{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-220bdc04ba5b0f80", "name": "Possibly dead Python function: cmd_record", "shortDescription": {"text": "Possibly dead Python function: cmd_record"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-083380c3133a4043", "name": "Possibly dead Python function: cmd_tail", "shortDescription": {"text": "Possibly dead Python function: cmd_tail"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de4a5ed1dd3133a7", "name": "Possibly dead Python function: cmd_summary", "shortDescription": {"text": "Possibly dead Python function: cmd_summary"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77576df31c93eb7b", "name": "Possibly dead Python function: subscriber_count", "shortDescription": {"text": "Possibly dead Python function: subscriber_count"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fd4582d631c127e", "name": "Possibly dead Python function: sort_key", "shortDescription": {"text": "Possibly dead Python function: sort_key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e47c9415334695e7", "name": "Possibly dead Python function: notify_importance", "shortDescription": {"text": "Possibly dead Python function: notify_importance"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a07d5d38f20d7368", "name": "Possibly dead Python function: fire_now", "shortDescription": {"text": "Possibly dead Python function: fire_now"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3dd8a8f0366193ed", "name": "Possibly dead Python function: write_lesson", "shortDescription": {"text": "Possibly dead Python function: write_lesson"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2fb93e73bdb66887", "name": "TODO/FIXME marker in shipping code \u2014 deploy/librechat-patches/client/src/components/SidePanel/Veilguard/useVeilguardAPI.", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 deploy/librechat-patches/client/src/components/SidePanel/Veilguard/useVeilguardAPI.ts:335"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0733b9b1aacda769", "name": "Dockerfile runs as root: agent-runtime/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: agent-runtime/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4780b2fbfba4095", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2c5ffb3b963ea3f", "name": "Dockerfile runs as root: services/admin-dashboard/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: services/admin-dashboard/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d74f9e0a079a1901", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60a85d5404e34ab5", "name": "Dockerfile runs as root: agent-proxy/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: agent-proxy/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c82656ee7dc451e", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-32cae236f19dbf15", "name": "Insecure pattern 'cors_wildcard' in services/tcmm-service/server.py:851", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in services/tcmm-service/server.py:851"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53d15a6add3d8a24", "name": "Insecure pattern 'cors_wildcard' in services/client-daemon/setup_server.py:268", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in services/client-daemon/setup_server.py:268"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69d62433b4c489d4", "name": "Insecure pattern 'subprocess_shell_true' in services/client-daemon/veilguard_client.py:479", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in services/client-daemon/veilguard_client.py:479"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-292c9f2f6892d3b6", "name": "Insecure pattern 'subprocess_shell_true' in services/code-exec/server.py:76", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in services/code-exec/server.py:76"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d27223d388018b4", "name": "Insecure pattern 'subprocess_shell_true' in services/sub-agents/core/agentic.py:384", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in services/sub-agents/core/agentic.py:384"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90757bc65f26643d", "name": "Very large file: agent/base.py (1135 lines)", "shortDescription": {"text": "Very large file: agent/base.py (1135 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4b800349d9bbb5c", "name": "Very large file: agent-runtime/app/main.py (2223 lines)", "shortDescription": {"text": "Very large file: agent-runtime/app/main.py (2223 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8cef037855a8a3cd", "name": "Very large file: agent-runtime/app/workers/inbox_poller.py (1566 lines)", "shortDescription": {"text": "Very large file: agent-runtime/app/workers/inbox_poller.py (1566 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ffe12946d0fae3c", "name": "Very large file: agent-runtime/app/tools/ledger_mcp.py (1469 lines)", "shortDescription": {"text": "Very large file: agent-runtime/app/tools/ledger_mcp.py (1469 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17a134c31f34a7fa", "name": "Very large file: services/tcmm-service/server.py (3811 lines)", "shortDescription": {"text": "Very large file: services/tcmm-service/server.py (3811 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f6b69ab62989f54", "name": "Very large file: services/client-daemon/veilguard_client.py (2031 lines)", "shortDescription": {"text": "Very large file: services/client-daemon/veilguard_client.py (2031 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c070131779e9ace", "name": "Very large file: services/client-daemon/daemon/tray.py (1388 lines)", "shortDescription": {"text": "Very large file: services/client-daemon/daemon/tray.py (1388 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28d0809cac00f278", "name": "Very large file: agent-proxy/app/main.py (5932 lines)", "shortDescription": {"text": "Very large file: agent-proxy/app/main.py (5932 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 839 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 50 placeholder/mock markers across 29 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1d8c49023e31259", "name": "Network/subprocess call without timeout or try/except \u2014 test_heatmap_streaming.py:24", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 test_heatmap_streaming.py:24"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1cb8caa7df384680", "name": "Commented-code block (7 lines) in cost_simulation_v2.py:78", "shortDescription": {"text": "Commented-code block (7 lines) in cost_simulation_v2.py:78"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b9737148abb4a252", "name": "Commented-code block (6 lines) in scripts/verify_signal_emitters.py:205", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/verify_signal_emitters.py:205"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3acf0c4aead07cbb", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tcmm_latency_summary.py:63", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tcmm_latency_summary.py:63"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0027e8b159bbc3eb", "name": "Commented-code block (6 lines) in scripts/lance_maintenance.py:35", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/lance_maintenance.py:35"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4697b7d145f84e20", "name": "Commented-code block (8 lines) in agent/shadow_tool.py:73", "shortDescription": {"text": "Commented-code block (8 lines) in agent/shadow_tool.py:73"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4a08f3159fac592a", "name": "Commented-code block (7 lines) in agent/base.py:79", "shortDescription": {"text": "Commented-code block (7 lines) in agent/base.py:79"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e9d576f794b9d02", "name": "Commented-code block (8 lines) in agent/preamble.py:140", "shortDescription": {"text": "Commented-code block (8 lines) in agent/preamble.py:140"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a17ebe3e83ada453", "name": "Commented-code block (5 lines) in agent/director.py:83", "shortDescription": {"text": "Commented-code block (5 lines) in agent/director.py:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1a9b0950f7a9a117", "name": "Commented-code block (5 lines) in deploy/librechat-patches/client/src/components/SidePanel/Veilguard/useVeilguardAPI.ts:", "shortDescription": {"text": "Commented-code block (5 lines) in deploy/librechat-patches/client/src/components/SidePanel/Veilguard/useVeilguardAPI.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fb9d029a44b6a507", "name": "Commented-code block (6 lines) in deploy/librechat-patches/api/server/routes/veilguardClient.js:23", "shortDescription": {"text": "Commented-code block (6 lines) in deploy/librechat-patches/api/server/routes/veilguardClient.js:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ffb5b128be373d3c", "name": "Commented-code block (6 lines) in agent-runtime/demo/scenario_critic_iterate.py:81", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/demo/scenario_critic_iterate.py:81"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dd3230b79e814af2", "name": "Commented-code block (9 lines) in agent-runtime/demo/scenario_pattern_b_delegation.py:44", "shortDescription": {"text": "Commented-code block (9 lines) in agent-runtime/demo/scenario_pattern_b_delegation.py:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-920ba59a87953954", "name": "Network/subprocess call without timeout or try/except \u2014 agent-runtime/demo/run_all.py:41", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 agent-runtime/demo/run_all.py:41"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-013a91d66805c503", "name": "Commented-code block (6 lines) in agent-runtime/demo/_harness.py:79", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/demo/_harness.py:79"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-72530027fa57da2d", "name": "Commented-code block (6 lines) in agent-runtime/tests/test_memory_mcp_tools.py:27", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/tests/test_memory_mcp_tools.py:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-495ec6b8d6fbc61b", "name": "Commented-code block (8 lines) in agent-runtime/tests/test_ledger_mcp_tools.py:69", "shortDescription": {"text": "Commented-code block (8 lines) in agent-runtime/tests/test_ledger_mcp_tools.py:69"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2d9aae19af843e30", "name": "Commented-code block (5 lines) in agent-runtime/tests/test_agent_teams.py:69", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/tests/test_agent_teams.py:69"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6fe0f5de8aed4d50", "name": "Commented-code block (5 lines) in agent-runtime/tests/test_inbox_poller.py:45", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/tests/test_inbox_poller.py:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-35d95f5c3c5dae7f", "name": "Commented-code block (6 lines) in agent-runtime/tests/test_ledger_schemas.py:30", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/tests/test_ledger_schemas.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-441e1ae09501f839", "name": "Commented-code block (5 lines) in agent-runtime/tests/memory/test_phase_7_acceptance.py:96", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/tests/memory/test_phase_7_acceptance.py:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-08c9f842d8e6bd23", "name": "Commented-code block (8 lines) in agent-runtime/app/tool_dispatcher.py:77", "shortDescription": {"text": "Commented-code block (8 lines) in agent-runtime/app/tool_dispatcher.py:77"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c1f8f422b6cd3214", "name": "Commented-code block (6 lines) in agent-runtime/app/config.py:114", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/config.py:114"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a9d4c51c01914827", "name": "Commented-code block (6 lines) in agent-runtime/app/main.py:90", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/main.py:90"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8ebc9cad71735923", "name": "Commented-code block (5 lines) in agent-runtime/app/runtime.py:57", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/runtime.py:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-356161e0ca53ca7d", "name": "Legacy-named symbol `_evict_old` in agent-runtime/app/runtime_health/apr.py:97", "shortDescription": {"text": "Legacy-named symbol `_evict_old` in agent-runtime/app/runtime_health/apr.py:97"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-509d3ba885ea3f8b", "name": "Commented-code block (9 lines) in agent-runtime/app/runtime_health/apr.py:37", "shortDescription": {"text": "Commented-code block (9 lines) in agent-runtime/app/runtime_health/apr.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b0919ae7f1cefc3", "name": "Commented-code block (8 lines) in agent-runtime/app/middleware/tcmm.py:39", "shortDescription": {"text": "Commented-code block (8 lines) in agent-runtime/app/middleware/tcmm.py:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5261154e9066e06", "name": "Commented-code block (9 lines) in agent-runtime/app/middleware/audit.py:36", "shortDescription": {"text": "Commented-code block (9 lines) in agent-runtime/app/middleware/audit.py:36"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-069337e1f02deb48", "name": "Commented-code block (5 lines) in agent-runtime/app/proposals/constitution_bridge.py:48", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/constitution_bridge.py:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54314b5283363a7e", "name": "Commented-code block (8 lines) in agent-runtime/app/proposals/signal_emitters.py:81", "shortDescription": {"text": "Commented-code block (8 lines) in agent-runtime/app/proposals/signal_emitters.py:81"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fb002304697c1a14", "name": "Commented-code block (6 lines) in agent-runtime/app/proposals/outcomes.py:67", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/proposals/outcomes.py:67"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-065ada6068b3f758", "name": "Commented-code block (9 lines) in agent-runtime/app/proposals/briefs.py:67", "shortDescription": {"text": "Commented-code block (9 lines) in agent-runtime/app/proposals/briefs.py:67"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dfe551583ea2b107", "name": "Commented-code block (5 lines) in agent-runtime/app/proposals/dream_scanner.py:70", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/dream_scanner.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c406afe3d614e29", "name": "Commented-code block (5 lines) in agent-runtime/app/proposals/lessons.py:305", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/lessons.py:305"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7cb7755403e0f1bc", "name": "Commented-code block (5 lines) in agent-runtime/app/proposals/scoring.py:62", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/scoring.py:62"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cd5b1e627bc49e97", "name": "Commented-code block (7 lines) in agent-runtime/app/proposals/recalibration.py:289", "shortDescription": {"text": "Commented-code block (7 lines) in agent-runtime/app/proposals/recalibration.py:289"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-27e487b901901161", "name": "Commented-code block (7 lines) in agent-runtime/app/proposals/assignees.py:30", "shortDescription": {"text": "Commented-code block (7 lines) in agent-runtime/app/proposals/assignees.