1d91e..7c523d78 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstB, thirdA, and thirdAB",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.snap
index 13300beb..4529666e 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-partially-too-weak.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-core:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                 Publisher  Used By                      Audit Size
     cargo vet diff third-core 5.0.0 10.0.0  UNKNOWN    firstB, thirdA, and thirdAB  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.json.snap
index c6c1d91e..7c523d78 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstB, thirdA, and thirdAB",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.snap
index 13300beb..4529666e 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-core10-too-weak.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-core:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                 Publisher  Used By                      Audit Size
     cargo vet diff third-core 5.0.0 10.0.0  UNKNOWN    firstB, thirdA, and thirdAB  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.json.snap
index c6c1d91e..7c523d78 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstB, thirdA, and thirdAB",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.snap
index 13300beb..4529666e 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core10.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-core:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                 Publisher  Used By                      Audit Size
     cargo vet diff third-core 5.0.0 10.0.0  UNKNOWN    firstB, thirdA, and thirdAB  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.json.snap
index c4801170..9ed55840 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstA",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.snap
index c6c480d7..5fa75530 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-missing-core5.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-core:5.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                             Publisher  Used By  Audit Size
     cargo vet inspect third-core 5.0.0  UNKNOWN    firstA   25 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.json.snap
index f7055fac..1b396dcb 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.json.snap
@@ -102,7 +102,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-core",
           "notable_parents": "firstA",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.snap
index fd40be04..9d381c85 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-complex-no-unaudited.snap
@@ -10,7 +10,7 @@ Vetting Failed!
   thirdA:10.0.0 missing ["reviewed"]
   thirdAB:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                              Publisher  Used By                      Audit Size
     cargo vet inspect third-core 5.0.0   UNKNOWN    firstA                       25 lines
     cargo vet inspect third-core 10.0.0  UNKNOWN    firstB, thirdA, and thirdAB  100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.json.snap
index 8b594ee3..ba62f375 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.snap
index 23c18969..80c47552 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-overshoot.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                  Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 4.0.0  UNKNOWN    first-party  1 files changed, 9 deletions(-)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.json.snap
index 864db306..43a4a8ae 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.snap
index bd43e311..5a2b43b5 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-too-weak.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                   Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.json.snap
index 43af8d43..86af1967 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.snap
index d7db8b30..898007e3 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-full-audit-undershoot.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                  Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 7.0.0  UNKNOWN    first-party  1 files changed, 24 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.json.snap
index 20ff1eff..f5d0ef2f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.snap
index 55169dfd..b2353048 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-too-weak-full-audit.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                               Publisher  Used By      Audit Size
     cargo vet inspect third-party1 5.0.0  UNKNOWN    first-party  25 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.json.snap
index 8b594ee3..ba62f375 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.snap
index 23c18969..80c47552 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-overshoot.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                  Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 4.0.0  UNKNOWN    first-party  1 files changed, 9 deletions(-)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.json.snap
index 864db306..43a4a8ae 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.snap
index bd43e311..5a2b43b5 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-too-weak.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                   Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.json.snap
index 43af8d43..86af1967 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.snap
index d7db8b30..898007e3 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-delta-to-unaudited-undershoot.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                  Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 7.0.0  UNKNOWN    first-party  1 files changed, 24 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.json.snap
index b7919e8f..fee04e9d 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.snap
index 0e6472bc..08384680 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-and-lower-version-review.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                   Publisher  Used By      Audit Size
     cargo vet diff third-party1 9.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 19 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.json.snap
index 4c04f6d6..40c9daaa 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.snap
index 5d61c879..dbffdc61 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-higher-version-review.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                    Publisher  Used By      Audit Size
     cargo vet diff third-party1 11.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 21 deletions(-)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.json.snap
index b7919e8f..fee04e9d 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.snap
index 0e6472bc..08384680 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-lower-version-review.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                   Publisher  Used By      Audit Size
     cargo vet diff third-party1 9.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 19 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.json.snap
index f999ff2a..49c114b8 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.snap
index eefd2024..68d855bd 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-internal.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                Publisher  Used By      Audit Size
     cargo vet inspect third-party1 10.0.0  UNKNOWN    first-party  100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.json.snap
index 683c7327..a6893953 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party2",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.snap
index 2be92ebd..d573cb67 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-direct-leaf.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party2:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                Publisher  Used By      Audit Size
     cargo vet inspect third-party2 10.0.0  UNKNOWN    first-party  100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.json.snap
index b812b0e1..6e4bff9f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.json.snap
@@ -56,7 +56,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party2",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.snap
index a28b3fe3..a046f98e 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-leaves.snap
@@ -8,7 +8,7 @@ Vetting Failed!
   third-party2:10.0.0 missing ["reviewed"]
   transitive-third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                           Publisher  Used By       Audit Size
     cargo vet inspect third-party2 10.0.0             UNKNOWN    first-party   100 lines
     cargo vet inspect transitive-third-party1 10.0.0  UNKNOWN    third-party1  100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.json.snap
index 6c6255b6..33c4aa78 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "transitive-third-party1",
           "notable_parents": "third-party1",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.snap
index dc5a5d0e..bb030ab7 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-missing-transitive.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   transitive-third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                           Publisher  Used By       Audit Size
     cargo vet inspect transitive-third-party1 10.0.0  UNKNOWN    third-party1  100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.json.snap
index f999ff2a..49c114b8 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.snap
index eefd2024..68d855bd 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-needed-reversed-delta-to-unaudited.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                Publisher  Used By      Audit Size
     cargo vet inspect third-party1 10.0.0  UNKNOWN    first-party  100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.json.snap
index 8cc21249..e91b289f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.json.snap
@@ -79,7 +79,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.snap
index 4cc10ca8..49775a80 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-no-unaudited.snap
@@ -9,7 +9,7 @@ Vetting Failed!
   third-party2:10.0.0 missing ["reviewed"]
   transitive-third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                           Publisher  Used By       Audit Size
     cargo vet inspect third-party1 10.0.0             UNKNOWN    first-party   100 lines
     cargo vet inspect third-party2 10.0.0             UNKNOWN    first-party   100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.json.snap
index 6c6255b6..33c4aa78 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "transitive-third-party1",
           "notable_parents": "third-party1",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.snap
index dc5a5d0e..bb030ab7 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-reviewed-too-weakly.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   transitive-third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                           Publisher  Used By       Audit Size
     cargo vet inspect transitive-third-party1 10.0.0  UNKNOWN    third-party1  100 lines
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.json.snap
index 864db306..43a4a8ae 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.snap
index bd43e311..5a2b43b5 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-full-audit.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                   Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.json.snap
index 864db306..43a4a8ae 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.json.snap
@@ -33,7 +33,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.snap
index bd43e311..5a2b43b5 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock-simple-wrongly-reversed-delta-to-unaudited.snap
@@ -7,7 +7,7 @@ Vetting Failed!
 1 unvetted dependencies:
   third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                   Publisher  Used By      Audit Size
     cargo vet diff third-party1 5.0.0 10.0.0  UNKNOWN    first-party  1 files changed, 75 insertions(+)
 
