{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-80ed0a5b4bf93c91", "name": "Possibly dead Python function: visit_Call", "shortDescription": {"text": "Possibly dead Python function: visit_Call"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69a483a2c21a7a0e", "name": "Stray `console.log` in TS/JS \u2014 scripts/plugin/pre-uninstall.js:18", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/pre-uninstall.js:18"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c9e3c11be3c72fb4", "name": "Stray `console.log` in TS/JS \u2014 scripts/plugin/post-install.js:20", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/post-install.js:20"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4434161853dc93b7", "name": "Stray `console.log` in TS/JS \u2014 scripts/plugin/pre-install.js:19", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/pre-install.js:19"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb334cf0d9338aa3", "name": "Stray `console.log` in TS/JS \u2014 scripts/plugin/build-plugin.js:162", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/build-plugin.js:162"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-811b97a186553693", "name": "Stray `console.log` in TS/JS \u2014 scripts/learning/digest-builder.js:212", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/learning/digest-builder.js:212"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e4325234013fd51", "name": "Stray `console.log` in TS/JS \u2014 scripts/learning/observation-logger.js:200", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/learning/observation-logger.js:200"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d28580356fde5d77", "name": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-skills.js:177", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-skills.js:177"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be0f7d25da2ff607", "name": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-commands.js:123", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-commands.js:123"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c3049ec85a37bad", "name": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-agents.js:186", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-agents.js:186"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c597c1d6ec7f1b5", "name": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-rules.js:191", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-rules.js:191"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a10e4a1dec65491f", "name": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-hooks.js:315", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-hooks.js:315"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-efa96f3ce3479b5d", "name": "Stray `console.log` in TS/JS \u2014 scripts/ci/run-all.js:92", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/run-all.js:92"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ff349eeb4bd82f4", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/gitignored-claude-warn.js:40", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/gitignored-claude-warn.js:40"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1bb5eb6bfc502ffd", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/stop.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/stop.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-811d558f7f74236a", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-deployment.js:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-deployment.js:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13fa84d41fa85a71", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/coc-drift-warn.js:44", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/coc-drift-warn.js:44"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24f171e2278c276c", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/auto-format.js:21", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/auto-format.js:21"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44b40fb3fe75f62f", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/pre-compact.js:25", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/pre-compact.js:25"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-03bf2e718fed7120", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/coc-telemetry-autocommit.js:64", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/coc-telemetry-autocommit.js:64"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3bc193d4708647a", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-bash-command.js:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-bash-command.js:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dbe0c477a34cf99f", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-prod-deploy.js:52", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-prod-deploy.js:52"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d5d1898938edbba", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/session-end.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/session-end.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-021c6d577ba10edf", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/log-triage-gate.js:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/log-triage-gate.js:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cf75265ffa7e3e6", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/user-prompt-rules-reminder.js:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/user-prompt-rules-reminder.js:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f238f5ba0f31a68d", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/enforce-framework-first.js:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/enforce-framework-first.js:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac7f625e9a3f58ac", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/session-start.js:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/session-start.js:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8b5221099bba82e", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-workflow.js:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-workflow.js:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41b4f4f3c19dbf72", "name": "Stray `console.log` in TS/JS \u2014 .claude/hooks/integration-hygiene.js:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/integration-hygiene.js:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-717a797366e68868", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b2ba165b52e3e22", "name": "Privileged port 20 in use", "shortDescription": {"text": "Privileged port 20 in use"}, "fullDescription": {"text": "Port 20 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e05e73476b78fb6", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8bb68a2ba55de687", "name": "Privileged port 31 in use", "shortDescription": {"text": "Privileged port 31 in use"}, "fullDescription": {"text": "Port 31 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d10f08cf5b24ebca", "name": "Docker base image is tag-pinned but not digest-pinned: mcr.microsoft.com/devcontainers/base:ubuntu-24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: mcr.microsoft.com/devcontainers/base:ubuntu-24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2f1cddf8cbe14d3", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3644c9a24be003dd", "name": "Insecure pattern 'eval_used' in GEMINI.md:605", "shortDescription": {"text": "Insecure pattern 'eval_used' in GEMINI.md:605"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1aa78d4a14fdf8e7", "name": "Insecure pattern 'exec_used' in GEMINI.md:605", "shortDescription": {"text": "Insecure pattern 'exec_used' in GEMINI.md:605"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-28360e110d651457", "name": "Insecure pattern 'subprocess_shell_true' in GEMINI.md:605", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in GEMINI.md:605"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78c0e97c6b37a4a9", "name": "Insecure pattern 'eval_used' in AGENTS.md:591", "shortDescription": {"text": "Insecure pattern 'eval_used' in AGENTS.md:591"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-82751cb1f3cf4b08", "name": "Insecure pattern 'exec_used' in AGENTS.md:591", "shortDescription": {"text": "Insecure pattern 'exec_used' in AGENTS.md:591"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2ecfb8d863432fe2", "name": "Insecure pattern 'subprocess_shell_true' in AGENTS.md:591", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in AGENTS.md:591"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca5c45d5404985b8", "name": "Insecure pattern 'node_child_process' in scripts/plugin/build-plugin.js:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/plugin/build-plugin.js:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4550f15aa37301a3", "name": "Possible secret in scripts/deployment/deploy-tenant.sh", "shortDescription": {"text": "Possible secret in scripts/deployment/deploy-tenant.sh"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-fb0510ed80633375", "name": "Insecure pattern 'node_child_process' in scripts/ci/validate-hooks.js:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/ci/validate-hooks.js:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aebc61e67d3eea49", "name": "Insecure pattern 'node_child_process' in scripts/ci/run-all.js:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/ci/run-all.js:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97cb82f573eae5b3", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/scan-synced-disclosure/run.mjs:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/scan-synced-disclosure/run.mjs:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d73d93f274412431", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/codex-dispatcher/run.mjs:23", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/codex-dispatcher/run.mjs:23"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-582b9ca8b75e11fb", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/authorizatio", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/authorization-receipt/test.mjs:18"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1cebf20883879dd", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/validate-proximity-band/run.mjs:32", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/validate-proximity-band/run.mjs:32"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2181595441e9b424", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/forest-ledger/run.mjs:34", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/forest-ledger/run.mjs:34"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f477265731218c7f", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/coc-sync-description-normalize/run.mjs:23", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/coc-sync-description-normalize/run.mjs:23"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef4ec5b9d7cfa8f5", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/validate-extraction-history/run.mjs:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/validate-extraction-history/run.mjs:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4a9c789a01df1be", "name": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/strip-build-internal/run.mjs:35", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/strip-build-internal/run.mjs:35"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-934e2edb2f035274", "name": "Insecure pattern 'node_child_process' in .claude/hooks/signing-mutation-guard.js:91", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/signing-mutation-guard.js:91"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2032dbee2655cca8", "name": "Insecure pattern 'node_child_process' in .claude/hooks/gitignored-claude-warn.js:35", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/gitignored-claude-warn.js:35"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b7d32c73db1b050", "name": "Insecure pattern 'node_child_process' in .claude/hooks/coc-drift-warn.js:40", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/coc-drift-warn.js:40"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2611a47ba439c081", "name": "Insecure pattern 'node_child_process' in .claude/hooks/auto-format.js:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/auto-format.js:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c6ba1d1166151d0", "name": "Insecure pattern 'node_child_process' in .claude/hooks/coc-telemetry-autocommit.js:57", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/coc-telemetry-autocommit.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26021418a840b2df", "name": "Insecure pattern 'node_child_process' in .claude/hooks/integrity-guard.js:73", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/integrity-guard.js:73"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eee384772c7aed2c", "name": "Insecure pattern 'node_child_process' in .claude/hooks/validate-bash-command.js:215", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/validate-bash-command.js:215"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-038b609cc76ccb86", "name": "Insecure pattern 'node_child_process' in .claude/hooks/validate-prod-deploy.js:21", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/validate-prod-deploy.js:21"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8537d6e4544cd972", "name": "Insecure pattern 'node_child_process' in .claude/hooks/session-end.js:362", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/session-end.js:362"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26b9bc134ee773c2", "name": "Insecure pattern 'node_child_process' in .claude/hooks/log-triage-gate.js:22", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/log-triage-gate.js:22"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de5d808e2ea0349d", "name": "Insecure pattern 'node_child_process' in .claude/hooks/pre-commit-branch-scope.js:53", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/pre-commit-branch-scope.js:53"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-75d03103350bb574", "name": "Insecure pattern 'node_child_process' in .claude/hooks/multi-operator-sessionstart.js:57", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/multi-operator-sessionstart.js:57"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-710a1b21d2255afd", "name": "Insecure pattern 'node_child_process' in .claude/hooks/adjacency-leasecheck.js:68", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/adjacency-leasecheck.js:68"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18a865347dbf6042", "name": "Insecure pattern 'node_child_process' in .claude/hooks/fold-amendment-paired-with-helper.js:73", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/fold-amendment-paired-with-helper.js:73"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a7e650cf8e80d55", "name": "Insecure pattern 'node_child_process' in .claude/hooks/session-start.js:19", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/session-start.js:19"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-225b5ac36fd163a4", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/transport-git-ref.js:87", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/transport-git-ref.js:87"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d96bbf6cf2d925ab", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/release-drift.js:21", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/release-drift.js:21"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15d5ab47791a3189", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/sibling-porcelain.js:59", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/sibling-porcelain.js:59"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca397d74b2624d5d", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/codify-lease.js:65", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/codify-lease.js:65"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2eb8f567f99d8af", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/violation-patterns.js:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/violation-patterns.js:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76f42969023aaaf8", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/genesis-ceremony.js:1012", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/genesis-ceremony.js:1012"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53a06fb2bb82ad3f", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/state-io.js:27", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/state-io.js:27"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5afde919c15939af", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/version-utils.js:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/version-utils.js:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2558d1b4df4780f5", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/state-resolver.js:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/state-resolver.js:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-826fa49906b10caf", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/coc-sign.js:32", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/coc-sign.js:32"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-20ba409313ec1137", "name": "Insecure pattern 'node_child_process' in .claude/hooks/lib/operator-id.js:38", "shortDescription": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/operator-id.js:38"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b592aea0e7199025", "name": "Insecure pattern 'subprocess_shell_true' in .claude/skills/35-kailash-align/SKILL.md:109", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in .claude/skills/35-kailash-align/SKILL.md:109"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2425da2f852e32d0", "name": "Possible secret in .claude/skills/18-security-patterns/SKILL.md", "shortDescription": {"text": "Possible secret in .claude/skills/18-security-patterns/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-ceeb195d4ef942a2", "name": "Insecure pattern 'eval_used' in .claude/skills/18-security-patterns/SKILL.md:117", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/skills/18-security-patterns/SKILL.md:117"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27f7a010693e6b3c", "name": "Insecure pattern 'subprocess_shell_true' in .codex/skills/35-kailash-align/SKILL.md:109", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in .codex/skills/35-kailash-align/SKILL.md:109"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b4efa4d7b342735", "name": "Possible secret in .codex/skills/18-security-patterns/SKILL.md", "shortDescription": {"text": "Possible secret in .codex/skills/18-security-patterns/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-27f2a7f6f865bb90", "name": "Insecure pattern 'eval_used' in .codex/skills/18-security-patterns/SKILL.md:117", "shortDescription": {"text": "Insecure pattern 'eval_used' in .codex/skills/18-security-patterns/SKILL.md:117"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b841c61fdfcff569", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-076b03a16e76601d", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f54d0d3a389cb4de", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-868197c21c30495b", "name": "Very large file: .claude/hooks/lib/coordination-log.js (1814 lines)", "shortDescription": {"text": "Very large file: .claude/hooks/lib/coordination-log.js (1814 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7251bd9740a6dd85", "name": "Very large file: .claude/hooks/lib/violation-patterns.js (1156 lines)", "shortDescription": {"text": "Very large file: .claude/hooks/lib/violation-patterns.js (1156 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9de0826e910fbefb", "name": "Very large file: .claude/hooks/lib/genesis-ceremony.js (2234 lines)", "shortDescription": {"text": "Very large file: .claude/hooks/lib/genesis-ceremony.js (2234 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "7 test file(s) for 126 source file(s) (ratio 0.06). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 310 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 86 placeholder/mock markers across 13 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c104b36c9c323475", "name": "Agent instruction/config may expose a secret: GEMINI.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: GEMINI.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f06da9c0ab6c4a48", "name": "Agent instruction contains unpinned remote install: GEMINI.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: GEMINI.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cbb5857940ba0dc2", "name": "Agent instruction/config may expose a secret: AGENTS.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: AGENTS.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1d3fbc30bead412", "name": "Agent instruction contains unpinned remote install: AGENTS.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: AGENTS.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a0bac3c83705e71", "name": "Agent instruction/config may expose a secret: .claude/sync-manifest.yaml", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/sync-manifest.yaml"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-819bc6081d368dd4", "name": "Agent authority lacks a verifier contract: .claude/codex-templates/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/codex-templates/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ccaac6e0de94452", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbbd89d312f80b2e", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/02-pass-no-sibling/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/02-pass-no-sibling/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de53dda3fd69e90b", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/05-pass-signing-key-present/inp", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/05-pass-signing-key-present/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-acc9537f18cdc5f6", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/06-block-git-commit-degraded/in", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/06-block-git-commit-degraded/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e0f5a784b431a8b", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/01-block-sibling-porcelain/inpu", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/01-block-sibling-porcelain/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f62ef8e74bf9e05a", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/03-block-degraded-mode-mutation", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/03-block-degraded-mode-mutation/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c905a3dc53e4ca8", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/proximity-band-budget/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/proximity-band-budget/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22f56adef3b0ded0", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-read-only-passthr", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-read-only-passthrough.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-747c064ec0a70940", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-shell-variable-sk", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-shell-variable-skip.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0c487f47f5914dd", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-ssh-keygen-sign.j", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-ssh-keygen-sign.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04fcb783a35cd89b", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-git-push.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-git-push.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b189fb81eff1f0a", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03ec0f0a26c0f7f8", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/f77-settings-bad/.claude/settin", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/f77-settings-bad/.claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9337b6700e04f1cf", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/f77-settings-good/.claude/setti", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/f77-settings-good/.claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d62fb2db4fba9605", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/03-pass-branch-and-lease-match/input.j", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/03-pass-branch-and-lease-match/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-748cc2825fade737", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/01-block-non-codify-branch/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/01-block-non-codify-branch/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90ac0e1aa05a35fb", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/02-halt-no-lease-on-codify-branch/inpu", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/02-halt-no-lease-on-codify-branch/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c72920f2a85ac2bc", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/04-pass-unwatched-path/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/04-pass-unwatched-path/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a82feb178504707", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/06-structural-null-malformed-log/input", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/06-structural-null-malformed-log/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50a6bc066161635c", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/05-pass-foreign-codify-branch/input.js", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/05-pass-foreign-codify-branch/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10fe1d1b9e8ecc7b", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/08-filesystem-exception-negative/", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/08-filesystem-exception-negative/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c3d690057acc92a", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/07-filesystem-exception-positive/", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/07-filesystem-exception-positive/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c28c7c0abd307ef", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/04-watched-write-on-non-cwd-path/", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/04-watched-write-on-non-cwd-path/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd4e7df9323602cc", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/09-self-claim-no-self-conflict/in", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/09-self-claim-no-self-conflict/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30ae916ea9af4664", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/01-watched-edit-on-claimed-path/i", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/01-watched-edit-on-claimed-path/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31b0c9e6ba2bdd5c", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/evidence-first-claims/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/evidence-first-claims/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04027f929f52d7fb", "name": "Agent instruction contains unpinned remote install: .claude/audit-fixtures/evidence-first-claims/README.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/audit-fixtures/evidence-first-claims/README.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8f7260930328c82", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectCommitClaim/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectCommitClaim/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c58d5d6b0c7a55ec", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da7bdd6d2433584c", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-05-no-upstream-flat-consumer.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a193f40d3bd20c5", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-04-sibling-not-upstream.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d892c30942ebfcd", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-02-https-form-match.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6bae941f4e1d50c", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-03-slug-form-match.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73d0b7c21648cb6b", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-07-no-repo-flag.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ecbe14f83d869bb", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-01-ssh-form-match.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60909f7fe21f5fa8", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-r", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-06-cwd-basename-matches.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71508077ba6db155", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectStateFileMutation/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectStateFileMutation/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-525d504aee5204b6", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectSelfConfession/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectSelfConfession/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47a8d9722e55b3b1", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/probe-phase-guard/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/probe-phase-guard/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11cbdf8120454e0f", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/probe-phase-guard/03-pass-non-retrieval-tool/input.jso", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/probe-phase-guard/03-pass-non-retrieval-tool/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f659229ffc95adb", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/03-pass-self-reserved/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/03-pass-self-reserved/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-546cadc4e4fd1c73", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/04-halt-sibling-reserved/input.jso", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/04-halt-sibling-reserved/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0313942df5c792e0", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/05-pass-outside-repo/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/05-pass-outside-repo/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a912ba7557e8e3d", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/01-block-file-exists/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/01-block-file-exists/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce12d13a866753cb", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/02-halt-slot-unreserved/input.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/02-halt-slot-unreserved/input.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-074d93aff3da4915", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/codex-mcp-guard/flag-shell-force-push-main.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/codex-mcp-guard/flag-shell-force-push-main.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f1187158b6eadd4", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/codex-mcp-guard/flag-shell-rm-rf.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/codex-mcp-guard/flag-shell-rm-rf.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f1bb4809a028367", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-drift/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-drift/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9b42db3f7deae8c", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-artifact-hygiene/flag-claude-md-authority.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-artifact-hygiene/flag-claude-md-authority.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b073d844f5e3a70f", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-artifact-hygiene/flag-agent-syntax.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-artifact-hygiene/flag-agent-syntax.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d04dae47a0854f4", "name": "Agent authority lacks a verifier contract: .claude/audit-fixtures/validator-17-roster-schema-coupling/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/validator-17-roster-schema-coupling/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de1e5d2b2bcd57df", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/release.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/release.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb0849934f199589", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/ai.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/ai.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d40fc3b2e102ce75", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/repos.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/repos.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a8d224d9a61193d", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sync-to-build.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sync-to-build.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-208c4dbb0e3db9cb", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/deploy.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/deploy.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c8afa90abe0c2f2", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/cc-audit.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/cc-audit.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-264a1997a48b4322", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-audit.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-audit.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-725746a4febb79da", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/learn.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/learn.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55edaa30f367e742", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/settings.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/settings.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a3eac3b80d256aa", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/inspect.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/inspect.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e284883f3731db9", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/codify.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/codify.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f846c80dfca545b", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/validate.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/validate.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d32113df83b00ab", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/test.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/test.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0a573a0e0874418", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/ws.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/ws.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4cf744a91f658399", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-harden.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-harden.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71be0d5a51cc6f2b", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/todos.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/todos.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9c9aeb89acf925f", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/analyze.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/analyze.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c39c212faff62eee", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sdk.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sdk.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01f3d02a49a294ed", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-polish.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-polish.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7fa71fc717e1e050", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/redteam.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/redteam.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40bd39659f37047f", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/implement.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/implement.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4a325085bec553e", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/start.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/start.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b677c1dae32590ca", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/journal.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/journal.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c58b2e963cb5662", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sync.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sync.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d29d86c147b5076e", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/db.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/db.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8af8ded5fc215591", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/api.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/api.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a67a1437ae012339", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/wrapup.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/wrapup.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9b6472452a63bdd", "name": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/design.schema.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/design.schema.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dabb352063bfdb7", "name": "Agent authority lacks a verifier contract: .claude/gemini-templates/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gemini-templates/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d0e4551a30f6988", "name": "Agent authority lacks a verifier contract: .claude/gemini-templates/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/gemini-templates/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b6c45f3ea375b40", "name": "Agent instruction/config may expose a secret: .claude/rules/env-models.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/rules/env-models.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a0650c9cff79662", "name": "Agent instruction/config may expose a secret: .claude/rules/security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/rules/security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1a77c531b81868f", "name": "Agent instruction contains unpinned remote install: .claude/rules/evidence-first-claims.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/rules/evidence-first-claims.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81cc99b6e60dadbb", "name": "Agent instruction/config may expose a secret: .claude/rules/observability.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/rules/observability.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5a76b353d1fb5e8", "name": "Agent authority lacks a verifier contract: .claude/rules/time-pressure-discipline.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/time-pressure-discipline.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5543861bf3d40cbe", "name": "Agent authority lacks a verifier contract: .claude/rules/repo-scope-discipline.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/repo-scope-discipline.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bcae50fa6941d7b", "name": "Agent authority lacks a verifier contract: .claude/rules/framework-first.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/framework-first.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e24ff95381a38b9", "name": "Agent instruction/config may expose a secret: .claude/rules/llm-auth-strategy-hygiene.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/rules/llm-auth-strategy-hygiene.