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-add53c8ebf1a5f5d", "name": "Commented-code block (5 lines) in agent-runtime/app/proposals/rank.py:61", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/rank.py:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e01a53df1895437f", "name": "Legacy-named symbol `test_eligible_basic_done_task_45d_old` in agent-runtime/app/proposals/tests/test_outcomes.py:147", "shortDescription": {"text": "Legacy-named symbol `test_eligible_basic_done_task_45d_old` in agent-runtime/app/proposals/tests/test_outcomes.py:147"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8bb7c1f82249e00c", "name": "Commented-code block (5 lines) in agent-runtime/app/proposals/tests/test_constitution_bridge.py:177", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/tests/test_constitution_bridge.py:177"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e1e6229b88c7cf9", "name": "Commented-code block (11 lines) in agent-runtime/app/workers/inbox_poller.py:50", "shortDescription": {"text": "Commented-code block (11 lines) in agent-runtime/app/workers/inbox_poller.py:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-49f93955c49244a7", "name": "Commented-code block (6 lines) in agent-runtime/app/memory/phase_7_writers.py:264", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/memory/phase_7_writers.py:264"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-480f4a26bbe4a0d0", "name": "Commented-code block (6 lines) in agent-runtime/app/memory/lessons_reader.py:143", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/memory/lessons_reader.py:143"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-44650115cf9f9a78", "name": "Commented-code block (6 lines) in agent-runtime/app/tools/memory_mcp.py:212", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/tools/memory_mcp.py:212"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e63d45f01a36cef4", "name": "Stub function `create_sdk_mcp_server` (body is just `pass`/`return`) \u2014 agent-runtime/app/tools/memory_mcp.py:56", "shortDescription": {"text": "Stub function `create_sdk_mcp_server` (body is just `pass`/`return`) \u2014 agent-runtime/app/tools/memory_mcp.py:56"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22196888d7351046", "name": "Commented-code block (15 lines) in agent-runtime/app/tools/ledger_mcp.py:192", "shortDescription": {"text": "Commented-code block (15 lines) in agent-runtime/app/tools/ledger_mcp.py:192"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e867ddf56d9fe5a5", "name": "Stub function `create_sdk_mcp_server` (body is just `pass`/`return`) \u2014 agent-runtime/app/tools/ledger_mcp.py:64", "shortDescription": {"text": "Stub function `create_sdk_mcp_server` (body is just `pass`/`return`) \u2014 agent-runtime/app/tools/ledger_mcp.py:64"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e155290a5bbe161d", "name": "Commented-code block (5 lines) in agent-runtime/app/ledger/schemas.py:61", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/ledger/schemas.py:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-82e6df85ce8ea256", "name": "Commented-code block (8 lines) in agent-runtime/app/ledger/tasks.py:48", "shortDescription": {"text": "Commented-code block (8 lines) in agent-runtime/app/ledger/tasks.py:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b95ed953ee66e464", "name": "Commented-code block (6 lines) in agent-runtime/app/acceptance/llm_judge.py:83", "shortDescription": {"text": "Commented-code block (6 lines) in agent-runtime/app/acceptance/llm_judge.py:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-da5508635e5b8604", "name": "Commented-code block (5 lines) in agent-runtime/app/acceptance/executors.py:56", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/acceptance/executors.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-defe8ea4c66de9d4", "name": "Commented-code block (23 lines) in agent-runtime/app/acceptance/critic_prompt.py:62", "shortDescription": {"text": "Commented-code block (23 lines) in agent-runtime/app/acceptance/critic_prompt.py:62"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eb343920c154891a", "name": "Commented-code block (5 lines) in agent-runtime/app/constitution/scorer.py:26", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/constitution/scorer.py:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9532a1259326b3f4", "name": "Commented-code block (5 lines) in agent-runtime/app/constitution/loader.py:226", "shortDescription": {"text": "Commented-code block (5 lines) in agent-runtime/app/constitution/loader.py:226"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e318e30da85257e", "name": "Commented-code block (5 lines) in services/filesystem/server.py:27", "shortDescription": {"text": "Commented-code block (5 lines) in services/filesystem/server.py:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-662ca7726f9fd7c9", "name": "Commented-code block (13 lines) in services/forge/server.py:326", "shortDescription": {"text": "Commented-code block (13 lines) in services/forge/server.py:326"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d271862de552df1", "name": "Commented-code block (6 lines) in services/host-exec/server.py:28", "shortDescription": {"text": "Commented-code block (6 lines) in services/host-exec/server.py:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b4d87dfaa8bafdb4", "name": "Commented-code block (5 lines) in services/connectors/sharepoint/connector.py:127", "shortDescription": {"text": "Commented-code block (5 lines) in services/connectors/sharepoint/connector.py:127"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-335058dc74bc66d4", "name": "Commented-code block (5 lines) in services/connectors/sharepoint/server.py:102", "shortDescription": {"text": "Commented-code block (5 lines) in services/connectors/sharepoint/server.py:102"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f5ff5747f9a0904f", "name": "Commented-code block (6 lines) in services/tcmm-service/server.py:20", "shortDescription": {"text": "Commented-code block (6 lines) in services/tcmm-service/server.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dcad96d4ca600809", "name": "Commented-code block (5 lines) in services/image/server.py:24", "shortDescription": {"text": "Commented-code block (5 lines) in services/image/server.py:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-82b2c79f6ada5d97", "name": "Commented-code block (6 lines) in services/client-daemon/setup_server.py:23", "shortDescription": {"text": "Commented-code block (6 lines) in services/client-daemon/setup_server.py:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ebfaafa33c7649c", "name": "Commented-code block (5 lines) in services/client-daemon/veilguard_client.py:13", "shortDescription": {"text": "Commented-code block (5 lines) in services/client-daemon/veilguard_client.py:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3c1a7ee00711612e", "name": "Network/subprocess call without timeout or try/except \u2014 services/client-daemon/veilguard_client.py:233", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 services/client-daemon/veilguard_client.py:233"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1cbd46ac8116f4a3", "name": "Network/subprocess call without timeout or try/except \u2014 services/client-daemon/publish_release.py:51", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 services/client-daemon/publish_release.py:51"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76f62e79c18f389c", "name": "Commented-code block (5 lines) in services/client-daemon/tests/test_stage1_isolation.py:243", "shortDescription": {"text": "Commented-code block (5 lines) in services/client-daemon/tests/test_stage1_isolation.py:243"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-73c31afffbfbe7e0", "name": "Commented-code block (5 lines) in services/client-daemon/daemon/toast.py:107", "shortDescription": {"text": "Commented-code block (5 lines) in services/client-daemon/daemon/toast.py:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-16d48d1576932aa2", "name": "Commented-code block (5 lines) in services/client-daemon/daemon/tray.py:125", "shortDescription": {"text": "Commented-code block (5 lines) in services/client-daemon/daemon/tray.py:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-398eb6fd7a5bca18", "name": "Commented-code block (6 lines) in services/web/server.py:50", "shortDescription": {"text": "Commented-code block (6 lines) in services/web/server.py:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6ac62204241dc6fa", "name": "Commented-code block (6 lines) in services/admin-dashboard/auth.py:31", "shortDescription": {"text": "Commented-code block (6 lines) in services/admin-dashboard/auth.py:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-48a187f72a4e8327", "name": "Commented-code block (6 lines) in services/documents/server.py:32", "shortDescription": {"text": "Commented-code block (6 lines) in services/documents/server.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a6d656503ede02b3", "name": "Commented-code block (8 lines) in services/veilguard-mcp/server.py:327", "shortDescription": {"text": "Commented-code block (8 lines) in services/veilguard-mcp/server.py:327"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5cc96702714623c9", "name": "Commented-code block (8 lines) in services/sub-agents/config.py:40", "shortDescription": {"text": "Commented-code block (8 lines) in services/sub-agents/config.py:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cfb202bc1291d267", "name": "Commented-code block (9 lines) in services/sub-agents/server.py:17", "shortDescription": {"text": "Commented-code block (9 lines) in services/sub-agents/server.py:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e6c3fa1aabadc0b3", "name": "Commented-code block (6 lines) in services/sub-agents/utils/prompts.py:5", "shortDescription": {"text": "Commented-code block (6 lines) in services/sub-agents/utils/prompts.py:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9eaf2b1c1abfdeff", "name": "Commented-code block (6 lines) in services/sub-agents/utils/tool_location.py:33", "shortDescription": {"text": "Commented-code block (6 lines) in services/sub-agents/utils/tool_location.py:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-52612d948f45e831", "name": "Legacy-named symbol `clipboard_copy` in services/sub-agents/utils/safety.py:14", "shortDescription": {"text": "Legacy-named symbol `clipboard_copy` in services/sub-agents/utils/safety.py:14"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e029b31e5bbc492", "name": "Commented-code block (6 lines) in services/sub-agents/tools/daemons.py:116", "shortDescription": {"text": "Commented-code block (6 lines) in services/sub-agents/tools/daemons.py:116"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-32f0bea08f50881b", "name": "Commented-code block (6 lines) in services/sub-agents/tools/host_docs.py:31", "shortDescription": {"text": "Commented-code block (6 lines) in services/sub-agents/tools/host_docs.py:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3834187478dc77eb", "name": "Commented-code block (5 lines) in services/sub-agents/tools/tasks.py:125", "shortDescription": {"text": "Commented-code block (5 lines) in services/sub-agents/tools/tasks.py:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a6f2ff8f378fc4d", "name": "Legacy-named symbol `clipboard_copy` in services/sub-agents/tools/tool_search.py:49", "shortDescription": {"text": "Legacy-named symbol `clipboard_copy` in services/sub-agents/tools/tool_search.py:49"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73241e603ccedc42", "name": "Legacy-named symbol `_FauxTaskFromLegacy` in services/sub-agents/tools/client_admin.py:148", "shortDescription": {"text": "Legacy-named symbol `_FauxTaskFromLegacy` in services/sub-agents/tools/client_admin.py:148"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea46b1d37dd67013", "name": "Commented-code block (5 lines) in services/sub-agents/tools/client_admin.py:129", "shortDescription": {"text": "Commented-code block (5 lines) in services/sub-agents/tools/client_admin.py:129"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-187ba8e486cbffe3", "name": "Commented-code block (6 lines) in services/sub-agents/tools/agents.py:124", "shortDescription": {"text": "Commented-code block (6 lines) in services/sub-agents/tools/agents.py:124"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5c2d04ab3badb24e", "name": "Legacy-named symbol `clipboard_copy` in services/sub-agents/tools/clipboard.py:8", "shortDescription": {"text": "Legacy-named symbol `clipboard_copy` in services/sub-agents/tools/clipboard.py:8"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b34a4d38551afa26", "name": "Commented-code block (6 lines) in services/sub-agents/core/client_settings.py:136", "shortDescription": {"text": "Commented-code block (6 lines) in services/sub-agents/core/client_settings.py:136"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2cd08f52fb869d43", "name": "Commented-code block (9 lines) in services/sub-agents/core/agentic.py:123", "shortDescription": {"text": "Commented-code block (9 lines) in services/sub-agents/core/agentic.py:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f415e4fd0d76d2e", "name": "Commented-code block (8 lines) in services/sub-agents/core/client_bridge.py:197", "shortDescription": {"text": "Commented-code block (8 lines) in services/sub-agents/core/client_bridge.py:197"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e17bc6d29b1296a8", "name": "Network/subprocess call without timeout or try/except \u2014 services/sub-agents/core/client_bridge.py:392", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 services/sub-agents/core/client_bridge.py:392"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01fcd117713965f6", "name": "Commented-code block (9 lines) in services/sub-agents/core/llm.py:84", "shortDescription": {"text": "Commented-code block (9 lines) in services/sub-agents/core/llm.py:84"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e2ba2dc3266056bd", "name": "Commented-code block (7 lines) in services/sub-agents/core/approval.py:42", "shortDescription": {"text": "Commented-code block (7 lines) in services/sub-agents/core/approval.py:42"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7daea2303f068a9f", "name": "Commented-code block (10 lines) in services/sub-agents/core/request_ctx.py:26", "shortDescription": {"text": "Commented-code block (10 lines) in services/sub-agents/core/request_ctx.py:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0f093de2c786c1f7", "name": "Commented-code block (5 lines) in services/sub-agents/core/tasks/model.py:119", "shortDescription": {"text": "Commented-code block (5 lines) in services/sub-agents/core/tasks/model.py:119"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-85779d2e187fb0d9", "name": "Commented-code block (10 lines) in services/sub-agents/storage/session.py:26", "shortDescription": {"text": "Commented-code block (10 lines) in services/sub-agents/storage/session.py:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8fc7c8dbc50724bc", "name": "Commented-code block (6 lines) in services/_shared/ocr_client.py:19", "shortDescription": {"text": "Commented-code block (6 lines) in services/_shared/ocr_client.py:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4cb6a857d143dd31", "name": "Commented-code block (7 lines) in pii/session_store.py:138", "shortDescription": {"text": "Commented-code block (7 lines) in pii/session_store.py:138"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-52de3c6c9d9ef182", "name": "Commented-code block (5 lines) in pii/redactor.py:80", "shortDescription": {"text": "Commented-code block (5 lines) in pii/redactor.