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.json.snap
index 8cc21249..e91b289f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.json.snap
@@ -79,7 +79,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.snap
index 4cc10ca8..49775a80 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_no_mapping.snap
@@ -9,7 +9,7 @@ Vetting Failed!
   third-party2:10.0.0 missing ["reviewed"]
   transitive-third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                           Publisher  Used By       Audit Size
     cargo vet inspect third-party1 10.0.0             UNKNOWN    first-party   100 lines
     cargo vet inspect third-party2 10.0.0             UNKNOWN    first-party   100 lines
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.json.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.json.snap
index 8cc21249..e91b289f 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.json.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.json.snap
@@ -79,7 +79,7 @@ expression: json
       }
     ],
     "suggest_by_criteria": {
-      "reviewed": [
+      "reviewed (or strong-reviewed)": [
         {
           "name": "third-party1",
           "notable_parents": "first-party",
diff --git a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.snap b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.snap
index 4cc10ca8..49775a80 100644
--- a/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.snap
+++ b/src/tests/snapshots/cargo_vet__tests__vet__mock_simple_foreign_audited_pun_wrong_mapped.snap
@@ -9,7 +9,7 @@ Vetting Failed!
   third-party2:10.0.0 missing ["reviewed"]
   transitive-third-party1:10.0.0 missing ["reviewed"]
 
-recommended audits for reviewed:
+recommended audits for reviewed (or strong-reviewed):
     Command                                           Publisher  Used By       Audit Size
     cargo vet inspect third-party1 10.0.0             UNKNOWN    first-party   100 lines
     cargo vet inspect third-party2 10.0.0             UNKNOWN    first-party   100 lines
diff --git a/tests/snapshots/test_cli__test-project-suggest-json.snap b/tests/snapshots/test_cli__test-project-suggest-json.snap
index 217a0832..bf125097 100644
--- a/tests/snapshots/test_cli__test-project-suggest-json.snap
+++ b/tests/snapshots/test_cli__test-project-suggest-json.snap
@@ -2249,7 +2249,7 @@ stdout:
       }
     ],
     "suggest_by_criteria": {
-      "safe-to-deploy": [
+      "safe-to-deploy (or audited)": [
         {
           "name": "proc-macro2",
           "notable_parents": "test-project",
@@ -3787,7 +3787,7 @@ stdout:
           }
         }
       ],
-      "safe-to-run": [
+      "safe-to-run (or safe-to-deploy, or audited)": [
         {
           "name": "hermit-abi",
           "notable_parents": "atty",
diff --git a/tests/snapshots/test_cli__test-project-suggest.snap b/tests/snapshots/test_cli__test-project-suggest.snap
index ec700040..9526a0d9 100644
--- a/tests/snapshots/test_cli__test-project-suggest.snap
+++ b/tests/snapshots/test_cli__test-project-suggest.snap
@@ -3,7 +3,7 @@ source: tests/test-cli.rs
 expression: format_outputs(&output)
 ---
 stdout:
-recommended audits for safe-to-deploy:
+recommended audits for safe-to-deploy (or audited):
     Command                                               Publisher      Used By                                              Audit Size
     cargo vet diff proc-macro2 1.0.37 1.0.37@git:4445659b0f753a928059244c875a58bb12f791e9
                                                           UNKNOWN        test-project                                         3 files changed, 63 insertions(+), 7 deletions(-)
@@ -108,7 +108,7 @@ recommended audits for safe-to-deploy:
     cargo vet inspect web-sys 0.3.57                      alexcrichton   reqwest and wasm-bindgen-futures                     197013 lines
     cargo vet inspect encoding_rs 0.8.31                  hsivonen       reqwest                                              507245 lines
 
-recommended audits for safe-to-run:
+recommended audits for safe-to-run (or safe-to-deploy, or audited):
     Command                              Publisher  Used By  Audit Size
     cargo vet inspect hermit-abi 0.1.19  stlankes   atty     932 lines