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a515192725d36e71", "name": "Agent instruction/config may expose a secret: .claude/rules/testing.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/rules/testing.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf901e9ccadbbb9f", "name": "Agent authority lacks a verifier contract: .claude/rules/trust-plane-security.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/trust-plane-security.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cbd7e18f8160e6ac", "name": "Agent authority lacks a verifier contract: .claude/rules/cross-cli-parity.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/cross-cli-parity.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12ec6ffd80037e6d", "name": "Agent authority lacks a verifier contract: .claude/fixtures/validator-13/expected-policies.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/fixtures/validator-13/expected-policies.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da825a160af1851d", "name": "Agent authority lacks a verifier contract: .claude/commands/certify.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/certify.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04479d44c57a7531", "name": "Agent authority lacks a verifier contract: .claude/commands/ws.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/ws.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-303c63bf840080d7", "name": "Agent authority lacks a verifier contract: .claude/commands/learn.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/learn.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b2a0803ddeae05d", "name": "Agent instruction/config may expose a secret: .claude/agents/codex-architect.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/codex-architect.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-26a5551eba420a8d", "name": "Agent authority lacks a verifier contract: .claude/agents/value-auditor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/value-auditor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be7cdf0f2157ec22", "name": "Agent instruction/config may expose a secret: .claude/agents/frameworks/align-specialist.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/agents/frameworks/align-specialist.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b869ea0f428546e", "name": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/custom-node-guide.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/custom-node-guide.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-093cfb8c49c7f215", "name": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/runtime-watchdog.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/runtime-watchdog.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6219d0bd0e5c65a4", "name": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/parameter-scoping.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/parameter-scoping.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab6158806f741f26", "name": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/enterprise-infrastructure.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/enterprise-infrastructure.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2e4f930edf6eaf9e", "name": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/pythoncode-best-practices.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/pythoncode-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2cea0f2e6a17c784", "name": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/kailash-imports.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/kailash-imports.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ce644ca84413eba", "name": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/production-readiness-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/production-readiness-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0d14e9457844fc04", "name": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/runtime-progress.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/runtime-progress.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0390984b17d94e2c", "name": "Agent instruction/config may expose a secret: .claude/skills/30-claude-code-patterns/parallel-merge-workflow.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/30-claude-code-patterns/parallel-merge-workflow.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1268aa8ad02d8572", "name": "Agent instruction/config may expose a secret: .claude/skills/30-claude-code-patterns/worktree-orchestration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/30-claude-code-patterns/worktree-orchestration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-964b66f60234bf53", "name": "Agent authority lacks a verifier contract: .claude/skills/15-enterprise-infrastructure/dialect-portable-sql.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/15-enterprise-infrastructure/dialect-portable-sql.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-100993ed118ae323", "name": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/progressive-infrastructure.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/progressive-infrastructure.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-68a417eb0fc95b11", "name": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/enterprise-tokens.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/enterprise-tokens.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6f89c26a2053ea12", "name": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/idempotency-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/idempotency-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-64e75ad21b1d12bf", "name": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/enterprise-tenancy.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/enterprise-tenancy.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2e48e159ab994cd6", "name": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d79a479760c769d3", "name": "Agent authority lacks a verifier contract: .claude/skills/35-kailash-align/align-serving.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/35-kailash-align/align-serving.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4216835109282b74", "name": "Agent authority lacks a verifier contract: .claude/skills/35-kailash-align/align-adapter-registry.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/35-kailash-align/align-adapter-registry.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58418400ebe659d9", "name": "Agent instruction/config may expose a secret: .claude/skills/06-python-bindings/python-v2-quickstart.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/06-python-bindings/python-v2-quickstart.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6229e81a64b288af", "name": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/python-available-nodes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/python-available-nodes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55279ad0595b98d6", "name": "Agent instruction/config may expose a secret: .claude/skills/06-python-bindings/python-migration-guide.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/06-python-bindings/python-migration-guide.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1695f7994a3f417c", "name": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/python-framework-bindings.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/python-framework-bindings.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a8f9a2e48cd9be2", "name": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/layered-truncation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/layered-truncation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d893b2d6b7dcb40a", "name": "Agent authority lacks a verifier contract: .claude/skills/34-kailash-ml/ml-training-pipeline.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/34-kailash-ml/ml-training-pipeline.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a6473a782658a5c", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-models.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-models.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58c5b90333c7454a", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-nexus-integration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-nexus-integration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-667c3ca716ec2cea", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-retention.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-retention.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-919403c4e70ad4e4", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-connection-config.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-connection-config.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9e18b696d22c3469", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-error-enhancer.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-error-enhancer.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8744cd463bb516bf", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-fabric-engine.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-fabric-engine.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f2594bc4bec3f789", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-cli-commands.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-cli-commands.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d6380b0bfec1880", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-multi-instance.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-multi-instance.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7213764bb763beb", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-debug-agent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-debug-agent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5f78553997692a9", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-queries.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-queries.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-694155995822e902", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-inspector.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-inspector.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30166af4485dcb3d", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-existing-database.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-existing-database.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5424398f9fad896", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-fabric-cache-consumers.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-fabric-cache-consumers.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb21698fba089505", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-multi-tenancy.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-multi-tenancy.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f59b27b9ae7ebc6b", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/numbered-migration-scaffold.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/numbered-migration-scaffold.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c1e6a06e1999e0c", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-aggregation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-aggregation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dbbd4f6be13a7ba", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-transactions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-transactions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ee98613659763e5", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-connection-isolation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-connection-isolation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be47f70e229f7418", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-migrations-quick.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-migrations-quick.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a4181381b612efc7", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-file-import.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-file-import.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5ed0622bf5e886d", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-result-access.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-result-access.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-170d971ef2a4363c", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-deployment.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-deployment.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c42fe9ebd4714abe", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-gotchas.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-gotchas.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-10e341624aaef5d2", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-dialects.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-dialects.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3def312f75323368", "name": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-advanced-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e886b8fd83a68b0", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-performance.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-performance.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-88b818862395fb56", "name": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-quickstart.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-quickstart.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-45e3bbde69894551", "name": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-transaction-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-transaction-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa41698015ce74a1", "name": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-ai-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-ai-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06027826a5a25725", "name": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-database-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-database-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37ba775718d6b110", "name": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-code-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-code-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afce1e0ca13bf700", "name": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-quick-index.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-quick-index.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1b9fc55dc187217", "name": "Agent instruction/config may expose a secret: .claude/skills/12-testing-strategies/testing-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/12-testing-strategies/testing-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c4df1eecfa8f6764", "name": "Agent instruction/config may expose a secret: .claude/skills/29-pact/governance-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/29-pact/governance-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ecb4c87ace99826", "name": "Agent authority lacks a verifier contract: .claude/skills/29-pact/pact-envelope-model.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/29-pact/pact-envelope-model.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749005864320cd5c", "name": "Agent instruction/config may expose a secret: .claude/skills/29-pact/pact-access-enforcement.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/29-pact/pact-access-enforcement.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e22b13f22cb40aa8", "name": "Agent authority lacks a verifier contract: .claude/skills/29-pact/pact-envelopes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/29-pact/pact-envelopes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0211e5a653a18ce", "name": "Agent authority lacks a verifier contract: .claude/skills/26-eatp-reference/eatp-posture-stores.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/26-eatp-reference/eatp-posture-stores.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1778d0dba4c633c", "name": "Agent instruction/config may expose a secret: .claude/skills/26-eatp-reference/eatp-sdk-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/26-eatp-reference/eatp-sdk-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15a786362eae5bc5", "name": "Agent authority lacks a verifier contract: .claude/skills/26-eatp-reference/eatp-security-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/26-eatp-reference/eatp-security-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce75f7c3f1b836cb", "name": "Agent instruction/config may expose a secret: .claude/skills/26-eatp-reference/eatp-sdk-quickstart.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/26-eatp-reference/eatp-sdk-quickstart.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-20b112b7b21fbfe2", "name": "Agent instruction/config may expose a secret: .claude/skills/05-enterprise/enterprise-tokens.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-enterprise/enterprise-tokens.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-32ed75d4bb13daa8", "name": "Agent instruction/config may expose a secret: .claude/skills/05-enterprise/enterprise-tenancy.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-enterprise/enterprise-tenancy.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27cdc20b5b9fa4e1", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/distributed-transactions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/distributed-transactions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a05bc219f1c8284e", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/asyncsql-advanced.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/asyncsql-advanced.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9395da38535728a7", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/query-routing.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/query-routing.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c13cab723d3e32ce", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/enterprise-mcp.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/enterprise-mcp.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f00b56ac73294963", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/directoryreader-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/directoryreader-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c35233d673209ab7", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/mcp-resource-subscriptions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/mcp-resource-subscriptions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f8a17a46d4bc609", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-848ea552d4e5ccb6", "name": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/production-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/production-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4263dc55360bc8a", "name": "Agent instruction/config may expose a secret: .claude/skills/06-cheatsheets/multi-tenancy-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/06-cheatsheets/multi-tenancy-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de1d4a0e0a24a3e3", "name": "Agent authority lacks a verifier contract: .claude/skills/33-gsf-cap/event-bus.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/33-gsf-cap/event-bus.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7299d85a837ed6df", "name": "Agent authority lacks a verifier contract: .claude/skills/33-gsf-cap/validation-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/33-gsf-cap/validation-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a9b3c12d891891e", "name": "Agent authority lacks a verifier contract: .claude/skills/31-l3-autonomy/plan-dag.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/31-l3-autonomy/plan-dag.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de38e815844bd5d2", "name": "Agent authority lacks a verifier contract: .claude/skills/31-l3-autonomy/messaging.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/31-l3-autonomy/messaging.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-628d701486281fff", "name": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-841542bd5ad6e275", "name": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-docker-quick.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-docker-quick.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9ec4bb2252eb6121", "name": "Agent instruction contains unpinned remote install: .claude/skills/10-deployment-git/ci-runner-troubleshooting.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/10-deployment-git/ci-runner-troubleshooting.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d576ace6fa2b7020", "name": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/project-management.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/project-management.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf26553305f608df", "name": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-kubernetes-quick.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0af96046bd6def53", "name": "Agent authority lacks a verifier contract: .claude/skills/10-deployment-git/deployment-kubernetes-quick.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-231afe75e86d9bb3", "name": "Agent instruction contains unpinned remote install: .claude/skills/management/release-workflow.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/management/release-workflow.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4714c7cdadff6dab", "name": "Agent authority lacks a verifier contract: .claude/skills/skill-authoring/proximity-band-named-rationale-template.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/skill-authoring/proximity-band-named-rationale-template.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdecb6007021179b", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-comparison.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-comparison.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04a81ecc59b306f7", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-workflow-registration.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-workflow-registration.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f1519ddcd15f977", "name": "Agent instruction/config may expose a secret: .claude/skills/03-nexus/nexus-security-best-practices.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/03-nexus/nexus-security-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eccc8ad60781627e", "name": "Agent instruction/config may expose a secret: .claude/skills/03-nexus/nexus-dataflow-integration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/03-nexus/nexus-dataflow-integration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b05e20bf7fe110fb", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-config-options.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-config-options.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa824dc6b25c66b0", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-api-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-api-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fc951534d182b36", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-plugins.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-plugins.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c64007242b1bcc1d", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-eventbus-phase2.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-eventbus-phase2.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8e2dab71088d555", "name": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-mcp-channel.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-mcp-channel.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f148c20871e4295", "name": "Agent authority lacks a verifier contract: .claude/skills/framework-first/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/framework-first/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6673bda6fbd29c8", "name": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3a4db01e722516c", "name": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-mocking-policy.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-mocking-policy.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94fe1393171c47ed", "name": "Agent authority lacks a verifier contract: .claude/skills/17-gold-standards/gold-absolute-imports.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/17-gold-standards/gold-absolute-imports.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-735fbb0671331909", "name": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-documentation.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-documentation.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-073d95caa2df0806", "name": "Agent authority lacks a verifier contract: .claude/skills/32-trust-posture/rule-authoring-checklist.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/32-trust-posture/rule-authoring-checklist.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7260769a2856ca90", "name": "Agent authority lacks a verifier contract: .claude/skills/32-trust-posture/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/32-trust-posture/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c08a1c3f438b72c6", "name": "Agent instruction/config may expose a secret: .claude/skills/32-kaizen-agents/protocols.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/32-kaizen-agents/protocols.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-10588b066ee0aa30", "name": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/constant-time-comparison-rs.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/constant-time-comparison-rs.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cb585378d2dffb84", "name": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/fail-closed-defaults-rs.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/fail-closed-defaults-rs.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b52fc31a2adea5d7", "name": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d280208bd53a3523", "name": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/network-security-rs.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/network-security-rs.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-930d2ad38fa155ff", "name": "Agent instruction contains unpinned remote install: .claude/skills/18-security-patterns/network-security-rs.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/18-security-patterns/network-security-rs.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc03d7b815e6f72b", "name": "Agent authority lacks a verifier contract: .claude/skills/41-onboard/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/41-onboard/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb5c3d30e19a3a98", "name": "Agent authority lacks a verifier contract: .claude/skills/16-validation-patterns/validate-dataflow-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/16-validation-patterns/validate-dataflow-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4e13603ee103609", "name": "Agent instruction/config may expose a secret: .claude/skills/16-validation-patterns/validate-security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/16-validation-patterns/validate-security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-70bdc346c37f8280", "name": "Agent instruction/config may expose a secret: .claude/skills/16-validation-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/16-validation-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b90dc9e2eeaa65b7", "name": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-server.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-server.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-da4b355b55b10b92", "name": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-platform-map.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-platform-map.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ba313af7f10ad85", "name": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-transports.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-transports.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c9115920b52cdc33", "name": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-advanced-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-92856b6a044c56a5", "name": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-advanced-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c4bbd7000089ef3", "name": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-authentication.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-authentication.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5c612e94c8a0815d", "name": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-platform-overview.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-platform-overview.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4edf0a3ed63538c6", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-orchestration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-orchestration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-abbbc7212a0ea6df", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-byok-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-byok-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c276034528c7f456", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-byok-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-byok-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18cbe216838914f1", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-budget-tracking.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-budget-tracking.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25540d03e83215f6", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-a2a.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-a2a.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3411f7252c857999", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-v1-features.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-v1-features.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7c3bb24e3f9d649", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-v1-features.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-v1-features.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-073b26093b6f5f01", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-ux-helpers.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-ux-helpers.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c36ec02c0b501769", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-observability.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-observability.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-67b1eff84c0f5563", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-structured-outputs.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-structured-outputs.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecebad56c756eca2", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-baseagent-quick.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-baseagent-quick.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12b82219e19679ab", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-overview.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-overview.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b1d6cd17df92438", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-agents-protocols.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-agents-protocols.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-074a5dcafff1078a", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-llm-providers.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-llm-providers.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02fcc763cd6d471b", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-structured-output.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-structured-output.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-090cbc3879f93bcf", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-chain-of-thought.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-chain-of-thought.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09bb4c1c7ebc9c8b", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-tools.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-tools.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ffb23f95a734b7a9", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-common-issues.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-common-issues.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-44f50bdc5b81dc1d", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-delegate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-delegate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78c22852e37feb06", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-catalog-server.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-catalog-server.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9e2b3ab89a080ba", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/l3-plan-dag.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/l3-plan-dag.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd87f2c350b1ebd4", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-agent-execution.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-agent-execution.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a2870dbfc301fdbd", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-agent-execution.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-agent-execution.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d02c4cf4bade1f4", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-trust-eatp.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-trust-eatp.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fe55c450c069290b", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-advanced-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f09998158c02481", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-multi-agent.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-multi-agent.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14818c406c289e6b", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-envelope.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-envelope.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eac1d43df480be00", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-factory.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-factory.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95ebd2ef40825cd5", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-rag-agent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-rag-agent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce47de45b1cec682", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-config-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-config-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-77c88c609becdd72", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-persistent-memory.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-persistent-memory.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c98ffd1662107d5", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-delegate-vs-baseagent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-delegate-vs-baseagent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90b42955f7133ae2", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/l3-messaging.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/l3-messaging.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6358195f864a6c31", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-cost-tracking.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-cost-tracking.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebb986a20a0bcecb", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26b232d42ac504ab", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-pipelines.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-pipelines.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b3a0944afae8d901", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-memory-system.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-memory-system.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b0cdb105b282874", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-quickstart-template.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-quickstart-template.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85f20462038d3285", "name": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-observability-hooks.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-observability-hooks.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b50f169e87268d9f", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-interrupt-mechanism.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-interrupt-mechanism.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38f77dee81bd3a68", "name": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-wrapper-composition.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-wrapper-composition.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c5739c2b1e76c0fa", "name": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-framework-bindings.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-framework-bindings.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc419380dc7c4bf3", "name": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-available-nodes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-available-nodes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-723d7b7821d66e07", "name": "Agent instruction/config may expose a secret: .claude/skills/28-ruby-bindings/ruby-eatp-trust.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/28-ruby-bindings/ruby-eatp-trust.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-82d179d0c7f06ae4", "name": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-dataflow.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-dataflow.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5922ee7301ffdac", "name": "Agent instruction/config may expose a secret: .claude/skills/10-governance/governance-trust-durability.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-governance/governance-trust-durability.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b899728ba0c737cd", "name": "Agent instruction/config may expose a secret: .claude/skills/10-governance/governance-verification-delegation.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-governance/governance-verification-delegation.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e701695cd66d267", "name": "Agent instruction/config may expose a secret: .claude/skills/31-error-troubleshooting/error-runtime-execution.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/31-error-troubleshooting/error-runtime-execution.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-338ce5a727855fdd", "name": "Agent authority lacks a verifier contract: .claude/skills/31-error-troubleshooting/error-v1-migration.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/31-error-troubleshooting/error-v1-migration.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-118daa4db10d0bcc", "name": "Agent instruction contains unpinned remote install: .claude/guides/codex/README.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/guides/codex/README.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a9a916f2464f35d", "name": "Agent instruction contains unpinned remote install: .claude/guides/gemini/README.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/guides/gemini/README.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50a4f1feeb0c505e", "name": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/12-troubleshooting.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/12-troubleshooting.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb22cba88fb37586", "name": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/07-the-hook-system.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/07-the-hook-system.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6bba3d2fc2c37c14", "name": "Agent authority lacks a verifier contract: .claude/guides/claude-code/README.