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c5842d1c002fd843", "name": "Commented-code block (13 lines) in pii/recognizers/sa_phone.py:19", "shortDescription": {"text": "Commented-code block (13 lines) in pii/recognizers/sa_phone.py:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4384f9ffb334a551", "name": "Commented-code block (7 lines) in agent-proxy/tests/test_cache_metrics.py:177", "shortDescription": {"text": "Commented-code block (7 lines) in agent-proxy/tests/test_cache_metrics.py:177"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b9bb59a3e4009b7b", "name": "Commented-code block (5 lines) in agent-proxy/app/cache_metrics.py:73", "shortDescription": {"text": "Commented-code block (5 lines) in agent-proxy/app/cache_metrics.py:73"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a00f50c84389fd41", "name": "Commented-code block (9 lines) in agent-proxy/app/session.py:12", "shortDescription": {"text": "Commented-code block (9 lines) in agent-proxy/app/session.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ad2bf6dbf2f02a9", "name": "Commented-code block (8 lines) in agent-proxy/app/main.py:37", "shortDescription": {"text": "Commented-code block (8 lines) in agent-proxy/app/main.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-438966698ef44fe9", "name": "Commented-code block (5 lines) in agent-proxy/app/chat_agent_handler.py:49", "shortDescription": {"text": "Commented-code block (5 lines) in agent-proxy/app/chat_agent_handler.py:49"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-71cab25334816b75", "name": "Commented-code block (13 lines) in agent-proxy/app/recognizers/sa_phone.py:19", "shortDescription": {"text": "Commented-code block (13 lines) in agent-proxy/app/recognizers/sa_phone.py:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-56fc8d9824719f0e", "name": "Commented-code block (8 lines) in llm/audit_db.py:105", "shortDescription": {"text": "Commented-code block (8 lines) in llm/audit_db.py:105"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-70a4593213098370", "name": "Commented-code block (9 lines) in llm/tcmm_client.py:180", "shortDescription": {"text": "Commented-code block (9 lines) in llm/tcmm_client.py:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c39e28ced7639f49", "name": "191 env vars used in code but missing from .env.example", "shortDescription": {"text": "191 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `ADMIN_COOKIE_NAME`, `ADMIN_HOST`, `ADMIN_PORT`, `AGENT_LEDGER_AUTO_COMPACT`, `AGENT_LEDGER_COMPACT_INTERVAL_S`, `AGENT_RUNTIME_DEFAULT_AGENT`, `AGENT_RUNTIME_ENABLED`, `AGENT_RUNTIME_URL` + 183 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\n_dag_harness.py:post, _edge_harness.py:post\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f2b991ff13f2082", "name": "FastAPI POST `send_message_to_agent` without auth dependency \u2014 agent-runtime/app/a2a.py:112", "shortDescription": {"text": "FastAPI POST `send_message_to_agent` without auth dependency \u2014 agent-runtime/app/a2a.py:112"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b3e6ef3e2d0644f6", "name": "FastAPI POST `create_key` without auth dependency \u2014 agent-runtime/app/a2a_external.py:205", "shortDescription": {"text": "FastAPI POST `create_key` without auth dependency \u2014 agent-runtime/app/a2a_external.py:205"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dfb96a7fcaa35d83", "name": "FastAPI POST `revoke_key` without auth dependency \u2014 agent-runtime/app/a2a_external.py:256", "shortDescription": {"text": "FastAPI POST `revoke_key` without auth dependency \u2014 agent-runtime/app/a2a_external.py:256"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bc4d08a003c6c2a1", "name": "FastAPI POST `external_send_message` without auth dependency \u2014 agent-runtime/app/a2a_external.py:275", "shortDescription": {"text": "FastAPI POST `external_send_message` without auth dependency \u2014 agent-runtime/app/a2a_external.py:275"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-00c8aa532866075e", "name": "FastAPI POST `proposal_emit` without auth dependency \u2014 agent-runtime/app/main.py:940", "shortDescription": {"text": "FastAPI POST `proposal_emit` without auth dependency \u2014 agent-runtime/app/main.py:940"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9bfc96ab41eabd93", "name": "FastAPI POST `proposal_convert` without auth dependency \u2014 agent-runtime/app/main.py:1086", "shortDescription": {"text": "FastAPI POST `proposal_convert` without auth dependency \u2014 agent-runtime/app/main.py:1086"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-758bdaf81a491d7c", "name": "FastAPI POST `delegate_to_org` without auth dependency \u2014 agent-runtime/app/main.py:1166", "shortDescription": {"text": "FastAPI POST `delegate_to_org` without auth dependency \u2014 agent-runtime/app/main.py:1166"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b2a0dd008e770cf", "name": "FastAPI POST `create_team_endpoint` without auth dependency \u2014 agent-runtime/app/main.py:1255", "shortDescription": {"text": "FastAPI POST `create_team_endpoint` without auth dependency \u2014 agent-runtime/app/main.py:1255"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3761389645cf354d", "name": "FastAPI POST `proposal_decision` without auth dependency \u2014 agent-runtime/app/main.py:1320", "shortDescription": {"text": "FastAPI POST `proposal_decision` without auth dependency \u2014 agent-runtime/app/main.py:1320"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b0e2f6fdc5d41bd5", "name": "FastAPI POST `documents_snapshot` without auth dependency \u2014 agent-runtime/app/main.py:1409", "shortDescription": {"text": "FastAPI POST `documents_snapshot` without auth dependency \u2014 agent-runtime/app/main.py:1409"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c424c0bb5ade79d6", "name": "FastAPI POST `task_ledger_set` without auth dependency \u2014 agent-runtime/app/main.py:1477", "shortDescription": {"text": "FastAPI POST `task_ledger_set` without auth dependency \u2014 agent-runtime/app/main.py:1477"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5969e9943739ba34", "name": "FastAPI POST `task_progress_append` without auth dependency \u2014 agent-runtime/app/main.py:1506", "shortDescription": {"text": "FastAPI POST `task_progress_append` without auth dependency \u2014 agent-runtime/app/main.py:1506"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a58b0c523cfbc285", "name": "FastAPI POST `lesson_decision` without auth dependency \u2014 agent-runtime/app/main.py:1616", "shortDescription": {"text": "FastAPI POST `lesson_decision` without auth dependency \u2014 agent-runtime/app/main.py:1616"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d43a148052d65d6f", "name": "FastAPI POST `proactive_config_set` without auth dependency \u2014 agent-runtime/app/main.py:2016", "shortDescription": {"text": "FastAPI POST `proactive_config_set` without auth dependency \u2014 agent-runtime/app/main.py:2016"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-92e09b541b33cec0", "name": "FastAPI POST `apr_resume_endpoint` without auth dependency \u2014 agent-runtime/app/main.py:2081", "shortDescription": {"text": "FastAPI POST `apr_resume_endpoint` without auth dependency \u2014 agent-runtime/app/main.py:2081"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0304847c5d6f2f1a", "name": "FastAPI POST `agent_query` without auth dependency \u2014 agent-runtime/app/main.py:2101", "shortDescription": {"text": "FastAPI POST `agent_query` without auth dependency \u2014 agent-runtime/app/main.py:2101"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f15b66e0dcd9e65f", "name": "FastAPI POST `pre_request` without auth dependency \u2014 services/tcmm-service/server.py:1399", "shortDescription": {"text": "FastAPI POST `pre_request` without auth dependency \u2014 services/tcmm-service/server.py:1399"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1673a13b085e7e13", "name": "FastAPI POST `pin_system_prompt` without auth dependency \u2014 services/tcmm-service/server.py:1896", "shortDescription": {"text": "FastAPI POST `pin_system_prompt` without auth dependency \u2014 services/tcmm-service/server.py:1896"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71f71bb92d51df7e", "name": "FastAPI POST `pin_tool_definitions` without auth dependency \u2014 services/tcmm-service/server.py:1924", "shortDescription": {"text": "FastAPI POST `pin_tool_definitions` without auth dependency \u2014 services/tcmm-service/server.py:1924"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-608250819615bd3c", "name": "FastAPI POST `pin_user_profile` without auth dependency \u2014 services/tcmm-service/server.py:1996", "shortDescription": {"text": "FastAPI POST `pin_user_profile` without auth dependency \u2014 services/tcmm-service/server.py:1996"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-53fb07074ecc4c02", "name": "FastAPI POST `generate` without auth dependency \u2014 services/tcmm-service/server.py:2096", "shortDescription": {"text": "FastAPI POST `generate` without auth dependency \u2014 services/tcmm-service/server.py:2096"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-16dd0af686a3ebae", "name": "FastAPI POST `generate_stream` without auth dependency \u2014 services/tcmm-service/server.py:2221", "shortDescription": {"text": "FastAPI POST `generate_stream` without auth dependency \u2014 services/tcmm-service/server.py:2221"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1cfa2cf4b3ca351d", "name": "FastAPI POST `render_structured` without auth dependency \u2014 services/tcmm-service/server.py:2376", "shortDescription": {"text": "FastAPI POST `render_structured` without auth dependency \u2014 services/tcmm-service/server.py:2376"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0823b1c705d7cd77", "name": "FastAPI POST `render` without auth dependency \u2014 services/tcmm-service/server.py:2552", "shortDescription": {"text": "FastAPI POST `render` without auth dependency \u2014 services/tcmm-service/server.py:2552"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7f9ac8cbe52d9853", "name": "FastAPI POST `post_response` without auth dependency \u2014 services/tcmm-service/server.py:2705", "shortDescription": {"text": "FastAPI POST `post_response` without auth dependency \u2014 services/tcmm-service/server.py:2705"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1c163194c687aef6", "name": "FastAPI POST `ingest_turn` without auth dependency \u2014 services/tcmm-service/server.py:2883", "shortDescription": {"text": "FastAPI POST `ingest_turn` without auth dependency \u2014 services/tcmm-service/server.py:2883"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4360eba9b0a706bd", "name": "FastAPI POST `ingest_text` without auth dependency \u2014 services/tcmm-service/server.py:2938", "shortDescription": {"text": "FastAPI POST `ingest_text` without auth dependency \u2014 services/tcmm-service/server.py:2938"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-019b0afa4778a86d", "name": "FastAPI POST `search_memory_endpoint` without auth dependency \u2014 services/tcmm-service/server.py:3015", "shortDescription": {"text": "FastAPI POST `search_memory_endpoint` without auth dependency \u2014 services/tcmm-service/server.py:3015"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30c5306bc9d59cb7", "name": "FastAPI POST `traverse_memory_endpoint` without auth dependency \u2014 services/tcmm-service/server.py:3073", "shortDescription": {"text": "FastAPI POST `traverse_memory_endpoint` without auth dependency \u2014 services/tcmm-service/server.py:3073"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-96806059c8602c4c", "name": "FastAPI POST `admin_requeue_semantic` without auth dependency \u2014 services/tcmm-service/server.py:3324", "shortDescription": {"text": "FastAPI POST `admin_requeue_semantic` without auth dependency \u2014 services/tcmm-service/server.py:3324"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b387a7f0357e3390", "name": "FastAPI POST `debug_evict` without auth dependency \u2014 services/tcmm-service/server.py:3496", "shortDescription": {"text": "FastAPI POST `debug_evict` without auth dependency \u2014 services/tcmm-service/server.py:3496"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0d3ccb3e6c5c9461", "name": "FastAPI POST `trigger_dream` without auth dependency \u2014 services/tcmm-service/server.py:3608", "shortDescription": {"text": "FastAPI POST `trigger_dream` without auth dependency \u2014 services/tcmm-service/server.py:3608"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-481955e08865ce63", "name": "Unused endpoint: POST /agents/{agent_id}/messages", "shortDescription": {"text": "Unused endpoint: POST /agents/{agent_id}/messages"}, "fullDescription": {"text": "`agent-runtime/app/a2a.py` declares `POST /agents/{agent_id}/messages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8baa30e42f3d0c26", "name": "Unused endpoint: GET /agents/{agent_id}/tasks/{task_id}", "shortDescription": {"text": "Unused endpoint: GET /agents/{agent_id}/tasks/{task_id}"}, "fullDescription": {"text": "`agent-runtime/app/a2a.py` declares `GET /agents/{agent_id}/tasks/{task_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d5cc21a1d89bcbd", "name": "Unused endpoint: GET /agents/{agent_id}/inbox", "shortDescription": {"text": "Unused endpoint: GET /agents/{agent_id}/inbox"}, "fullDescription": {"text": "`agent-runtime/app/a2a.py` declares `GET /agents/{agent_id}/inbox` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f53365bbb1c16b8", "name": "Unused endpoint: POST /keys", "shortDescription": {"text": "Unused endpoint: POST /keys"}, "fullDescription": {"text": "`agent-runtime/app/a2a_external.py` declares `POST /keys` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2cc6568399fb5847", "name": "Unused endpoint: POST /keys/{key_id}/revoke", "shortDescription": {"text": "Unused endpoint: POST /keys/{key_id}/revoke"}, "fullDescription": {"text": "`agent-runtime/app/a2a_external.py` declares `POST /keys/{key_id}/revoke` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22f790b281fc81d7", "name": "Unused endpoint: GET /audit/tcmm_source_kinds", "shortDescription": {"text": "Unused endpoint: GET /audit/tcmm_source_kinds"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /audit/tcmm_source_kinds` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72e04955cf83a53f", "name": "Unused endpoint: GET /teams", "shortDescription": {"text": "Unused endpoint: GET /teams"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /teams` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f1314f6a84c5723", "name": "Unused endpoint: GET /teams/{team_id}/cost", "shortDescription": {"text": "Unused endpoint: GET /teams/{team_id}/cost"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /teams/{team_id}/cost` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3140e61d7cac5091", "name": "Unused endpoint: GET /agents", "shortDescription": {"text": "Unused endpoint: GET /agents"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /agents` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0661a017d8970e67", "name": "Unused endpoint: GET /proposals", "shortDescription": {"text": "Unused endpoint: GET /proposals"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /proposals` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c9de2a9e4c22036a", "name": "Unused endpoint: POST /proposals/emit", "shortDescription": {"text": "Unused endpoint: POST /proposals/emit"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /proposals/emit` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12fe38612c675a0d", "name": "Unused endpoint: POST /proposals/{proposal_id}/convert", "shortDescription": {"text": "Unused endpoint: POST /proposals/{proposal_id}/convert"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /proposals/{proposal_id}/convert` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64d38197cc75c049", "name": "Unused endpoint: POST /delegate", "shortDescription": {"text": "Unused endpoint: POST /delegate"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /delegate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa294e6a3b85ba0a", "name": "Unused endpoint: POST /teams", "shortDescription": {"text": "Unused endpoint: POST /teams"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /teams` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd7799d73efaac71", "name": "Unused endpoint: GET /workspace/file", "shortDescription": {"text": "Unused endpoint: GET /workspace/file"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /workspace/file` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5fab9da5dd1de775", "name": "Unused endpoint: POST /proposals/{proposal_id}/decision", "shortDescription": {"text": "Unused endpoint: POST /proposals/{proposal_id}/decision"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /proposals/{proposal_id}/decision` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07e149dfd9e41f27", "name": "Unused endpoint: GET /replay/{task_id}", "shortDescription": {"text": "Unused endpoint: GET /replay/{task_id}"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /replay/{task_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b9484ee84021132", "name": "Unused endpoint: POST /documents/snapshot", "shortDescription": {"text": "Unused endpoint: POST /documents/snapshot"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /documents/snapshot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-372770ff42bdc44a", "name": "Unused endpoint: GET /documents/history", "shortDescription": {"text": "Unused endpoint: GET /documents/history"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /documents/history` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04491bea3e45a486", "name": "Unused endpoint: GET /documents/authority", "shortDescription": {"text": "Unused endpoint: GET /documents/authority"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /documents/authority` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-090ed57eb73fc34d", "name": "Unused endpoint: GET /tasks/{task_id}/ledger", "shortDescription": {"text": "Unused endpoint: GET /tasks/{task_id}/ledger"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /tasks/{task_id}/ledger` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4218a64714a2fe7d", "name": "Unused endpoint: POST /tasks/{task_id}/ledger", "shortDescription": {"text": "Unused endpoint: POST /tasks/{task_id}/ledger"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /tasks/{task_id}/ledger` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f7a5ea7522e455d", "name": "Unused endpoint: POST /tasks/{task_id}/progress", "shortDescription": {"text": "Unused endpoint: POST /tasks/{task_id}/progress"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /tasks/{task_id}/progress` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-161a20048b561f80", "name": "Unused endpoint: GET /lessons/review_queue", "shortDescription": {"text": "Unused endpoint: GET /lessons/review_queue"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /lessons/review_queue` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0a23fdf40898caa", "name": "Unused endpoint: GET /lessons/amendment_candidates", "shortDescription": {"text": "Unused endpoint: GET /lessons/amendment_candidates"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /lessons/amendment_candidates` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7925cdc762cb69b5", "name": "Unused endpoint: POST /lessons/{lesson_id}/decision", "shortDescription": {"text": "Unused endpoint: POST /lessons/{lesson_id}/decision"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /lessons/{lesson_id}/decision` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acdadf13a22a44e3", "name": "Unused endpoint: GET /work_items", "shortDescription": {"text": "Unused endpoint: GET /work_items"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /work_items` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43269e4e79c2e69e", "name": "Unused endpoint: GET /events", "shortDescription": {"text": "Unused endpoint: GET /events"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /events` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf86c3c1c41cae37", "name": "Unused endpoint: GET /proposals/{proposal_id}", "shortDescription": {"text": "Unused endpoint: GET /proposals/{proposal_id}"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /proposals/{proposal_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e30433c1fac6e869", "name": "Unused endpoint: GET /tasks/{task_id}", "shortDescription": {"text": "Unused endpoint: GET /tasks/{task_id}"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /tasks/{task_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d72859924b8d823", "name": "Unused endpoint: GET /proactive_config", "shortDescription": {"text": "Unused endpoint: GET /proactive_config"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /proactive_config` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-704ed9413464a840", "name": "Unused endpoint: POST /proactive_config", "shortDescription": {"text": "Unused endpoint: POST /proactive_config"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /proactive_config` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b916c02547f7d7f0", "name": "Unused endpoint: GET /constitution", "shortDescription": {"text": "Unused endpoint: GET /constitution"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /constitution` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1aebc9bf3984ac32", "name": "Unused endpoint: GET /apr/status", "shortDescription": {"text": "Unused endpoint: GET /apr/status"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `GET /apr/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e20eacf0ad75391e", "name": "Unused endpoint: POST /apr/resume", "shortDescription": {"text": "Unused endpoint: POST /apr/resume"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /apr/resume` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33098913bf956c6a", "name": "Unused endpoint: POST /agent/query", "shortDescription": {"text": "Unused endpoint: POST /agent/query"}, "fullDescription": {"text": "`agent-runtime/app/main.py` declares `POST /agent/query` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58e94634a522f434", "name": "Unused endpoint: GET /memory_status", "shortDescription": {"text": "Unused endpoint: GET /memory_status"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `GET /memory_status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c24281be8109562", "name": "Unused endpoint: POST /pre_request", "shortDescription": {"text": "Unused endpoint: POST /pre_request"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /pre_request` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41a3d399956971ec", "name": "Unused endpoint: POST /pin/system_prompt", "shortDescription": {"text": "Unused endpoint: POST /pin/system_prompt"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /pin/system_prompt` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e13e453a2ed2fad", "name": "Unused endpoint: POST /pin/tool_definitions", "shortDescription": {"text": "Unused endpoint: POST /pin/tool_definitions"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /pin/tool_definitions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbc2a5ab3278ead0", "name": "Unused endpoint: POST /pin/user_profile", "shortDescription": {"text": "Unused endpoint: POST /pin/user_profile"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /pin/user_profile` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-970eb92d6ec2bfaa", "name": "Unused endpoint: POST /generate", "shortDescription": {"text": "Unused endpoint: POST /generate"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /generate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e9b18cf5bf9ea81", "name": "Unused endpoint: POST /generate_stream", "shortDescription": {"text": "Unused endpoint: POST /generate_stream"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /generate_stream` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a295dade63183f8e", "name": "Unused endpoint: POST /render_structured", "shortDescription": {"text": "Unused endpoint: POST /render_structured"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /render_structured` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f05b18a4041916f", "name": "Unused endpoint: POST /render", "shortDescription": {"text": "Unused endpoint: POST /render"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /render` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc8c76a9bf5aaaf1", "name": "Unused endpoint: POST /post_response", "shortDescription": {"text": "Unused endpoint: POST /post_response"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /post_response` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7cef893447eab457", "name": "Unused endpoint: GET /tool_invocations", "shortDescription": {"text": "Unused endpoint: GET /tool_invocations"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `GET /tool_invocations` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-019ecc7be457eba2", "name": "Unused endpoint: GET /tool_pairs", "shortDescription": {"text": "Unused endpoint: GET /tool_pairs"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `GET /tool_pairs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-576bc23d1a5ef269", "name": "Unused endpoint: GET /tool_invocations/{tool_name}", "shortDescription": {"text": "Unused endpoint: GET /tool_invocations/{tool_name}"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `GET /tool_invocations/{tool_name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-220838716447142d", "name": "Unused endpoint: POST /ingest_turn", "shortDescription": {"text": "Unused endpoint: POST /ingest_turn"}, "fullDescription": {"text": "`services/tcmm-service/server.py` declares `POST /ingest_turn` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18224"}, "properties": {"repository": "RJL667/veilguard", "repoUrl": "https://github.com/RJL667/veilguard", "branch": "main"}, "results": [{"ruleId": "scanner-220bdc04ba5b0f80", "level": "note", "message": {"text": "Possibly dead Python function: cmd_record"}, "properties": {"repobilityId": "6a5154b4b01a2d05", "scanner": "scanner-primary", "fingerprint": "220bdc04ba5b0f80", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/perf_audit.py:70"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-083380c3133a4043", "level": "note", "message": {"text": "Possibly dead Python function: cmd_tail"}, "properties": {"repobilityId": "bbd6882547f7d25d", "scanner": "scanner-primary", "fingerprint": "083380c3133a4043", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/perf_audit.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de4a5ed1dd3133a7", "level": "note", "message": {"text": "Possibly dead Python function: cmd_summary"}, "properties": {"repobilityId": "6926d757078f2bcb", "scanner": "scanner-primary", "fingerprint": "de4a5ed1dd3133a7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/perf_audit.py:111"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77576df31c93eb7b", "level": "note", "message": {"text": "Possibly dead Python function: subscriber_count"}, "properties": {"repobilityId": "a559f1c64b0ca7f6", "scanner": "scanner-primary", "fingerprint": "77576df31c93eb7b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/events.py:147"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4fd4582d631c127e", "level": "note", "message": {"text": "Possibly dead Python function: sort_key"}, "properties": {"repobilityId": "ac2a4181eae38738", "scanner": "scanner-primary", "fingerprint": "4fd4582d631c127e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/runtime_health/revision_lane.py:59"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e47c9415334695e7", "level": "note", "message": {"text": "Possibly dead Python function: notify_importance"}, "properties": {"repobilityId": "1599bdbe052b8f81", "scanner": "scanner-primary", "fingerprint": "e47c9415334695e7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/proposals/dream_scanner.py:286"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a07d5d38f20d7368", "level": "note", "message": {"text": "Possibly dead Python function: fire_now"}, "properties": {"repobilityId": "c43e3c9dd41ac5b0", "scanner": "scanner-primary", "fingerprint": "a07d5d38f20d7368", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/proposals/dream_scanner.py:303"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3dd8a8f0366193ed", "level": "note", "message": {"text": "Possibly dead Python function: write_lesson"}, "properties": {"repobilityId": "55c63a527ed61276", "scanner": "scanner-primary", "fingerprint": "3dd8a8f0366193ed", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/proposals/lessons.py:159"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fb93e73bdb66887", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 deploy/librechat-patches/client/src/components/SidePanel/Veilguard/useVeilguardAPI.ts:335"}, "properties": {"repobilityId": "5432804480e68c28", "scanner": "scanner-primary", "fingerprint": "2fb93e73bdb66887", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-0733b9b1aacda769", "level": "warning", "message": {"text": "Dockerfile runs as root: agent-runtime/Dockerfile"}, "properties": {"repobilityId": "e7e3c7fd983a4b97", "scanner": "scanner-primary", "fingerprint": "0733b9b1aacda769", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a4780b2fbfba4095", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "22423b39823f79f2", "scanner": "scanner-primary", "fingerprint": "a4780b2fbfba4095", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2c5ffb3b963ea3f", "level": "warning", "message": {"text": "Dockerfile runs as root: services/admin-dashboard/Dockerfile"}, "properties": {"repobilityId": "1602751ed8d4a597", "scanner": "scanner-primary", "fingerprint": "a2c5ffb3b963ea3f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d74f9e0a079a1901", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "207351ad86ccb68c", "scanner": "scanner-primary", "fingerprint": "d74f9e0a079a1901", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/admin-dashboard/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60a85d5404e34ab5", "level": "warning", "message": {"text": "Dockerfile runs as root: agent-proxy/Dockerfile"}, "properties": {"repobilityId": "8b411325ac031395", "scanner": "scanner-primary", "fingerprint": "60a85d5404e34ab5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7c82656ee7dc451e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "1ca23f7e4283a265", "scanner": "scanner-primary", "fingerprint": "7c82656ee7dc451e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-proxy/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-32cae236f19dbf15", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in services/tcmm-service/server.py:851"}, "properties": {"repobilityId": "98993b55cbff7c8e", "scanner": "scanner-primary", "fingerprint": "32cae236f19dbf15", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 851}}}]}, {"ruleId": "scanner-53d15a6add3d8a24", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in services/client-daemon/setup_server.py:268"}, "properties": {"repobilityId": "07c6065b86a82569", "scanner": "scanner-primary", "fingerprint": "53d15a6add3d8a24", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/client-daemon/setup_server.py"}, "region": {"startLine": 268}}}]}, {"ruleId": "scanner-69d62433b4c489d4", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in services/client-daemon/veilguard_client.py:479"}, "properties": {"repobilityId": "d18a98b831a420bc", "scanner": "scanner-primary", "fingerprint": "69d62433b4c489d4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/client-daemon/veilguard_client.py"}, "region": {"startLine": 479}}}]}, {"ruleId": "scanner-292c9f2f6892d3b6", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in services/code-exec/server.py:76"}, "properties": {"repobilityId": "f43ff409094247f1", "scanner": "scanner-primary", "fingerprint": "292c9f2f6892d3b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/code-exec/server.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-1d27223d388018b4", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in services/sub-agents/core/agentic.py:384"}, "properties": {"repobilityId": "c868cf8d3cf391d7", "scanner": "scanner-primary", "fingerprint": "1d27223d388018b4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/sub-agents/core/agentic.py"}, "region": {"startLine": 384}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-90757bc65f26643d", "level": "note", "message": {"text": "Very large file: agent/base.py (1135 lines)"}, "properties": {"repobilityId": "2f7d0c4b7ce71614", "scanner": "scanner-primary", "fingerprint": "90757bc65f26643d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b4b800349d9bbb5c", "level": "note", "message": {"text": "Very large file: agent-runtime/app/main.py (2223 lines)"}, "properties": {"repobilityId": "31475d3a87680266", "scanner": "scanner-primary", "fingerprint": "b4b800349d9bbb5c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8cef037855a8a3cd", "level": "note", "message": {"text": "Very large file: agent-runtime/app/workers/inbox_poller.py (1566 lines)"}, "properties": {"repobilityId": "194d85893e0f7171", "scanner": "scanner-primary", "fingerprint": "8cef037855a8a3cd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ffe12946d0fae3c", "level": "note", "message": {"text": "Very large file: agent-runtime/app/tools/ledger_mcp.py (1469 lines)"}, "properties": {"repobilityId": "e22c6d9954c0d267", "scanner": "scanner-primary", "fingerprint": "3ffe12946d0fae3c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-17a134c31f34a7fa", "level": "note", "message": {"text": "Very large file: services/tcmm-service/server.py (3811 lines)"}, "properties": {"repobilityId": "c1148eb05bc61910", "scanner": "scanner-primary", "fingerprint": "17a134c31f34a7fa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3f6b69ab62989f54", "level": "note", "message": {"text": "Very large file: services/client-daemon/veilguard_client.py (2031 lines)"}, "properties": {"repobilityId": "2cc80e577222d07e", "scanner": "scanner-primary", "fingerprint": "3f6b69ab62989f54", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9c070131779e9ace", "level": "note", "message": {"text": "Very large file: services/client-daemon/daemon/tray.py (1388 lines)"}, "properties": {"repobilityId": "9556e89f54108ebd", "scanner": "scanner-primary", "fingerprint": "9c070131779e9ace", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-28d0809cac00f278", "level": "note", "message": {"text": "Very large file: agent-proxy/app/main.py (5932 lines)"}, "properties": {"repobilityId": "852663550ddff55e", "scanner": "scanner-primary", "fingerprint": "28d0809cac00f278", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "7257746958d56b64", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "3880e33699937a9d", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "335647c75117e583", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "91d7b86c1e243ff9", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "4bdab4dbf15dd420", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "3f45c4e6b2a675b9", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "ff4580561dcb9470", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "533d615b242b41c2", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "e4621ef5ceade61c", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1d8c49023e31259", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 test_heatmap_streaming.py:24"}, "properties": {"repobilityId": "a3414579e74df1e9", "scanner": "scanner-primary", "fingerprint": "e1d8c49023e31259", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1cb8caa7df384680", "level": "none", "message": {"text": "Commented-code block (7 lines) in cost_simulation_v2.py:78"}, "properties": {"repobilityId": "117b16ccf17380b2", "scanner": "scanner-primary", "fingerprint": "1cb8caa7df384680", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b9737148abb4a252", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/verify_signal_emitters.py:205"}, "properties": {"repobilityId": "655c6378960e86ba", "scanner": "scanner-primary", "fingerprint": "b9737148abb4a252", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3acf0c4aead07cbb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tcmm_latency_summary.py:63"}, "properties": {"repobilityId": "6dc8f1327b9eb062", "scanner": "scanner-primary", "fingerprint": "3acf0c4aead07cbb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0027e8b159bbc3eb", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/lance_maintenance.py:35"}, "properties": {"repobilityId": "980c238ff4c34609", "scanner": "scanner-primary", "fingerprint": "0027e8b159bbc3eb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4697b7d145f84e20", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent/shadow_tool.py:73"}, "properties": {"repobilityId": "c7cd95103f9062c2", "scanner": "scanner-primary", "fingerprint": "4697b7d145f84e20", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4a08f3159fac592a", "level": "none", "message": {"text": "Commented-code block (7 lines) in agent/base.py:79"}, "properties": {"repobilityId": "8c12fbe5b75a9949", "scanner": "scanner-primary", "fingerprint": "4a08f3159fac592a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2e9d576f794b9d02", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent/preamble.py:140"}, "properties": {"repobilityId": "27757d45a0d832b4", "scanner": "scanner-primary", "fingerprint": "2e9d576f794b9d02", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a17ebe3e83ada453", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent/director.py:83"}, "properties": {"repobilityId": "455ad0325709df31", "scanner": "scanner-primary", "fingerprint": "a17ebe3e83ada453", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1a9b0950f7a9a117", "level": "none", "message": {"text": "Commented-code block (5 lines) in deploy/librechat-patches/client/src/components/SidePanel/Veilguard/useVeilguardAPI.ts:4"}, "properties": {"repobilityId": "b69a3fd4fdf75c9f", "scanner": "scanner-primary", "fingerprint": "1a9b0950f7a9a117", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fb9d029a44b6a507", "level": "none", "message": {"text": "Commented-code block (6 lines) in deploy/librechat-patches/api/server/routes/veilguardClient.js:23"}, "properties": {"repobilityId": "72b781916c4311b9", "scanner": "scanner-primary", "fingerprint": "fb9d029a44b6a507", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ffb5b128be373d3c", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/demo/scenario_critic_iterate.py:81"}, "properties": {"repobilityId": "bb83b22f389b063d", "scanner": "scanner-primary", "fingerprint": "ffb5b128be373d3c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dd3230b79e814af2", "level": "none", "message": {"text": "Commented-code block (9 lines) in agent-runtime/demo/scenario_pattern_b_delegation.py:44"}, "properties": {"repobilityId": "27964078febd9b59", "scanner": "scanner-primary", "fingerprint": "dd3230b79e814af2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-920ba59a87953954", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 agent-runtime/demo/run_all.py:41"}, "properties": {"repobilityId": "cd886e659a0c0265", "scanner": "scanner-primary", "fingerprint": "920ba59a87953954", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-013a91d66805c503", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/demo/_harness.py:79"}, "properties": {"repobilityId": "5fc87a3aca200e7e", "scanner": "scanner-primary", "fingerprint": "013a91d66805c503", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-72530027fa57da2d", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/tests/test_memory_mcp_tools.py:27"}, "properties": {"repobilityId": "49b1e737a2a91f0d", "scanner": "scanner-primary", "fingerprint": "72530027fa57da2d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-495ec6b8d6fbc61b", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent-runtime/tests/test_ledger_mcp_tools.py:69"}, "properties": {"repobilityId": "93fa68278f50bd5f", "scanner": "scanner-primary", "fingerprint": "495ec6b8d6fbc61b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2d9aae19af843e30", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/tests/test_agent_teams.py:69"}, "properties": {"repobilityId": "69136f5bf26d03d3", "scanner": "scanner-primary", "fingerprint": "2d9aae19af843e30", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6fe0f5de8aed4d50", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/tests/test_inbox_poller.py:45"}, "properties": {"repobilityId": "3cca560b2a2c3ea1", "scanner": "scanner-primary", "fingerprint": "6fe0f5de8aed4d50", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-35d95f5c3c5dae7f", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/tests/test_ledger_schemas.py:30"}, "properties": {"repobilityId": "19f839b8d8c4e68f", "scanner": "scanner-primary", "fingerprint": "35d95f5c3c5dae7f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-441e1ae09501f839", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/tests/memory/test_phase_7_acceptance.py:96"}, "properties": {"repobilityId": "d497bb8a9462e5cf", "scanner": "scanner-primary", "fingerprint": "441e1ae09501f839", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-08c9f842d8e6bd23", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent-runtime/app/tool_dispatcher.py:77"}, "properties": {"repobilityId": "df679e69552d04c6", "scanner": "scanner-primary", "fingerprint": "08c9f842d8e6bd23", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c1f8f422b6cd3214", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/config.py:114"}, "properties": {"repobilityId": "4464ece0d069947a", "scanner": "scanner-primary", "fingerprint": "c1f8f422b6cd3214", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a9d4c51c01914827", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/main.py:90"}, "properties": {"repobilityId": "d84dd52d1a990653", "scanner": "scanner-primary", "fingerprint": "a9d4c51c01914827", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8ebc9cad71735923", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/runtime.py:57"}, "properties": {"repobilityId": "8c4e44e2c153a885", "scanner": "scanner-primary", "fingerprint": "8ebc9cad71735923", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-356161e0ca53ca7d", "level": "note", "message": {"text": "Legacy-named symbol `_evict_old` in agent-runtime/app/runtime_health/apr.py:97"}, "properties": {"repobilityId": "25a40dfded9f4ba9", "scanner": "scanner-primary", "fingerprint": "356161e0ca53ca7d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-509d3ba885ea3f8b", "level": "none", "message": {"text": "Commented-code block (9 lines) in agent-runtime/app/runtime_health/apr.py:37"}, "properties": {"repobilityId": "8ab9fc8781915ffc", "scanner": "scanner-primary", "fingerprint": "509d3ba885ea3f8b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0b0919ae7f1cefc3", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent-runtime/app/middleware/tcmm.py:39"}, "properties": {"repobilityId": "a14b950c5e04b81e", "scanner": "scanner-primary", "fingerprint": "0b0919ae7f1cefc3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a5261154e9066e06", "level": "none", "message": {"text": "Commented-code block (9 lines) in agent-runtime/app/middleware/audit.py:36"}, "properties": {"repobilityId": "0361844fb139825c", "scanner": "scanner-primary", "fingerprint": "a5261154e9066e06", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-069337e1f02deb48", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/constitution_bridge.py:48"}, "properties": {"repobilityId": "22af940e3f546a65", "scanner": "scanner-primary", "fingerprint": "069337e1f02deb48", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-54314b5283363a7e", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent-runtime/app/proposals/signal_emitters.py:81"}, "properties": {"repobilityId": "9f8ffba2d2c81dd7", "scanner": "scanner-primary", "fingerprint": "54314b5283363a7e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fb002304697c1a14", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/proposals/outcomes.py:67"}, "properties": {"repobilityId": "b90adec5cbc5b74e", "scanner": "scanner-primary", "fingerprint": "fb002304697c1a14", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-065ada6068b3f758", "level": "none", "message": {"text": "Commented-code