{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-3d961c9c9756b562", "name": "Possibly dead Python function: cmd_patch_profile", "shortDescription": {"text": "Possibly dead Python function: cmd_patch_profile"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01a2ef455068d3bb", "name": "Possibly dead Python function: cmd_write_onboard", "shortDescription": {"text": "Possibly dead Python function: cmd_write_onboard"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c15bcf7d2dcaa46a", "name": "Possibly dead Python function: cmd_stamp_identity", "shortDescription": {"text": "Possibly dead Python function: cmd_stamp_identity"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53f6747509253ef6", "name": "Possibly dead Python function: cmd_banner", "shortDescription": {"text": "Possibly dead Python function: cmd_banner"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bef1b1405157f05d", "name": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/verifier-engine-pets-site-happy.test.ts:59", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/verifier-engine-pets-site-happy.test.ts:59"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1e59e2b19d4ece6", "name": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/verifier-engine-pets-site-broken.test.ts:56", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/verifier-engine-pets-site-broken.test.ts:56"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7dc3a47613859c03", "name": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/helpers/live-llm-dispatch.ts:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/helpers/live-llm-dispatch.ts:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-104a362722872170", "name": "Stray `console.log` in TS/JS \u2014 marketplace/native/src/runtime/native-engine.ts:250", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/src/runtime/native-engine.ts:250"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c50c91d960055975", "name": "Insecure pattern 'eval_used' in marketplace/plugin/sutra-defaults.json:616", "shortDescription": {"text": "Insecure pattern 'eval_used' in marketplace/plugin/sutra-defaults.json:616"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9faea04a6ff807ba", "name": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/scripts/preflight-age.mjs:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/scripts/preflight-age.mjs:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-912b2acd55b41d8c", "name": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/lib/secret-store-age.js:43", "shortDescription": {"text": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/lib/secret-store-age.js:43"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efff13d145367cf2", "name": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/lib/secret-store-age.ts:54", "shortDescription": {"text": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/lib/secret-store-age.ts:54"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b5389346e9181e8", "name": "Insecure pattern 'eval_used' in marketplace/plugin/skills/test-strategy/SKILL.md:134", "shortDescription": {"text": "Insecure pattern 'eval_used' in marketplace/plugin/skills/test-strategy/SKILL.md:134"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a62aef153ff0f33", "name": "Insecure pattern 'eval_used' in marketplace/plugin/skills/blueprint/SKILL.md:70", "shortDescription": {"text": "Insecure pattern 'eval_used' in marketplace/plugin/skills/blueprint/SKILL.md:70"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23b128f02c33c986", "name": "Insecure pattern 'node_child_process' in marketplace/native/src/engine/opa-evaluator.ts:34", "shortDescription": {"text": "Insecure pattern 'node_child_process' in marketplace/native/src/engine/opa-evaluator.ts:34"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a55f3e49e37863c0", "name": "Insecure pattern 'exec_used' in marketplace/native/src/engine/host-llm-activity.ts:424", "shortDescription": {"text": "Insecure pattern 'exec_used' in marketplace/native/src/engine/host-llm-activity.ts:424"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a82da5c0e856aeff", "name": "Insecure pattern 'node_child_process' in marketplace/native/src/engine/host-llm-activity.ts:69", "shortDescription": {"text": "Insecure pattern 'node_child_process' in marketplace/native/src/engine/host-llm-activity.ts:69"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58053bc37f6dfa7c", "name": "Insecure pattern 'node_child_process' in state/test-framework.mjs:24", "shortDescription": {"text": "Insecure pattern 'node_child_process' in state/test-framework.mjs:24"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9aa797e9b67a4baf", "name": "Insecure pattern 'node_child_process' in state/validate.mjs:365", "shortDescription": {"text": "Insecure pattern 'node_child_process' in state/validate.mjs:365"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8745489550e06b0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-419c7fcdf11fc660", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24a2353e77881d9e", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-001aa8a3e2ad87b0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01e14ee96d0da134", "name": "Very large file: marketplace/native/src/cli/sutra-native.ts (1576 lines)", "shortDescription": {"text": "Very large file: marketplace/native/src/cli/sutra-native.ts (1576 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3c3a5f61c4cd66f", "name": "Very large file: marketplace/native/src/engine/step-graph-executor.ts (1514 lines)", "shortDescription": {"text": "Very large file: marketplace/native/src/engine/step-graph-executor.ts (1514 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58ac4bdd8d2e5578", "name": "53 TODO/FIXME markers", "shortDescription": {"text": "53 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 96 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 22 placeholder/mock markers across 14 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-231bbf03592f3e00", "name": "Agent authority lacks a verifier contract: marketplace/plugin/skills/founder-360-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/founder-360-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bf768e1c7445c45", "name": "Agent authority lacks a verifier contract: marketplace/plugin/skills/readability-gate/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/readability-gate/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12562f99a998b21d", "name": "Agent authority lacks a verifier contract: marketplace/plugin/skills/deepseek/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/deepseek/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9afa3c174c8b7fe8", "name": "Agent authority lacks a verifier contract: marketplace/plugin/skills/output-trace/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/output-trace/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df574f6ad694dd10", "name": "Agent authority lacks a verifier contract: marketplace/plugin/skills/input-routing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/input-routing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8598d576b85261fd", "name": "Agent instruction contains unpinned remote install: marketplace/plugin/skills/codex-sutra/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: marketplace/plugin/skills/codex-sutra/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-33082b06b41f9fd8", "name": "Agent authority lacks a verifier contract: .claude/commands/ask-billu.