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/guides/claude-code/README.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21424546a777b8e3", "name": "Agent instruction/config may expose a secret: .claude/guides/claude-code/10-daily-workflows.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/guides/claude-code/10-daily-workflows.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d6305eda6026884", "name": "Agent instruction/config may expose a secret: .claude/guides/claude-code/04-the-command-system.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/guides/claude-code/04-the-command-system.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-219e81e85083a864", "name": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/03-installation-and-first-run.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/03-installation-and-first-run.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-261232b1d91efef6", "name": "Agent instruction contains unpinned remote install: .claude/guides/rule-extracts/evidence-first-claims.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/guides/rule-extracts/evidence-first-claims.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a18e878712aa3f30", "name": "Agent authority lacks a verifier contract: .claude/guides/rule-extracts/observability.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/guides/rule-extracts/observability.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-28f598d109649153", "name": "Agent authority lacks a verifier contract: .claude/guides/rule-extracts/specs-authority.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/guides/rule-extracts/specs-authority.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0df38f23c424625", "name": "Agent instruction/config may expose a secret: .claude/guides/rule-extracts/zero-tolerance.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/guides/rule-extracts/zero-tolerance.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-22bb1fcb1abc95c1", "name": "Agent authority lacks a verifier contract: .codex/prompts/certify.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/prompts/certify.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-908ac932fce5c944", "name": "Agent authority lacks a verifier contract: .codex/prompts/ws.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/prompts/ws.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bf1fd4819c7f3bd", "name": "Agent instruction/config may expose a secret: .codex/prompts/specialist-align.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/prompts/specialist-align.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9e6d41a7496b6f30", "name": "Agent authority lacks a verifier contract: .codex/prompts/learn.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/prompts/learn.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a782ee73a301ef8", "name": "Agent authority lacks a verifier contract: .codex/prompts/specialist-value-auditor.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/prompts/specialist-value-auditor.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f64f5999aa0d3590", "name": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/custom-node-guide.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/custom-node-guide.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9a7bd42fd0920b3", "name": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/runtime-watchdog.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/runtime-watchdog.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21753a18c18b8010", "name": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/parameter-scoping.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/parameter-scoping.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-051ad27b7de6aa9b", "name": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/pythoncode-best-practices.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/pythoncode-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-175a8fa951ea28f9", "name": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/kailash-imports.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/kailash-imports.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e666fc26472dd56b", "name": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/production-readiness-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/production-readiness-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c86a6f81a85774f6", "name": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/runtime-progress.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/runtime-progress.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3dd90b38ab9b5fe8", "name": "Agent authority lacks a verifier contract: .codex/skills/15-enterprise-infrastructure/dialect-portable-sql.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/15-enterprise-infrastructure/dialect-portable-sql.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d03ebd6947b3f3f7", "name": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/progressive-infrastructure.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/progressive-infrastructure.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-049bb119f962e343", "name": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/idempotency-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/idempotency-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-682b619a23313225", "name": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0c7cefd09d3915c8", "name": "Agent authority lacks a verifier contract: .codex/skills/35-kailash-align/align-serving.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/35-kailash-align/align-serving.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b78449b80176421e", "name": "Agent authority lacks a verifier contract: .codex/skills/35-kailash-align/align-adapter-registry.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/35-kailash-align/align-adapter-registry.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebd6670ff55111ee", "name": "Agent authority lacks a verifier contract: .codex/skills/34-kailash-ml/ml-training-pipeline.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/34-kailash-ml/ml-training-pipeline.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab84257480c9c869", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-models.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-models.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-389a88908a658807", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-nexus-integration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-nexus-integration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-58632459aa94b628", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-retention.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-retention.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06bc82026e03a990", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-connection-config.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-connection-config.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-76ef175070221e3e", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-error-enhancer.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-error-enhancer.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4802159d299007c7", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-fabric-engine.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-fabric-engine.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6e2c9de72875a2d", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-cli-commands.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-cli-commands.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35cb4a5fc5a6261f", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-multi-instance.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-multi-instance.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0421e98281b332af", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-debug-agent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-debug-agent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03970c52f60d8f9d", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-queries.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-queries.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-241bf2dd185cc85b", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-inspector.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-inspector.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2f19ba4bf13bf00", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-existing-database.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-existing-database.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bfe326dcfe003933", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-fabric-cache-consumers.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-fabric-cache-consumers.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e2f9a198c6c2b93", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-multi-tenancy.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-multi-tenancy.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8bc5104eb50cc982", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-aggregation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-aggregation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71cc37a405bead76", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-transactions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-transactions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eff8a354f0a929d6", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-connection-isolation.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-connection-isolation.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa11931a60f7a000", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-migrations-quick.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-migrations-quick.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3c210c4c93b0fa4b", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-file-import.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-file-import.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74d173865058c1bc", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-result-access.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-result-access.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0839da618cf786c", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-deployment.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-deployment.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94a22c2515ca1f1e", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-gotchas.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-gotchas.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bb26deb7bc530659", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-dialects.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-dialects.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6339af1a9c5fa077", "name": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-advanced-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad798598b2a58571", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-performance.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-performance.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b083140abcd07080", "name": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-quickstart.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-quickstart.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-632db3c4006bd8ce", "name": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-transaction-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-transaction-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a50b5cfc485904fc", "name": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-ai-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-ai-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29a8d5b86add4c36", "name": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-database-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-database-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e0b47b6908e79646", "name": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-code-reference.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-code-reference.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-687112031c364af1", "name": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-quick-index.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-quick-index.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bf6b48d6c96818b", "name": "Agent instruction/config may expose a secret: .codex/skills/12-testing-strategies/testing-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/12-testing-strategies/testing-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af89eb6ea7a4844e", "name": "Agent instruction/config may expose a secret: .codex/skills/29-pact/pact-access-enforcement.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/29-pact/pact-access-enforcement.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31d1121fc3e5d168", "name": "Agent authority lacks a verifier contract: .codex/skills/29-pact/pact-envelopes.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/29-pact/pact-envelopes.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cef963e884c84b88", "name": "Agent authority lacks a verifier contract: .codex/skills/26-eatp-reference/eatp-posture-stores.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/26-eatp-reference/eatp-posture-stores.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9119e59cf862cdd5", "name": "Agent instruction/config may expose a secret: .codex/skills/26-eatp-reference/eatp-sdk-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/26-eatp-reference/eatp-sdk-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4499e81dd0919e1c", "name": "Agent authority lacks a verifier contract: .codex/skills/26-eatp-reference/eatp-security-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/26-eatp-reference/eatp-security-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2af55d1ee22a878", "name": "Agent instruction/config may expose a secret: .codex/skills/26-eatp-reference/eatp-sdk-quickstart.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/26-eatp-reference/eatp-sdk-quickstart.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-274ee83827c7a151", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/distributed-transactions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/distributed-transactions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0adafe6ee796ead", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/asyncsql-advanced.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/asyncsql-advanced.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-379f604384153d39", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/query-routing.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/query-routing.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5336b9c2832c3239", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/enterprise-mcp.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/enterprise-mcp.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79ba00f6fb143fb0", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/directoryreader-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/directoryreader-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dacf0782cd133801", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/mcp-resource-subscriptions.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/mcp-resource-subscriptions.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-999f6a0ad732b18b", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-999b59a9c2649d1d", "name": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/production-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/production-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3b450aaeefbd6b5", "name": "Agent instruction/config may expose a secret: .codex/skills/06-cheatsheets/multi-tenancy-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/06-cheatsheets/multi-tenancy-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-52936d1e8bab80c2", "name": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c5c7c9e94477597", "name": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-docker-quick.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-docker-quick.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f8b2941b33795548", "name": "Agent instruction contains unpinned remote install: .codex/skills/10-deployment-git/ci-runner-troubleshooting.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .codex/skills/10-deployment-git/ci-runner-troubleshooting.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9115e362c8e29a66", "name": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/project-management.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/project-management.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d2ad544a2ec967da", "name": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-kubernetes-quick.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e7c7f3558cd1ec0", "name": "Agent authority lacks a verifier contract: .codex/skills/10-deployment-git/deployment-kubernetes-quick.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb1729dfc0591540", "name": "Agent authority lacks a verifier contract: .codex/skills/skill-authoring/proximity-band-named-rationale-template.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/skill-authoring/proximity-band-named-rationale-template.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4dd6123825ccc0d5", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-comparison.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-comparison.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-181cfc16cf6b912f", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-workflow-registration.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-workflow-registration.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76a7dd04ea5646b4", "name": "Agent instruction/config may expose a secret: .codex/skills/03-nexus/nexus-security-best-practices.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/03-nexus/nexus-security-best-practices.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1200f43d4b8b7247", "name": "Agent instruction/config may expose a secret: .codex/skills/03-nexus/nexus-dataflow-integration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/03-nexus/nexus-dataflow-integration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-156eb111591e9c3d", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-config-options.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-config-options.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67424c2bded5808a", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-api-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-api-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79bbacc8808369ea", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-plugins.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-plugins.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ab8c6f93e22c6a0", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-eventbus-phase2.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-eventbus-phase2.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e97c67433ff2ce67", "name": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-mcp-channel.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-mcp-channel.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-20af1e6ef78bc381", "name": "Agent authority lacks a verifier contract: .codex/skills/framework-first/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/framework-first/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a21b169682d4a981", "name": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d7b524d566ee9f5", "name": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-mocking-policy.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-mocking-policy.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0e185015bd5999ac", "name": "Agent authority lacks a verifier contract: .codex/skills/17-gold-standards/gold-absolute-imports.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/17-gold-standards/gold-absolute-imports.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a4aa375b2834fae", "name": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-documentation.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-documentation.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bce023f9a9ea9b47", "name": "Agent authority lacks a verifier contract: .codex/skills/32-trust-posture/rule-authoring-checklist.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/32-trust-posture/rule-authoring-checklist.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4490f68f64d812c1", "name": "Agent authority lacks a verifier contract: .codex/skills/32-trust-posture/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/32-trust-posture/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d4a581d12af1b72e", "name": "Agent instruction/config may expose a secret: .codex/skills/18-security-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/18-security-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0be9a10924ef747", "name": "Agent authority lacks a verifier contract: .codex/skills/41-onboard/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/41-onboard/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f8e1a77c6e24f23", "name": "Agent authority lacks a verifier contract: .codex/skills/16-validation-patterns/validate-dataflow-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/16-validation-patterns/validate-dataflow-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6f7f41319c35939", "name": "Agent instruction/config may expose a secret: .codex/skills/16-validation-patterns/validate-security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/16-validation-patterns/validate-security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b3df9613b31cbd26", "name": "Agent instruction/config may expose a secret: .codex/skills/16-validation-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/16-validation-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-023d1cde0a05b408", "name": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-platform-map.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-platform-map.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a690f68a60ef0dc", "name": "Agent instruction/config may expose a secret: .codex/skills/05-kailash-mcp/mcp-advanced-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d715abc86d9a3f31", "name": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-advanced-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b531b448a658fc2a", "name": "Agent instruction/config may expose a secret: .codex/skills/05-kailash-mcp/mcp-authentication.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/05-kailash-mcp/mcp-authentication.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e8e0dcd2a2635152", "name": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-platform-overview.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-platform-overview.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b370c165ac39fec", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-orchestration.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-orchestration.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d26168cfe025a769", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-byok-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-byok-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1a2a5e87d9f7421b", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-byok-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-byok-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-578bf64ae250fc1c", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-budget-tracking.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-budget-tracking.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-70eecbf08f7082f5", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-v1-features.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-v1-features.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8d9a0d332a7b7617", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-v1-features.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-v1-features.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-957737628d0904fd", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-ux-helpers.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-ux-helpers.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-54b506a9e57b55df", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-observability.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-observability.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0decb1d599b3769b", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-structured-outputs.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-structured-outputs.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fd05500f6d4c17a", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-baseagent-quick.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-baseagent-quick.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d287f10a99d5ffb", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-overview.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-overview.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a237cda1019ce601", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-chain-of-thought.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-chain-of-thought.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bd5df7fb139bf02c", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-common-issues.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-common-issues.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-86ce4df4b00ad3cc", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-delegate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-delegate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b27a621e04076723", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-catalog-server.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-catalog-server.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1d8927f3963b432", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-agent-execution.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-agent-execution.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0bcddc5a1c6a81b4", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-agent-execution.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-agent-execution.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ca39262dfe3cc8e", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-trust-eatp.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-trust-eatp.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-76fba22f9bcbe6e8", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-advanced-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-advanced-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c629a67d7d2ca346", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-envelope.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-envelope.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55e9b127cc2a506e", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-factory.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-factory.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40124f3a84dec848", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-rag-agent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-rag-agent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b25dd387f499703", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-config-patterns.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-config-patterns.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6eb9c9443f44c5cd", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-persistent-memory.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-persistent-memory.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7bb8ef6eefb49b1", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-delegate-vs-baseagent.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-delegate-vs-baseagent.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c3bef48ccf665bc", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-cost-tracking.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-cost-tracking.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-350f8d73226a0ced", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66f3d4ee2522f256", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-memory-system.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-memory-system.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d910e5ae6d1e43ad", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-quickstart-template.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-quickstart-template.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97a152987fd84ae2", "name": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-observability-hooks.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-observability-hooks.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9e3895bb1a75999f", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-interrupt-mechanism.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-interrupt-mechanism.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3e7ee14706e5e6f", "name": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-wrapper-composition.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-wrapper-composition.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b3a93052c47e4454", "name": "Agent instruction/config may expose a secret: .codex/skills/31-error-troubleshooting/error-runtime-execution.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .codex/skills/31-error-troubleshooting/error-runtime-execution.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f3eb8ff183e2259", "name": "Agent authority lacks a verifier contract: .codex/skills/31-error-troubleshooting/error-v1-migration.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .codex/skills/31-error-troubleshooting/error-v1-migration.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-916116b7055a9271", "name": "Commented-code block (5 lines) in .claude/audit-fixtures/proximity-band-budget/rule-11-helper.mjs:4", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/proximity-band-budget/rule-11-helper.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20735aa870c20a1a", "name": "Commented-code block (6 lines) in .claude/audit-fixtures/scan-synced-disclosure/run.mjs:76", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/scan-synced-disclosure/run.mjs:76"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-965d99040842695c", "name": "Commented-code block (6 lines) in .claude/audit-fixtures/validate-emit/run.mjs:306", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/validate-emit/run.mjs:306"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5407c17c2fbe9a42", "name": "Commented-code block (5 lines) in .claude/audit-fixtures/codex-dispatcher/run.mjs:32", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/codex-dispatcher/run.mjs:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8dc4c18ea1e93df1", "name": "Commented-code block (5 lines) in .claude/audit-fixtures/validate-proximity-band/run.mjs:160", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/validate-proximity-band/run.mjs:160"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dad78982fc7d8fb8", "name": "Commented-code block (6 lines) in .claude/audit-fixtures/variant-overlay/run.mjs:123", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/variant-overlay/run.mjs:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6638ec1afdeb70c", "name": "Commented-code block (5 lines) in .claude/audit-fixtures/validate-xref-integrity/run.mjs:236", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/validate-xref-integrity/run.mjs:236"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95700020a38d7b30", "name": "Commented-code block (5 lines) in .claude/audit-fixtures/forest-ledger/run.mjs:156", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/forest-ledger/run.mjs:156"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c7fcb6a7337baf1", "name": "Commented-code block (6 lines) in .claude/audit-fixtures/validate-extraction-history/run.mjs:250", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/validate-extraction-history/run.mjs:250"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-da6a16bb1240707d", "name": "Commented-code block (8 lines) in .claude/audit-fixtures/strip-build-internal/run.mjs:4", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/audit-fixtures/strip-build-internal/run.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-445d855b46d23e76", "name": "Commented-code block (5 lines) in .claude/fixtures/validator-13/shape-c-mcp-return.fixture.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/fixtures/validator-13/shape-c-mcp-return.fixture.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8cb025fd87c67162", "name": "Commented-code block (5 lines) in .claude/fixtures/validator-13/shape-b-two-layer.fixture.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/fixtures/validator-13/shape-b-two-layer.fixture.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b3f87eaa5177bf65", "name": "Commented-code block (5 lines) in .claude/hooks/signing-mutation-guard.js:144", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/signing-mutation-guard.js:144"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea76b15e3f5bac3b", "name": "Commented-code block (5 lines) in .claude/hooks/journal-write-guard.js:75", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/journal-write-guard.js:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a9bd93044cbf0a40", "name": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/journal-write-guard.js:391", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/journal-write-guard.js:391"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-accbd2fbe21792d3", "name": "Commented-code block (5 lines) in .claude/hooks/detect-violations.js:26", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/detect-violations.js:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-be694c825d5583dc", "name": "Commented-code block (9 lines) in .claude/hooks/adjacency-heartbeat.js:72", "shortDescription": {"text": "Commented-code block (9 lines) in .claude/hooks/adjacency-heartbeat.js:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7cdfa914b1a6d5b9", "name": "Commented-code block (5 lines) in .claude/hooks/genesis-anchor-guard.js:103", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/genesis-anchor-guard.js:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c4b6eab91d868e2e", "name": "Commented-code block (5 lines) in .claude/hooks/provenance-capture-tool.js:79", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/provenance-capture-tool.js:79"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ef3a424b902914a8", "name": "Commented-code block (7 lines) in .claude/hooks/integrity-guard.js:117", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/integrity-guard.js:117"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-779543d80b9d94d1", "name": "Commented-code block (8 lines) in .claude/hooks/validate-bash-command.js:93", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/hooks/validate-bash-command.js:93"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-da9481605fe5a33f", "name": "Commented-code block (6 lines) in .claude/hooks/posture-gate.js:162", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/posture-gate.js:162"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-60717ada302768f7", "name": "Commented-code block (7 lines) in .claude/hooks/session-end.js:307", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/session-end.js:307"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f17ae9b6a21105a", "name": "Commented-code block (5 lines) in .claude/hooks/multi-operator-sessionend.js:165", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/multi-operator-sessionend.js:165"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-816c7ae77ce83de5", "name": "Commented-code block (5 lines) in .claude/hooks/log-triage-gate.js:61", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/log-triage-gate.js:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e39db6e05765f946", "name": "Commented-code block (5 lines) in .claude/hooks/user-prompt-rules-reminder.js:125", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/user-prompt-rules-reminder.js:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6698380f13d2a1b1", "name": "Commented-code block (7 lines) in .claude/hooks/multi-operator-sessionstart.js:138", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/multi-operator-sessionstart.js:138"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-816a039f98d87b80", "name": "Commented-code block (5 lines) in .claude/hooks/adjacency-leasecheck.js:381", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/adjacency-leasecheck.js:381"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dd77b6fef91936b5", "name": "Commented-code block (6 lines) in .claude/hooks/operator-gate.js:186", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/operator-gate.js:186"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dd6dcffc358a6b33", "name": "Commented-code block (19 lines) in .claude/hooks/fold-amendment-paired-with-helper.js:100", "shortDescription": {"text": "Commented-code block (19 lines) in .claude/hooks/fold-amendment-paired-with-helper.js:100"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3472d1a0d39b0bb2", "name": "Commented-code block (5 lines) in .claude/hooks/validate-workflow.js:865", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/validate-workflow.js:865"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3244e5d048f7249a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/integration-hygiene.js:13", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/integration-hygiene.js:13"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3559505eb8ea5638", "name": "Commented-code block (5 lines) in .claude/hooks/lib/ado-login.js:42", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/ado-login.js:42"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c482068125223903", "name": "Commented-code block (6 lines) in .claude/hooks/lib/fold-rule-9b.js:57", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/fold-rule-9b.js:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c3a91515440ef179", "name": "Commented-code block (6 lines) in .claude/hooks/lib/transport-git-ref.js:130", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/transport-git-ref.js:130"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-74e58d4c8f2a712c", "name": "Commented-code block (5 lines) in .claude/hooks/lib/coordination-log.js:116", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/coordination-log.js:116"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-281b346afb5f5113", "name": "Commented-code block (11 lines) in .claude/hooks/lib/coc-append.js:120", "shortDescription": {"text": "Commented-code block (11 lines) in .claude/hooks/lib/coc-append.js:120"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2844584fb7470f32", "name": "Commented-code block (5 lines) in .claude/hooks/lib/transport-filesystem.js:110", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/transport-filesystem.js:110"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3481aecf6ebcc9d0", "name": "Commented-code block (6 lines) in .claude/hooks/lib/learning-utils.js:88", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/learning-utils.js:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-985dd3e5ed4cd201", "name": "Commented-code block (6 lines) in .claude/hooks/lib/sibling-porcelain.js:117", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/sibling-porcelain.js:117"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-062465a37a265e53", "name": "Commented-code block (5 lines) in .claude/hooks/lib/reap-ceremony.js:117", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/reap-ceremony.js:117"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9f5b72a543537ea", "name": "Commented-code block (16 lines) in .claude/hooks/lib/codify-lease.js:359", "shortDescription": {"text": "Commented-code block (16 lines) in .claude/hooks/lib/codify-lease.js:359"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-81dfa1cc13d23325", "name": "Commented-code block (8 lines) in .claude/hooks/lib/violation-patterns.js:189", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/hooks/lib/violation-patterns.js:189"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d592ecda515d176", "name": "Commented-code block (6 lines) in .claude/hooks/lib/journal-classifier.js:76", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/journal-classifier.js:76"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c120cc0570bd879b", "name": "Commented-code block (5 lines) in .claude/hooks/lib/adjacency.js:291", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/adjacency.js:291"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4989caee4e9ad0d7", "name": "Commented-code block (7 lines) in .claude/hooks/lib/provenance-event.js:41", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/provenance-event.js:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f327136eb3f6245e", "name": "Commented-code block (5 lines) in .claude/hooks/lib/vcs-github-adapter.js:148", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/vcs-github-adapter.js:148"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e47ae20d0edfe338", "name": "Commented-code block (5 lines) in .claude/hooks/lib/genesis-ceremony.js:54", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/genesis-ceremony.js:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7c85803471960e42", "name": "Commented-code block (9 lines) in .claude/hooks/lib/state-io.js:43", "shortDescription": {"text": "Commented-code block (9 lines) in .claude/hooks/lib/state-io.js:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-282e50c56c8b6bd8", "name": "Commented-code block (7 lines) in .claude/hooks/lib/state-file-write-guard.js:32", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/state-file-write-guard.js:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f0176e837088b60b", "name": "Commented-code block (6 lines) in .claude/hooks/lib/fold-genesis-anchor.js:105", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/fold-genesis-anchor.js:105"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0950cba62d955089", "name": "Commented-code block (7 lines) in .claude/hooks/lib/github-login.js:128", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/github-login.js:128"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f347efe642793373", "name": "Commented-code block (7 lines) in .claude/hooks/lib/recovery-fallback.js:194", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/recovery-fallback.js:194"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6962506e0e071cb8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/lib/recovery-fallback.js:234", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/lib/recovery-fallback.js:234"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2f06bca9b3fda30", "name": "Commented-code block (5 lines) in .claude/hooks/lib/version-utils.js:213", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/version-utils.js:213"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e6b02cdb5c1dd10", "name": "Commented-code block (6 lines) in .claude/hooks/lib/template-resolver.js:48", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/template-resolver.js:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-56632254d054f05c", "name": "Commented-code block (5 lines) in .claude/hooks/lib/session-notes-layout.js:50", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/session-notes-layout.js:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7f564eae1e0097a1", "name": "Commented-code block (12 lines) in .claude/hooks/lib/posture-v2.js:248", "shortDescription": {"text": "Commented-code block (12 lines) in .claude/hooks/lib/posture-v2.js:248"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6464ede04bd81116", "name": "Commented-code block (7 lines) in .claude/hooks/lib/operator-id.js:84", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/operator-id.js:84"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8a443983100a44c", "name": "Commented-code block (21 lines) in .claude/hooks/lib/fold-rule-9c.js:59", "shortDescription": {"text": "Commented-code block (21 lines) in .claude/hooks/lib/fold-rule-9c.js:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f089cb693d37997c", "name": "Commented-code block (7 lines) in .claude/hooks/lib/fold-posture-event.js:28", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/fold-posture-event.js:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a89b239c92f458f", "name": "Commented-code block (5 lines) in .claude/hooks/lib/owner-depart-ceremony.js:151", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/owner-depart-ceremony.js:151"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e64f38238ca7960e", "name": "Commented-code block (5 lines) in .claude/hooks/lib/vcs-azure-adapter.js:205", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/vcs-azure-adapter.js:205"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3270aea27d2ac1b9", "name": "Commented-code block (7 lines) in .claude/hooks/lib/fold-rule-10.js:125", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/fold-rule-10.js:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8f86143649d216b9", "name": "Commented-code block (7 lines) in .claude/hooks/lib/provenance-ledger.js:226", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/provenance-ledger.js:226"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9554ce61eb45f30f", "name": "Commented-code block (5 lines) in .claude/hooks/lib/gate-approval.js:293", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/gate-approval.js:293"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-efa32d74190064a2", "name": "Commented-code block (8 lines) in .claude/hooks/lib/roster-schema-validate.js:63", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/hooks/lib/roster-schema-validate.js:63"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-720cf78dac65a34b", "name": "Commented-code block (5 lines) in .claude/hooks/lib/owner-add-ceremony.js:30", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/owner-add-ceremony.js:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dba50d769271a0c9", "name": "Commented-code block (8 lines) in .claude/hooks/lib/instruct-and-wait.js:108", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/hooks/lib/instruct-and-wait.js:108"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e42c066ff82c507", "name": "Commented-code block (7 lines) in .claude/hooks/lib/derive-n.js:41", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/derive-n.js:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-211689d6efb6dd49", "name": "Commented-code block (5 lines) in .claude/hooks/lib/fold-rule-reap.js:259", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/fold-rule-reap.js:259"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21005"}, "properties": {"repository": "terrene-foundation/kailash-coc-rs", "repoUrl": "https://github.com/terrene-foundation/kailash-coc-rs", "branch": "main"}, "results": [{"ruleId": "scanner-80ed0a5b4bf93c91", "level": "note", "message": {"text": "Possibly dead Python function: visit_Call"}, "properties": {"repobilityId": "83d516a32f6d02f1", "scanner": "scanner-primary", "fingerprint": "80ed0a5b4bf93c91", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/maintenance/refactor-pythoncode-to-functions.py:37"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69a483a2c21a7a0e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/pre-uninstall.js:18"}, "properties": {"repobilityId": "afc89989df0c86e4", "scanner": "scanner-primary", "fingerprint": "69a483a2c21a7a0e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c9e3c11be3c72fb4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/post-install.js:20"}, "properties": {"repobilityId": "1c8479969682c3f7", "scanner": "scanner-primary", "fingerprint": "c9e3c11be3c72fb4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4434161853dc93b7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/pre-install.js:19"}, "properties": {"repobilityId": "6e35f2a372cbb781", "scanner": "scanner-primary", "fingerprint": "4434161853dc93b7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fb334cf0d9338aa3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/plugin/build-plugin.js:162"}, "properties": {"repobilityId": "f974be8e7ea4cc1d", "scanner": "scanner-primary", "fingerprint": "fb334cf0d9338aa3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-811b97a186553693", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/learning/digest-builder.js:212"}, "properties": {"repobilityId": "132760516c066939", "scanner": "scanner-primary", "fingerprint": "811b97a186553693", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0e4325234013fd51", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/learning/observation-logger.js:200"}, "properties": {"repobilityId": "3a7fe3710da202d1", "scanner": "scanner-primary", "fingerprint": "0e4325234013fd51", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d28580356fde5d77", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-skills.js:177"}, "properties": {"repobilityId": "82e9766b321155fc", "scanner": "scanner-primary", "fingerprint": "d28580356fde5d77", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-be0f7d25da2ff607", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-commands.js:123"}, "properties": {"repobilityId": "7ebbcb11184dd266", "scanner": "scanner-primary", "fingerprint": "be0f7d25da2ff607", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1c3049ec85a37bad", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-agents.js:186"}, "properties": {"repobilityId": "a4a932afaf986e60", "scanner": "scanner-primary", "fingerprint": "1c3049ec85a37bad", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8c597c1d6ec7f1b5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-rules.js:191"}, "properties": {"repobilityId": "22154611d485cc60", "scanner": "scanner-primary", "fingerprint": "8c597c1d6ec7f1b5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a10e4a1dec65491f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/validate-hooks.js:315"}, "properties": {"repobilityId": "9c480b3590106404", "scanner": "scanner-primary", "fingerprint": "a10e4a1dec65491f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-efa96f3ce3479b5d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/ci/run-all.js:92"}, "properties": {"repobilityId": "440e85a9b48a0f69", "scanner": "scanner-primary", "fingerprint": "efa96f3ce3479b5d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0ff349eeb4bd82f4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/gitignored-claude-warn.js:40"}, "properties": {"repobilityId": "d6b7c770ac89ddcb", "scanner": "scanner-primary", "fingerprint": "0ff349eeb4bd82f4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1bb5eb6bfc502ffd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/stop.js:26"}, "properties": {"repobilityId": "204cc8673b056ccb", "scanner": "scanner-primary", "fingerprint": "1bb5eb6bfc502ffd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-811d558f7f74236a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-deployment.js:37"}, "properties": {"repobilityId": "abca3637efe852c6", "scanner": "scanner-primary", "fingerprint": "811d558f7f74236a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-13fa84d41fa85a71", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/coc-drift-warn.js:44"}, "properties": {"repobilityId": "68ecc6cb0c4f0c57", "scanner": "scanner-primary", "fingerprint": "13fa84d41fa85a71", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-24f171e2278c276c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/auto-format.js:21"}, "properties": {"repobilityId": "592d326d84ad7e4a", "scanner": "scanner-primary", "fingerprint": "24f171e2278c276c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-44b40fb3fe75f62f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/pre-compact.js:25"}, "properties": {"repobilityId": "b8943bb38c44af60", "scanner": "scanner-primary", "fingerprint": "44b40fb3fe75f62f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-03bf2e718fed7120", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/coc-telemetry-autocommit.js:64"}, "properties": {"repobilityId": "554a94a69309e74d", "scanner": "scanner-primary", "fingerprint": "03bf2e718fed7120", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e3bc193d4708647a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-bash-command.js:29"}, "properties": {"repobilityId": "9b16ccbc8f1b7b4d", "scanner": "scanner-primary", "fingerprint": "e3bc193d4708647a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dbe0c477a34cf99f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-prod-deploy.js:52"}, "properties": {"repobilityId": "17e52283062d0e23", "scanner": "scanner-primary", "fingerprint": "dbe0c477a34cf99f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3d5d1898938edbba", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/session-end.js:26"}, "properties": {"repobilityId": "155fe20fbe3fbac2", "scanner": "scanner-primary", "fingerprint": "3d5d1898938edbba", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-021c6d577ba10edf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/log-triage-gate.js:29"}, "properties": {"repobilityId": "4bb9f38648f6050c", "scanner": "scanner-primary", "fingerprint": "021c6d577ba10edf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6cf75265ffa7e3e6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/user-prompt-rules-reminder.js:33"}, "properties": {"repobilityId": "df3d31cfa355555d", "scanner": "scanner-primary", "fingerprint": "6cf75265ffa7e3e6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f238f5ba0f31a68d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/enforce-framework-first.js:16"}, "properties": {"repobilityId": "af2ad3572d4a3c02", "scanner": "scanner-primary", "fingerprint": "f238f5ba0f31a68d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ac7f625e9a3f58ac", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/session-start.js:42"}, "properties": {"repobilityId": "dfe162dc4e3195a0", "scanner": "scanner-primary", "fingerprint": "ac7f625e9a3f58ac", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c8b5221099bba82e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/validate-workflow.js:33"}, "properties": {"repobilityId": "f0dc3ade1b71df8e", "scanner": "scanner-primary", "fingerprint": "c8b5221099bba82e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-41b4f4f3c19dbf72", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 .claude/hooks/integration-hygiene.js:30"}, "properties": {"repobilityId": "48f024bc6c7ed309", "scanner": "scanner-primary", "fingerprint": "41b4f4f3c19dbf72", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-717a797366e68868", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "717a797366e68868", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/sync-manifest.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b2ba165b52e3e22", "level": "warning", "message": {"text": "Privileged port 20 in use"}, "properties": {"repobilityId": "a59f3e53d617e0f8", "scanner": "scanner-primary", "fingerprint": "2b2ba165b52e3e22", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/sync-manifest.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e05e73476b78fb6", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "4e05e73476b78fb6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/sync-manifest.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8bb68a2ba55de687", "level": "warning", "message": {"text": "Privileged port 31 in use"}, "properties": {"repobilityId": "8a1049d03b927a2d", "scanner": "scanner-primary", "fingerprint": "8bb68a2ba55de687", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/sync-manifest.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d10f08cf5b24ebca", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: mcr.microsoft.com/devcontainers/base:ubuntu-24.04"}, "properties": {"repobilityId": "b2639d2b3324bac3", "scanner": "scanner-primary", "fingerprint": "d10f08cf5b24ebca", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-e2f1cddf8cbe14d3", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "fee091764202ad6e", "scanner": "scanner-primary", "fingerprint": "e2f1cddf8cbe14d3", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-3644c9a24be003dd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in GEMINI.md:605"}, "properties": {"repobilityId": "8dd10f3f28135173", "scanner": "scanner-primary", "fingerprint": "3644c9a24be003dd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "GEMINI.md"}, "region": {"startLine": 605}}}]}, {"ruleId": "scanner-1aa78d4a14fdf8e7", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in GEMINI.md:605"}, "properties": {"repobilityId": "15de3e35e123869a", "scanner": "scanner-primary", "fingerprint": "1aa78d4a14fdf8e7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "GEMINI.md"}, "region": {"startLine": 605}}}]}, {"ruleId": "scanner-28360e110d651457", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in GEMINI.md:605"}, "properties": {"repobilityId": "e7225cc14bc6068f", "scanner": "scanner-primary", "fingerprint": "28360e110d651457", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "GEMINI.md"}, "region": {"startLine": 605}}}]}, {"ruleId": "scanner-78c0e97c6b37a4a9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in AGENTS.md:591"}, "properties": {"repobilityId": "cc9099b2635c2d20", "scanner": "scanner-primary", "fingerprint": "78c0e97c6b37a4a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 591}}}]}, {"ruleId": "scanner-82751cb1f3cf4b08", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in AGENTS.md:591"}, "properties": {"repobilityId": "e4c85edfb77e8cc7", "scanner": "scanner-primary", "fingerprint": "82751cb1f3cf4b08", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 591}}}]}, {"ruleId": "scanner-2ecfb8d863432fe2", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in AGENTS.md:591"}, "properties": {"repobilityId": "51fd832d50ce1ddd", "scanner": "scanner-primary", "fingerprint": "2ecfb8d863432fe2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 591}}}]}, {"ruleId": "scanner-ca5c45d5404985b8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/plugin/build-plugin.js:16"}, "properties": {"repobilityId": "21f85f29395fe6d4", "scanner": "scanner-primary", "fingerprint": "ca5c45d5404985b8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/plugin/build-plugin.js"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-4550f15aa37301a3", "level": "error", "message": {"text": "Possible secret in scripts/deployment/deploy-tenant.sh"}, "properties": {"repobilityId": "7ae1672d159b0ede", "scanner": "scanner-primary", "fingerprint": "4550f15aa37301a3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/deployment/deploy-tenant.sh"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-fb0510ed80633375", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/ci/validate-hooks.js:14"}, "properties": {"repobilityId": "b5bfd780e1bf91cf", "scanner": "scanner-primary", "fingerprint": "fb0510ed80633375", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/ci/validate-hooks.js"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-aebc61e67d3eea49", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/ci/run-all.js:13"}, "properties": {"repobilityId": "3daa8d4acc65e0da", "scanner": "scanner-primary", "fingerprint": "aebc61e67d3eea49", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/ci/run-all.js"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-97cb82f573eae5b3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/scan-synced-disclosure/run.mjs:16"}, "properties": {"repobilityId": "02997958d67321f5", "scanner": "scanner-primary", "fingerprint": "97cb82f573eae5b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/scan-synced-disclosure/run.mjs"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-d73d93f274412431", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/codex-dispatcher/run.mjs:23"}, "properties": {"repobilityId": "fba110c131545d26", "scanner": "scanner-primary", "fingerprint": "d73d93f274412431", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/codex-dispatcher/run.mjs"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-582b9ca8b75e11fb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/authorization-receipt/test.mjs:18"}, "properties": {"repobilityId": "d6f430c2142cceeb", "scanner": "scanner-primary", "fingerprint": "582b9ca8b75e11fb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/authorization-receipt/test.mjs"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-b1cebf20883879dd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/validate-proximity-band/run.mjs:32"}, "properties": {"repobilityId": "7a0af3f22ab6443f", "scanner": "scanner-primary", "fingerprint": "b1cebf20883879dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/validate-proximity-band/run.mjs"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-2181595441e9b424", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/forest-ledger/run.mjs:34"}, "properties": {"repobilityId": "10a4847346cff797", "scanner": "scanner-primary", "fingerprint": "2181595441e9b424", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/forest-ledger/run.mjs"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-f477265731218c7f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/coc-sync-description-normalize/run.mjs:23"}, "properties": {"repobilityId": "af10e17914ddd149", "scanner": "scanner-primary", "fingerprint": "f477265731218c7f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/coc-sync-description-normalize/run.mjs"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-ef4ec5b9d7cfa8f5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/validate-extraction-history/run.mjs:26"}, "properties": {"repobilityId": "71a144b19160e4d2", "scanner": "scanner-primary", "fingerprint": "ef4ec5b9d7cfa8f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/validate-extraction-history/run.mjs"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-c4a9c789a01df1be", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/audit-fixtures/strip-build-internal/run.mjs:35"}, "properties": {"repobilityId": "917133b16be66360", "scanner": "scanner-primary", "fingerprint": "c4a9c789a01df1be", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/strip-build-internal/run.mjs"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-934e2edb2f035274", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/signing-mutation-guard.js:91"}, "properties": {"repobilityId": "e7ecbf0b8e9ccc9d", "scanner": "scanner-primary", "fingerprint": "934e2edb2f035274", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/signing-mutation-guard.js"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-2032dbee2655cca8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/gitignored-claude-warn.js:35"}, "properties": {"repobilityId": "59fa2701603532ce", "scanner": "scanner-primary", "fingerprint": "2032dbee2655cca8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/gitignored-claude-warn.js"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-4b7d32c73db1b050", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/coc-drift-warn.js:40"}, "properties": {"repobilityId": "96cea6579ba1c7f1", "scanner": "scanner-primary", "fingerprint": "4b7d32c73db1b050", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/coc-drift-warn.js"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-2611a47ba439c081", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/auto-format.js:15"}, "properties": {"repobilityId": "1c7265ba175eadd3", "scanner": "scanner-primary", "fingerprint": "2611a47ba439c081", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/auto-format.js"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-2c6ba1d1166151d0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/coc-telemetry-autocommit.js:57"}, "properties": {"repobilityId": "4d095a7b8aa8b202", "scanner": "scanner-primary", "fingerprint": "2c6ba1d1166151d0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/coc-telemetry-autocommit.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-26021418a840b2df", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/integrity-guard.js:73"}, "properties": {"repobilityId": "e947973b9397a76f", "scanner": "scanner-primary", "fingerprint": "26021418a840b2df", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/integrity-guard.js"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-eee384772c7aed2c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/validate-bash-command.js:215"}, "properties": {"repobilityId": "611930ba34256810", "scanner": "scanner-primary", "fingerprint": "eee384772c7aed2c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/validate-bash-command.js"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-038b609cc76ccb86", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/validate-prod-deploy.js:21"}, "properties": {"repobilityId": "f0e2babb22e84289", "scanner": "scanner-primary", "fingerprint": "038b609cc76ccb86", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/validate-prod-deploy.js"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-8537d6e4544cd972", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/session-end.js:362"}, "properties": {"repobilityId": "d5f2443a707a40e2", "scanner": "scanner-primary", "fingerprint": "8537d6e4544cd972", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/session-end.js"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-26b9bc134ee773c2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/log-triage-gate.js:22"}, "properties": {"repobilityId": "3fde62ab17267b28", "scanner": "scanner-primary", "fingerprint": "26b9bc134ee773c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/log-triage-gate.js"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-de5d808e2ea0349d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/pre-commit-branch-scope.js:53"}, "properties": {"repobilityId": "7324d74e22436dae", "scanner": "scanner-primary", "fingerprint": "de5d808e2ea0349d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/pre-commit-branch-scope.js"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-75d03103350bb574", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/multi-operator-sessionstart.js:57"}, "properties": {"repobilityId": "23b95a998f4e854a", "scanner": "scanner-primary", "fingerprint": "75d03103350bb574", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/multi-operator-sessionstart.js"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-710a1b21d2255afd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/adjacency-leasecheck.js:68"}, "properties": {"repobilityId": "50cd3456f3ca76c6", "scanner": "scanner-primary", "fingerprint": "710a1b21d2255afd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/adjacency-leasecheck.js"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-18a865347dbf6042", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/fold-amendment-paired-with-helper.js:73"}, "properties": {"repobilityId": "8f3bb164a65c73f2", "scanner": "scanner-primary", "fingerprint": "18a865347dbf6042", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/fold-amendment-paired-with-helper.js"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-7a7e650cf8e80d55", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/session-start.js:19"}, "properties": {"repobilityId": "ac78ddce5e577452", "scanner": "scanner-primary", "fingerprint": "7a7e650cf8e80d55", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/session-start.js"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-225b5ac36fd163a4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/transport-git-ref.js:87"}, "properties": {"repobilityId": "13cf75a2234d5795", "scanner": "scanner-primary", "fingerprint": "225b5ac36fd163a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/transport-git-ref.js"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-d96bbf6cf2d925ab", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/release-drift.js:21"}, "properties": {"repobilityId": "44e086e84e4a0ede", "scanner": "scanner-primary", "fingerprint": "d96bbf6cf2d925ab", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/release-drift.js"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-15d5ab47791a3189", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/sibling-porcelain.js:59"}, "properties": {"repobilityId": "4e3114eaf058720b", "scanner": "scanner-primary", "fingerprint": "15d5ab47791a3189", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/sibling-porcelain.js"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-ca397d74b2624d5d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/codify-lease.js:65"}, "properties": {"repobilityId": "38766df63c511c24", "scanner": "scanner-primary", "fingerprint": "ca397d74b2624d5d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/codify-lease.js"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-d2eb8f567f99d8af", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/violation-patterns.js:13"}, "properties": {"repobilityId": "b95eda3ed2a21e22", "scanner": "scanner-primary", "fingerprint": "d2eb8f567f99d8af", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/violation-patterns.js"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-76f42969023aaaf8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/genesis-ceremony.js:1012"}, "properties": {"repobilityId": "6538b7e1241dc1c5", "scanner": "scanner-primary", "fingerprint": "76f42969023aaaf8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/genesis-ceremony.js"}, "region": {"startLine": 1012}}}]}, {"ruleId": "scanner-53a06fb2bb82ad3f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/state-io.js:27"}, "properties": {"repobilityId": "4f525ea60df3100e", "scanner": "scanner-primary", "fingerprint": "53a06fb2bb82ad3f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/state-io.js"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-5afde919c15939af", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/version-utils.js:20"}, "properties": {"repobilityId": "baa1c8fb655edfa0", "scanner": "scanner-primary", "fingerprint": "5afde919c15939af", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/version-utils.js"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-2558d1b4df4780f5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/state-resolver.js:17"}, "properties": {"repobilityId": "c266c16ef8d14515", "scanner": "scanner-primary", "fingerprint": "2558d1b4df4780f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/state-resolver.js"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-826fa49906b10caf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/coc-sign.js:32"}, "properties": {"repobilityId": "df6f808d94ff6d71", "scanner": "scanner-primary", "fingerprint": "826fa49906b10caf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/coc-sign.js"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-20ba409313ec1137", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in .claude/hooks/lib/operator-id.js:38"}, "properties": {"repobilityId": "c4975d54696cfa63", "scanner": "scanner-primary", "fingerprint": "20ba409313ec1137", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/hooks/lib/operator-id.js"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-b592aea0e7199025", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in .claude/skills/35-kailash-align/SKILL.md:109"}, "properties": {"repobilityId": "98b76567acbd74dc", "scanner": "scanner-primary", "fingerprint": "b592aea0e7199025", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/35-kailash-align/SKILL.md"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-2425da2f852e32d0", "level": "error", "message": {"text": "Possible secret in .claude/skills/18-security-patterns/SKILL.md"}, "properties": {"repobilityId": "8d451d533d75a344", "scanner": "scanner-primary", "fingerprint": "2425da2f852e32d0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/SKILL.md"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-ceeb195d4ef942a2", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/skills/18-security-patterns/SKILL.md:117"}, "properties": {"repobilityId": "e7f08106026b203d", "scanner": "scanner-primary", "fingerprint": "ceeb195d4ef942a2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/SKILL.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-27f7a010693e6b3c", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in .codex/skills/35-kailash-align/SKILL.md:109"}, "properties": {"repobilityId": "35bc619b434a6870", "scanner": "scanner-primary", "fingerprint": "27f7a010693e6b3c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/35-kailash-align/SKILL.md"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-2b4efa4d7b342735", "level": "error", "message": {"text": "Possible secret in .codex/skills/18-security-patterns/SKILL.md"}, "properties": {"repobilityId": "8a516f6691f0c949", "scanner": "scanner-primary", "fingerprint": "2b4efa4d7b342735", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/18-security-patterns/SKILL.md"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-27f2a7f6f865bb90", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .codex/skills/18-security-patterns/SKILL.md:117"}, "properties": {"repobilityId": "e816974811e6a9cd", "scanner": "scanner-primary", "fingerprint": "27f2a7f6f865bb90", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/18-security-patterns/SKILL.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "31563e99cfb42423", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f15c8ff6e3d0ad07", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "92a252f237fefd54", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9865da7d2b2ff924", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9865da7d2b2ff924", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9865da7d2b2ff924", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3ced3a497e6628d3", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "81e5f06397892af9", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "81e5f06397892af9", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-b841c61fdfcff569", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5b36d9bdf108ce42", "scanner": "scanner-primary", "fingerprint": "b841c61fdfcff569", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-076b03a16e76601d", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "a42462ccbe3d06f2", "scanner": "scanner-primary", "fingerprint": "076b03a16e76601d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f54d0d3a389cb4de", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "75740f21bc7776bf", "scanner": "scanner-primary", "fingerprint": "f54d0d3a389cb4de", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-build.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-f54d0d3a389cb4de", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "524cd7f22306d448", "scanner": "scanner-primary", "fingerprint": "f54d0d3a389cb4de", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-build.yml"}, "region": {"startLine": 163}}}]}, {"ruleId": "scanner-f54d0d3a389cb4de", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a60afc9f26129783", "scanner": "scanner-primary", "fingerprint": "f54d0d3a389cb4de", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-build.yml"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-868197c21c30495b", "level": "note", "message": {"text": "Very large file: .claude/hooks/lib/coordination-log.js (1814 lines)"}, "properties": {"repobilityId": "bf71aa0bf3cd28e6", "scanner": "scanner-primary", "fingerprint": "868197c21c30495b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7251bd9740a6dd85", "level": "note", "message": {"text": "Very large file: .claude/hooks/lib/violation-patterns.js (1156 lines)"}, "properties": {"repobilityId": "3bf919b2394b8724", "scanner": "scanner-primary", "fingerprint": "7251bd9740a6dd85", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9de0826e910fbefb", "level": "note", "message": {"text": "Very large file: .claude/hooks/lib/genesis-ceremony.js (2234 lines)"}, "properties": {"repobilityId": "def305c06bf7d34b", "scanner": "scanner-primary", "fingerprint": "9de0826e910fbefb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "8c2c633ba28c604b", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "a4ee2c90b2edbff9", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "b9a2cdafadb6f27d", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "5aa7de634a4712de", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "6420fe88f747baef", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "dcd7c88d333b25ce", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "f2c33cdd818c5b01", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-c104b36c9c323475", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: GEMINI.md"}, "properties": {"repobilityId": "83d70c1e74d67dc2", "scanner": "scanner-primary", "fingerprint": "c104b36c9c323475", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "gemini_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "GEMINI.md"}, "region": {"startLine": 663}}}]}, {"ruleId": "scanner-f06da9c0ab6c4a48", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: GEMINI.md"}, "properties": {"repobilityId": "00a7de1ef31fa667", "scanner": "scanner-primary", "fingerprint": "f06da9c0ab6c4a48", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "gemini_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "GEMINI.md"}, "region": {"startLine": 402}}}]}, {"ruleId": "scanner-cbb5857940ba0dc2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: AGENTS.md"}, "properties": {"repobilityId": "e12c7213d5eadf3e", "scanner": "scanner-primary", "fingerprint": "cbb5857940ba0dc2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 649}}}]}, {"ruleId": "scanner-e1d3fbc30bead412", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: AGENTS.md"}, "properties": {"repobilityId": "56bfc666b358d0d0", "scanner": "scanner-primary", "fingerprint": "e1d3fbc30bead412", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 388}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a0bac3c83705e71", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/sync-manifest.yaml"}, "properties": {"repobilityId": "14d12a6a940f04d5", "scanner": "scanner-primary", "fingerprint": "7a0bac3c83705e71", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/sync-manifest.yaml"}, "region": {"startLine": 476}}}]}, {"ruleId": "scanner-819bc6081d368dd4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/codex-templates/README.md"}, "properties": {"repobilityId": "6d1333ed0d5a8e13", "scanner": "scanner-primary", "fingerprint": "819bc6081d368dd4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/codex-templates/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ccaac6e0de94452", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/README.md"}, "properties": {"repobilityId": "e66a86ed37dd8e49", "scanner": "scanner-primary", "fingerprint": "5ccaac6e0de94452", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/signing-mutation-guard/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbbd89d312f80b2e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/02-pass-no-sibling/input.json"}, "properties": {"repobilityId": "7865f9ff112dfd51", "scanner": "scanner-primary", "fingerprint": "dbbd89d312f80b2e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/signing-mutation-guard/02-pass-no-sibling/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de53dda3fd69e90b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/05-pass-signing-key-present/input.json"}, "properties": {"repobilityId": "1b4f6fea4a2b42f7", "scanner": "scanner-primary", "fingerprint": "de53dda3fd69e90b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/signing-mutation-guard/05-pass-signing-key-present/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-acc9537f18cdc5f6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/06-block-git-commit-degraded/input.json"}, "properties": {"repobilityId": "ac5e93a030ec0a32", "scanner": "scanner-primary", "fingerprint": "acc9537f18cdc5f6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/signing-mutation-guard/06-block-git-commit-degraded/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e0f5a784b431a8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/01-block-sibling-porcelain/input.json"}, "properties": {"repobilityId": "ad1c826501261593", "scanner": "scanner-primary", "fingerprint": "7e0f5a784b431a8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/signing-mutation-guard/01-block-sibling-porcelain/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f62ef8e74bf9e05a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/signing-mutation-guard/03-block-degraded-mode-mutation/input.json"}, "properties": {"repobilityId": "1c4c3f1c37bf52e0", "scanner": "scanner-primary", "fingerprint": "f62ef8e74bf9e05a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/signing-mutation-guard/03-block-degraded-mode-mutation/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c905a3dc53e4ca8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/proximity-band-budget/README.md"}, "properties": {"repobilityId": "befb2f54eb78c87e", "scanner": "scanner-primary", "fingerprint": "9c905a3dc53e4ca8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/proximity-band-budget/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-22f56adef3b0ded0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-read-only-passthrough.json"}, "properties": {"repobilityId": "5c2267962d7f7466", "scanner": "scanner-primary", "fingerprint": "22f56adef3b0ded0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-read-only-passthrough.