block (9 lines) in agent-runtime/app/proposals/briefs.py:67"}, "properties": {"repobilityId": "d53667b6cfedb5a0", "scanner": "scanner-primary", "fingerprint": "065ada6068b3f758", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dfe551583ea2b107", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/dream_scanner.py:70"}, "properties": {"repobilityId": "38b24b84c5d2a129", "scanner": "scanner-primary", "fingerprint": "dfe551583ea2b107", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c406afe3d614e29", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/lessons.py:305"}, "properties": {"repobilityId": "2660296e5a255be7", "scanner": "scanner-primary", "fingerprint": "2c406afe3d614e29", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7cb7755403e0f1bc", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/scoring.py:62"}, "properties": {"repobilityId": "eb71ef91ef543305", "scanner": "scanner-primary", "fingerprint": "7cb7755403e0f1bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cd5b1e627bc49e97", "level": "none", "message": {"text": "Commented-code block (7 lines) in agent-runtime/app/proposals/recalibration.py:289"}, "properties": {"repobilityId": "ca951f47f6cf9086", "scanner": "scanner-primary", "fingerprint": "cd5b1e627bc49e97", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-27e487b901901161", "level": "none", "message": {"text": "Commented-code block (7 lines) in agent-runtime/app/proposals/assignees.py:30"}, "properties": {"repobilityId": "76dedc6b719d3f62", "scanner": "scanner-primary", "fingerprint": "27e487b901901161", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-add53c8ebf1a5f5d", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/rank.py:61"}, "properties": {"repobilityId": "8e687a618f9a9438", "scanner": "scanner-primary", "fingerprint": "add53c8ebf1a5f5d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e01a53df1895437f", "level": "note", "message": {"text": "Legacy-named symbol `test_eligible_basic_done_task_45d_old` in agent-runtime/app/proposals/tests/test_outcomes.py:147"}, "properties": {"repobilityId": "7e47ae6dbf7e0ba8", "scanner": "scanner-primary", "fingerprint": "e01a53df1895437f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8bb7c1f82249e00c", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/proposals/tests/test_constitution_bridge.py:177"}, "properties": {"repobilityId": "09fa7ac6b66e67d0", "scanner": "scanner-primary", "fingerprint": "8bb7c1f82249e00c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6e1e6229b88c7cf9", "level": "none", "message": {"text": "Commented-code block (11 lines) in agent-runtime/app/workers/inbox_poller.py:50"}, "properties": {"repobilityId": "1bcb9f7f1482b4fa", "scanner": "scanner-primary", "fingerprint": "6e1e6229b88c7cf9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-49f93955c49244a7", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/memory/phase_7_writers.py:264"}, "properties": {"repobilityId": "ae6e2f0a513efc87", "scanner": "scanner-primary", "fingerprint": "49f93955c49244a7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-480f4a26bbe4a0d0", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/memory/lessons_reader.py:143"}, "properties": {"repobilityId": "8ab82b891ab95348", "scanner": "scanner-primary", "fingerprint": "480f4a26bbe4a0d0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-44650115cf9f9a78", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/tools/memory_mcp.py:212"}, "properties": {"repobilityId": "3b3f530d044c7ffc", "scanner": "scanner-primary", "fingerprint": "44650115cf9f9a78", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e63d45f01a36cef4", "level": "note", "message": {"text": "Stub function `create_sdk_mcp_server` (body is just `pass`/`return`) \u2014 agent-runtime/app/tools/memory_mcp.py:56"}, "properties": {"repobilityId": "f2658c1828e9fa66", "scanner": "scanner-primary", "fingerprint": "e63d45f01a36cef4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-22196888d7351046", "level": "none", "message": {"text": "Commented-code block (15 lines) in agent-runtime/app/tools/ledger_mcp.py:192"}, "properties": {"repobilityId": "da2377a68a5955ab", "scanner": "scanner-primary", "fingerprint": "22196888d7351046", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e867ddf56d9fe5a5", "level": "note", "message": {"text": "Stub function `create_sdk_mcp_server` (body is just `pass`/`return`) \u2014 agent-runtime/app/tools/ledger_mcp.py:64"}, "properties": {"repobilityId": "1da1556114146a78", "scanner": "scanner-primary", "fingerprint": "e867ddf56d9fe5a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-e155290a5bbe161d", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/ledger/schemas.py:61"}, "properties": {"repobilityId": "53f8a553a2f25313", "scanner": "scanner-primary", "fingerprint": "e155290a5bbe161d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-82e6df85ce8ea256", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent-runtime/app/ledger/tasks.py:48"}, "properties": {"repobilityId": "e589d08265354a6e", "scanner": "scanner-primary", "fingerprint": "82e6df85ce8ea256", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b95ed953ee66e464", "level": "none", "message": {"text": "Commented-code block (6 lines) in agent-runtime/app/acceptance/llm_judge.py:83"}, "properties": {"repobilityId": "fd544649265f68d9", "scanner": "scanner-primary", "fingerprint": "b95ed953ee66e464", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-da5508635e5b8604", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/acceptance/executors.py:56"}, "properties": {"repobilityId": "7506f120bd9ae1c2", "scanner": "scanner-primary", "fingerprint": "da5508635e5b8604", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-defe8ea4c66de9d4", "level": "none", "message": {"text": "Commented-code block (23 lines) in agent-runtime/app/acceptance/critic_prompt.py:62"}, "properties": {"repobilityId": "5a7cbf219e51547b", "scanner": "scanner-primary", "fingerprint": "defe8ea4c66de9d4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eb343920c154891a", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/constitution/scorer.py:26"}, "properties": {"repobilityId": "615209866bff166e", "scanner": "scanner-primary", "fingerprint": "eb343920c154891a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9532a1259326b3f4", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-runtime/app/constitution/loader.py:226"}, "properties": {"repobilityId": "fdcc72990d88392a", "scanner": "scanner-primary", "fingerprint": "9532a1259326b3f4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6e318e30da85257e", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/filesystem/server.py:27"}, "properties": {"repobilityId": "1880802902e95978", "scanner": "scanner-primary", "fingerprint": "6e318e30da85257e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-662ca7726f9fd7c9", "level": "none", "message": {"text": "Commented-code block (13 lines) in services/forge/server.py:326"}, "properties": {"repobilityId": "a0d9211d6b9fc81f", "scanner": "scanner-primary", "fingerprint": "662ca7726f9fd7c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8d271862de552df1", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/host-exec/server.py:28"}, "properties": {"repobilityId": "6571abda581e41af", "scanner": "scanner-primary", "fingerprint": "8d271862de552df1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b4d87dfaa8bafdb4", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/connectors/sharepoint/connector.py:127"}, "properties": {"repobilityId": "2502d407661ab106", "scanner": "scanner-primary", "fingerprint": "b4d87dfaa8bafdb4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-335058dc74bc66d4", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/connectors/sharepoint/server.py:102"}, "properties": {"repobilityId": "b5bf07ae5e940d9e", "scanner": "scanner-primary", "fingerprint": "335058dc74bc66d4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f5ff5747f9a0904f", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/tcmm-service/server.py:20"}, "properties": {"repobilityId": "8290c948000437d4", "scanner": "scanner-primary", "fingerprint": "f5ff5747f9a0904f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dcad96d4ca600809", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/image/server.py:24"}, "properties": {"repobilityId": "68e66c43482b11c4", "scanner": "scanner-primary", "fingerprint": "dcad96d4ca600809", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-82b2c79f6ada5d97", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/client-daemon/setup_server.py:23"}, "properties": {"repobilityId": "b460280cb290add8", "scanner": "scanner-primary", "fingerprint": "82b2c79f6ada5d97", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2ebfaafa33c7649c", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/client-daemon/veilguard_client.py:13"}, "properties": {"repobilityId": "73502ecd5ed88e26", "scanner": "scanner-primary", "fingerprint": "2ebfaafa33c7649c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3c1a7ee00711612e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 services/client-daemon/veilguard_client.py:233"}, "properties": {"repobilityId": "6ab8753608cedc6f", "scanner": "scanner-primary", "fingerprint": "3c1a7ee00711612e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1cbd46ac8116f4a3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 services/client-daemon/publish_release.py:51"}, "properties": {"repobilityId": "00d43f0fd0525480", "scanner": "scanner-primary", "fingerprint": "1cbd46ac8116f4a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-76f62e79c18f389c", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/client-daemon/tests/test_stage1_isolation.py:243"}, "properties": {"repobilityId": "020e3adb667618b9", "scanner": "scanner-primary", "fingerprint": "76f62e79c18f389c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-73c31afffbfbe7e0", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/client-daemon/daemon/toast.py:107"}, "properties": {"repobilityId": "be20d9c475fd875b", "scanner": "scanner-primary", "fingerprint": "73c31afffbfbe7e0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-16d48d1576932aa2", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/client-daemon/daemon/tray.py:125"}, "properties": {"repobilityId": "dd36e5da5cb510da", "scanner": "scanner-primary", "fingerprint": "16d48d1576932aa2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-398eb6fd7a5bca18", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/web/server.py:50"}, "properties": {"repobilityId": "e54983773a3533e7", "scanner": "scanner-primary", "fingerprint": "398eb6fd7a5bca18", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6ac62204241dc6fa", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/admin-dashboard/auth.py:31"}, "properties": {"repobilityId": "661a6d06be93a284", "scanner": "scanner-primary", "fingerprint": "6ac62204241dc6fa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-48a187f72a4e8327", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/documents/server.py:32"}, "properties": {"repobilityId": "1882fdd0c6941a28", "scanner": "scanner-primary", "fingerprint": "48a187f72a4e8327", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a6d656503ede02b3", "level": "none", "message": {"text": "Commented-code block (8 lines) in services/veilguard-mcp/server.py:327"}, "properties": {"repobilityId": "9ab589358fa0a9e1", "scanner": "scanner-primary", "fingerprint": "a6d656503ede02b3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5cc96702714623c9", "level": "none", "message": {"text": "Commented-code block (8 lines) in services/sub-agents/config.py:40"}, "properties": {"repobilityId": "a1c1c415a0aaa844", "scanner": "scanner-primary", "fingerprint": "5cc96702714623c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cfb202bc1291d267", "level": "none", "message": {"text": "Commented-code block (9 lines) in services/sub-agents/server.py:17"}, "properties": {"repobilityId": "c2dc68c3af697a09", "scanner": "scanner-primary", "fingerprint": "cfb202bc1291d267", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e6c3fa1aabadc0b3", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/sub-agents/utils/prompts.py:5"}, "properties": {"repobilityId": "789e931bba99a528", "scanner": "scanner-primary", "fingerprint": "e6c3fa1aabadc0b3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9eaf2b1c1abfdeff", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/sub-agents/utils/tool_location.py:33"}, "properties": {"repobilityId": "86d64e1e5b2bacd7", "scanner": "scanner-primary", "fingerprint": "9eaf2b1c1abfdeff", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-52612d948f45e831", "level": "note", "message": {"text": "Legacy-named symbol `clipboard_copy` in services/sub-agents/utils/safety.py:14"}, "properties": {"repobilityId": "60457dae22295974", "scanner": "scanner-primary", "fingerprint": "52612d948f45e831", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2e029b31e5bbc492", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/sub-agents/tools/daemons.py:116"}, "properties": {"repobilityId": "d5aa4efbd21dc9e6", "scanner": "scanner-primary", "fingerprint": "2e029b31e5bbc492", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-32f0bea08f50881b", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/sub-agents/tools/host_docs.py:31"}, "properties": {"repobilityId": "4a13edd8bb4c3e6e", "scanner": "scanner-primary", "fingerprint": "32f0bea08f50881b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3834187478dc77eb", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/sub-agents/tools/tasks.py:125"}, "properties": {"repobilityId": "372cc81ece328d09", "scanner": "scanner-primary", "fingerprint": "3834187478dc77eb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0a6f2ff8f378fc4d", "level": "note", "message": {"text": "Legacy-named symbol `clipboard_copy` in services/sub-agents/tools/tool_search.py:49"}, "properties": {"repobilityId": "ca872e5a99c395b7", "scanner": "scanner-primary", "fingerprint": "0a6f2ff8f378fc4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-73241e603ccedc42", "level": "note", "message": {"text": "Legacy-named symbol `_FauxTaskFromLegacy` in services/sub-agents/tools/client_admin.py:148"}, "properties": {"repobilityId": "97dbc616d4efeb93", "scanner": "scanner-primary", "fingerprint": "73241e603ccedc42", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ea46b1d37dd67013", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/sub-agents/tools/client_admin.py:129"}, "properties": {"repobilityId": "99120a1c86c03fae", "scanner": "scanner-primary", "fingerprint": "ea46b1d37dd67013", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-187ba8e486cbffe3", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/sub-agents/tools/agents.py:124"}, "properties": {"repobilityId": "48edb8f431b752ad", "scanner": "scanner-primary", "fingerprint": "187ba8e486cbffe3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5c2d04ab3badb24e", "level": "note", "message": {"text": "Legacy-named