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/ask-billu.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bfa1300250dfe352", "name": "Agent authority lacks a verifier contract: skills/session-retrieve/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/session-retrieve/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb3a20499042cfe9", "name": "Commented-code block (6 lines) in marketplace/plugin/connectors/tests/integration/mode-b.test.ts:292", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/tests/integration/mode-b.test.ts:292"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4651f1bd4cf355cc", "name": "Commented-code block (7 lines) in marketplace/plugin/connectors/tests/integration/v0-scenarios.test.ts:383", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/plugin/connectors/tests/integration/v0-scenarios.test.ts:383"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7540c848c995c6ad", "name": "Commented-code block (6 lines) in marketplace/plugin/connectors/tests/integration/cli.test.ts:120", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/tests/integration/cli.test.ts:120"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3ef2a844cff6f510", "name": "Commented-code block (8 lines) in marketplace/plugin/connectors/tests/unit/fleet-policy.test.ts:213", "shortDescription": {"text": "Commented-code block (8 lines) in marketplace/plugin/connectors/tests/unit/fleet-policy.test.ts:213"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b14ad32eac14c93b", "name": "Commented-code block (5 lines) in marketplace/plugin/connectors/tests/unit/policy.test.ts:196", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/tests/unit/policy.test.ts:196"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4f1466c0bb72b761", "name": "Commented-code block (5 lines) in marketplace/plugin/connectors/tests/unit/composio-adapter.test.ts:163", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/tests/unit/composio-adapter.test.ts:163"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a3bd6816693e88c", "name": "Commented-code block (5 lines) in marketplace/plugin/connectors/scripts/call.mjs:6", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/scripts/call.mjs:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b4933c9b85bb627", "name": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/scripts/call.mjs:464", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/scripts/call.mjs:464"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90bed13cadbcfc96", "name": "Commented-code block (5 lines) in marketplace/plugin/connectors/scripts/verify-connection.mjs:4", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/scripts/verify-connection.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eee17de4f7fbd98a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/scripts/verify-connection.mjs:80", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/scripts/verify-connection.mjs:80"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3a54c501d73cc02", "name": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/credential-loader.js:71", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/credential-loader.js:71"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e00de615ea3a4bf4", "name": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/credential-loader.ts:149", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/credential-loader.ts:149"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a34ebea6bba2191", "name": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/index.ts:180", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/index.ts:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4283c1fc38f591ea", "name": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/index.js:84", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/index.js:84"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-39861dcd18279837", "name": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/gmail-direct.ts:206", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/gmail-direct.ts:206"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3752be8fbc18785", "name": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/gmail-direct.js:158", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/gmail-direct.js:158"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03874641bd015912", "name": "Commented-code block (5 lines) in marketplace/plugin/connectors/lib/backends/slack-direct.ts:159", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/lib/backends/slack-direct.ts:159"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-24e36f4a5953e559", "name": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/slack-direct.ts:182", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/slack-direct.ts:182"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afcbc439c8fecb33", "name": "Commented-code block (5 lines) in marketplace/plugin/connectors/lib/backends/slack-direct.js:125", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/lib/backends/slack-direct.js:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3b2758b8b0aab7e9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/slack-direct.js:144", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/slack-direct.js:144"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-478fdfb1894d7190", "name": "Commented-code block (7 lines) in marketplace/plugin/lib/sh_trust_mode.py:18", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/plugin/lib/sh_trust_mode.py:18"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ede9a79a97f7b5b", "name": "Commented-code block (6 lines) in marketplace/native/tests/security/d5-fs-safety.test.ts:206", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/tests/security/d5-fs-safety.test.ts:206"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1709a8f1baf18203", "name": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-hs2-overhead-termination.test.ts:216", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-hs2-overhead-termination.test.ts:216"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2603671c8644c58a", "name": "Commented-code block (6 lines) in marketplace/native/tests/integration/m7-policy-enforcement.test.ts:245", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/tests/integration/m7-policy-enforcement.test.ts:245"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03c6d48bbe1b163d", "name": "Commented-code block (6 lines) in marketplace/native/tests/integration/v1.3-w3-operator-surface.test.ts:149", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/tests/integration/v1.3-w3-operator-surface.test.ts:149"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5638f46a6da1225d", "name": "Commented-code block (6 lines) in marketplace/native/tests/integration/v1.1.0-end-to-end.test.ts:57", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/tests/integration/v1.1.0-end-to-end.test.ts:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a6b09316644ab0c", "name": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-invariants-consolidated.test.ts:51", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-invariants-consolidated.test.ts:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-969e7b164e981367", "name": "Commented-code block (5 lines) in marketplace/native/tests/integration/m5-workflow-engine.test.ts:142", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m5-workflow-engine.test.ts:142"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e7eda812b10cb70a", "name": "Commented-code block (5 lines) in