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-747c064ec0a70940", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-shell-variable-skip.json"}, "properties": {"repobilityId": "4f3d5a6554e5dc14", "scanner": "scanner-primary", "fingerprint": "747c064ec0a70940", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-shell-variable-skip.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c0c487f47f5914dd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-ssh-keygen-sign.json"}, "properties": {"repobilityId": "d9398a733810c1d1", "scanner": "scanner-primary", "fingerprint": "c0c487f47f5914dd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-ssh-keygen-sign.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04fcb783a35cd89b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-git-push.json"}, "properties": {"repobilityId": "6d097b98bda2311c", "scanner": "scanner-primary", "fingerprint": "04fcb783a35cd89b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/genesis-anchor-guard/pretooluse-bash-git-push.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b189fb81eff1f0a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/README.md"}, "properties": {"repobilityId": "3357fbb2dd96f977", "scanner": "scanner-primary", "fingerprint": "8b189fb81eff1f0a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/scan-synced-disclosure/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03ec0f0a26c0f7f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/f77-settings-bad/.claude/settings.json"}, "properties": {"repobilityId": "56f426015102c09a", "scanner": "scanner-primary", "fingerprint": "03ec0f0a26c0f7f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/scan-synced-disclosure/f77-settings-bad/.claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9337b6700e04f1cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/scan-synced-disclosure/f77-settings-good/.claude/settings.json"}, "properties": {"repobilityId": "7365646e8a37feaa", "scanner": "scanner-primary", "fingerprint": "9337b6700e04f1cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/scan-synced-disclosure/f77-settings-good/.claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d62fb2db4fba9605", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/03-pass-branch-and-lease-match/input.json"}, "properties": {"repobilityId": "1c2ccbc43aaca5b6", "scanner": "scanner-primary", "fingerprint": "d62fb2db4fba9605", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/integrity-guard/03-pass-branch-and-lease-match/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-748cc2825fade737", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/01-block-non-codify-branch/input.json"}, "properties": {"repobilityId": "5e9b21f330849b96", "scanner": "scanner-primary", "fingerprint": "748cc2825fade737", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/integrity-guard/01-block-non-codify-branch/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90ac0e1aa05a35fb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/02-halt-no-lease-on-codify-branch/input.json"}, "properties": {"repobilityId": "358ec797481ffffc", "scanner": "scanner-primary", "fingerprint": "90ac0e1aa05a35fb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/integrity-guard/02-halt-no-lease-on-codify-branch/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c72920f2a85ac2bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/04-pass-unwatched-path/input.json"}, "properties": {"repobilityId": "609a76e0919e5550", "scanner": "scanner-primary", "fingerprint": "c72920f2a85ac2bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/integrity-guard/04-pass-unwatched-path/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a82feb178504707", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/06-structural-null-malformed-log/input.json"}, "properties": {"repobilityId": "ebffb2b307de1e88", "scanner": "scanner-primary", "fingerprint": "6a82feb178504707", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/integrity-guard/06-structural-null-malformed-log/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50a6bc066161635c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/integrity-guard/05-pass-foreign-codify-branch/input.json"}, "properties": {"repobilityId": "fd4993505b23df43", "scanner": "scanner-primary", "fingerprint": "50a6bc066161635c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/integrity-guard/05-pass-foreign-codify-branch/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-10fe1d1b9e8ecc7b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/08-filesystem-exception-negative/input.json"}, "properties": {"repobilityId": "1e8b4d378fa0b315", "scanner": "scanner-primary", "fingerprint": "10fe1d1b9e8ecc7b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/adjacency-leasecheck/08-filesystem-exception-negative/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c3d690057acc92a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/07-filesystem-exception-positive/input.json"}, "properties": {"repobilityId": "92be3056efca9e62", "scanner": "scanner-primary", "fingerprint": "2c3d690057acc92a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/adjacency-leasecheck/07-filesystem-exception-positive/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c28c7c0abd307ef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/04-watched-write-on-non-cwd-path/input.json"}, "properties": {"repobilityId": "571e482f440f6d1c", "scanner": "scanner-primary", "fingerprint": "3c28c7c0abd307ef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/adjacency-leasecheck/04-watched-write-on-non-cwd-path/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd4e7df9323602cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/09-self-claim-no-self-conflict/input.json"}, "properties": {"repobilityId": "efe39d478b936b9b", "scanner": "scanner-primary", "fingerprint": "fd4e7df9323602cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/adjacency-leasecheck/09-self-claim-no-self-conflict/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30ae916ea9af4664", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/adjacency-leasecheck/01-watched-edit-on-claimed-path/input.json"}, "properties": {"repobilityId": "2b0b4e1a6b1b3538", "scanner": "scanner-primary", "fingerprint": "30ae916ea9af4664", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/adjacency-leasecheck/01-watched-edit-on-claimed-path/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31b0c9e6ba2bdd5c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/evidence-first-claims/README.md"}, "properties": {"repobilityId": "f658aa9b52da9a43", "scanner": "scanner-primary", "fingerprint": "31b0c9e6ba2bdd5c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/evidence-first-claims/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04027f929f52d7fb", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/audit-fixtures/evidence-first-claims/README.md"}, "properties": {"repobilityId": "0f73fd2c2715e73b", "scanner": "scanner-primary", "fingerprint": "04027f929f52d7fb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/evidence-first-claims/README.md"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-f8f7260930328c82", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectCommitClaim/README.md"}, "properties": {"repobilityId": "2d72c7da67870830", "scanner": "scanner-primary", "fingerprint": "f8f7260930328c82", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectCommitClaim/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c58d5d6b0c7a55ec", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/README.md"}, "properties": {"repobilityId": "707212c85fb97692", "scanner": "scanner-primary", "fingerprint": "c58d5d6b0c7a55ec", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da7bdd6d2433584c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-05-no-upstream-flat-consumer.json"}, "properties": {"repobilityId": "fc93acd46cff827c", "scanner": "scanner-primary", "fingerprint": "da7bdd6d2433584c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-05-no-upstream-flat-consumer.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a193f40d3bd20c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-04-sibling-not-upstream.json"}, "properties": {"repobilityId": "1cd1bd95e91e3490", "scanner": "scanner-primary", "fingerprint": "3a193f40d3bd20c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-04-sibling-not-upstream.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d892c30942ebfcd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-02-https-form-match.json"}, "properties": {"repobilityId": "57e7d87da26dc76f", "scanner": "scanner-primary", "fingerprint": "2d892c30942ebfcd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-02-https-form-match.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b6bae941f4e1d50c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-03-slug-form-match.json"}, "properties": {"repobilityId": "7444f9cf783cf5a2", "scanner": "scanner-primary", "fingerprint": "b6bae941f4e1d50c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-03-slug-form-match.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73d0b7c21648cb6b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-07-no-repo-flag.json"}, "properties": {"repobilityId": "53bd352ccfec2fd9", "scanner": "scanner-primary", "fingerprint": "73d0b7c21648cb6b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-07-no-repo-flag.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ecbe14f83d869bb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-01-ssh-form-match.json"}, "properties": {"repobilityId": "48364251cc8cdda4", "scanner": "scanner-primary", "fingerprint": "5ecbe14f83d869bb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-01-ssh-form-match.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60909f7fe21f5fa8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-06-cwd-basename-matches.json"}, "properties": {"repobilityId": "e673f016d2f81052", "scanner": "scanner-primary", "fingerprint": "60909f7fe21f5fa8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectRepoScopeDriftBash/upstream-remote/case-06-cwd-basename-matches.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71508077ba6db155", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectStateFileMutation/README.md"}, "properties": {"repobilityId": "70ea95f07b176240", "scanner": "scanner-primary", "fingerprint": "71508077ba6db155", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectStateFileMutation/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-525d504aee5204b6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/violation-patterns/detectSelfConfession/README.md"}, "properties": {"repobilityId": "a79be93a1b0e8096", "scanner": "scanner-primary", "fingerprint": "525d504aee5204b6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/violation-patterns/detectSelfConfession/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47a8d9722e55b3b1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/probe-phase-guard/README.md"}, "properties": {"repobilityId": "e2ef098e39080682", "scanner": "scanner-primary", "fingerprint": "47a8d9722e55b3b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/probe-phase-guard/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11cbdf8120454e0f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/probe-phase-guard/03-pass-non-retrieval-tool/input.json"}, "properties": {"repobilityId": "51a994e484dfd412", "scanner": "scanner-primary", "fingerprint": "11cbdf8120454e0f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/probe-phase-guard/03-pass-non-retrieval-tool/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f659229ffc95adb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/03-pass-self-reserved/input.json"}, "properties": {"repobilityId": "bf191d1ee791740d", "scanner": "scanner-primary", "fingerprint": "9f659229ffc95adb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/journal-write-guard/03-pass-self-reserved/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-546cadc4e4fd1c73", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/04-halt-sibling-reserved/input.json"}, "properties": {"repobilityId": "04ea4fbb3bb4d2ab", "scanner": "scanner-primary", "fingerprint": "546cadc4e4fd1c73", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/journal-write-guard/04-halt-sibling-reserved/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0313942df5c792e0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/05-pass-outside-repo/input.json"}, "properties": {"repobilityId": "322966627075c997", "scanner": "scanner-primary", "fingerprint": "0313942df5c792e0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/journal-write-guard/05-pass-outside-repo/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a912ba7557e8e3d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/01-block-file-exists/input.json"}, "properties": {"repobilityId": "50508b42ab7e4804", "scanner": "scanner-primary", "fingerprint": "7a912ba7557e8e3d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/journal-write-guard/01-block-file-exists/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce12d13a866753cb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/journal-write-guard/02-halt-slot-unreserved/input.json"}, "properties": {"repobilityId": "5130babfec8da95f", "scanner": "scanner-primary", "fingerprint": "ce12d13a866753cb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/journal-write-guard/02-halt-slot-unreserved/input.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-074d93aff3da4915", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/codex-mcp-guard/flag-shell-force-push-main.json"}, "properties": {"repobilityId": "656cbfca196ad3dc", "scanner": "scanner-primary", "fingerprint": "074d93aff3da4915", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/codex-mcp-guard/flag-shell-force-push-main.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f1187158b6eadd4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/codex-mcp-guard/flag-shell-rm-rf.json"}, "properties": {"repobilityId": "453d5a8c93768511", "scanner": "scanner-primary", "fingerprint": "6f1187158b6eadd4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/codex-mcp-guard/flag-shell-rm-rf.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f1bb4809a028367", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-drift/README.md"}, "properties": {"repobilityId": "43def7836ddb3d3c", "scanner": "scanner-primary", "fingerprint": "9f1bb4809a028367", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/cross-cli-drift/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9b42db3f7deae8c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-artifact-hygiene/flag-claude-md-authority.md"}, "properties": {"repobilityId": "b05cd495c9fd984c", "scanner": "scanner-primary", "fingerprint": "b9b42db3f7deae8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/cross-cli-artifact-hygiene/flag-claude-md-authority.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b073d844f5e3a70f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/cross-cli-artifact-hygiene/flag-agent-syntax.md"}, "properties": {"repobilityId": "899afceba27b4c91", "scanner": "scanner-primary", "fingerprint": "b073d844f5e3a70f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/cross-cli-artifact-hygiene/flag-agent-syntax.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d04dae47a0854f4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/audit-fixtures/validator-17-roster-schema-coupling/README.md"}, "properties": {"repobilityId": "17d1fbcbba4e3c5e", "scanner": "scanner-primary", "fingerprint": "6d04dae47a0854f4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/audit-fixtures/validator-17-roster-schema-coupling/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de1e5d2b2bcd57df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/release.schema.json"}, "properties": {"repobilityId": "c5885880661b6776", "scanner": "scanner-primary", "fingerprint": "de1e5d2b2bcd57df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/release.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb0849934f199589", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/ai.schema.json"}, "properties": {"repobilityId": "3563fc670502e388", "scanner": "scanner-primary", "fingerprint": "eb0849934f199589", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/ai.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d40fc3b2e102ce75", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/repos.schema.json"}, "properties": {"repobilityId": "30e54e1b00d61970", "scanner": "scanner-primary", "fingerprint": "d40fc3b2e102ce75", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/repos.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a8d224d9a61193d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sync-to-build.schema.json"}, "properties": {"repobilityId": "d211caa2c03f5d48", "scanner": "scanner-primary", "fingerprint": "2a8d224d9a61193d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/sync-to-build.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-208c4dbb0e3db9cb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/deploy.schema.json"}, "properties": {"repobilityId": "20a9c8f85b505b16", "scanner": "scanner-primary", "fingerprint": "208c4dbb0e3db9cb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/deploy.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c8afa90abe0c2f2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/cc-audit.schema.json"}, "properties": {"repobilityId": "f357c7622559f524", "scanner": "scanner-primary", "fingerprint": "7c8afa90abe0c2f2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/cc-audit.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-264a1997a48b4322", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-audit.schema.json"}, "properties": {"repobilityId": "9a2cca7a90b84237", "scanner": "scanner-primary", "fingerprint": "264a1997a48b4322", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/i-audit.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-725746a4febb79da", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/learn.schema.json"}, "properties": {"repobilityId": "08ad09192e1cf2f2", "scanner": "scanner-primary", "fingerprint": "725746a4febb79da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/learn.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-55edaa30f367e742", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/settings.schema.json"}, "properties": {"repobilityId": "7b4666454d1ffda5", "scanner": "scanner-primary", "fingerprint": "55edaa30f367e742", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/settings.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a3eac3b80d256aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/inspect.schema.json"}, "properties": {"repobilityId": "9c76e1d11bcfa02b", "scanner": "scanner-primary", "fingerprint": "2a3eac3b80d256aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/inspect.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e284883f3731db9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/codify.schema.json"}, "properties": {"repobilityId": "edf13a01e120570d", "scanner": "scanner-primary", "fingerprint": "8e284883f3731db9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/codify.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f846c80dfca545b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/validate.schema.json"}, "properties": {"repobilityId": "1c6f27877c20352b", "scanner": "scanner-primary", "fingerprint": "6f846c80dfca545b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/validate.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d32113df83b00ab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/test.schema.json"}, "properties": {"repobilityId": "ffdb7b84e936240b", "scanner": "scanner-primary", "fingerprint": "5d32113df83b00ab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/test.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0a573a0e0874418", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/ws.schema.json"}, "properties": {"repobilityId": "00b99f37b5a92266", "scanner": "scanner-primary", "fingerprint": "a0a573a0e0874418", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/ws.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4cf744a91f658399", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-harden.schema.json"}, "properties": {"repobilityId": "5e66fe8deb391336", "scanner": "scanner-primary", "fingerprint": "4cf744a91f658399", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/i-harden.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71be0d5a51cc6f2b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/todos.schema.json"}, "properties": {"repobilityId": "edf8dadd72c15dbc", "scanner": "scanner-primary", "fingerprint": "71be0d5a51cc6f2b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/todos.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9c9aeb89acf925f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/analyze.schema.json"}, "properties": {"repobilityId": "2acb3ccd9133835c", "scanner": "scanner-primary", "fingerprint": "f9c9aeb89acf925f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/analyze.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c39c212faff62eee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sdk.schema.json"}, "properties": {"repobilityId": "9f4c133f0a3285d7", "scanner": "scanner-primary", "fingerprint": "c39c212faff62eee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/sdk.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-01f3d02a49a294ed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/i-polish.schema.json"}, "properties": {"repobilityId": "f201a762edc98a24", "scanner": "scanner-primary", "fingerprint": "01f3d02a49a294ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/i-polish.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fa71fc717e1e050", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/redteam.schema.json"}, "properties": {"repobilityId": "dae645d6ef4f5f67", "scanner": "scanner-primary", "fingerprint": "7fa71fc717e1e050", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/redteam.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40bd39659f37047f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/implement.schema.json"}, "properties": {"repobilityId": "b1fd02d37e8acdd3", "scanner": "scanner-primary", "fingerprint": "40bd39659f37047f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/implement.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4a325085bec553e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/start.schema.json"}, "properties": {"repobilityId": "56c557bf27b3dd05", "scanner": "scanner-primary", "fingerprint": "c4a325085bec553e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/start.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b677c1dae32590ca", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/journal.schema.json"}, "properties": {"repobilityId": "53f2f70f8d816954", "scanner": "scanner-primary", "fingerprint": "b677c1dae32590ca", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/journal.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c58b2e963cb5662", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/sync.schema.json"}, "properties": {"repobilityId": "6f74bba8155507d1", "scanner": "scanner-primary", "fingerprint": "2c58b2e963cb5662", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/sync.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d29d86c147b5076e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/db.schema.json"}, "properties": {"repobilityId": "8279dab3f25acbd0", "scanner": "scanner-primary", "fingerprint": "d29d86c147b5076e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/db.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8af8ded5fc215591", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/api.schema.json"}, "properties": {"repobilityId": "e9be6c8c0ab12fdd", "scanner": "scanner-primary", "fingerprint": "8af8ded5fc215591", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/api.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a67a1437ae012339", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/wrapup.schema.json"}, "properties": {"repobilityId": "129c1923ca55a0c0", "scanner": "scanner-primary", "fingerprint": "a67a1437ae012339", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/wrapup.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9b6472452a63bdd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/wrappers/schemas/design.schema.json"}, "properties": {"repobilityId": "05c2bd327b1b939b", "scanner": "scanner-primary", "fingerprint": "b9b6472452a63bdd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/wrappers/schemas/design.schema.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dabb352063bfdb7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gemini-templates/README.md"}, "properties": {"repobilityId": "85fd2db05bb1cb31", "scanner": "scanner-primary", "fingerprint": "5dabb352063bfdb7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gemini-templates/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d0e4551a30f6988", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/gemini-templates/settings.json"}, "properties": {"repobilityId": "9cea49a711e5dc9b", "scanner": "scanner-primary", "fingerprint": "4d0e4551a30f6988", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/gemini-templates/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b6c45f3ea375b40", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/rules/env-models.md"}, "properties": {"repobilityId": "94b7fb9994e98032", "scanner": "scanner-primary", "fingerprint": "0b6c45f3ea375b40", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/env-models.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-3a0650c9cff79662", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/rules/security.md"}, "properties": {"repobilityId": "efba7acaba5bb572", "scanner": "scanner-primary", "fingerprint": "3a0650c9cff79662", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/security.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-c1a77c531b81868f", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/rules/evidence-first-claims.md"}, "properties": {"repobilityId": "4a21e719cf7b3ca6", "scanner": "scanner-primary", "fingerprint": "c1a77c531b81868f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/evidence-first-claims.md"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-81cc99b6e60dadbb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/rules/observability.md"}, "properties": {"repobilityId": "fe529e4f2b6f2770", "scanner": "scanner-primary", "fingerprint": "81cc99b6e60dadbb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/observability.md"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-f5a76b353d1fb5e8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/time-pressure-discipline.md"}, "properties": {"repobilityId": "42cd93b501102c81", "scanner": "scanner-primary", "fingerprint": "f5a76b353d1fb5e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/time-pressure-discipline.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5543861bf3d40cbe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/repo-scope-discipline.md"}, "properties": {"repobilityId": "709f134137de9fa7", "scanner": "scanner-primary", "fingerprint": "5543861bf3d40cbe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/repo-scope-discipline.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bcae50fa6941d7b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/framework-first.md"}, "properties": {"repobilityId": "2333d0fe786a20cc", "scanner": "scanner-primary", "fingerprint": "4bcae50fa6941d7b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/framework-first.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e24ff95381a38b9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/rules/llm-auth-strategy-hygiene.md"}, "properties": {"repobilityId": "bf1ccd123bf0a0dc", "scanner": "scanner-primary", "fingerprint": "6e24ff95381a38b9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/llm-auth-strategy-hygiene.md"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-a515192725d36e71", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/rules/testing.md"}, "properties": {"repobilityId": "20af03de64089840", "scanner": "scanner-primary", "fingerprint": "a515192725d36e71", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/testing.md"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-cf901e9ccadbbb9f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/trust-plane-security.md"}, "properties": {"repobilityId": "f972452f2b0a5aa3", "scanner": "scanner-primary", "fingerprint": "cf901e9ccadbbb9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/trust-plane-security.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cbd7e18f8160e6ac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/cross-cli-parity.md"}, "properties": {"repobilityId": "7d0e2cfb8769846c", "scanner": "scanner-primary", "fingerprint": "cbd7e18f8160e6ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/cross-cli-parity.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12ec6ffd80037e6d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/fixtures/validator-13/expected-policies.json"}, "properties": {"repobilityId": "9f35731b9cb68e75", "scanner": "scanner-primary", "fingerprint": "12ec6ffd80037e6d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/fixtures/validator-13/expected-policies.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da825a160af1851d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/certify.md"}, "properties": {"repobilityId": "c2c86e490c4b4bbe", "scanner": "scanner-primary", "fingerprint": "da825a160af1851d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/certify.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04479d44c57a7531", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/ws.md"}, "properties": {"repobilityId": "1d48f7642e9f4250", "scanner": "scanner-primary", "fingerprint": "04479d44c57a7531", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/ws.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-303c63bf840080d7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/learn.md"}, "properties": {"repobilityId": "a262f38e32f40304", "scanner": "scanner-primary", "fingerprint": "303c63bf840080d7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/learn.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b2a0803ddeae05d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/codex-architect.md"}, "properties": {"repobilityId": "c931f18681c691c0", "scanner": "scanner-primary", "fingerprint": "8b2a0803ddeae05d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/codex-architect.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-26a5551eba420a8d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/value-auditor.md"}, "properties": {"repobilityId": "65709272ddadad26", "scanner": "scanner-primary", "fingerprint": "26a5551eba420a8d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/value-auditor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be7cdf0f2157ec22", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/agents/frameworks/align-specialist.md"}, "properties": {"repobilityId": "9d757dfbff57e210", "scanner": "scanner-primary", "fingerprint": "be7cdf0f2157ec22", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/frameworks/align-specialist.md"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-0b869ea0f428546e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/custom-node-guide.md"}, "properties": {"repobilityId": "4cc68e7c0cf9dfa1", "scanner": "scanner-primary", "fingerprint": "0b869ea0f428546e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/custom-node-guide.md"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-093cfb8c49c7f215", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/runtime-watchdog.md"}, "properties": {"repobilityId": "488f86acf5992d28", "scanner": "scanner-primary", "fingerprint": "093cfb8c49c7f215", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/runtime-watchdog.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6219d0bd0e5c65a4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/parameter-scoping.md"}, "properties": {"repobilityId": "35b55c7ca7409c24", "scanner": "scanner-primary", "fingerprint": "6219d0bd0e5c65a4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/parameter-scoping.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab6158806f741f26", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/enterprise-infrastructure.md"}, "properties": {"repobilityId": "26762476dacbc2ab", "scanner": "scanner-primary", "fingerprint": "ab6158806f741f26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/enterprise-infrastructure.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-2e4f930edf6eaf9e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/pythoncode-best-practices.md"}, "properties": {"repobilityId": "49b56ced51095675", "scanner": "scanner-primary", "fingerprint": "2e4f930edf6eaf9e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/pythoncode-best-practices.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-2cea0f2e6a17c784", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/kailash-imports.md"}, "properties": {"repobilityId": "c799bfe34f89fea0", "scanner": "scanner-primary", "fingerprint": "2cea0f2e6a17c784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/kailash-imports.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ce644ca84413eba", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/01-core-sdk/production-readiness-patterns.md"}, "properties": {"repobilityId": "6f57e4663c0eff5c", "scanner": "scanner-primary", "fingerprint": "5ce644ca84413eba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/production-readiness-patterns.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-0d14e9457844fc04", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/01-core-sdk/runtime-progress.md"}, "properties": {"repobilityId": "6ef65ddce51a7c31", "scanner": "scanner-primary", "fingerprint": "0d14e9457844fc04", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/01-core-sdk/runtime-progress.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0390984b17d94e2c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/30-claude-code-patterns/parallel-merge-workflow.md"}, "properties": {"repobilityId": "3cb7fe7fa492f664", "scanner": "scanner-primary", "fingerprint": "0390984b17d94e2c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/30-claude-code-patterns/parallel-merge-workflow.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-1268aa8ad02d8572", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/30-claude-code-patterns/worktree-orchestration.md"}, "properties": {"repobilityId": "4a74dadf30b65f7a", "scanner": "scanner-primary", "fingerprint": "1268aa8ad02d8572", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/30-claude-code-patterns/worktree-orchestration.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-964b66f60234bf53", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/15-enterprise-infrastructure/dialect-portable-sql.md"}, "properties": {"repobilityId": "9f09d29fdf14e8b1", "scanner": "scanner-primary", "fingerprint": "964b66f60234bf53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/15-enterprise-infrastructure/dialect-portable-sql.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-100993ed118ae323", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/progressive-infrastructure.md"}, "properties": {"repobilityId": "258a12a73134fd3c", "scanner": "scanner-primary", "fingerprint": "100993ed118ae323", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/15-enterprise-infrastructure/progressive-infrastructure.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-68a417eb0fc95b11", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/enterprise-tokens.md"}, "properties": {"repobilityId": "ba86d3a4651ff670", "scanner": "scanner-primary", "fingerprint": "68a417eb0fc95b11", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/15-enterprise-infrastructure/enterprise-tokens.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-6f89c26a2053ea12", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/idempotency-patterns.md"}, "properties": {"repobilityId": "97c8916d4aad09fb", "scanner": "scanner-primary", "fingerprint": "6f89c26a2053ea12", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/15-enterprise-infrastructure/idempotency-patterns.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-64e75ad21b1d12bf", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/enterprise-tenancy.md"}, "properties": {"repobilityId": "446a3317e5efc5f5", "scanner": "scanner-primary", "fingerprint": "64e75ad21b1d12bf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/15-enterprise-infrastructure/enterprise-tenancy.md"}, "region": {"startLine": 250}}}]}, {"ruleId": "scanner-2e48e159ab994cd6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/15-enterprise-infrastructure/SKILL.md"}, "properties": {"repobilityId": "f84486decb485078", "scanner": "scanner-primary", "fingerprint": "2e48e159ab994cd6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/15-enterprise-infrastructure/SKILL.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-d79a479760c769d3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/35-kailash-align/align-serving.md"}, "properties": {"repobilityId": "19870bc8c945d1df", "scanner": "scanner-primary", "fingerprint": "d79a479760c769d3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/35-kailash-align/align-serving.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4216835109282b74", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/35-kailash-align/align-adapter-registry.md"}, "properties": {"repobilityId": "6a92cc5d60367cd0", "scanner": "scanner-primary", "fingerprint": "4216835109282b74", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/35-kailash-align/align-adapter-registry.