symbol `clipboard_copy` in services/sub-agents/tools/clipboard.py:8"}, "properties": {"repobilityId": "588e7580b9f262ee", "scanner": "scanner-primary", "fingerprint": "5c2d04ab3badb24e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b34a4d38551afa26", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/sub-agents/core/client_settings.py:136"}, "properties": {"repobilityId": "0838ff3c40a566f3", "scanner": "scanner-primary", "fingerprint": "b34a4d38551afa26", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2cd08f52fb869d43", "level": "none", "message": {"text": "Commented-code block (9 lines) in services/sub-agents/core/agentic.py:123"}, "properties": {"repobilityId": "0344ad06181e4804", "scanner": "scanner-primary", "fingerprint": "2cd08f52fb869d43", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f415e4fd0d76d2e", "level": "none", "message": {"text": "Commented-code block (8 lines) in services/sub-agents/core/client_bridge.py:197"}, "properties": {"repobilityId": "37e592aa76e24388", "scanner": "scanner-primary", "fingerprint": "2f415e4fd0d76d2e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e17bc6d29b1296a8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 services/sub-agents/core/client_bridge.py:392"}, "properties": {"repobilityId": "74a8a1bc031f764f", "scanner": "scanner-primary", "fingerprint": "e17bc6d29b1296a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-01fcd117713965f6", "level": "none", "message": {"text": "Commented-code block (9 lines) in services/sub-agents/core/llm.py:84"}, "properties": {"repobilityId": "1d84812f7a10c751", "scanner": "scanner-primary", "fingerprint": "01fcd117713965f6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e2ba2dc3266056bd", "level": "none", "message": {"text": "Commented-code block (7 lines) in services/sub-agents/core/approval.py:42"}, "properties": {"repobilityId": "da138ca05bfb72fa", "scanner": "scanner-primary", "fingerprint": "e2ba2dc3266056bd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7daea2303f068a9f", "level": "none", "message": {"text": "Commented-code block (10 lines) in services/sub-agents/core/request_ctx.py:26"}, "properties": {"repobilityId": "c0348519310e310c", "scanner": "scanner-primary", "fingerprint": "7daea2303f068a9f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0f093de2c786c1f7", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/sub-agents/core/tasks/model.py:119"}, "properties": {"repobilityId": "91abf4261efb0e0f", "scanner": "scanner-primary", "fingerprint": "0f093de2c786c1f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-85779d2e187fb0d9", "level": "none", "message": {"text": "Commented-code block (10 lines) in services/sub-agents/storage/session.py:26"}, "properties": {"repobilityId": "8521ce5fc1d6dd30", "scanner": "scanner-primary", "fingerprint": "85779d2e187fb0d9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8fc7c8dbc50724bc", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/_shared/ocr_client.py:19"}, "properties": {"repobilityId": "cd80526700d2b51e", "scanner": "scanner-primary", "fingerprint": "8fc7c8dbc50724bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4cb6a857d143dd31", "level": "none", "message": {"text": "Commented-code block (7 lines) in pii/session_store.py:138"}, "properties": {"repobilityId": "aa4e8af3310f4e64", "scanner": "scanner-primary", "fingerprint": "4cb6a857d143dd31", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-52de3c6c9d9ef182", "level": "none", "message": {"text": "Commented-code block (5 lines) in pii/redactor.py:80"}, "properties": {"repobilityId": "ab553c7640c3802c", "scanner": "scanner-primary", "fingerprint": "52de3c6c9d9ef182", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c5842d1c002fd843", "level": "none", "message": {"text": "Commented-code block (13 lines) in pii/recognizers/sa_phone.py:19"}, "properties": {"repobilityId": "0e2407666a218927", "scanner": "scanner-primary", "fingerprint": "c5842d1c002fd843", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4384f9ffb334a551", "level": "none", "message": {"text": "Commented-code block (7 lines) in agent-proxy/tests/test_cache_metrics.py:177"}, "properties": {"repobilityId": "0e62f4111fed7901", "scanner": "scanner-primary", "fingerprint": "4384f9ffb334a551", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b9bb59a3e4009b7b", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-proxy/app/cache_metrics.py:73"}, "properties": {"repobilityId": "d9d37a369eba31c8", "scanner": "scanner-primary", "fingerprint": "b9bb59a3e4009b7b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a00f50c84389fd41", "level": "none", "message": {"text": "Commented-code block (9 lines) in agent-proxy/app/session.py:12"}, "properties": {"repobilityId": "a0fcf6ff883e2c30", "scanner": "scanner-primary", "fingerprint": "a00f50c84389fd41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7ad2bf6dbf2f02a9", "level": "none", "message": {"text": "Commented-code block (8 lines) in agent-proxy/app/main.py:37"}, "properties": {"repobilityId": "a4ae8338f09ecbd2", "scanner": "scanner-primary", "fingerprint": "7ad2bf6dbf2f02a9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-438966698ef44fe9", "level": "none", "message": {"text": "Commented-code block (5 lines) in agent-proxy/app/chat_agent_handler.py:49"}, "properties": {"repobilityId": "7dae28ff8b85c903", "scanner": "scanner-primary", "fingerprint": "438966698ef44fe9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-71cab25334816b75", "level": "none", "message": {"text": "Commented-code block (13 lines) in agent-proxy/app/recognizers/sa_phone.py:19"}, "properties": {"repobilityId": "a894d00ce3218c78", "scanner": "scanner-primary", "fingerprint": "71cab25334816b75", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-56fc8d9824719f0e", "level": "none", "message": {"text": "Commented-code block (8 lines) in llm/audit_db.py:105"}, "properties": {"repobilityId": "3f737486d515b3a8", "scanner": "scanner-primary", "fingerprint": "56fc8d9824719f0e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-70a4593213098370", "level": "none", "message": {"text": "Commented-code block (9 lines) in llm/tcmm_client.py:180"}, "properties": {"repobilityId": "4f0a965028df1115", "scanner": "scanner-primary", "fingerprint": "70a4593213098370", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c39e28ced7639f49", "level": "note", "message": {"text": "191 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "e28805a213b49fb3", "scanner": "scanner-primary", "fingerprint": "c39e28ced7639f49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d3d19d061f74ecd5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "654a033152554b2b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6e1c4f609e5a1112", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "977c0f89daaf3a5c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9dbf183a5dc6167e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1457b2a57edf9ea9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3d5b4a854179eb8d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d9f2d2fd4b14b642", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7b686c97ac64633c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0131cbff4173d768", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c344d4b3057b579f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7de649026a8d202a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "506537b16aeae027", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b320144ed32fafe2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2f6bd4a2634f2085", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7e4fca44c748febf", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a131908f4af5441f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4d990b7670c2a3f4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "08c22167b783dd02", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bb155404cee610f6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2f2b991ff13f2082", "level": "error", "message": {"text": "FastAPI POST `send_message_to_agent` without auth dependency \u2014 agent-runtime/app/a2a.py:112"}, "properties": {"repobilityId": "bd3e24e443f55676", "scanner": "scanner-primary", "fingerprint": "2f2b991ff13f2082", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/a2a.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-b3e6ef3e2d0644f6", "level": "error", "message": {"text": "FastAPI POST `create_key` without auth dependency \u2014 agent-runtime/app/a2a_external.py:205"}, "properties": {"repobilityId": "df24a24e26c35d08", "scanner": "scanner-primary", "fingerprint": "b3e6ef3e2d0644f6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/a2a_external.py"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-dfb96a7fcaa35d83", "level": "error", "message": {"text": "FastAPI POST `revoke_key` without auth dependency \u2014 agent-runtime/app/a2a_external.py:256"}, "properties": {"repobilityId": "446f7d97b9dcc162", "scanner": "scanner-primary", "fingerprint": "dfb96a7fcaa35d83", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/a2a_external.py"}, "region": {"startLine": 256}}}]}, {"ruleId": "scanner-bc4d08a003c6c2a1", "level": "error", "message": {"text": "FastAPI POST `external_send_message` without auth dependency \u2014 agent-runtime/app/a2a_external.py:275"}, "properties": {"repobilityId": "32a51605b2078b61", "scanner": "scanner-primary", "fingerprint": "bc4d08a003c6c2a1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/a2a_external.py"}, "region": {"startLine": 275}}}]}, {"ruleId": "scanner-00c8aa532866075e", "level": "error", "message": {"text": "FastAPI POST `proposal_emit` without auth dependency \u2014 agent-runtime/app/main.py:940"}, "properties": {"repobilityId": "30767278a5f20c9a", "scanner": "scanner-primary", "fingerprint": "00c8aa532866075e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 940}}}]}, {"ruleId": "scanner-9bfc96ab41eabd93", "level": "error", "message": {"text": "FastAPI POST `proposal_convert` without auth dependency \u2014 agent-runtime/app/main.py:1086"}, "properties": {"repobilityId": "02d8c5042111fc0c", "scanner": "scanner-primary", "fingerprint": "9bfc96ab41eabd93", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1086}}}]}, {"ruleId": "scanner-758bdaf81a491d7c", "level": "error", "message": {"text": "FastAPI POST `delegate_to_org` without auth dependency \u2014 agent-runtime/app/main.py:1166"}, "properties": {"repobilityId": "687c47e9746cbbf3", "scanner": "scanner-primary", "fingerprint": "758bdaf81a491d7c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1166}}}]}, {"ruleId": "scanner-2b2a0dd008e770cf", "level": "error", "message": {"text": "FastAPI POST `create_team_endpoint` without auth dependency \u2014 agent-runtime/app/main.py:1255"}, "properties": {"repobilityId": "85fdd040b9f02ee7", "scanner": "scanner-primary", "fingerprint": "2b2a0dd008e770cf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1255}}}]}, {"ruleId": "scanner-3761389645cf354d", "level": "error", "message": {"text": "FastAPI POST `proposal_decision` without auth dependency \u2014 agent-runtime/app/main.py:1320"}, "properties": {"repobilityId": "e6cdf383a667433b", "scanner": "scanner-primary", "fingerprint": "3761389645cf354d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1320}}}]}, {"ruleId": "scanner-b0e2f6fdc5d41bd5", "level": "error", "message": {"text": "FastAPI POST `documents_snapshot` without auth dependency \u2014 agent-runtime/app/main.py:1409"}, "properties": {"repobilityId": "849a68bbb4556eae", "scanner": "scanner-primary", "fingerprint": "b0e2f6fdc5d41bd5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1409}}}]}, {"ruleId": "scanner-c424c0bb5ade79d6", "level": "error", "message": {"text": "FastAPI POST `task_ledger_set` without auth dependency \u2014 agent-runtime/app/main.py:1477"}, "properties": {"repobilityId": "d9b6571ff3b4b326", "scanner": "scanner-primary", "fingerprint": "c424c0bb5ade79d6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1477}}}]}, {"ruleId": "scanner-5969e9943739ba34", "level": "error", "message": {"text": "FastAPI POST `task_progress_append` without auth dependency \u2014 agent-runtime/app/main.py:1506"}, "properties": {"repobilityId": "a5cb5d14def02e82", "scanner": "scanner-primary", "fingerprint": "5969e9943739ba34", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1506}}}]}, {"ruleId": "scanner-a58b0c523cfbc285", "level": "error", "message": {"text": "FastAPI POST `lesson_decision` without auth dependency \u2014 agent-runtime/app/main.py:1616"}, "properties": {"repobilityId": "f1abfde4382fa19c", "scanner": "scanner-primary", "fingerprint": "a58b0c523cfbc285", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 1616}}}]}, {"ruleId": "scanner-d43a148052d65d6f", "level": "error", "message": {"text": "FastAPI POST `proactive_config_set` without auth dependency \u2014 agent-runtime/app/main.py:2016"}, "properties": {"repobilityId": "5b6f52fa3077f6af", "scanner": "scanner-primary", "fingerprint": "d43a148052d65d6f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 2016}}}]}, {"ruleId": "scanner-92e09b541b33cec0", "level": "error", "message": {"text": "FastAPI POST `apr_resume_endpoint` without auth dependency \u2014 agent-runtime/app/main.py:2081"}, "properties": {"repobilityId": "0519ca57c26402af", "scanner": "scanner-primary", "fingerprint": "92e09b541b33cec0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 2081}}}]}, {"ruleId": "scanner-0304847c5d6f2f1a", "level": "error", "message": {"text": "FastAPI POST `agent_query` without auth dependency \u2014 agent-runtime/app/main.py:2101"}, "properties": {"repobilityId": "9a5602406891fe40", "scanner": "scanner-primary", "fingerprint": "0304847c5d6f2f1a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent-runtime/app/main.py"}, "region": {"startLine": 2101}}}]}, {"ruleId": "scanner-f15b66e0dcd9e65f", "level": "error", "message": {"text": "FastAPI POST `pre_request` without auth dependency \u2014 services/tcmm-service/server.py:1399"}, "properties": {"repobilityId": "2d2a49069dd3ac27", "scanner": "scanner-primary", "fingerprint": "f15b66e0dcd9e65f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 1399}}}]}, {"ruleId": "scanner-1673a13b085e7e13", "level": "error", "message": {"text": "FastAPI POST `pin_system_prompt` without auth dependency \u2014 services/tcmm-service/server.py:1896"}, "properties": {"repobilityId": "b1a749625d7e9b32", "scanner": "scanner-primary", "fingerprint": "1673a13b085e7e13", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 1896}}}]}, {"ruleId": "scanner-71f71bb92d51df7e", "level": "error", "message": {"text": "FastAPI POST `pin_tool_definitions` without auth dependency \u2014 services/tcmm-service/server.py:1924"}, "properties": {"repobilityId": "e479a91fd228a1fa", "scanner": "scanner-primary", "fingerprint": "71f71bb92d51df7e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 1924}}}]}, {"ruleId": "scanner-608250819615bd3c", "level": "error", "message": {"text": "FastAPI POST `pin_user_profile` without auth dependency \u2014 