marketplace/native/tests/integration/sutra-native-subprocess.test.ts:93", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/sutra-native-subprocess.test.ts:93"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b5e2b2db01fd82ba", "name": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-vinit-e2e.test.ts:343", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-vinit-e2e.test.ts:343"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a53cf79471eb7014", "name": "Commented-code block (7 lines) in marketplace/native/tests/integration/m8-evidence-and-host-llm.test.ts:917", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/native/tests/integration/m8-evidence-and-host-llm.test.ts:917"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-98d5cf207416ffbe", "name": "Commented-code block (5 lines) in marketplace/native/tests/integration/rolling-harness.test.ts:337", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/rolling-harness.test.ts:337"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-365caef77b52bcca", "name": "Commented-code block (11 lines) in marketplace/native/tests/integration/m6-skill-resolution.test.ts:343", "shortDescription": {"text": "Commented-code block (11 lines) in marketplace/native/tests/integration/m6-skill-resolution.test.ts:343"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-491789de4c4f2806", "name": "Commented-code block (5 lines) in marketplace/native/tests/unit/charter-rego-compiler.test.ts:72", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/unit/charter-rego-compiler.test.ts:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-17112dd786d15aaf", "name": "Commented-code block (6 lines) in marketplace/native/tests/property/skill-recursion-cap.test.ts:133", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/tests/property/skill-recursion-cap.test.ts:133"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-42d4c0bc8bc0f9e1", "name": "Commented-code block (5 lines) in marketplace/native/tests/property/cadence-scheduler-jitter.test.ts:69", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/property/cadence-scheduler-jitter.test.ts:69"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4d66372ee09d00d", "name": "Commented-code block (5 lines) in marketplace/native/tests/property/l4-commitment.test.ts:147", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/property/l4-commitment.test.ts:147"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88ffee8f5b298a93", "name": "Commented-code block (5 lines) in marketplace/native/tests/contract/workflow.test.ts:561", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/workflow.test.ts:561"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eda7b7cba8a8838d", "name": "Commented-code block (7 lines) in marketplace/native/tests/contract/cli/sutra-native.test.ts:61", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/native/tests/contract/cli/sutra-native.test.ts:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f46a5afda450277", "name": "Commented-code block (12 lines) in marketplace/native/tests/contract/engine/skill-engine.test.ts:239", "shortDescription": {"text": "Commented-code block (12 lines) in marketplace/native/tests/contract/engine/skill-engine.test.ts:239"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-579bec958578cf5d", "name": "Commented-code block (7 lines) in marketplace/native/tests/contract/engine/step-graph-executor.test.ts:124", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/native/tests/contract/engine/step-graph-executor.test.ts:124"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e3dcd85ab44ff47", "name": "Commented-code block (9 lines) in marketplace/native/tests/contract/engine/temporal-adapter.test.ts:120", "shortDescription": {"text": "Commented-code block (9 lines) in marketplace/native/tests/contract/engine/temporal-adapter.test.ts:120"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-314468954d95d6ed", "name": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/opa-evaluator.test.ts:122", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/opa-evaluator.test.ts:122"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e76b0a4ed5c5491e", "name": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/skill-invocation.test.ts:305", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/skill-invocation.test.ts:305"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ff312b6cfa9b62b2", "name": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/activity-wrapper.test.ts:32", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/activity-wrapper.test.ts:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-06844ae8f19f6bc9", "name": "Commented-code block (7 lines) in marketplace/native/tests/contract/laws/l4-commitment.test.ts:138", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/native/tests/contract/laws/l4-commitment.test.ts:138"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eaf0da90107f165b", "name": "Commented-code block (6 lines) in marketplace/native/tests/contract/laws/l2-boundary.test.ts:37", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/tests/contract/laws/l2-boundary.test.ts:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9be73735bbbe1bc9", "name": "Commented-code block (5 lines) in marketplace/native/scripts/dogfood-time-to-value.ts:309", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/scripts/dogfood-time-to-value.ts:309"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c04e8e508fd0a8c", "name": "Commented-code block (6 lines) in marketplace/native/src/types/index.ts:159", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/src/types/index.ts:159"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eef7518d60dfec46", "name": "Commented-code block (9 lines) in marketplace/native/src/types/edges.ts:26", "shortDescription": {"text": "Commented-code block (9 lines) in marketplace/native/src/types/edges.ts:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-419946059674cd64", "name": "Commented-code block (5 lines) in marketplace/native/src/types/engine-event.ts:401", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/types/engine-event.ts:401"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-22831fc090a99c7a", "name": "Commented-code block (5 lines) in marketplace/native/src/primitives/charter.ts:122", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/primitives/charter.ts:122"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b7f913def8215f3e", "name": "Commented-code block (5 lines) in marketplace/native/src/primitives/workflow.ts:187", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/primitives/workflow.ts:187"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-139c732bf7dc03a6", "name": "Commented-code block (7 lines) in marketplace/native/src/cli/sutra-native.ts:260", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/native/src/cli/sutra-native.ts:260"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ef77a503692289d", "name": "Commented-code block (5 lines) in marketplace/native/src/starter-kit/index.ts:649", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/starter-kit/index.ts:649"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d91f24d84dda3849", "name": "Commented-code block (5 lines) in marketplace/native/src/runtime/renderer-registry.ts:153", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/runtime/renderer-registry.ts:153"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4f57a62a0e289c06", "name": "Commented-code block (5 lines) in