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58418400ebe659d9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/06-python-bindings/python-v2-quickstart.md"}, "properties": {"repobilityId": "0ce938121c71b1f4", "scanner": "scanner-primary", "fingerprint": "58418400ebe659d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-python-bindings/python-v2-quickstart.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-6229e81a64b288af", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/python-available-nodes.md"}, "properties": {"repobilityId": "4ec993880ec675a5", "scanner": "scanner-primary", "fingerprint": "6229e81a64b288af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-python-bindings/python-available-nodes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-55279ad0595b98d6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/06-python-bindings/python-migration-guide.md"}, "properties": {"repobilityId": "569d507f8342998d", "scanner": "scanner-primary", "fingerprint": "55279ad0595b98d6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-python-bindings/python-migration-guide.md"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-1695f7994a3f417c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/python-framework-bindings.md"}, "properties": {"repobilityId": "ad3b81e160fd3ad4", "scanner": "scanner-primary", "fingerprint": "1695f7994a3f417c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-python-bindings/python-framework-bindings.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a8f9a2e48cd9be2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-python-bindings/layered-truncation.md"}, "properties": {"repobilityId": "7d5be2748c549bec", "scanner": "scanner-primary", "fingerprint": "4a8f9a2e48cd9be2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-python-bindings/layered-truncation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d893b2d6b7dcb40a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/34-kailash-ml/ml-training-pipeline.md"}, "properties": {"repobilityId": "e389bb38de5359ef", "scanner": "scanner-primary", "fingerprint": "d893b2d6b7dcb40a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/34-kailash-ml/ml-training-pipeline.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a6473a782658a5c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-models.md"}, "properties": {"repobilityId": "6436b35b8d26544a", "scanner": "scanner-primary", "fingerprint": "7a6473a782658a5c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-models.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58c5b90333c7454a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-nexus-integration.md"}, "properties": {"repobilityId": "d12acf1d592ad108", "scanner": "scanner-primary", "fingerprint": "58c5b90333c7454a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-nexus-integration.md"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-667c3ca716ec2cea", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-retention.md"}, "properties": {"repobilityId": "fec8041a5e78a0e0", "scanner": "scanner-primary", "fingerprint": "667c3ca716ec2cea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-retention.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-919403c4e70ad4e4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-connection-config.md"}, "properties": {"repobilityId": "e8150a3e24b7921d", "scanner": "scanner-primary", "fingerprint": "919403c4e70ad4e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-connection-config.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-9e18b696d22c3469", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-error-enhancer.md"}, "properties": {"repobilityId": "7db9d7d936c665de", "scanner": "scanner-primary", "fingerprint": "9e18b696d22c3469", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-error-enhancer.md"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-8744cd463bb516bf", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-fabric-engine.md"}, "properties": {"repobilityId": "4ab88f3653e5b5a3", "scanner": "scanner-primary", "fingerprint": "8744cd463bb516bf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-fabric-engine.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-f2594bc4bec3f789", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-cli-commands.md"}, "properties": {"repobilityId": "f9be4780febbf65e", "scanner": "scanner-primary", "fingerprint": "f2594bc4bec3f789", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-cli-commands.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d6380b0bfec1880", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-multi-instance.md"}, "properties": {"repobilityId": "058f5c29c515db12", "scanner": "scanner-primary", "fingerprint": "7d6380b0bfec1880", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-multi-instance.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-f7213764bb763beb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-debug-agent.md"}, "properties": {"repobilityId": "e14896fbd69506b4", "scanner": "scanner-primary", "fingerprint": "f7213764bb763beb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-debug-agent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5f78553997692a9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-queries.md"}, "properties": {"repobilityId": "917ce120e04059aa", "scanner": "scanner-primary", "fingerprint": "a5f78553997692a9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-queries.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-694155995822e902", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-inspector.md"}, "properties": {"repobilityId": "0dc57090c7977a26", "scanner": "scanner-primary", "fingerprint": "694155995822e902", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-inspector.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30166af4485dcb3d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-existing-database.md"}, "properties": {"repobilityId": "88eae45c76d985f2", "scanner": "scanner-primary", "fingerprint": "30166af4485dcb3d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-existing-database.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-f5424398f9fad896", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-fabric-cache-consumers.md"}, "properties": {"repobilityId": "7ee9fa86907b9178", "scanner": "scanner-primary", "fingerprint": "f5424398f9fad896", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-fabric-cache-consumers.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb21698fba089505", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-multi-tenancy.md"}, "properties": {"repobilityId": "d3a197cfce021d8e", "scanner": "scanner-primary", "fingerprint": "cb21698fba089505", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-multi-tenancy.md"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-f59b27b9ae7ebc6b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/numbered-migration-scaffold.md"}, "properties": {"repobilityId": "6b6f0dde86c1da84", "scanner": "scanner-primary", "fingerprint": "f59b27b9ae7ebc6b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/numbered-migration-scaffold.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c1e6a06e1999e0c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-aggregation.md"}, "properties": {"repobilityId": "d37d30ff19254731", "scanner": "scanner-primary", "fingerprint": "9c1e6a06e1999e0c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-aggregation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3dbbd4f6be13a7ba", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-transactions.md"}, "properties": {"repobilityId": "40574ed6b494a4b7", "scanner": "scanner-primary", "fingerprint": "3dbbd4f6be13a7ba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-transactions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ee98613659763e5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-connection-isolation.md"}, "properties": {"repobilityId": "7b301770f00b67cc", "scanner": "scanner-primary", "fingerprint": "8ee98613659763e5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-connection-isolation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be47f70e229f7418", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-migrations-quick.md"}, "properties": {"repobilityId": "038848c349854956", "scanner": "scanner-primary", "fingerprint": "be47f70e229f7418", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-migrations-quick.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-a4181381b612efc7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-file-import.md"}, "properties": {"repobilityId": "e640e2b7811bde36", "scanner": "scanner-primary", "fingerprint": "a4181381b612efc7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-file-import.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5ed0622bf5e886d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-result-access.md"}, "properties": {"repobilityId": "d3598e25bd730035", "scanner": "scanner-primary", "fingerprint": "b5ed0622bf5e886d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-result-access.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-170d971ef2a4363c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-deployment.md"}, "properties": {"repobilityId": "9dbebfa6898d8ec8", "scanner": "scanner-primary", "fingerprint": "170d971ef2a4363c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-deployment.md"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-c42fe9ebd4714abe", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-gotchas.md"}, "properties": {"repobilityId": "9fa8f1400dd9de6c", "scanner": "scanner-primary", "fingerprint": "c42fe9ebd4714abe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-gotchas.md"}, "region": {"startLine": 458}}}]}, {"ruleId": "scanner-10e341624aaef5d2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-dialects.md"}, "properties": {"repobilityId": "4b09ce32df171de9", "scanner": "scanner-primary", "fingerprint": "10e341624aaef5d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-dialects.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3def312f75323368", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/02-dataflow/dataflow-advanced-patterns.md"}, "properties": {"repobilityId": "8bf7583179df0054", "scanner": "scanner-primary", "fingerprint": "3def312f75323368", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e886b8fd83a68b0", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-performance.md"}, "properties": {"repobilityId": "f9702311a322e5bc", "scanner": "scanner-primary", "fingerprint": "5e886b8fd83a68b0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-performance.md"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-88b818862395fb56", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/02-dataflow/dataflow-quickstart.md"}, "properties": {"repobilityId": "1799e43f870b4b0c", "scanner": "scanner-primary", "fingerprint": "88b818862395fb56", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/02-dataflow/dataflow-quickstart.md"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-45e3bbde69894551", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-transaction-reference.md"}, "properties": {"repobilityId": "74511b915b949fe9", "scanner": "scanner-primary", "fingerprint": "45e3bbde69894551", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/08-nodes-reference/nodes-transaction-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa41698015ce74a1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-ai-reference.md"}, "properties": {"repobilityId": "f86cd9f491e63d42", "scanner": "scanner-primary", "fingerprint": "fa41698015ce74a1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/08-nodes-reference/nodes-ai-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06027826a5a25725", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-database-reference.md"}, "properties": {"repobilityId": "64434a4851ca1e7f", "scanner": "scanner-primary", "fingerprint": "06027826a5a25725", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/08-nodes-reference/nodes-database-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37ba775718d6b110", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-code-reference.md"}, "properties": {"repobilityId": "ba8d82e8d3323636", "scanner": "scanner-primary", "fingerprint": "37ba775718d6b110", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/08-nodes-reference/nodes-code-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-afce1e0ca13bf700", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/08-nodes-reference/nodes-quick-index.md"}, "properties": {"repobilityId": "a15a26abdf31337b", "scanner": "scanner-primary", "fingerprint": "afce1e0ca13bf700", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/08-nodes-reference/nodes-quick-index.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1b9fc55dc187217", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/12-testing-strategies/testing-patterns.md"}, "properties": {"repobilityId": "176a8dba51563e03", "scanner": "scanner-primary", "fingerprint": "a1b9fc55dc187217", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/12-testing-strategies/testing-patterns.md"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-c4df1eecfa8f6764", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/29-pact/governance-patterns.md"}, "properties": {"repobilityId": "57b6bcfdab089a9e", "scanner": "scanner-primary", "fingerprint": "c4df1eecfa8f6764", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/29-pact/governance-patterns.md"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-0ecb4c87ace99826", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/29-pact/pact-envelope-model.md"}, "properties": {"repobilityId": "f990498695c14603", "scanner": "scanner-primary", "fingerprint": "0ecb4c87ace99826", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/29-pact/pact-envelope-model.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-749005864320cd5c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/29-pact/pact-access-enforcement.md"}, "properties": {"repobilityId": "60dc9092d8bb6979", "scanner": "scanner-primary", "fingerprint": "749005864320cd5c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/29-pact/pact-access-enforcement.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-e22b13f22cb40aa8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/29-pact/pact-envelopes.md"}, "properties": {"repobilityId": "02595ee66ca1becd", "scanner": "scanner-primary", "fingerprint": "e22b13f22cb40aa8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/29-pact/pact-envelopes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c0211e5a653a18ce", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/26-eatp-reference/eatp-posture-stores.md"}, "properties": {"repobilityId": "f364d925d943366c", "scanner": "scanner-primary", "fingerprint": "c0211e5a653a18ce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/26-eatp-reference/eatp-posture-stores.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1778d0dba4c633c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/26-eatp-reference/eatp-sdk-patterns.md"}, "properties": {"repobilityId": "1f330e5e3c1afe42", "scanner": "scanner-primary", "fingerprint": "a1778d0dba4c633c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/26-eatp-reference/eatp-sdk-patterns.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-15a786362eae5bc5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/26-eatp-reference/eatp-security-patterns.md"}, "properties": {"repobilityId": "cc36363046299c92", "scanner": "scanner-primary", "fingerprint": "15a786362eae5bc5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/26-eatp-reference/eatp-security-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce75f7c3f1b836cb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/26-eatp-reference/eatp-sdk-quickstart.md"}, "properties": {"repobilityId": "c77c1ef779f91663", "scanner": "scanner-primary", "fingerprint": "ce75f7c3f1b836cb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/26-eatp-reference/eatp-sdk-quickstart.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-20b112b7b21fbfe2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-enterprise/enterprise-tokens.md"}, "properties": {"repobilityId": "18d49a51bb57f419", "scanner": "scanner-primary", "fingerprint": "20b112b7b21fbfe2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-enterprise/enterprise-tokens.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-32ed75d4bb13daa8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-enterprise/enterprise-tenancy.md"}, "properties": {"repobilityId": "2a2265cd2c78c9e6", "scanner": "scanner-primary", "fingerprint": "32ed75d4bb13daa8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-enterprise/enterprise-tenancy.md"}, "region": {"startLine": 250}}}]}, {"ruleId": "scanner-27cdc20b5b9fa4e1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/distributed-transactions.md"}, "properties": {"repobilityId": "4c7e98554b525262", "scanner": "scanner-primary", "fingerprint": "27cdc20b5b9fa4e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/distributed-transactions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a05bc219f1c8284e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/asyncsql-advanced.md"}, "properties": {"repobilityId": "4e7e28ff416996d2", "scanner": "scanner-primary", "fingerprint": "a05bc219f1c8284e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/asyncsql-advanced.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9395da38535728a7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/query-routing.md"}, "properties": {"repobilityId": "1ffa2588c8b27dd5", "scanner": "scanner-primary", "fingerprint": "9395da38535728a7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/query-routing.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c13cab723d3e32ce", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/enterprise-mcp.md"}, "properties": {"repobilityId": "85406aeb82fb0c67", "scanner": "scanner-primary", "fingerprint": "c13cab723d3e32ce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/enterprise-mcp.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f00b56ac73294963", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/directoryreader-patterns.md"}, "properties": {"repobilityId": "bf827cacb7ffcc5e", "scanner": "scanner-primary", "fingerprint": "f00b56ac73294963", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/directoryreader-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c35233d673209ab7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/mcp-resource-subscriptions.md"}, "properties": {"repobilityId": "8c8f098b4c8d2885", "scanner": "scanner-primary", "fingerprint": "c35233d673209ab7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/mcp-resource-subscriptions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f8a17a46d4bc609", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/SKILL.md"}, "properties": {"repobilityId": "6caac687fae19a06", "scanner": "scanner-primary", "fingerprint": "2f8a17a46d4bc609", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-848ea552d4e5ccb6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/06-cheatsheets/production-patterns.md"}, "properties": {"repobilityId": "f284c37cdae0c725", "scanner": "scanner-primary", "fingerprint": "848ea552d4e5ccb6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/production-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4263dc55360bc8a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/06-cheatsheets/multi-tenancy-patterns.md"}, "properties": {"repobilityId": "cd63976515fe3b20", "scanner": "scanner-primary", "fingerprint": "e4263dc55360bc8a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/06-cheatsheets/multi-tenancy-patterns.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-de1d4a0e0a24a3e3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/33-gsf-cap/event-bus.md"}, "properties": {"repobilityId": "b3eece86541f40ae", "scanner": "scanner-primary", "fingerprint": "de1d4a0e0a24a3e3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/33-gsf-cap/event-bus.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7299d85a837ed6df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/33-gsf-cap/validation-patterns.md"}, "properties": {"repobilityId": "6eb1cc8d6ce994ec", "scanner": "scanner-primary", "fingerprint": "7299d85a837ed6df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/33-gsf-cap/validation-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a9b3c12d891891e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/31-l3-autonomy/plan-dag.md"}, "properties": {"repobilityId": "1c80fc1e8442717d", "scanner": "scanner-primary", "fingerprint": "4a9b3c12d891891e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/31-l3-autonomy/plan-dag.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de38e815844bd5d2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/31-l3-autonomy/messaging.md"}, "properties": {"repobilityId": "807c4a376513ef5e", "scanner": "scanner-primary", "fingerprint": "de38e815844bd5d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/31-l3-autonomy/messaging.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-628d701486281fff", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-patterns.md"}, "properties": {"repobilityId": "57b9c070fc8f8a70", "scanner": "scanner-primary", "fingerprint": "628d701486281fff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-deployment-git/deployment-patterns.md"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-841542bd5ad6e275", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-docker-quick.md"}, "properties": {"repobilityId": "db1378bcb6e7eec3", "scanner": "scanner-primary", "fingerprint": "841542bd5ad6e275", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-deployment-git/deployment-docker-quick.md"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-9ec4bb2252eb6121", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/10-deployment-git/ci-runner-troubleshooting.md"}, "properties": {"repobilityId": "2b9849e9dc2485d1", "scanner": "scanner-primary", "fingerprint": "9ec4bb2252eb6121", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-deployment-git/ci-runner-troubleshooting.md"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-d576ace6fa2b7020", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/project-management.md"}, "properties": {"repobilityId": "b87b6359204df1bf", "scanner": "scanner-primary", "fingerprint": "d576ace6fa2b7020", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-deployment-git/project-management.md"}, "region": {"startLine": 475}}}]}, {"ruleId": "scanner-bf26553305f608df", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "properties": {"repobilityId": "e8bff6f9a79e4e65", "scanner": "scanner-primary", "fingerprint": "bf26553305f608df", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-0af96046bd6def53", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "properties": {"repobilityId": "d5c3442396256fb1", "scanner": "scanner-primary", "fingerprint": "0af96046bd6def53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-231afe75e86d9bb3", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/management/release-workflow.md"}, "properties": {"repobilityId": "9c5e8c72c03aff85", "scanner": "scanner-primary", "fingerprint": "231afe75e86d9bb3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/management/release-workflow.md"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-4714c7cdadff6dab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/skill-authoring/proximity-band-named-rationale-template.md"}, "properties": {"repobilityId": "b0706c33c9c70cba", "scanner": "scanner-primary", "fingerprint": "4714c7cdadff6dab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/skill-authoring/proximity-band-named-rationale-template.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdecb6007021179b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-comparison.md"}, "properties": {"repobilityId": "40d3feffb5f1259a", "scanner": "scanner-primary", "fingerprint": "cdecb6007021179b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-comparison.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04a81ecc59b306f7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-workflow-registration.md"}, "properties": {"repobilityId": "43babc6d691b9d35", "scanner": "scanner-primary", "fingerprint": "04a81ecc59b306f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-workflow-registration.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f1519ddcd15f977", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/03-nexus/nexus-security-best-practices.md"}, "properties": {"repobilityId": "cc68d29ff114e3c8", "scanner": "scanner-primary", "fingerprint": "8f1519ddcd15f977", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-security-best-practices.md"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-eccc8ad60781627e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/03-nexus/nexus-dataflow-integration.md"}, "properties": {"repobilityId": "f6a274a7c62e334f", "scanner": "scanner-primary", "fingerprint": "eccc8ad60781627e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-dataflow-integration.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-b05e20bf7fe110fb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-config-options.md"}, "properties": {"repobilityId": "00d1502be8abdbfb", "scanner": "scanner-primary", "fingerprint": "b05e20bf7fe110fb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-config-options.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa824dc6b25c66b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-api-patterns.md"}, "properties": {"repobilityId": "2c117d311e804529", "scanner": "scanner-primary", "fingerprint": "aa824dc6b25c66b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-api-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5fc951534d182b36", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-plugins.md"}, "properties": {"repobilityId": "c82340e0326ab32b", "scanner": "scanner-primary", "fingerprint": "5fc951534d182b36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-plugins.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c64007242b1bcc1d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-eventbus-phase2.md"}, "properties": {"repobilityId": "fa9606e45f5ca440", "scanner": "scanner-primary", "fingerprint": "c64007242b1bcc1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-eventbus-phase2.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8e2dab71088d555", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/03-nexus/nexus-mcp-channel.md"}, "properties": {"repobilityId": "f1fb5cfb6b05688c", "scanner": "scanner-primary", "fingerprint": "c8e2dab71088d555", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/03-nexus/nexus-mcp-channel.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f148c20871e4295", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/framework-first/SKILL.md"}, "properties": {"repobilityId": "f9901cdd3b403ddf", "scanner": "scanner-primary", "fingerprint": "8f148c20871e4295", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/framework-first/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d6673bda6fbd29c8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-security.md"}, "properties": {"repobilityId": "cab2814e608f4eee", "scanner": "scanner-primary", "fingerprint": "d6673bda6fbd29c8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/17-gold-standards/gold-security.md"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-d3a4db01e722516c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-mocking-policy.md"}, "properties": {"repobilityId": "cce1d521ad92bbde", "scanner": "scanner-primary", "fingerprint": "d3a4db01e722516c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/17-gold-standards/gold-mocking-policy.md"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-94fe1393171c47ed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/17-gold-standards/gold-absolute-imports.md"}, "properties": {"repobilityId": "f8b56d5bfd695a33", "scanner": "scanner-primary", "fingerprint": "94fe1393171c47ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/17-gold-standards/gold-absolute-imports.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-735fbb0671331909", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/17-gold-standards/gold-documentation.md"}, "properties": {"repobilityId": "feee3414495871ec", "scanner": "scanner-primary", "fingerprint": "735fbb0671331909", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/17-gold-standards/gold-documentation.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-073d95caa2df0806", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/32-trust-posture/rule-authoring-checklist.md"}, "properties": {"repobilityId": "a2f5284e1827173f", "scanner": "scanner-primary", "fingerprint": "073d95caa2df0806", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/32-trust-posture/rule-authoring-checklist.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7260769a2856ca90", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/32-trust-posture/SKILL.md"}, "properties": {"repobilityId": "5506536bb48af2d9", "scanner": "scanner-primary", "fingerprint": "7260769a2856ca90", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/32-trust-posture/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c08a1c3f438b72c6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/32-kaizen-agents/protocols.md"}, "properties": {"repobilityId": "8f585f434bd7f0d8", "scanner": "scanner-primary", "fingerprint": "c08a1c3f438b72c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/32-kaizen-agents/protocols.md"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-10588b066ee0aa30", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/constant-time-comparison-rs.md"}, "properties": {"repobilityId": "09ba246170ecda39", "scanner": "scanner-primary", "fingerprint": "10588b066ee0aa30", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/constant-time-comparison-rs.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-cb585378d2dffb84", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/fail-closed-defaults-rs.md"}, "properties": {"repobilityId": "de5dbb0ef5619a63", "scanner": "scanner-primary", "fingerprint": "cb585378d2dffb84", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/fail-closed-defaults-rs.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-b52fc31a2adea5d7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/SKILL.md"}, "properties": {"repobilityId": "cca64f5971d00eaa", "scanner": "scanner-primary", "fingerprint": "b52fc31a2adea5d7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/SKILL.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-d280208bd53a3523", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/18-security-patterns/network-security-rs.md"}, "properties": {"repobilityId": "9edacfd98f45539f", "scanner": "scanner-primary", "fingerprint": "d280208bd53a3523", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/network-security-rs.md"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-930d2ad38fa155ff", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/18-security-patterns/network-security-rs.md"}, "properties": {"repobilityId": "1998c49f3db51103", "scanner": "scanner-primary", "fingerprint": "930d2ad38fa155ff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/18-security-patterns/network-security-rs.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-bc03d7b815e6f72b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/41-onboard/SKILL.md"}, "properties": {"repobilityId": "84f9d115e2111d17", "scanner": "scanner-primary", "fingerprint": "bc03d7b815e6f72b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/41-onboard/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb5c3d30e19a3a98", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/16-validation-patterns/validate-dataflow-patterns.md"}, "properties": {"repobilityId": "58d410f0d0583dc1", "scanner": "scanner-primary", "fingerprint": "eb5c3d30e19a3a98", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/16-validation-patterns/validate-dataflow-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a4e13603ee103609", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/16-validation-patterns/validate-security.md"}, "properties": {"repobilityId": "5b2b24a31672384b", "scanner": "scanner-primary", "fingerprint": "a4e13603ee103609", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/16-validation-patterns/validate-security.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-70bdc346c37f8280", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/16-validation-patterns/SKILL.md"}, "properties": {"repobilityId": "9377a48d33fef520", "scanner": "scanner-primary", "fingerprint": "70bdc346c37f8280", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/16-validation-patterns/SKILL.md"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-b90dc9e2eeaa65b7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-server.md"}, "properties": {"repobilityId": "7ec02f145391eb21", "scanner": "scanner-primary", "fingerprint": "b90dc9e2eeaa65b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-server.md"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-da4b355b55b10b92", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-platform-map.md"}, "properties": {"repobilityId": "f06e422cafa3e050", "scanner": "scanner-primary", "fingerprint": "da4b355b55b10b92", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-platform-map.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9ba313af7f10ad85", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-transports.md"}, "properties": {"repobilityId": "986021b81a9be3c8", "scanner": "scanner-primary", "fingerprint": "9ba313af7f10ad85", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-transports.md"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-c9115920b52cdc33", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "properties": {"repobilityId": "822bcd2434e1f044", "scanner": "scanner-primary", "fingerprint": "c9115920b52cdc33", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-92856b6a044c56a5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "properties": {"repobilityId": "1d557650916bfb89", "scanner": "scanner-primary", "fingerprint": "92856b6a044c56a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c4bbd7000089ef3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/05-kailash-mcp/mcp-authentication.md"}, "properties": {"repobilityId": "5549486748d8890c", "scanner": "scanner-primary", "fingerprint": "6c4bbd7000089ef3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-authentication.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-5c612e94c8a0815d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/05-kailash-mcp/mcp-platform-overview.md"}, "properties": {"repobilityId": "c74186808702875e", "scanner": "scanner-primary", "fingerprint": "5c612e94c8a0815d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/05-kailash-mcp/mcp-platform-overview.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4edf0a3ed63538c6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-orchestration.md"}, "properties": {"repobilityId": "8686fa716f6a4b72", "scanner": "scanner-primary", "fingerprint": "4edf0a3ed63538c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-orchestration.md"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-abbbc7212a0ea6df", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-byok-patterns.md"}, "properties": {"repobilityId": "c352abbb1720b8ad", "scanner": "scanner-primary", "fingerprint": "abbbc7212a0ea6df", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-byok-patterns.md"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-c276034528c7f456", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-byok-patterns.md"}, "properties": {"repobilityId": "ee2a34ccb40845fc", "scanner": "scanner-primary", "fingerprint": "c276034528c7f456", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-byok-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18cbe216838914f1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-budget-tracking.md"}, "properties": {"repobilityId": "b60e1edd6aaefd5a", "scanner": "scanner-primary", "fingerprint": "18cbe216838914f1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-budget-tracking.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25540d03e83215f6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-a2a.md"}, "properties": {"repobilityId": "db4401ce7d76d632", "scanner": "scanner-primary", "fingerprint": "25540d03e83215f6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-a2a.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3411f7252c857999", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-v1-features.md"}, "properties": {"repobilityId": "804c057ee8c020fe", "scanner": "scanner-primary", "fingerprint": "3411f7252c857999", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-v1-features.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-f7c3bb24e3f9d649", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-v1-features.md"}, "properties": {"repobilityId": "973f0a2d6abda39e", "scanner": "scanner-primary", "fingerprint": "f7c3bb24e3f9d649", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-v1-features.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-073b26093b6f5f01", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-ux-helpers.md"}, "properties": {"repobilityId": "86ccbbd20b02f30e", "scanner": "scanner-primary", "fingerprint": "073b26093b6f5f01", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-ux-helpers.md"}, "region": {"startLine": 270}}}]}, {"ruleId": "scanner-c36ec02c0b501769", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-observability.md"}, "properties": {"repobilityId": "1c3da11a04835560", "scanner": "scanner-primary", "fingerprint": "c36ec02c0b501769", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-observability.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-67b1eff84c0f5563", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-structured-outputs.md"}, "properties": {"repobilityId": "14645fa0abff673c", "scanner": "scanner-primary", "fingerprint": "67b1eff84c0f5563", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-structured-outputs.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecebad56c756eca2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-baseagent-quick.md"}, "properties": {"repobilityId": "bf92583e55e60a64", "scanner": "scanner-primary", "fingerprint": "ecebad56c756eca2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-baseagent-quick.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12b82219e19679ab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-overview.md"}, "properties": {"repobilityId": "2dd80a9abd41065d", "scanner": "scanner-primary", "fingerprint": "12b82219e19679ab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-l3-overview.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b1d6cd17df92438", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-agents-protocols.md"}, "properties": {"repobilityId": "0b3bd1a0d3774aed", "scanner": "scanner-primary", "fingerprint": "7b1d6cd17df92438", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-agents-protocols.md"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-074a5dcafff1078a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-llm-providers.md"}, "properties": {"repobilityId": "8e7a8aa4a6724198", "scanner": "scanner-primary", "fingerprint": "074a5dcafff1078a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-llm-providers.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02fcc763cd6d471b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-structured-output.md"}, "properties": {"repobilityId": "a2bed36cfccb6f39", "scanner": "scanner-primary", "fingerprint": "02fcc763cd6d471b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-structured-output.