marketplace/native/src/runtime/pnc-predicate.ts:95", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/runtime/pnc-predicate.ts:95"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65bce7637ef49248", "name": "Commented-code block (6 lines) in marketplace/native/src/runtime/lite-executor.ts:245", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/src/runtime/lite-executor.ts:245"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8ac0027c467db4bf", "name": "Commented-code block (5 lines) in marketplace/native/src/runtime/native-engine.ts:303", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/runtime/native-engine.ts:303"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b9b6be72de9fbc7a", "name": "Commented-code block (5 lines) in marketplace/native/src/engine/step-graph-executor.ts:60", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/step-graph-executor.ts:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-64a89e9d08f8ba85", "name": "Commented-code block (5 lines) in marketplace/native/src/engine/skill-engine.ts:81", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/skill-engine.ts:81"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8a24cb6b5dd14ab7", "name": "Commented-code block (6 lines) in marketplace/native/src/engine/activity-wrapper.ts:50", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/src/engine/activity-wrapper.ts:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1ba27aca9616f3f7", "name": "Commented-code block (7 lines) in marketplace/native/src/engine/charter-rego-compiler.ts:259", "shortDescription": {"text": "Commented-code block (7 lines) in marketplace/native/src/engine/charter-rego-compiler.ts:259"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa724d5c0d20c02a", "name": "Commented-code block (5 lines) in marketplace/native/src/engine/index.ts:26", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/index.ts:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-721e754838da0c8e", "name": "Commented-code block (5 lines) in marketplace/native/src/engine/skill-invocation.ts:231", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/skill-invocation.ts:231"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c09b254d89100a0d", "name": "Commented-code block (6 lines) in marketplace/native/src/engine/opa-evaluator.ts:43", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/src/engine/opa-evaluator.ts:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-68d959e2b088a9d2", "name": "Commented-code block (6 lines) in marketplace/native/src/engine/cadence-scheduler.ts:260", "shortDescription": {"text": "Commented-code block (6 lines) in marketplace/native/src/engine/cadence-scheduler.ts:260"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1992aad8d619cdc5", "name": "Commented-code block (5 lines) in marketplace/native/src/engine/host-llm-activity.ts:74", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/host-llm-activity.ts:74"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-32dece7fa08e0b5c", "name": "Commented-code block (5 lines) in marketplace/native/src/engine/temporal-adapter.ts:157", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/temporal-adapter.ts:157"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6a6b20987c73678", "name": "Commented-code block (5 lines) in marketplace/native/src/laws/l4-terminal-check.ts:617", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/laws/l4-terminal-check.ts:617"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3ae492b5f5a38ca0", "name": "Commented-code block (5 lines) in marketplace/native/src/laws/f10-parsers.ts:512", "shortDescription": {"text": "Commented-code block (5 lines) in marketplace/native/src/laws/f10-parsers.ts:512"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e84916e88755fd69", "name": "Commented-code block (5 lines) in state/validate.mjs:335", "shortDescription": {"text": "Commented-code block (5 lines) in state/validate.mjs:335"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nmarketplace/plugin/lib/mcp_trust_mode.py:main, marketplace/plugin/lib/web_trust_mode.py:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18924"}, "properties": {"repository": "sankalpasawa/sutra", "repoUrl": "https://github.com/sankalpasawa/sutra", "branch": "main"}, "results": [{"ruleId": "scanner-3d961c9c9756b562", "level": "note", "message": {"text": "Possibly dead Python function: cmd_patch_profile"}, "properties": {"repobilityId": "3d3bdb33e514ba0a", "scanner": "scanner-primary", "fingerprint": "3d961c9c9756b562", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/2026-05-01-py3-removed-from-bootstrap/_sutra_project_lib.py:73"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-01a2ef455068d3bb", "level": "note", "message": {"text": "Possibly dead Python function: cmd_write_onboard"}, "properties": {"repobilityId": "8b130fe83e765f41", "scanner": "scanner-primary", "fingerprint": "01a2ef455068d3bb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/2026-05-01-py3-removed-from-bootstrap/_sutra_project_lib.py:90"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c15bcf7d2dcaa46a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_stamp_identity"}, "properties": {"repobilityId": "5be6281296ffbe45", "scanner": "scanner-primary", "fingerprint": "c15bcf7d2dcaa46a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/2026-05-01-py3-removed-from-bootstrap/_sutra_project_lib.py:112"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53f6747509253ef6", "level": "note", "message": {"text": "Possibly dead Python function: cmd_banner"}, "properties": {"repobilityId": "c8b55df1f67442d6", "scanner": "scanner-primary", "fingerprint": "53f6747509253ef6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/2026-05-01-py3-removed-from-bootstrap/_sutra_project_lib.py:126"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-bef1b1405157f05d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/verifier-engine-pets-site-happy.test.ts:59"}, "properties": {"repobilityId": "ade57721764dd35f", "scanner": "scanner-primary", "fingerprint": "bef1b1405157f05d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b1e59e2b19d4ece6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/verifier-engine-pets-site-broken.test.ts:56"}, "properties": {"repobilityId": "31876244cc46c7ad", "scanner": "scanner-primary", "fingerprint": "b1e59e2b19d4ece6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7dc3a47613859c03", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/tests/e2e/helpers/live-llm-dispatch.ts:16"}, "properties": {"repobilityId": "8bf8877fb1c263ea", "scanner": "scanner-primary", "fingerprint": "7dc3a47613859c03", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-104a362722872170", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 marketplace/native/src/runtime/native-engine.ts:250"}, "properties": {"repobilityId": "fb1a538563abd92b", "scanner": "scanner-primary", "fingerprint": "104a362722872170", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-c50c91d960055975", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in marketplace/plugin/sutra-defaults.json:616"}, "properties": {"repobilityId": "2252edfb72d3c693", "scanner": "scanner-primary", "fingerprint": "c50c91d960055975", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/sutra-defaults.json"}, "region": {"startLine": 616}}}]}, {"ruleId": "scanner-9faea04a6ff807ba", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/scripts/preflight-age.mjs:10"}, "properties": {"repobilityId": "bf8357978cfa986b", "scanner": "scanner-primary", "fingerprint": "9faea04a6ff807ba", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/connectors/scripts/preflight-age.mjs"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-912b2acd55b41d8c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/lib/secret-store-age.js:43"}, "properties": {"repobilityId": "b19e1feeaba0b7a9", "scanner": "scanner-primary", "fingerprint": "912b2acd55b41d8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/connectors/lib/secret-store-age.js"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-efff13d145367cf2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in marketplace/plugin/connectors/lib/secret-store-age.ts:54"}, "properties": {"repobilityId": "0b20f6a542b8c9b7", "scanner": "scanner-primary", "fingerprint": "efff13d145367cf2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/connectors/lib/secret-store-age.ts"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-4b5389346e9181e8", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in marketplace/plugin/skills/test-strategy/SKILL.md:134"}, "properties": {"repobilityId": "e34e367f13d14116", "scanner": "scanner-primary", "fingerprint": "4b5389346e9181e8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/test-strategy/SKILL.md"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-6a62aef153ff0f33", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in marketplace/plugin/skills/blueprint/SKILL.md:70"}, "properties": {"repobilityId": "1dc120218aacb2e2", "scanner": "scanner-primary", "fingerprint": "6a62aef153ff0f33", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/blueprint/SKILL.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-23b128f02c33c986", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in marketplace/native/src/engine/opa-evaluator.ts:34"}, "properties": {"repobilityId": "605fc7bebccdebd1", "scanner": "scanner-primary", "fingerprint": "23b128f02c33c986", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/native/src/engine/opa-evaluator.ts"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-a55f3e49e37863c0", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in marketplace/native/src/engine/host-llm-activity.ts:424"}, "properties": {"repobilityId": "0c57f9c172f3b844", "scanner": "scanner-primary", "fingerprint": "a55f3e49e37863c0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/native/src/engine/host-llm-activity.ts"}, "region": {"startLine": 424}}}]}, {"ruleId": "scanner-a82da5c0e856aeff", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in marketplace/native/src/engine/host-llm-activity.ts:69"}, "properties": {"repobilityId": "a2883f1949f91a6e", "scanner": "scanner-primary", "fingerprint": "a82da5c0e856aeff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/native/src/engine/host-llm-activity.ts"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-58053bc37f6dfa7c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in state/test-framework.mjs:24"}, "properties": {"repobilityId": "b2c764014b649fcd", "scanner": "scanner-primary", "fingerprint": "58053bc37f6dfa7c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "state/test-framework.mjs"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-9aa797e9b67a4baf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in state/validate.mjs:365"}, "properties": {"repobilityId": "f67767bcbb6037c3", "scanner": "scanner-primary", "fingerprint": "9aa797e9b67a4baf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "state/validate.mjs"}, "region": {"startLine": 365}}}]}, {"ruleId": "scanner-e8745489550e06b0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0de5129c755cc8f5", "scanner": "scanner-primary", "fingerprint": "e8745489550e06b0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-native.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-e8745489550e06b0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "777a275bcc8b85ca", "scanner": "scanner-primary", "fingerprint": "e8745489550e06b0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-native.yml"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-419c7fcdf11fc660", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "923da1cbaec12312", "scanner": "scanner-primary", "fingerprint": "419c7fcdf11fc660", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-website.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-419c7fcdf11fc660", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "323fcb48c244a438", "scanner": "scanner-primary", "fingerprint": "419c7fcdf11fc660", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-website.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-419c7fcdf11fc660", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a036cef40d7a9222", "scanner": "scanner-primary", "fingerprint": "419c7fcdf11fc660", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-website.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-419c7fcdf11fc660", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d373248c7fa6f108", "scanner": "scanner-primary", "fingerprint": "419c7fcdf11fc660", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-website.yml"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-24a2353e77881d9e", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "f80a287fd6f6b355", "scanner": "scanner-primary", "fingerprint": "24a2353e77881d9e", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-website.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-001aa8a3e2ad87b0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b87235e4f94c1b72", "scanner": "scanner-primary", "fingerprint": "001aa8a3e2ad87b0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-vercel.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-001aa8a3e2ad87b0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bafa30d67bbb7918", "scanner": "scanner-primary", "fingerprint": "001aa8a3e2ad87b0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-vercel.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-01e14ee96d0da134", "level": "note", "message": {"text": "Very large file: marketplace/native/src/cli/sutra-native.ts (1576 lines)"}, "properties": {"repobilityId": "148324dbb4f5a370", "scanner": "scanner-primary", "fingerprint": "01e14ee96d0da134", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d3c3a5f61c4cd66f", "level": "note", "message": {"text": "Very large file: marketplace/native/src/engine/step-graph-executor.ts (1514 lines)"}, "properties": {"repobilityId": "800b56c5ce0a5c23", "scanner": "scanner-primary", "fingerprint": "d3c3a5f61c4cd66f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-58ac4bdd8d2e5578", "level": "note", "message": {"text": "53 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "58ac4bdd8d2e5578", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "b773467ebd4840f3", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "8e60cb6cf17abc41", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "717d375ecb714f1e", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "f8b6a3ba96aaf7f2", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "743880260f16c09b", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-231bbf03592f3e00", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/founder-360-review/SKILL.md"}, "properties": {"repobilityId": "1a67bc9ecabb4b18", "scanner": "scanner-primary", "fingerprint": "231bbf03592f3e00", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/founder-360-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3bf768e1c7445c45", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/readability-gate/SKILL.md"}, "properties": {"repobilityId": "5b1aec1ad0fc6eef", "scanner": "scanner-primary", "fingerprint": "3bf768e1c7445c45", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/readability-gate/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12562f99a998b21d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/deepseek/SKILL.md"}, "properties": {"repobilityId": "0dced45e0c492a0a", "scanner": "scanner-primary", "fingerprint": "12562f99a998b21d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/deepseek/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9afa3c174c8b7fe8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/output-trace/SKILL.md"}, "properties": {"repobilityId": "093a58f46e71a2f2", "scanner": "scanner-primary", "fingerprint": "9afa3c174c8b7fe8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/output-trace/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df574f6ad694dd10", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: marketplace/plugin/skills/input-routing/SKILL.md"}, "properties": {"repobilityId": "49ea5d169b2fa402", "scanner": "scanner-primary", "fingerprint": "df574f6ad694dd10", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/input-routing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8598d576b85261fd", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: marketplace/plugin/skills/codex-sutra/SKILL.md"}, "properties": {"repobilityId": "94c670e7c96b5675", "scanner": "scanner-primary", "fingerprint": "8598d576b85261fd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marketplace/plugin/skills/codex-sutra/SKILL.md"}, "region": {"startLine": 170}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33082b06b41f9fd8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/ask-billu.md"}, "properties": {"repobilityId": "5f8de02c9974d9d2", "scanner": "scanner-primary", "fingerprint": "33082b06b41f9fd8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/ask-billu.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bfa1300250dfe352", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/session-retrieve/SKILL.md"}, "properties": {"repobilityId": "e79820556d91af22", "scanner": "scanner-primary", "fingerprint": "bfa1300250dfe352", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/session-retrieve/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb3a20499042cfe9", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/tests/integration/mode-b.test.ts:292"}, "properties": {"repobilityId": "581979dff065da12", "scanner": "scanner-primary", "fingerprint": "bb3a20499042cfe9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4651f1bd4cf355cc", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/plugin/connectors/tests/integration/v0-scenarios.test.ts:383"}, "properties": {"repobilityId": "7492e9f8398e913b", "scanner": "scanner-primary", "fingerprint": "4651f1bd4cf355cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7540c848c995c6ad", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/tests/integration/cli.test.ts:120"}, "properties": {"repobilityId": "9986d2011b0b794b", "scanner": "scanner-primary", "fingerprint": "7540c848c995c6ad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3ef2a844cff6f510", "level": "none", "message": {"text": "Commented-code block (8 lines) in marketplace/plugin/connectors/tests/unit/fleet-policy.test.ts:213"}, "properties": {"repobilityId": "05365701790994dd", "scanner": "scanner-primary", "fingerprint": "3ef2a844cff6f510", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b14ad32eac14c93b", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/tests/unit/policy.test.ts:196"}, "properties": {"repobilityId": "e830e0f4f19d3a0e", "scanner": "scanner-primary", "fingerprint": "b14ad32eac14c93b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4f1466c0bb72b761", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/tests/unit/composio-adapter.test.ts:163"}, "properties": {"repobilityId": "2a3771a1de051348", "scanner": "scanner-primary", "fingerprint": "4f1466c0bb72b761", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0a3bd6816693e88c", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/scripts/call.mjs:6"}, "properties": {"repobilityId": "727a4f541e1b6417", "scanner": "scanner-primary", "fingerprint": "0a3bd6816693e88c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b4933c9b85bb627", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/scripts/call.mjs:464"}, "properties": {"repobilityId": "20104493299f8223", "scanner": "scanner-primary", "fingerprint": "1b4933c9b85bb627", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-90bed13cadbcfc96", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/scripts/verify-connection.mjs:4"}, "properties": {"repobilityId": "eef59041e591c999", "scanner": "scanner-primary", "fingerprint": "90bed13cadbcfc96", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eee17de4f7fbd98a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/scripts/verify-connection.mjs:80"}, "properties": {"repobilityId": "926a8caafedaae67", "scanner": "scanner-primary", "fingerprint": "eee17de4f7fbd98a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c3a54c501d73cc02", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/credential-loader.js:71"}, "properties": {"repobilityId": "197e45a9b6a73170", "scanner": "scanner-primary", "fingerprint": "c3a54c501d73cc02", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e00de615ea3a4bf4", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/credential-loader.ts:149"}, "properties": {"repobilityId": "5fa2d231cac57fbb", "scanner": "scanner-primary", "fingerprint": "e00de615ea3a4bf4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2a34ebea6bba2191", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/index.ts:180"}, "properties": {"repobilityId": "e58ba809d5e6d758", "scanner": "scanner-primary", "fingerprint": "2a34ebea6bba2191", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4283c1fc38f591ea", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/plugin/connectors/lib/index.js:84"}, "properties": {"repobilityId": "7b27b12cb008dd76", "scanner": "scanner-primary", "fingerprint": "4283c1fc38f591ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-39861dcd18279837", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/gmail-direct.ts:206"}, "properties": {"repobilityId": "5470277e261e45fb", "scanner": "scanner-primary", "fingerprint": "39861dcd18279837", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e3752be8fbc18785", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/gmail-direct.js:158"}, "properties": {"repobilityId": "13f03d8295942c85", "scanner": "scanner-primary", "fingerprint": "e3752be8fbc18785", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-03874641bd015912", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/lib/backends/slack-direct.ts:159"}, "properties": {"repobilityId": "460cb3232ab1d4fa", "scanner": "scanner-primary", "fingerprint": "03874641bd015912", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-24e36f4a5953e559", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/slack-direct.ts:182"}, "properties": {"repobilityId": "d94b7244b325a481", "scanner": "scanner-primary", "fingerprint": "24e36f4a5953e559", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-afcbc439c8fecb33", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/plugin/connectors/lib/backends/slack-direct.js:125"}, "properties": {"repobilityId": "4992ba4df92134bd", "scanner": "scanner-primary", "fingerprint": "afcbc439c8fecb33", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3b2758b8b0aab7e9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 