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-090cbc3879f93bcf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-chain-of-thought.md"}, "properties": {"repobilityId": "d0ead706aba7237d", "scanner": "scanner-primary", "fingerprint": "090cbc3879f93bcf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-chain-of-thought.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09bb4c1c7ebc9c8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-tools.md"}, "properties": {"repobilityId": "f3c2e2fb32892a95", "scanner": "scanner-primary", "fingerprint": "09bb4c1c7ebc9c8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-tools.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffb23f95a734b7a9", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-common-issues.md"}, "properties": {"repobilityId": "7fff546b4ac30cb2", "scanner": "scanner-primary", "fingerprint": "ffb23f95a734b7a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-common-issues.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-44f50bdc5b81dc1d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-delegate.md"}, "properties": {"repobilityId": "fb8950c90bc5f2a3", "scanner": "scanner-primary", "fingerprint": "44f50bdc5b81dc1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-delegate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78c22852e37feb06", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-catalog-server.md"}, "properties": {"repobilityId": "ec7c61d54f2ce8bb", "scanner": "scanner-primary", "fingerprint": "78c22852e37feb06", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-catalog-server.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9e2b3ab89a080ba", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/l3-plan-dag.md"}, "properties": {"repobilityId": "0dfb1572c8a93498", "scanner": "scanner-primary", "fingerprint": "a9e2b3ab89a080ba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/l3-plan-dag.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd87f2c350b1ebd4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-agent-execution.md"}, "properties": {"repobilityId": "ce101af926faf346", "scanner": "scanner-primary", "fingerprint": "dd87f2c350b1ebd4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-agent-execution.md"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-a2870dbfc301fdbd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-agent-execution.md"}, "properties": {"repobilityId": "d4aa25a308b70eb5", "scanner": "scanner-primary", "fingerprint": "a2870dbfc301fdbd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-agent-execution.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d02c4cf4bade1f4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-trust-eatp.md"}, "properties": {"repobilityId": "c736d5ee07b3c246", "scanner": "scanner-primary", "fingerprint": "4d02c4cf4bade1f4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-trust-eatp.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-fe55c450c069290b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-advanced-patterns.md"}, "properties": {"repobilityId": "2a510c9297c2bf10", "scanner": "scanner-primary", "fingerprint": "fe55c450c069290b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f09998158c02481", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-multi-agent.md"}, "properties": {"repobilityId": "6bcc26b26e1167de", "scanner": "scanner-primary", "fingerprint": "3f09998158c02481", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-multi-agent.md"}, "region": {"startLine": 236}}}]}, {"ruleId": "scanner-14818c406c289e6b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-envelope.md"}, "properties": {"repobilityId": "7b69343a6b76fef4", "scanner": "scanner-primary", "fingerprint": "14818c406c289e6b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-l3-envelope.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eac1d43df480be00", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-l3-factory.md"}, "properties": {"repobilityId": "becbe4da0cd1497c", "scanner": "scanner-primary", "fingerprint": "eac1d43df480be00", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-l3-factory.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95ebd2ef40825cd5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-rag-agent.md"}, "properties": {"repobilityId": "268ba8fbfb46895d", "scanner": "scanner-primary", "fingerprint": "95ebd2ef40825cd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-rag-agent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce47de45b1cec682", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-config-patterns.md"}, "properties": {"repobilityId": "c155c211c6f47efe", "scanner": "scanner-primary", "fingerprint": "ce47de45b1cec682", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-config-patterns.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-77c88c609becdd72", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-persistent-memory.md"}, "properties": {"repobilityId": "11293afeea4a5339", "scanner": "scanner-primary", "fingerprint": "77c88c609becdd72", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-persistent-memory.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c98ffd1662107d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-delegate-vs-baseagent.md"}, "properties": {"repobilityId": "cf87f2e6ff6f2e5c", "scanner": "scanner-primary", "fingerprint": "3c98ffd1662107d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-delegate-vs-baseagent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90b42955f7133ae2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/l3-messaging.md"}, "properties": {"repobilityId": "c2197a79e45cf575", "scanner": "scanner-primary", "fingerprint": "90b42955f7133ae2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/l3-messaging.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6358195f864a6c31", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-cost-tracking.md"}, "properties": {"repobilityId": "52c32f0ef7108f01", "scanner": "scanner-primary", "fingerprint": "6358195f864a6c31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-cost-tracking.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ebb986a20a0bcecb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/SKILL.md"}, "properties": {"repobilityId": "2b049c7f75b89ba3", "scanner": "scanner-primary", "fingerprint": "ebb986a20a0bcecb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26b232d42ac504ab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-pipelines.md"}, "properties": {"repobilityId": "6f8b7c022aac17b9", "scanner": "scanner-primary", "fingerprint": "26b232d42ac504ab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-pipelines.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3a0944afae8d901", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-memory-system.md"}, "properties": {"repobilityId": "e4f948954206e304", "scanner": "scanner-primary", "fingerprint": "b3a0944afae8d901", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-memory-system.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b0cdb105b282874", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-quickstart-template.md"}, "properties": {"repobilityId": "1cfeca78be743ccc", "scanner": "scanner-primary", "fingerprint": "4b0cdb105b282874", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-quickstart-template.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85f20462038d3285", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/04-kaizen/kaizen-observability-hooks.md"}, "properties": {"repobilityId": "d5c69fd697e8e7e6", "scanner": "scanner-primary", "fingerprint": "85f20462038d3285", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-observability-hooks.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-b50f169e87268d9f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-interrupt-mechanism.md"}, "properties": {"repobilityId": "e39c534ccae7ee6c", "scanner": "scanner-primary", "fingerprint": "b50f169e87268d9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-interrupt-mechanism.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38f77dee81bd3a68", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/04-kaizen/kaizen-wrapper-composition.md"}, "properties": {"repobilityId": "92deb27263833111", "scanner": "scanner-primary", "fingerprint": "38f77dee81bd3a68", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/04-kaizen/kaizen-wrapper-composition.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c5739c2b1e76c0fa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-framework-bindings.md"}, "properties": {"repobilityId": "b8414ae4e399b399", "scanner": "scanner-primary", "fingerprint": "c5739c2b1e76c0fa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/28-ruby-bindings/ruby-framework-bindings.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc419380dc7c4bf3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-available-nodes.md"}, "properties": {"repobilityId": "4532ef329f922536", "scanner": "scanner-primary", "fingerprint": "bc419380dc7c4bf3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/28-ruby-bindings/ruby-available-nodes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-723d7b7821d66e07", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/28-ruby-bindings/ruby-eatp-trust.md"}, "properties": {"repobilityId": "01184c4c7f5980d0", "scanner": "scanner-primary", "fingerprint": "723d7b7821d66e07", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/28-ruby-bindings/ruby-eatp-trust.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-82d179d0c7f06ae4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/28-ruby-bindings/ruby-dataflow.md"}, "properties": {"repobilityId": "c53b03deab718aa7", "scanner": "scanner-primary", "fingerprint": "82d179d0c7f06ae4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/28-ruby-bindings/ruby-dataflow.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5922ee7301ffdac", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-governance/governance-trust-durability.md"}, "properties": {"repobilityId": "5312fff32692ff08", "scanner": "scanner-primary", "fingerprint": "a5922ee7301ffdac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-governance/governance-trust-durability.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-b899728ba0c737cd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/10-governance/governance-verification-delegation.md"}, "properties": {"repobilityId": "87d1294e0c2ef0d3", "scanner": "scanner-primary", "fingerprint": "b899728ba0c737cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/10-governance/governance-verification-delegation.md"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-5e701695cd66d267", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/31-error-troubleshooting/error-runtime-execution.md"}, "properties": {"repobilityId": "a789cf5eb0c4267f", "scanner": "scanner-primary", "fingerprint": "5e701695cd66d267", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/31-error-troubleshooting/error-runtime-execution.md"}, "region": {"startLine": 243}}}]}, {"ruleId": "scanner-338ce5a727855fdd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/31-error-troubleshooting/error-v1-migration.md"}, "properties": {"repobilityId": "714f913561b59ed7", "scanner": "scanner-primary", "fingerprint": "338ce5a727855fdd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/31-error-troubleshooting/error-v1-migration.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-118daa4db10d0bcc", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/guides/codex/README.md"}, "properties": {"repobilityId": "833826cab096b946", "scanner": "scanner-primary", "fingerprint": "118daa4db10d0bcc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/codex/README.md"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-0a9a916f2464f35d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/guides/gemini/README.md"}, "properties": {"repobilityId": "66cefa9d48b549db", "scanner": "scanner-primary", "fingerprint": "0a9a916f2464f35d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/gemini/README.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-50a4f1feeb0c505e", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/12-troubleshooting.md"}, "properties": {"repobilityId": "5e07d4fba1e98a29", "scanner": "scanner-primary", "fingerprint": "50a4f1feeb0c505e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/claude-code/12-troubleshooting.md"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-bb22cba88fb37586", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/07-the-hook-system.md"}, "properties": {"repobilityId": "781e4cfbcf6a75d8", "scanner": "scanner-primary", "fingerprint": "bb22cba88fb37586", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/claude-code/07-the-hook-system.md"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-6bba3d2fc2c37c14", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/guides/claude-code/README.md"}, "properties": {"repobilityId": "c2a7d1d73b8139a6", "scanner": "scanner-primary", "fingerprint": "6bba3d2fc2c37c14", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/claude-code/README.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-21424546a777b8e3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/guides/claude-code/10-daily-workflows.md"}, "properties": {"repobilityId": "771ff01cae3e64ae", "scanner": "scanner-primary", "fingerprint": "21424546a777b8e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/claude-code/10-daily-workflows.md"}, "region": {"startLine": 309}}}]}, {"ruleId": "scanner-9d6305eda6026884", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/guides/claude-code/04-the-command-system.md"}, "properties": {"repobilityId": "56fb80e40b9a0053", "scanner": "scanner-primary", "fingerprint": "9d6305eda6026884", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/claude-code/04-the-command-system.md"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-219e81e85083a864", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/guides/claude-code/03-installation-and-first-run.md"}, "properties": {"repobilityId": "feacea2c45c7f34f", "scanner": "scanner-primary", "fingerprint": "219e81e85083a864", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/claude-code/03-installation-and-first-run.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-261232b1d91efef6", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/guides/rule-extracts/evidence-first-claims.md"}, "properties": {"repobilityId": "023dbd1225e5fefd", "scanner": "scanner-primary", "fingerprint": "261232b1d91efef6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/rule-extracts/evidence-first-claims.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-a18e878712aa3f30", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/guides/rule-extracts/observability.md"}, "properties": {"repobilityId": "2841a304020a381d", "scanner": "scanner-primary", "fingerprint": "a18e878712aa3f30", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/rule-extracts/observability.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28f598d109649153", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/guides/rule-extracts/specs-authority.md"}, "properties": {"repobilityId": "ab3d9984c62d26ce", "scanner": "scanner-primary", "fingerprint": "28f598d109649153", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/rule-extracts/specs-authority.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c0df38f23c424625", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/guides/rule-extracts/zero-tolerance.md"}, "properties": {"repobilityId": "71d1c5d34d004d18", "scanner": "scanner-primary", "fingerprint": "c0df38f23c424625", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/guides/rule-extracts/zero-tolerance.md"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-22bb1fcb1abc95c1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/prompts/certify.md"}, "properties": {"repobilityId": "3ce48d022951d8e8", "scanner": "scanner-primary", "fingerprint": "22bb1fcb1abc95c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/prompts/certify.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-908ac932fce5c944", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/prompts/ws.md"}, "properties": {"repobilityId": "592d1b54cc16193a", "scanner": "scanner-primary", "fingerprint": "908ac932fce5c944", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/prompts/ws.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bf1fd4819c7f3bd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/prompts/specialist-align.md"}, "properties": {"repobilityId": "e93b32b4ab778a79", "scanner": "scanner-primary", "fingerprint": "5bf1fd4819c7f3bd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/prompts/specialist-align.md"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-9e6d41a7496b6f30", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/prompts/learn.md"}, "properties": {"repobilityId": "8b3dfe226b204c5d", "scanner": "scanner-primary", "fingerprint": "9e6d41a7496b6f30", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/prompts/learn.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a782ee73a301ef8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/prompts/specialist-value-auditor.md"}, "properties": {"repobilityId": "eca848378fbf3c5e", "scanner": "scanner-primary", "fingerprint": "1a782ee73a301ef8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/prompts/specialist-value-auditor.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f64f5999aa0d3590", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/custom-node-guide.md"}, "properties": {"repobilityId": "0a262b0779507bef", "scanner": "scanner-primary", "fingerprint": "f64f5999aa0d3590", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/custom-node-guide.md"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-d9a7bd42fd0920b3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/runtime-watchdog.md"}, "properties": {"repobilityId": "c4cc299fb6a90142", "scanner": "scanner-primary", "fingerprint": "d9a7bd42fd0920b3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/runtime-watchdog.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-21753a18c18b8010", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/parameter-scoping.md"}, "properties": {"repobilityId": "83409a045ae611aa", "scanner": "scanner-primary", "fingerprint": "21753a18c18b8010", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/parameter-scoping.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-051ad27b7de6aa9b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/pythoncode-best-practices.md"}, "properties": {"repobilityId": "5290bd0d39f223a8", "scanner": "scanner-primary", "fingerprint": "051ad27b7de6aa9b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/pythoncode-best-practices.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-175a8fa951ea28f9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/kailash-imports.md"}, "properties": {"repobilityId": "f80ef0f2408feb4c", "scanner": "scanner-primary", "fingerprint": "175a8fa951ea28f9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/kailash-imports.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e666fc26472dd56b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/01-core-sdk/production-readiness-patterns.md"}, "properties": {"repobilityId": "62c30f0af3278ce1", "scanner": "scanner-primary", "fingerprint": "e666fc26472dd56b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/production-readiness-patterns.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-c86a6f81a85774f6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/01-core-sdk/runtime-progress.md"}, "properties": {"repobilityId": "ec2a458b6fc46e97", "scanner": "scanner-primary", "fingerprint": "c86a6f81a85774f6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/01-core-sdk/runtime-progress.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3dd90b38ab9b5fe8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/15-enterprise-infrastructure/dialect-portable-sql.md"}, "properties": {"repobilityId": "662a1aeb9157e898", "scanner": "scanner-primary", "fingerprint": "3dd90b38ab9b5fe8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/15-enterprise-infrastructure/dialect-portable-sql.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d03ebd6947b3f3f7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/progressive-infrastructure.md"}, "properties": {"repobilityId": "b4e43dacc21f7e4a", "scanner": "scanner-primary", "fingerprint": "d03ebd6947b3f3f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/15-enterprise-infrastructure/progressive-infrastructure.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-049bb119f962e343", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/idempotency-patterns.md"}, "properties": {"repobilityId": "f5b17b5f953d9a91", "scanner": "scanner-primary", "fingerprint": "049bb119f962e343", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/15-enterprise-infrastructure/idempotency-patterns.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-682b619a23313225", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/15-enterprise-infrastructure/SKILL.md"}, "properties": {"repobilityId": "9c21ae067538a92d", "scanner": "scanner-primary", "fingerprint": "682b619a23313225", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/15-enterprise-infrastructure/SKILL.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-0c7cefd09d3915c8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/35-kailash-align/align-serving.md"}, "properties": {"repobilityId": "3f9eba9ec38ad55f", "scanner": "scanner-primary", "fingerprint": "0c7cefd09d3915c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/35-kailash-align/align-serving.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b78449b80176421e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/35-kailash-align/align-adapter-registry.md"}, "properties": {"repobilityId": "e485be3430bcdf0e", "scanner": "scanner-primary", "fingerprint": "b78449b80176421e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/35-kailash-align/align-adapter-registry.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ebd6670ff55111ee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/34-kailash-ml/ml-training-pipeline.md"}, "properties": {"repobilityId": "e34f84f911d09e41", "scanner": "scanner-primary", "fingerprint": "ebd6670ff55111ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/34-kailash-ml/ml-training-pipeline.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab84257480c9c869", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-models.md"}, "properties": {"repobilityId": "52eecfa471efef0b", "scanner": "scanner-primary", "fingerprint": "ab84257480c9c869", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-models.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-389a88908a658807", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-nexus-integration.md"}, "properties": {"repobilityId": "2098840004ac120e", "scanner": "scanner-primary", "fingerprint": "389a88908a658807", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-nexus-integration.md"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-58632459aa94b628", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-retention.md"}, "properties": {"repobilityId": "4f16d23442f85734", "scanner": "scanner-primary", "fingerprint": "58632459aa94b628", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-retention.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06bc82026e03a990", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-connection-config.md"}, "properties": {"repobilityId": "ee43e6ab75498b47", "scanner": "scanner-primary", "fingerprint": "06bc82026e03a990", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-connection-config.md"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-76ef175070221e3e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-error-enhancer.md"}, "properties": {"repobilityId": "df7b37938f311ab9", "scanner": "scanner-primary", "fingerprint": "76ef175070221e3e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-error-enhancer.md"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-4802159d299007c7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-fabric-engine.md"}, "properties": {"repobilityId": "3c9219a3a73f6065", "scanner": "scanner-primary", "fingerprint": "4802159d299007c7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-fabric-engine.md"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-f6e2c9de72875a2d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-cli-commands.md"}, "properties": {"repobilityId": "86544288ae0599be", "scanner": "scanner-primary", "fingerprint": "f6e2c9de72875a2d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-cli-commands.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35cb4a5fc5a6261f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-multi-instance.md"}, "properties": {"repobilityId": "b719fa0f25d98394", "scanner": "scanner-primary", "fingerprint": "35cb4a5fc5a6261f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-multi-instance.md"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-0421e98281b332af", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-debug-agent.md"}, "properties": {"repobilityId": "8bc5810d95cd8648", "scanner": "scanner-primary", "fingerprint": "0421e98281b332af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-debug-agent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03970c52f60d8f9d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-queries.md"}, "properties": {"repobilityId": "d3721d8d4d359ab8", "scanner": "scanner-primary", "fingerprint": "03970c52f60d8f9d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-queries.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-241bf2dd185cc85b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-inspector.md"}, "properties": {"repobilityId": "b77abdb5b8c28bc3", "scanner": "scanner-primary", "fingerprint": "241bf2dd185cc85b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-inspector.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2f19ba4bf13bf00", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-existing-database.md"}, "properties": {"repobilityId": "28c7aa906c43e69d", "scanner": "scanner-primary", "fingerprint": "a2f19ba4bf13bf00", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-existing-database.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-bfe326dcfe003933", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-fabric-cache-consumers.md"}, "properties": {"repobilityId": "1592a51b92a7223b", "scanner": "scanner-primary", "fingerprint": "bfe326dcfe003933", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-fabric-cache-consumers.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e2f9a198c6c2b93", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-multi-tenancy.md"}, "properties": {"repobilityId": "0c1529dce19d3e66", "scanner": "scanner-primary", "fingerprint": "7e2f9a198c6c2b93", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-multi-tenancy.md"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-8bc5104eb50cc982", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-aggregation.md"}, "properties": {"repobilityId": "f0e3a99715235946", "scanner": "scanner-primary", "fingerprint": "8bc5104eb50cc982", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-aggregation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71cc37a405bead76", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-transactions.md"}, "properties": {"repobilityId": "87d5d74f0656c275", "scanner": "scanner-primary", "fingerprint": "71cc37a405bead76", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-transactions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eff8a354f0a929d6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-connection-isolation.md"}, "properties": {"repobilityId": "1767c02f1e1a11ba", "scanner": "scanner-primary", "fingerprint": "eff8a354f0a929d6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-connection-isolation.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa11931a60f7a000", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-migrations-quick.md"}, "properties": {"repobilityId": "9ed936fa90544d16", "scanner": "scanner-primary", "fingerprint": "aa11931a60f7a000", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-migrations-quick.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-3c210c4c93b0fa4b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-file-import.md"}, "properties": {"repobilityId": "07adb8e64bac07fe", "scanner": "scanner-primary", "fingerprint": "3c210c4c93b0fa4b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-file-import.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74d173865058c1bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-result-access.md"}, "properties": {"repobilityId": "572221ba432abc92", "scanner": "scanner-primary", "fingerprint": "74d173865058c1bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-result-access.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0839da618cf786c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-deployment.md"}, "properties": {"repobilityId": "c30d5087955844f3", "scanner": "scanner-primary", "fingerprint": "b0839da618cf786c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-deployment.md"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-94a22c2515ca1f1e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-gotchas.md"}, "properties": {"repobilityId": "8b6aff734c447604", "scanner": "scanner-primary", "fingerprint": "94a22c2515ca1f1e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-gotchas.md"}, "region": {"startLine": 458}}}]}, {"ruleId": "scanner-bb26deb7bc530659", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-dialects.md"}, "properties": {"repobilityId": "9798863896f1cc01", "scanner": "scanner-primary", "fingerprint": "bb26deb7bc530659", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-dialects.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6339af1a9c5fa077", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/02-dataflow/dataflow-advanced-patterns.md"}, "properties": {"repobilityId": "7b158b3a3960b947", "scanner": "scanner-primary", "fingerprint": "6339af1a9c5fa077", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad798598b2a58571", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-performance.md"}, "properties": {"repobilityId": "45ccb9b084835cbf", "scanner": "scanner-primary", "fingerprint": "ad798598b2a58571", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-performance.md"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-b083140abcd07080", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/02-dataflow/dataflow-quickstart.md"}, "properties": {"repobilityId": "fc8bb1871c2b61cf", "scanner": "scanner-primary", "fingerprint": "b083140abcd07080", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/02-dataflow/dataflow-quickstart.md"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-632db3c4006bd8ce", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-transaction-reference.md"}, "properties": {"repobilityId": "1e659a3d6b84a926", "scanner": "scanner-primary", "fingerprint": "632db3c4006bd8ce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/08-nodes-reference/nodes-transaction-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a50b5cfc485904fc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-ai-reference.md"}, "properties": {"repobilityId": "c87f1fdedeff88ad", "scanner": "scanner-primary", "fingerprint": "a50b5cfc485904fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/08-nodes-reference/nodes-ai-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-29a8d5b86add4c36", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-database-reference.md"}, "properties": {"repobilityId": "09609dd1c4b0604d", "scanner": "scanner-primary", "fingerprint": "29a8d5b86add4c36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/08-nodes-reference/nodes-database-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0b47b6908e79646", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-code-reference.md"}, "properties": {"repobilityId": "66298d2d4f168d83", "scanner": "scanner-primary", "fingerprint": "e0b47b6908e79646", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/08-nodes-reference/nodes-code-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-687112031c364af1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/08-nodes-reference/nodes-quick-index.md"}, "properties": {"repobilityId": "1bc7084065941278", "scanner": "scanner-primary", "fingerprint": "687112031c364af1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/08-nodes-reference/nodes-quick-index.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bf6b48d6c96818b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/12-testing-strategies/testing-patterns.md"}, "properties": {"repobilityId": "b555683030f48895", "scanner": "scanner-primary", "fingerprint": "4bf6b48d6c96818b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/12-testing-strategies/testing-patterns.md"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-af89eb6ea7a4844e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/29-pact/pact-access-enforcement.md"}, "properties": {"repobilityId": "00af90cba12363b4", "scanner": "scanner-primary", "fingerprint": "af89eb6ea7a4844e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/29-pact/pact-access-enforcement.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-31d1121fc3e5d168", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/29-pact/pact-envelopes.md"}, "properties": {"repobilityId": "42089535dd240e47", "scanner": "scanner-primary", "fingerprint": "31d1121fc3e5d168", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/29-pact/pact-envelopes.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cef963e884c84b88", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/26-eatp-reference/eatp-posture-stores.md"}, "properties": {"repobilityId": "e259b98a7f8f6893", "scanner": "scanner-primary", "fingerprint": "cef963e884c84b88", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/26-eatp-reference/eatp-posture-stores.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9119e59cf862cdd5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/26-eatp-reference/eatp-sdk-patterns.md"}, "properties": {"repobilityId": "01d9b4d229a9465a", "scanner": "scanner-primary", "fingerprint": "9119e59cf862cdd5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/26-eatp-reference/eatp-sdk-patterns.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-4499e81dd0919e1c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/26-eatp-reference/eatp-security-patterns.md"}, "properties": {"repobilityId": "4ac9228bc387409b", "scanner": "scanner-primary", "fingerprint": "4499e81dd0919e1c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/26-eatp-reference/eatp-security-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c2af55d1ee22a878", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/26-eatp-reference/eatp-sdk-quickstart.md"}, "properties": {"repobilityId": "dc0a499bbdf5b5a6", "scanner": "scanner-primary", "fingerprint": "c2af55d1ee22a878", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/26-eatp-reference/eatp-sdk-quickstart.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-274ee83827c7a151", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/distributed-transactions.md"}, "properties": {"repobilityId": "2e7240331e16f73e", "scanner": "scanner-primary", "fingerprint": "274ee83827c7a151", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/distributed-transactions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0adafe6ee796ead", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/asyncsql-advanced.md"}, "properties": {"repobilityId": "e4eebdb9d3176340", "scanner": "scanner-primary", "fingerprint": "d0adafe6ee796ead", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/asyncsql-advanced.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-379f604384153d39", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/query-routing.md"}, "properties": {"repobilityId": "a6faa80a7251f3c8", "scanner": "scanner-primary", "fingerprint": "379f604384153d39", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/query-routing.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5336b9c2832c3239", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/enterprise-mcp.md"}, "properties": {"repobilityId": "af277b77fc6207f5", "scanner": "scanner-primary", "fingerprint": "5336b9c2832c3239", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/enterprise-mcp.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79ba00f6fb143fb0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/directoryreader-patterns.md"}, "properties": {"repobilityId": "1015cfa16fc9c8ef", "scanner": "scanner-primary", "fingerprint": "79ba00f6fb143fb0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/directoryreader-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dacf0782cd133801", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/mcp-resource-subscriptions.md"}, "properties": {"repobilityId": "e2a3abf55ddd9d4a", "scanner": "scanner-primary", "fingerprint": "dacf0782cd133801", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/mcp-resource-subscriptions.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-999f6a0ad732b18b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/SKILL.md"}, "properties": {"repobilityId": "890444074310f7b2", "scanner": "scanner-primary", "fingerprint": "999f6a0ad732b18b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-999b59a9c2649d1d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/06-cheatsheets/production-patterns.md"}, "properties": {"repobilityId": "c08fa653d56f330f", "scanner": "scanner-primary", "fingerprint": "999b59a9c2649d1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/production-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c3b450aaeefbd6b5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/06-cheatsheets/multi-tenancy-patterns.md"}, "properties": {"repobilityId": "7bc7ac6c17be4707", "scanner": "scanner-primary", "fingerprint": "c3b450aaeefbd6b5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/06-cheatsheets/multi-tenancy-patterns.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-52936d1e8bab80c2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-patterns.md"}, "properties": {"repobilityId": "7944d8e00c0056a9", "scanner": "scanner-primary", "fingerprint": "52936d1e8bab80c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/10-deployment-git/deployment-patterns.md"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-6c5c7c9e94477597", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-docker-quick.md"}, "properties": {"repobilityId": "20818b2ec57af844", "scanner": "scanner-primary", "fingerprint": "6c5c7c9e94477597", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/10-deployment-git/deployment-docker-quick.md"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-f8b2941b33795548", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .codex/skills/10-deployment-git/ci-runner-troubleshooting.md"}, "properties": {"repobilityId": "d74806e8142c6f7f", "scanner": "scanner-primary", "fingerprint": "f8b2941b33795548", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/10-deployment-git/ci-runner-troubleshooting.md"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-9115e362c8e29a66", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/project-management.md"}, "properties": {"repobilityId": "195ccd80ad558106", "scanner": "scanner-primary", "fingerprint": "9115e362c8e29a66", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/10-deployment-git/project-management.md"}, "region": {"startLine": 475}}}]}, {"ruleId": "scanner-d2ad544a2ec967da", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "properties": {"repobilityId": "1e8756a6559fa38a", "scanner": "scanner-primary", "fingerprint": "d2ad544a2ec967da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-7e7c7f3558cd1ec0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "properties": {"repobilityId": "9fc4716caccb9e5f", "scanner": "scanner-primary", "fingerprint": "7e7c7f3558cd1ec0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/10-deployment-git/deployment-kubernetes-quick.