marketplace/plugin/connectors/lib/backends/slack-direct.js:144"}, "properties": {"repobilityId": "fdcb8d984533d4da", "scanner": "scanner-primary", "fingerprint": "3b2758b8b0aab7e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-478fdfb1894d7190", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/plugin/lib/sh_trust_mode.py:18"}, "properties": {"repobilityId": "afe63a9c3c77f21e", "scanner": "scanner-primary", "fingerprint": "478fdfb1894d7190", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2ede9a79a97f7b5b", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/tests/security/d5-fs-safety.test.ts:206"}, "properties": {"repobilityId": "2e83e0d4ba348136", "scanner": "scanner-primary", "fingerprint": "2ede9a79a97f7b5b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1709a8f1baf18203", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-hs2-overhead-termination.test.ts:216"}, "properties": {"repobilityId": "beba392375034d1d", "scanner": "scanner-primary", "fingerprint": "1709a8f1baf18203", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2603671c8644c58a", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/tests/integration/m7-policy-enforcement.test.ts:245"}, "properties": {"repobilityId": "8e3cbdbf5b2cc9d8", "scanner": "scanner-primary", "fingerprint": "2603671c8644c58a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03c6d48bbe1b163d", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/tests/integration/v1.3-w3-operator-surface.test.ts:149"}, "properties": {"repobilityId": "72ff79e1010c4343", "scanner": "scanner-primary", "fingerprint": "03c6d48bbe1b163d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5638f46a6da1225d", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/tests/integration/v1.1.0-end-to-end.test.ts:57"}, "properties": {"repobilityId": "33b54c2c1e8cbbd9", "scanner": "scanner-primary", "fingerprint": "5638f46a6da1225d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a6b09316644ab0c", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-invariants-consolidated.test.ts:51"}, "properties": {"repobilityId": "917f69f6cb096ceb", "scanner": "scanner-primary", "fingerprint": "9a6b09316644ab0c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-969e7b164e981367", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m5-workflow-engine.test.ts:142"}, "properties": {"repobilityId": "47aeec8bdbe28247", "scanner": "scanner-primary", "fingerprint": "969e7b164e981367", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e7eda812b10cb70a", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/sutra-native-subprocess.test.ts:93"}, "properties": {"repobilityId": "8422fdc7b290185d", "scanner": "scanner-primary", "fingerprint": "e7eda812b10cb70a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b5e2b2db01fd82ba", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/m9-vinit-e2e.test.ts:343"}, "properties": {"repobilityId": "58e32a86aa6036f5", "scanner": "scanner-primary", "fingerprint": "b5e2b2db01fd82ba", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a53cf79471eb7014", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/native/tests/integration/m8-evidence-and-host-llm.test.ts:917"}, "properties": {"repobilityId": "41c10a71b45ad361", "scanner": "scanner-primary", "fingerprint": "a53cf79471eb7014", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-98d5cf207416ffbe", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/integration/rolling-harness.test.ts:337"}, "properties": {"repobilityId": "a93cd6998d4cbc8d", "scanner": "scanner-primary", "fingerprint": "98d5cf207416ffbe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-365caef77b52bcca", "level": "none", "message": {"text": "Commented-code block (11 lines) in marketplace/native/tests/integration/m6-skill-resolution.test.ts:343"}, "properties": {"repobilityId": "d43e7914549381db", "scanner": "scanner-primary", "fingerprint": "365caef77b52bcca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-491789de4c4f2806", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/unit/charter-rego-compiler.test.ts:72"}, "properties": {"repobilityId": "f13b3fbd83d88ef5", "scanner": "scanner-primary", "fingerprint": "491789de4c4f2806", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-17112dd786d15aaf", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/tests/property/skill-recursion-cap.test.ts:133"}, "properties": {"repobilityId": "95768269fe643a96", "scanner": "scanner-primary", "fingerprint": "17112dd786d15aaf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-42d4c0bc8bc0f9e1", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/property/cadence-scheduler-jitter.test.ts:69"}, "properties": {"repobilityId": "f1ed26b5cb456c65", "scanner": "scanner-primary", "fingerprint": "42d4c0bc8bc0f9e1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f4d66372ee09d00d", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/property/l4-commitment.test.ts:147"}, "properties": {"repobilityId": "9387e384fa462c0e", "scanner": "scanner-primary", "fingerprint": "f4d66372ee09d00d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-88ffee8f5b298a93", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/workflow.test.ts:561"}, "properties": {"repobilityId": "cef2614590ebdf59", "scanner": "scanner-primary", "fingerprint": "88ffee8f5b298a93", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eda7b7cba8a8838d", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/native/tests/contract/cli/sutra-native.test.ts:61"}, "properties": {"repobilityId": "8f8ae75cd2aec746", "scanner": "scanner-primary", "fingerprint": "eda7b7cba8a8838d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f46a5afda450277", "level": "none", "message": {"text": "Commented-code block (12 lines) in marketplace/native/tests/contract/engine/skill-engine.test.ts:239"}, "properties": {"repobilityId": "180dfca513256fb9", "scanner": "scanner-primary", "fingerprint": "5f46a5afda450277", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-579bec958578cf5d", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/native/tests/contract/engine/step-graph-executor.test.ts:124"}, "properties": {"repobilityId": "785cae494db5d118", "scanner": "scanner-primary", "fingerprint": "579bec958578cf5d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6e3dcd85ab44ff47", "level": "none", "message": {"text": "Commented-code block (9 lines) in marketplace/native/tests/contract/engine/temporal-adapter.test.ts:120"}, "properties": {"repobilityId": "8fa32d6b4019a722", "scanner": "scanner-primary", "fingerprint": "6e3dcd85ab44ff47", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-314468954d95d6ed", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/opa-evaluator.test.ts:122"}, "properties": {"repobilityId": "491a97b6daa680a2", "scanner": "scanner-primary", "fingerprint": "314468954d95d6ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e76b0a4ed5c5491e", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/skill-invocation.test.ts:305"}, "properties": {"repobilityId": "4d39002a04be4f50", "scanner": "scanner-primary", "fingerprint": "e76b0a4ed5c5491e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ff312b6cfa9b62b2", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/tests/contract/engine/activity-wrapper.test.ts:32"}, "properties": {"repobilityId": "f4105f6c021242d4", "scanner": "scanner-primary", "fingerprint": "ff312b6cfa9b62b2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-06844ae8f19f6bc9", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/native/tests/contract/laws/l4-commitment.test.ts:138"}, "properties": {"repobilityId": "eb8a7e49eb679321", "scanner": "scanner-primary", "fingerprint": "06844ae8f19f6bc9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eaf0da90107f165b", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/tests/contract/laws/l2-boundary.test.ts:37"}, "properties": {"repobilityId": "6df3b369e7a844fb", "scanner": "scanner-primary", "fingerprint": "eaf0da90107f165b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9be73735bbbe1bc9", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/scripts/dogfood-time-to-value.ts:309"}, "properties": {"repobilityId": "40f041daf823e3d1", "scanner": "scanner-primary", "fingerprint": "9be73735bbbe1bc9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0c04e8e508fd0a8c", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/src/types/index.ts:159"}, "properties": {"repobilityId": "19c5fb2db897a841", "scanner": "scanner-primary", "fingerprint": "0c04e8e508fd0a8c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eef7518d60dfec46", "level": "none", "message": {"text": "Commented-code block (9 lines) in marketplace/native/src/types/edges.ts:26"}, "properties": {"repobilityId": "059445d1f9675b13", "scanner": "scanner-primary", "fingerprint": "eef7518d60dfec46", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-419946059674cd64", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/types/engine-event.ts:401"}, "properties": {"repobilityId": "4d14c4e1dc119faf", "scanner": "scanner-primary", "fingerprint": "419946059674cd64", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-22831fc090a99c7a", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/primitives/charter.ts:122"}, "properties": {"repobilityId": "dc1af80336140cca", "scanner": "scanner-primary", "fingerprint": "22831fc090a99c7a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b7f913def8215f3e", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/primitives/workflow.ts:187"}, "properties": {"repobilityId": "d79066c84ce2dfd1", "scanner": "scanner-primary", "fingerprint": "b7f913def8215f3e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-139c732bf7dc03a6", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/native/src/cli/sutra-native.ts:260"}, "properties": {"repobilityId": "7fb30cd9e56739b1", "scanner": "scanner-primary", "fingerprint": "139c732bf7dc03a6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ef77a503692289d", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/starter-kit/index.ts:649"}, "properties": {"repobilityId": "7278d9f8c23b3b78", "scanner": "scanner-primary", "fingerprint": "5ef77a503692289d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d91f24d84dda3849", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/runtime/renderer-registry.ts:153"}, "properties": {"repobilityId": "af1fceeb783ab75c", "scanner": "scanner-primary", "fingerprint": "d91f24d84dda3849", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4f57a62a0e289c06", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/runtime/pnc-predicate.ts:95"}, "properties": {"repobilityId": "b3517ede2bb7c926", "scanner": "scanner-primary", "fingerprint": "4f57a62a0e289c06", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-65bce7637ef49248", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/src/runtime/lite-executor.ts:245"}, "properties": {"repobilityId": "f5cc6c51c7a0bbef", "scanner": "scanner-primary", "fingerprint": "65bce7637ef49248", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8ac0027c467db4bf", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/runtime/native-engine.ts:303"}, "properties": {"repobilityId": "07d8556ad3fc7f31", "scanner": "scanner-primary", "fingerprint": "8ac0027c467db4bf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b9b6be72de9fbc7a", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/step-graph-executor.ts:60"}, "properties": {"repobilityId": "7805a441ee4f3bb9", "scanner": "scanner-primary", "fingerprint": "b9b6be72de9fbc7a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-64a89e9d08f8ba85", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/skill-engine.ts:81"}, "properties": {"repobilityId": "9c672afd1ccada2d", "scanner": "scanner-primary", "fingerprint": "64a89e9d08f8ba85", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8a24cb6b5dd14ab7", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/src/engine/activity-wrapper.ts:50"}, "properties": {"repobilityId": "b12a59910a01de88", "scanner": "scanner-primary", "fingerprint": "8a24cb6b5dd14ab7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1ba27aca9616f3f7", "level": "none", "message": {"text": "Commented-code block (7 lines) in marketplace/native/src/engine/charter-rego-compiler.ts:259"}, "properties": {"repobilityId": "64a8bcaa16cf3508", "scanner": "scanner-primary", "fingerprint": "1ba27aca9616f3f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa724d5c0d20c02a", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/index.ts:26"}, "properties": {"repobilityId": "b86613d7d587d104", "scanner": "scanner-primary", "fingerprint": "aa724d5c0d20c02a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-721e754838da0c8e", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/skill-invocation.ts:231"}, "properties": {"repobilityId": "169567c368737b3b", "scanner": "scanner-primary", "fingerprint": "721e754838da0c8e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c09b254d89100a0d", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/src/engine/opa-evaluator.ts:43"}, "properties": {"repobilityId": "652176bf79eaa806", "scanner": "scanner-primary", "fingerprint": "c09b254d89100a0d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-68d959e2b088a9d2", "level": "none", "message": {"text": "Commented-code block (6 lines) in marketplace/native/src/engine/cadence-scheduler.ts:260"}, "properties": {"repobilityId": "75f3b88d655d71db", "scanner": "scanner-primary", "fingerprint": "68d959e2b088a9d2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1992aad8d619cdc5", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/host-llm-activity.ts:74"}, "properties": {"repobilityId": "534db8454be8861b", "scanner": "scanner-primary", "fingerprint": "1992aad8d619cdc5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-32dece7fa08e0b5c", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/engine/temporal-adapter.ts:157"}, "properties": {"repobilityId": "18229c251fad11c8", "scanner": "scanner-primary", "fingerprint": "32dece7fa08e0b5c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d6a6b20987c73678", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/laws/l4-terminal-check.ts:617"}, "properties": {"repobilityId": "2b5a132ebc5ac761", "scanner": "scanner-primary", "fingerprint": "d6a6b20987c73678", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3ae492b5f5a38ca0", "level": "none", "message": {"text": "Commented-code block (5 lines) in marketplace/native/src/laws/f10-parsers.ts:512"}, "properties": {"repobilityId": "f708ae5e69269dba", "scanner": "scanner-primary", "fingerprint": "3ae492b5f5a38ca0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e84916e88755fd69", "level": "none", "message": {"text": "Commented-code block (5 lines) in state/validate.mjs:335"}, "properties": {"repobilityId": "ff8dc35c7e257b87", "scanner": "scanner-primary", "fingerprint": "e84916e88755fd69", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "58059f983dc90516", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}