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb1729dfc0591540", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/skill-authoring/proximity-band-named-rationale-template.md"}, "properties": {"repobilityId": "0870d13723e09b45", "scanner": "scanner-primary", "fingerprint": "fb1729dfc0591540", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/skill-authoring/proximity-band-named-rationale-template.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4dd6123825ccc0d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-comparison.md"}, "properties": {"repobilityId": "f66e3962a321e355", "scanner": "scanner-primary", "fingerprint": "4dd6123825ccc0d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-comparison.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-181cfc16cf6b912f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-workflow-registration.md"}, "properties": {"repobilityId": "53337b012b5cf588", "scanner": "scanner-primary", "fingerprint": "181cfc16cf6b912f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-workflow-registration.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76a7dd04ea5646b4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/03-nexus/nexus-security-best-practices.md"}, "properties": {"repobilityId": "f9d668615a50de46", "scanner": "scanner-primary", "fingerprint": "76a7dd04ea5646b4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-security-best-practices.md"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-1200f43d4b8b7247", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/03-nexus/nexus-dataflow-integration.md"}, "properties": {"repobilityId": "e2c94355ed07659a", "scanner": "scanner-primary", "fingerprint": "1200f43d4b8b7247", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-dataflow-integration.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-156eb111591e9c3d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-config-options.md"}, "properties": {"repobilityId": "b2ef5d846b1207a0", "scanner": "scanner-primary", "fingerprint": "156eb111591e9c3d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-config-options.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67424c2bded5808a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-api-patterns.md"}, "properties": {"repobilityId": "01b5d07850198f89", "scanner": "scanner-primary", "fingerprint": "67424c2bded5808a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-api-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79bbacc8808369ea", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-plugins.md"}, "properties": {"repobilityId": "f4eb498f92cfc1bf", "scanner": "scanner-primary", "fingerprint": "79bbacc8808369ea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-plugins.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ab8c6f93e22c6a0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-eventbus-phase2.md"}, "properties": {"repobilityId": "cdaee3113711054d", "scanner": "scanner-primary", "fingerprint": "1ab8c6f93e22c6a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-eventbus-phase2.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e97c67433ff2ce67", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/03-nexus/nexus-mcp-channel.md"}, "properties": {"repobilityId": "8c83f0ba93eda68e", "scanner": "scanner-primary", "fingerprint": "e97c67433ff2ce67", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/03-nexus/nexus-mcp-channel.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-20af1e6ef78bc381", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/framework-first/SKILL.md"}, "properties": {"repobilityId": "40194e9bb67d543a", "scanner": "scanner-primary", "fingerprint": "20af1e6ef78bc381", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/framework-first/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a21b169682d4a981", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-security.md"}, "properties": {"repobilityId": "ba4014cc53f33480", "scanner": "scanner-primary", "fingerprint": "a21b169682d4a981", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/17-gold-standards/gold-security.md"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-1d7b524d566ee9f5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-mocking-policy.md"}, "properties": {"repobilityId": "61efc1529ad1e01d", "scanner": "scanner-primary", "fingerprint": "1d7b524d566ee9f5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/17-gold-standards/gold-mocking-policy.md"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-0e185015bd5999ac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/17-gold-standards/gold-absolute-imports.md"}, "properties": {"repobilityId": "1b1398024debce72", "scanner": "scanner-primary", "fingerprint": "0e185015bd5999ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/17-gold-standards/gold-absolute-imports.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a4aa375b2834fae", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/17-gold-standards/gold-documentation.md"}, "properties": {"repobilityId": "b9beca66e028755a", "scanner": "scanner-primary", "fingerprint": "1a4aa375b2834fae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/17-gold-standards/gold-documentation.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-bce023f9a9ea9b47", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/32-trust-posture/rule-authoring-checklist.md"}, "properties": {"repobilityId": "e076e236b9d05222", "scanner": "scanner-primary", "fingerprint": "bce023f9a9ea9b47", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/32-trust-posture/rule-authoring-checklist.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4490f68f64d812c1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/32-trust-posture/SKILL.md"}, "properties": {"repobilityId": "268b78040a3cf901", "scanner": "scanner-primary", "fingerprint": "4490f68f64d812c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/32-trust-posture/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d4a581d12af1b72e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/18-security-patterns/SKILL.md"}, "properties": {"repobilityId": "9649b9c28fb729a6", "scanner": "scanner-primary", "fingerprint": "d4a581d12af1b72e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/18-security-patterns/SKILL.md"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-a0be9a10924ef747", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/41-onboard/SKILL.md"}, "properties": {"repobilityId": "794a1a71d1a43c31", "scanner": "scanner-primary", "fingerprint": "a0be9a10924ef747", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/41-onboard/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f8e1a77c6e24f23", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/16-validation-patterns/validate-dataflow-patterns.md"}, "properties": {"repobilityId": "570badbdf089a425", "scanner": "scanner-primary", "fingerprint": "3f8e1a77c6e24f23", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/16-validation-patterns/validate-dataflow-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6f7f41319c35939", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/16-validation-patterns/validate-security.md"}, "properties": {"repobilityId": "24ee12967ca72cc0", "scanner": "scanner-primary", "fingerprint": "a6f7f41319c35939", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/16-validation-patterns/validate-security.md"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-b3df9613b31cbd26", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/16-validation-patterns/SKILL.md"}, "properties": {"repobilityId": "0c0f5ffc3a80a289", "scanner": "scanner-primary", "fingerprint": "b3df9613b31cbd26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/16-validation-patterns/SKILL.md"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-023d1cde0a05b408", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-platform-map.md"}, "properties": {"repobilityId": "4e46422085ec0f43", "scanner": "scanner-primary", "fingerprint": "023d1cde0a05b408", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/05-kailash-mcp/mcp-platform-map.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9a690f68a60ef0dc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "properties": {"repobilityId": "3fe198d21f61013b", "scanner": "scanner-primary", "fingerprint": "9a690f68a60ef0dc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-d715abc86d9a3f31", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "properties": {"repobilityId": "6c6d1c9f8d2c0cff", "scanner": "scanner-primary", "fingerprint": "d715abc86d9a3f31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/05-kailash-mcp/mcp-advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b531b448a658fc2a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/05-kailash-mcp/mcp-authentication.md"}, "properties": {"repobilityId": "1833ab8447a6a63b", "scanner": "scanner-primary", "fingerprint": "b531b448a658fc2a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/05-kailash-mcp/mcp-authentication.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-e8e0dcd2a2635152", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/05-kailash-mcp/mcp-platform-overview.md"}, "properties": {"repobilityId": "e666ed7440ef5c8a", "scanner": "scanner-primary", "fingerprint": "e8e0dcd2a2635152", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/05-kailash-mcp/mcp-platform-overview.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b370c165ac39fec", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-orchestration.md"}, "properties": {"repobilityId": "b789e5ee66ef34ac", "scanner": "scanner-primary", "fingerprint": "3b370c165ac39fec", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-orchestration.md"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-d26168cfe025a769", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-byok-patterns.md"}, "properties": {"repobilityId": "5240ae5df314e302", "scanner": "scanner-primary", "fingerprint": "d26168cfe025a769", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-byok-patterns.md"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-1a2a5e87d9f7421b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-byok-patterns.md"}, "properties": {"repobilityId": "47cb7c4427a6f885", "scanner": "scanner-primary", "fingerprint": "1a2a5e87d9f7421b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-byok-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-578bf64ae250fc1c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-budget-tracking.md"}, "properties": {"repobilityId": "205b22a89b42392c", "scanner": "scanner-primary", "fingerprint": "578bf64ae250fc1c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-budget-tracking.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-70eecbf08f7082f5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-v1-features.md"}, "properties": {"repobilityId": "d2f3a4a21efafce1", "scanner": "scanner-primary", "fingerprint": "70eecbf08f7082f5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-v1-features.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-8d9a0d332a7b7617", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-v1-features.md"}, "properties": {"repobilityId": "147d57a5f410f686", "scanner": "scanner-primary", "fingerprint": "8d9a0d332a7b7617", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-v1-features.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-957737628d0904fd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-ux-helpers.md"}, "properties": {"repobilityId": "d57fa56b5cceb7d3", "scanner": "scanner-primary", "fingerprint": "957737628d0904fd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-ux-helpers.md"}, "region": {"startLine": 270}}}]}, {"ruleId": "scanner-54b506a9e57b55df", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-observability.md"}, "properties": {"repobilityId": "77131c50e82c067e", "scanner": "scanner-primary", "fingerprint": "54b506a9e57b55df", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-observability.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-0decb1d599b3769b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-structured-outputs.md"}, "properties": {"repobilityId": "64b03bdd5675cb78", "scanner": "scanner-primary", "fingerprint": "0decb1d599b3769b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-structured-outputs.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fd05500f6d4c17a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-baseagent-quick.md"}, "properties": {"repobilityId": "7207f1c665acb138", "scanner": "scanner-primary", "fingerprint": "2fd05500f6d4c17a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-baseagent-quick.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d287f10a99d5ffb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-overview.md"}, "properties": {"repobilityId": "bc138631c46e3b27", "scanner": "scanner-primary", "fingerprint": "5d287f10a99d5ffb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-l3-overview.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a237cda1019ce601", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-chain-of-thought.md"}, "properties": {"repobilityId": "b845ffb9d6e9d46b", "scanner": "scanner-primary", "fingerprint": "a237cda1019ce601", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-chain-of-thought.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd5df7fb139bf02c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-common-issues.md"}, "properties": {"repobilityId": "1147bcc2958f6a88", "scanner": "scanner-primary", "fingerprint": "bd5df7fb139bf02c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-common-issues.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-86ce4df4b00ad3cc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-delegate.md"}, "properties": {"repobilityId": "6343f7ebfd79cafd", "scanner": "scanner-primary", "fingerprint": "86ce4df4b00ad3cc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-delegate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b27a621e04076723", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-catalog-server.md"}, "properties": {"repobilityId": "ebd0bbd5e28fa617", "scanner": "scanner-primary", "fingerprint": "b27a621e04076723", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-catalog-server.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d1d8927f3963b432", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-agent-execution.md"}, "properties": {"repobilityId": "74ff21f3294d2d67", "scanner": "scanner-primary", "fingerprint": "d1d8927f3963b432", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-agent-execution.md"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-0bcddc5a1c6a81b4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-agent-execution.md"}, "properties": {"repobilityId": "f604c2f913513e56", "scanner": "scanner-primary", "fingerprint": "0bcddc5a1c6a81b4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-agent-execution.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ca39262dfe3cc8e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-trust-eatp.md"}, "properties": {"repobilityId": "c11c078056b0b818", "scanner": "scanner-primary", "fingerprint": "6ca39262dfe3cc8e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-trust-eatp.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-76fba22f9bcbe6e8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-advanced-patterns.md"}, "properties": {"repobilityId": "9ce62b64560b7f96", "scanner": "scanner-primary", "fingerprint": "76fba22f9bcbe6e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-advanced-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c629a67d7d2ca346", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-envelope.md"}, "properties": {"repobilityId": "fbb45349c7ed7434", "scanner": "scanner-primary", "fingerprint": "c629a67d7d2ca346", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-l3-envelope.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-55e9b127cc2a506e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-l3-factory.md"}, "properties": {"repobilityId": "d094bf739096a0c6", "scanner": "scanner-primary", "fingerprint": "55e9b127cc2a506e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-l3-factory.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40124f3a84dec848", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-rag-agent.md"}, "properties": {"repobilityId": "0705e76b32aa40d4", "scanner": "scanner-primary", "fingerprint": "40124f3a84dec848", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-rag-agent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b25dd387f499703", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-config-patterns.md"}, "properties": {"repobilityId": "de3177834e1157f7", "scanner": "scanner-primary", "fingerprint": "6b25dd387f499703", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-config-patterns.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-6eb9c9443f44c5cd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-persistent-memory.md"}, "properties": {"repobilityId": "8aaee7b3f596580c", "scanner": "scanner-primary", "fingerprint": "6eb9c9443f44c5cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-persistent-memory.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7bb8ef6eefb49b1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-delegate-vs-baseagent.md"}, "properties": {"repobilityId": "209fd79443e45b78", "scanner": "scanner-primary", "fingerprint": "b7bb8ef6eefb49b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-delegate-vs-baseagent.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c3bef48ccf665bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-cost-tracking.md"}, "properties": {"repobilityId": "f18d9c1948ed61b0", "scanner": "scanner-primary", "fingerprint": "2c3bef48ccf665bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-cost-tracking.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-350f8d73226a0ced", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/SKILL.md"}, "properties": {"repobilityId": "618a7a4df2e921e5", "scanner": "scanner-primary", "fingerprint": "350f8d73226a0ced", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66f3d4ee2522f256", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-memory-system.md"}, "properties": {"repobilityId": "6cbb303c3a7b07a5", "scanner": "scanner-primary", "fingerprint": "66f3d4ee2522f256", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-memory-system.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d910e5ae6d1e43ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-quickstart-template.md"}, "properties": {"repobilityId": "5293a9c1ff2cdae2", "scanner": "scanner-primary", "fingerprint": "d910e5ae6d1e43ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-quickstart-template.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97a152987fd84ae2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/04-kaizen/kaizen-observability-hooks.md"}, "properties": {"repobilityId": "8028f3b8f133d9f0", "scanner": "scanner-primary", "fingerprint": "97a152987fd84ae2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-observability-hooks.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-9e3895bb1a75999f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-interrupt-mechanism.md"}, "properties": {"repobilityId": "f4916bbc392213a5", "scanner": "scanner-primary", "fingerprint": "9e3895bb1a75999f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-interrupt-mechanism.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3e7ee14706e5e6f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/04-kaizen/kaizen-wrapper-composition.md"}, "properties": {"repobilityId": "030aa45c9c266fe0", "scanner": "scanner-primary", "fingerprint": "e3e7ee14706e5e6f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/04-kaizen/kaizen-wrapper-composition.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3a93052c47e4454", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .codex/skills/31-error-troubleshooting/error-runtime-execution.md"}, "properties": {"repobilityId": "12542483bb4fdbb1", "scanner": "scanner-primary", "fingerprint": "b3a93052c47e4454", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/31-error-troubleshooting/error-runtime-execution.md"}, "region": {"startLine": 243}}}]}, {"ruleId": "scanner-4f3eb8ff183e2259", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .codex/skills/31-error-troubleshooting/error-v1-migration.md"}, "properties": {"repobilityId": "7615030937c17110", "scanner": "scanner-primary", "fingerprint": "4f3eb8ff183e2259", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "codex_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".codex/skills/31-error-troubleshooting/error-v1-migration.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-916116b7055a9271", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/proximity-band-budget/rule-11-helper.mjs:4"}, "properties": {"repobilityId": "0d4f69af70ba7d60", "scanner": "scanner-primary", "fingerprint": "916116b7055a9271", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20735aa870c20a1a", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/scan-synced-disclosure/run.mjs:76"}, "properties": {"repobilityId": "abf14e2a3d9aba9d", "scanner": "scanner-primary", "fingerprint": "20735aa870c20a1a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-965d99040842695c", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/validate-emit/run.mjs:306"}, "properties": {"repobilityId": "a1be4eacfe768553", "scanner": "scanner-primary", "fingerprint": "965d99040842695c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5407c17c2fbe9a42", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/codex-dispatcher/run.mjs:32"}, "properties": {"repobilityId": "8ab8b2bfd87ced0d", "scanner": "scanner-primary", "fingerprint": "5407c17c2fbe9a42", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8dc4c18ea1e93df1", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/validate-proximity-band/run.mjs:160"}, "properties": {"repobilityId": "4c1cceb6e2f02291", "scanner": "scanner-primary", "fingerprint": "8dc4c18ea1e93df1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dad78982fc7d8fb8", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/variant-overlay/run.mjs:123"}, "properties": {"repobilityId": "55bd2139712b97f2", "scanner": "scanner-primary", "fingerprint": "dad78982fc7d8fb8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d6638ec1afdeb70c", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/validate-xref-integrity/run.mjs:236"}, "properties": {"repobilityId": "70dedfcd0e829def", "scanner": "scanner-primary", "fingerprint": "d6638ec1afdeb70c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-95700020a38d7b30", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/audit-fixtures/forest-ledger/run.mjs:156"}, "properties": {"repobilityId": "6f3e63be8b224def", "scanner": "scanner-primary", "fingerprint": "95700020a38d7b30", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c7fcb6a7337baf1", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/audit-fixtures/validate-extraction-history/run.mjs:250"}, "properties": {"repobilityId": "4c2f79e30adee5e5", "scanner": "scanner-primary", "fingerprint": "2c7fcb6a7337baf1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-da6a16bb1240707d", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/audit-fixtures/strip-build-internal/run.mjs:4"}, "properties": {"repobilityId": "a8edbab7177f1b74", "scanner": "scanner-primary", "fingerprint": "da6a16bb1240707d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-445d855b46d23e76", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/fixtures/validator-13/shape-c-mcp-return.fixture.js:4"}, "properties": {"repobilityId": "7f0b8a76c5ef74d5", "scanner": "scanner-primary", "fingerprint": "445d855b46d23e76", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8cb025fd87c67162", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/fixtures/validator-13/shape-b-two-layer.fixture.js:4"}, "properties": {"repobilityId": "cedb99f55989a8b4", "scanner": "scanner-primary", "fingerprint": "8cb025fd87c67162", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b3f87eaa5177bf65", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/signing-mutation-guard.js:144"}, "properties": {"repobilityId": "97d3a6ca6a157986", "scanner": "scanner-primary", "fingerprint": "b3f87eaa5177bf65", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ea76b15e3f5bac3b", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/journal-write-guard.js:75"}, "properties": {"repobilityId": "7fc9a356f5ce1d90", "scanner": "scanner-primary", "fingerprint": "ea76b15e3f5bac3b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a9bd93044cbf0a40", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/journal-write-guard.js:391"}, "properties": {"repobilityId": "01dd3a1ba97f10e0", "scanner": "scanner-primary", "fingerprint": "a9bd93044cbf0a40", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-accbd2fbe21792d3", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/detect-violations.js:26"}, "properties": {"repobilityId": "8f4cdd715512452a", "scanner": "scanner-primary", "fingerprint": "accbd2fbe21792d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-be694c825d5583dc", "level": "none", "message": {"text": "Commented-code block (9 lines) in .claude/hooks/adjacency-heartbeat.js:72"}, "properties": {"repobilityId": "a5a3f9ee6271c972", "scanner": "scanner-primary", "fingerprint": "be694c825d5583dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7cdfa914b1a6d5b9", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/genesis-anchor-guard.js:103"}, "properties": {"repobilityId": "d785de0281875b98", "scanner": "scanner-primary", "fingerprint": "7cdfa914b1a6d5b9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c4b6eab91d868e2e", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/provenance-capture-tool.js:79"}, "properties": {"repobilityId": "7af138952bfb131c", "scanner": "scanner-primary", "fingerprint": "c4b6eab91d868e2e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ef3a424b902914a8", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/integrity-guard.js:117"}, "properties": {"repobilityId": "aa76eda1a973c0ec", "scanner": "scanner-primary", "fingerprint": "ef3a424b902914a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-779543d80b9d94d1", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/hooks/validate-bash-command.js:93"}, "properties": {"repobilityId": "64bbdfc071076da8", "scanner": "scanner-primary", "fingerprint": "779543d80b9d94d1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-da9481605fe5a33f", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/posture-gate.js:162"}, "properties": {"repobilityId": "b72a90e621ea7108", "scanner": "scanner-primary", "fingerprint": "da9481605fe5a33f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-60717ada302768f7", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/session-end.js:307"}, "properties": {"repobilityId": "34cd7ce0020d9524", "scanner": "scanner-primary", "fingerprint": "60717ada302768f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f17ae9b6a21105a", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/multi-operator-sessionend.js:165"}, "properties": {"repobilityId": "42c5b15819435b92", "scanner": "scanner-primary", "fingerprint": "5f17ae9b6a21105a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-816c7ae77ce83de5", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/log-triage-gate.js:61"}, "properties": {"repobilityId": "725527316d49b5ed", "scanner": "scanner-primary", "fingerprint": "816c7ae77ce83de5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e39db6e05765f946", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/user-prompt-rules-reminder.js:125"}, "properties": {"repobilityId": "1161ae833fcd0903", "scanner": "scanner-primary", "fingerprint": "e39db6e05765f946", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6698380f13d2a1b1", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/multi-operator-sessionstart.js:138"}, "properties": {"repobilityId": "d9e1d4a0b487ef82", "scanner": "scanner-primary", "fingerprint": "6698380f13d2a1b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-816a039f98d87b80", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/adjacency-leasecheck.js:381"}, "properties": {"repobilityId": "6370e67a0fc352ce", "scanner": "scanner-primary", "fingerprint": "816a039f98d87b80", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dd77b6fef91936b5", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/operator-gate.js:186"}, "properties": {"repobilityId": "9130c2fc4c77e524", "scanner": "scanner-primary", "fingerprint": "dd77b6fef91936b5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dd6dcffc358a6b33", "level": "none", "message": {"text": "Commented-code block (19 lines) in .claude/hooks/fold-amendment-paired-with-helper.js:100"}, "properties": {"repobilityId": "56f040aadc02f482", "scanner": "scanner-primary", "fingerprint": "dd6dcffc358a6b33", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3472d1a0d39b0bb2", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/validate-workflow.js:865"}, "properties": {"repobilityId": "96397996575d0f9d", "scanner": "scanner-primary", "fingerprint": "3472d1a0d39b0bb2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3244e5d048f7249a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/integration-hygiene.js:13"}, "properties": {"repobilityId": "e6eeb5226ab3da20", "scanner": "scanner-primary", "fingerprint": "3244e5d048f7249a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3559505eb8ea5638", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/ado-login.js:42"}, "properties": {"repobilityId": "7505f54aba435676", "scanner": "scanner-primary", "fingerprint": "3559505eb8ea5638", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c482068125223903", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/fold-rule-9b.js:57"}, "properties": {"repobilityId": "5c03842bfd1ec866", "scanner": "scanner-primary", "fingerprint": "c482068125223903", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c3a91515440ef179", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/transport-git-ref.js:130"}, "properties": {"repobilityId": "e34b81cac1b9eeaa", "scanner": "scanner-primary", "fingerprint": "c3a91515440ef179", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-74e58d4c8f2a712c", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/coordination-log.js:116"}, "properties": {"repobilityId": "fb878e225d3d2e88", "scanner": "scanner-primary", "fingerprint": "74e58d4c8f2a712c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-281b346afb5f5113", "level": "none", "message": {"text": "Commented-code block (11 lines) in .claude/hooks/lib/coc-append.js:120"}, "properties": {"repobilityId": "98b2994ee624632a", "scanner": "scanner-primary", "fingerprint": "281b346afb5f5113", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2844584fb7470f32", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/transport-filesystem.js:110"}, "properties": {"repobilityId": "391577a475e966cf", "scanner": "scanner-primary", "fingerprint": "2844584fb7470f32", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3481aecf6ebcc9d0", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/learning-utils.js:88"}, "properties": {"repobilityId": "c6325e337177c575", "scanner": "scanner-primary", "fingerprint": "3481aecf6ebcc9d0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-985dd3e5ed4cd201", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/sibling-porcelain.js:117"}, "properties": {"repobilityId": "8722e55525c1d189", "scanner": "scanner-primary", "fingerprint": "985dd3e5ed4cd201", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-062465a37a265e53", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/reap-ceremony.js:117"}, "properties": {"repobilityId": "5865f85419ade633", "scanner": "scanner-primary", "fingerprint": "062465a37a265e53", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9f5b72a543537ea", "level": "none", "message": {"text": "Commented-code block (16 lines) in .claude/hooks/lib/codify-lease.js:359"}, "properties": {"repobilityId": "c26990754287416f", "scanner": "scanner-primary", "fingerprint": "d9f5b72a543537ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-81dfa1cc13d23325", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/hooks/lib/violation-patterns.js:189"}, "properties": {"repobilityId": "acfe5da67c9683e2", "scanner": "scanner-primary", "fingerprint": "81dfa1cc13d23325", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d592ecda515d176", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/journal-classifier.js:76"}, "properties": {"repobilityId": "2a8d4e3a608527be", "scanner": "scanner-primary", "fingerprint": "4d592ecda515d176", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c120cc0570bd879b", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/adjacency.js:291"}, "properties": {"repobilityId": "0f5aa45aa5201048", "scanner": "scanner-primary", "fingerprint": "c120cc0570bd879b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4989caee4e9ad0d7", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/provenance-event.js:41"}, "properties": {"repobilityId": "32301a30d4050c79", "scanner": "scanner-primary", "fingerprint": "4989caee4e9ad0d7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f327136eb3f6245e", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/vcs-github-adapter.js:148"}, "properties": {"repobilityId": "021054879fdcd953", "scanner": "scanner-primary", "fingerprint": "f327136eb3f6245e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e47ae20d0edfe338", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/genesis-ceremony.js:54"}, "properties": {"repobilityId": "de447c44ab91c07e", "scanner": "scanner-primary", "fingerprint": "e47ae20d0edfe338", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7c85803471960e42", "level": "none", "message": {"text": "Commented-code block (9 lines) in .claude/hooks/lib/state-io.js:43"}, "properties": {"repobilityId": "e10c7e78177de138", "scanner": "scanner-primary", "fingerprint": "7c85803471960e42", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-282e50c56c8b6bd8", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/state-file-write-guard.js:32"}, "properties": {"repobilityId": "3650717b6fe8df24", "scanner": "scanner-primary", "fingerprint": "282e50c56c8b6bd8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f0176e837088b60b", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/fold-genesis-anchor.js:105"}, "properties": {"repobilityId": "49eca8ef4fec52bb", "scanner": "scanner-primary", "fingerprint": "f0176e837088b60b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0950cba62d955089", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/github-login.js:128"}, "properties": {"repobilityId": "d561db3840676770", "scanner": "scanner-primary", "fingerprint": "0950cba62d955089", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f347efe642793373", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/recovery-fallback.js:194"}, "properties": {"repobilityId": "b08ef99cf7b2023c", "scanner": "scanner-primary", "fingerprint": "f347efe642793373", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6962506e0e071cb8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 .claude/hooks/lib/recovery-fallback.js:234"}, "properties": {"repobilityId": "4fddd216030624ac", "scanner": "scanner-primary", "fingerprint": "6962506e0e071cb8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d2f06bca9b3fda30", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/version-utils.js:213"}, "properties": {"repobilityId": "81d9abc68bc0ddcf", "scanner": "scanner-primary", "fingerprint": "d2f06bca9b3fda30", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e6b02cdb5c1dd10", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/hooks/lib/template-resolver.js:48"}, "properties": {"repobilityId": "c7ab21f17c1c4788", "scanner": "scanner-primary", "fingerprint": "1e6b02cdb5c1dd10", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-56632254d054f05c", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/session-notes-layout.js:50"}, "properties": {"repobilityId": "450b0de30af7f489", "scanner": "scanner-primary", "fingerprint": "56632254d054f05c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7f564eae1e0097a1", "level": "none", "message": {"text": "Commented-code block (12 lines) in .claude/hooks/lib/posture-v2.js:248"}, "properties": {"repobilityId": "0917110508f8fe6e", "scanner": "scanner-primary", "fingerprint": "7f564eae1e0097a1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6464ede04bd81116", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/operator-id.js:84"}, "properties": {"repobilityId": "d8d66fd695d9ab30", "scanner": "scanner-primary", "fingerprint": "6464ede04bd81116", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e8a443983100a44c", "level": "none", "message": {"text": "Commented-code block (21 lines) in .claude/hooks/lib/fold-rule-9c.js:59"}, "properties": {"repobilityId": "8adf5b2934befa0b", "scanner": "scanner-primary", "fingerprint": "e8a443983100a44c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f089cb693d37997c", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/fold-posture-event.js:28"}, "properties": {"repobilityId": "3a8341bed7364fca", "scanner": "scanner-primary", "fingerprint": "f089cb693d37997c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7a89b239c92f458f", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/owner-depart-ceremony.js:151"}, "properties": {"repobilityId": "c4175d0765b1dd7a", "scanner": "scanner-primary", "fingerprint": "7a89b239c92f458f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e64f38238ca7960e", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/vcs-azure-adapter.js:205"}, "properties": {"repobilityId": "376fcbdb3c6abc58", "scanner": "scanner-primary", "fingerprint": "e64f38238ca7960e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3270aea27d2ac1b9", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/fold-rule-10.js:125"}, "properties": {"repobilityId": "66854c38a3c7affa", "scanner": "scanner-primary", "fingerprint": "3270aea27d2ac1b9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8f86143649d216b9", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/provenance-ledger.js:226"}, "properties": {"repobilityId": "09568a1373d59b63", "scanner": "scanner-primary", "fingerprint": "8f86143649d216b9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9554ce61eb45f30f", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/gate-approval.js:293"}, "properties": {"repobilityId": "307802588aa50d1b", "scanner": "scanner-primary", "fingerprint": "9554ce61eb45f30f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-efa32d74190064a2", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/hooks/lib/roster-schema-validate.js:63"}, "properties": {"repobilityId": "d1e41295dd9ffd65", "scanner": "scanner-primary", "fingerprint": "efa32d74190064a2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-720cf78dac65a34b", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/owner-add-ceremony.js:30"}, "properties": {"repobilityId": "c759416e8fb8efaa", "scanner": "scanner-primary", "fingerprint": "720cf78dac65a34b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dba50d769271a0c9", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/hooks/lib/instruct-and-wait.js:108"}, "properties": {"repobilityId": "1b6171ae38954abc", "scanner": "scanner-primary", "fingerprint": "dba50d769271a0c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e42c066ff82c507", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/hooks/lib/derive-n.js:41"}, "properties": {"repobilityId": "c670ff5e7f1a0978", "scanner": "scanner-primary", "fingerprint": "1e42c066ff82c507", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-211689d6efb6dd49", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/hooks/lib/fold-rule-reap.js:259"}, "properties": {"repobilityId": "571a6a135eb7ca27", "scanner": "scanner-primary", "fingerprint": "211689d6efb6dd49", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}