services/tcmm-service/server.py:1996"}, "properties": {"repobilityId": "ce4e25f3d0c6b8fd", "scanner": "scanner-primary", "fingerprint": "608250819615bd3c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 1996}}}]}, {"ruleId": "scanner-53fb07074ecc4c02", "level": "error", "message": {"text": "FastAPI POST `generate` without auth dependency \u2014 services/tcmm-service/server.py:2096"}, "properties": {"repobilityId": "1fedd2a20657d677", "scanner": "scanner-primary", "fingerprint": "53fb07074ecc4c02", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2096}}}]}, {"ruleId": "scanner-16dd0af686a3ebae", "level": "error", "message": {"text": "FastAPI POST `generate_stream` without auth dependency \u2014 services/tcmm-service/server.py:2221"}, "properties": {"repobilityId": "286d66274e32027f", "scanner": "scanner-primary", "fingerprint": "16dd0af686a3ebae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2221}}}]}, {"ruleId": "scanner-1cfa2cf4b3ca351d", "level": "error", "message": {"text": "FastAPI POST `render_structured` without auth dependency \u2014 services/tcmm-service/server.py:2376"}, "properties": {"repobilityId": "a5af7cfb3dd383ca", "scanner": "scanner-primary", "fingerprint": "1cfa2cf4b3ca351d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2376}}}]}, {"ruleId": "scanner-0823b1c705d7cd77", "level": "error", "message": {"text": "FastAPI POST `render` without auth dependency \u2014 services/tcmm-service/server.py:2552"}, "properties": {"repobilityId": "4d4d3245ad1785b8", "scanner": "scanner-primary", "fingerprint": "0823b1c705d7cd77", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2552}}}]}, {"ruleId": "scanner-7f9ac8cbe52d9853", "level": "error", "message": {"text": "FastAPI POST `post_response` without auth dependency \u2014 services/tcmm-service/server.py:2705"}, "properties": {"repobilityId": "023729fb7df1973a", "scanner": "scanner-primary", "fingerprint": "7f9ac8cbe52d9853", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2705}}}]}, {"ruleId": "scanner-1c163194c687aef6", "level": "error", "message": {"text": "FastAPI POST `ingest_turn` without auth dependency \u2014 services/tcmm-service/server.py:2883"}, "properties": {"repobilityId": "1865b0aa4a7be9ec", "scanner": "scanner-primary", "fingerprint": "1c163194c687aef6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2883}}}]}, {"ruleId": "scanner-4360eba9b0a706bd", "level": "error", "message": {"text": "FastAPI POST `ingest_text` without auth dependency \u2014 services/tcmm-service/server.py:2938"}, "properties": {"repobilityId": "b11c6eafd98c6f62", "scanner": "scanner-primary", "fingerprint": "4360eba9b0a706bd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 2938}}}]}, {"ruleId": "scanner-019b0afa4778a86d", "level": "error", "message": {"text": "FastAPI POST `search_memory_endpoint` without auth dependency \u2014 services/tcmm-service/server.py:3015"}, "properties": {"repobilityId": "21c6b59a5efd2472", "scanner": "scanner-primary", "fingerprint": "019b0afa4778a86d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 3015}}}]}, {"ruleId": "scanner-30c5306bc9d59cb7", "level": "error", "message": {"text": "FastAPI POST `traverse_memory_endpoint` without auth dependency \u2014 services/tcmm-service/server.py:3073"}, "properties": {"repobilityId": "08fdb69a1e53fd22", "scanner": "scanner-primary", "fingerprint": "30c5306bc9d59cb7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 3073}}}]}, {"ruleId": "scanner-96806059c8602c4c", "level": "error", "message": {"text": "FastAPI POST `admin_requeue_semantic` without auth dependency \u2014 services/tcmm-service/server.py:3324"}, "properties": {"repobilityId": "e09d681ee4f8479c", "scanner": "scanner-primary", "fingerprint": "96806059c8602c4c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 3324}}}]}, {"ruleId": "scanner-b387a7f0357e3390", "level": "error", "message": {"text": "FastAPI POST `debug_evict` without auth dependency \u2014 services/tcmm-service/server.py:3496"}, "properties": {"repobilityId": "64062828737026e0", "scanner": "scanner-primary", "fingerprint": "b387a7f0357e3390", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 3496}}}]}, {"ruleId": "scanner-0d3ccb3e6c5c9461", "level": "error", "message": {"text": "FastAPI POST `trigger_dream` without auth dependency \u2014 services/tcmm-service/server.py:3608"}, "properties": {"repobilityId": "339654d6b1b5c534", "scanner": "scanner-primary", "fingerprint": "0d3ccb3e6c5c9461", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/tcmm-service/server.py"}, "region": {"startLine": 3608}}}]}, {"ruleId": "scanner-481955e08865ce63", "level": "note", "message": {"text": "Unused endpoint: POST /agents/{agent_id}/messages"}, "properties": {"repobilityId": "38a55c7c7836f217", "scanner": "scanner-primary", "fingerprint": "481955e08865ce63", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8baa30e42f3d0c26", "level": "note", "message": {"text": "Unused endpoint: GET /agents/{agent_id}/tasks/{task_id}"}, "properties": {"repobilityId": "5c45909564afd234", "scanner": "scanner-primary", "fingerprint": "8baa30e42f3d0c26", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8d5cc21a1d89bcbd", "level": "note", "message": {"text": "Unused endpoint: GET /agents/{agent_id}/inbox"}, "properties": {"repobilityId": "672b9399f37bc4d4", "scanner": "scanner-primary", "fingerprint": "8d5cc21a1d89bcbd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f53365bbb1c16b8", "level": "note", "message": {"text": "Unused endpoint: POST /keys"}, "properties": {"repobilityId": "42d11fabec01b203", "scanner": "scanner-primary", "fingerprint": "0f53365bbb1c16b8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2cc6568399fb5847", "level": "note", "message": {"text": "Unused endpoint: POST /keys/{key_id}/revoke"}, "properties": {"repobilityId": "0a333edfe2357de5", "scanner": "scanner-primary", "fingerprint": "2cc6568399fb5847", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-22f790b281fc81d7", "level": "note", "message": {"text": "Unused endpoint: GET /audit/tcmm_source_kinds"}, "properties": {"repobilityId": "dd0e6beb81aed906", "scanner": "scanner-primary", "fingerprint": "22f790b281fc81d7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-72e04955cf83a53f", "level": "note", "message": {"text": "Unused endpoint: GET /teams"}, "properties": {"repobilityId": "0549ee14c81fe27e", "scanner": "scanner-primary", "fingerprint": "72e04955cf83a53f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f1314f6a84c5723", "level": "note", "message": {"text": "Unused endpoint: GET /teams/{team_id}/cost"}, "properties": {"repobilityId": "91e1357e0d780814", "scanner": "scanner-primary", "fingerprint": "0f1314f6a84c5723", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3140e61d7cac5091", "level": "note", "message": {"text": "Unused endpoint: GET /agents"}, "properties": {"repobilityId": "fbb414f6d63b186c", "scanner": "scanner-primary", "fingerprint": "3140e61d7cac5091", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0661a017d8970e67", "level": "note", "message": {"text": "Unused endpoint: GET /proposals"}, "properties": {"repobilityId": "2f8bfc66a8b1b936", "scanner": "scanner-primary", "fingerprint": "0661a017d8970e67", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c9de2a9e4c22036a", "level": "note", "message": {"text": "Unused endpoint: POST /proposals/emit"}, "properties": {"repobilityId": "ada764eb9096d9eb", "scanner": "scanner-primary", "fingerprint": "c9de2a9e4c22036a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-12fe38612c675a0d", "level": "note", "message": {"text": "Unused endpoint: POST /proposals/{proposal_id}/convert"}, "properties": {"repobilityId": "95ac6bc1b7a0aad9", "scanner": "scanner-primary", "fingerprint": "12fe38612c675a0d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-64d38197cc75c049", "level": "note", "message": {"text": "Unused endpoint: POST /delegate"}, "properties": {"repobilityId": "0a6f35976fb92363", "scanner": "scanner-primary", "fingerprint": "64d38197cc75c049", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-aa294e6a3b85ba0a", "level": "note", "message": {"text": "Unused endpoint: POST /teams"}, "properties": {"repobilityId": "a5921accfb55bd38", "scanner": "scanner-primary", "fingerprint": "aa294e6a3b85ba0a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cd7799d73efaac71", "level": "note", "message": {"text": "Unused endpoint: GET /workspace/file"}, "properties": {"repobilityId": "6632dcf9bc563b78", "scanner": "scanner-primary", "fingerprint": "cd7799d73efaac71", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5fab9da5dd1de775", "level": "note", "message": {"text": "Unused endpoint: POST /proposals/{proposal_id}/decision"}, "properties": {"repobilityId": "9555fd6914115012", "scanner": "scanner-primary", "fingerprint": "5fab9da5dd1de775", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-07e149dfd9e41f27", "level": "note", "message": {"text": "Unused endpoint: GET /replay/{task_id}"}, "properties": {"repobilityId": "08943a68d825da32", "scanner": "scanner-primary", "fingerprint": "07e149dfd9e41f27", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1b9484ee84021132", "level": "note", "message": {"text": "Unused endpoint: POST /documents/snapshot"}, "properties": {"repobilityId": "638eb04ec3c5b3e1", "scanner": "scanner-primary", "fingerprint": "1b9484ee84021132", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-372770ff42bdc44a", "level": "note", "message": {"text": "Unused endpoint: GET /documents/history"}, "properties": {"repobilityId": "4f475753b23af562", "scanner": "scanner-primary", "fingerprint": "372770ff42bdc44a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-04491bea3e45a486", "level": "note", "message": {"text": "Unused endpoint: GET /documents/authority"}, "properties": {"repobilityId": "9157d231e05c623f", "scanner": "scanner-primary", "fingerprint": "04491bea3e45a486", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-090ed57eb73fc34d", "level": "note", "message": {"text": "Unused endpoint: GET /tasks/{task_id}/ledger"}, "properties": {"repobilityId": "1b51b1e2cbd48972", "scanner": "scanner-primary", "fingerprint": "090ed57eb73fc34d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4218a64714a2fe7d", "level": "note", "message": {"text": "Unused endpoint: POST /tasks/{task_id}/ledger"}, "properties": {"repobilityId": "e083d8f12d61cd14", "scanner": "scanner-primary", "fingerprint": "4218a64714a2fe7d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6f7a5ea7522e455d", "level": "note", "message": {"text": "Unused endpoint: POST /tasks/{task_id}/progress"}, "properties": {"repobilityId": "795d0e85fa317be9", "scanner": "scanner-primary", "fingerprint": "6f7a5ea7522e455d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-161a20048b561f80", "level": "note", "message": {"text": "Unused endpoint: GET /lessons/review_queue"}, "properties": {"repobilityId": "d6af37b24b3ede60", "scanner": "scanner-primary", "fingerprint": "161a20048b561f80", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f0a23fdf40898caa", "level": "note", "message": {"text": "Unused endpoint: GET /lessons/amendment_candidates"}, "properties": {"repobilityId": "4f59ca31e839b3a2", "scanner": "scanner-primary", "fingerprint": "f0a23fdf40898caa", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7925cdc762cb69b5", "level": "note", "message": {"text": "Unused endpoint: POST /lessons/{lesson_id}/decision"}, "properties": {"repobilityId": "4d89ecd6711c9a6d", "scanner": "scanner-primary", "fingerprint": "7925cdc762cb69b5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-acdadf13a22a44e3", "level": "note", "message": {"text": "Unused endpoint: GET /work_items"}, "properties": {"repobilityId": "9cc9ad36376eb774", "scanner": "scanner-primary", "fingerprint": "acdadf13a22a44e3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-43269e4e79c2e69e", "level": "note", "message": {"text": "Unused endpoint: GET /events"}, "properties": {"repobilityId": "23e0b2c09ff6724f", "scanner": "scanner-primary", "fingerprint": "43269e4e79c2e69e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cf86c3c1c41cae37", "level": "note", "message": {"text": "Unused endpoint: GET /proposals/{proposal_id}"}, "properties": {"repobilityId": "f2f353c03f438217", "scanner": "scanner-primary", "fingerprint": "cf86c3c1c41cae37", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e30433c1fac6e869", "level": "note", "message": {"text": "Unused endpoint: GET /tasks/{task_id}"}, "properties": {"repobilityId": "320504a42b1fc1cf", "scanner": "scanner-primary", "fingerprint": "e30433c1fac6e869", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7d72859924b8d823", "level": "note", "message": {"text": "Unused endpoint: GET /proactive_config"}, "properties": {"repobilityId": "6e9cce6d9d578f90", "scanner": "scanner-primary", "fingerprint": "7d72859924b8d823", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-704ed9413464a840", "level": "note", "message": {"text": "Unused endpoint: POST /proactive_config"}, "properties": {"repobilityId": "270b0769638338bd", "scanner": "scanner-primary", "fingerprint": "704ed9413464a840", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b916c02547f7d7f0", "level": "note", "message": {"text": "Unused endpoint: GET /constitution"}, "properties": {"repobilityId": "9b3d1d04f7d57901", "scanner": "scanner-primary", "fingerprint": "b916c02547f7d7f0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1aebc9bf3984ac32", "level": "note", "message": {"text": "Unused endpoint: GET /apr/status"}, "properties": {"repobilityId": "e6c2cf88367d4020", "scanner": "scanner-primary", "fingerprint": "1aebc9bf3984ac32", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e20eacf0ad75391e", "level": "note", "message": {"text": "Unused endpoint: POST /apr/resume"}, "properties": {"repobilityId": "1854045d14104669", "scanner": "scanner-primary", "fingerprint": "e20eacf0ad75391e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-33098913bf956c6a", "level": "note", "message": {"text": "Unused endpoint: POST /agent/query"}, "properties": {"repobilityId": "64a18c0cfcb90bb1", "scanner": "scanner-primary", "fingerprint": "33098913bf956c6a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-58e94634a522f434", "level": "note", "message": {"text": "Unused endpoint: GET /memory_status"}, "properties": {"repobilityId": "2636f0080827d70b", "scanner": "scanner-primary", "fingerprint": "58e94634a522f434", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0c24281be8109562", "level": "note", "message": {"text": "Unused endpoint: POST /pre_request"}, "properties": {"repobilityId": "a7af4241b7258579", "scanner": "scanner-primary", "fingerprint": "0c24281be8109562", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-41a3d399956971ec", "level": "note", "message": {"text": "Unused endpoint: POST /pin/system_prompt"}, "properties": {"repobilityId": "ef27ff06ec63b655", "scanner": "scanner-primary", "fingerprint": "41a3d399956971ec", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1e13e453a2ed2fad", "level": "note", "message": {"text": "Unused endpoint: POST /pin/tool_definitions"}, "properties": {"repobilityId": "438b7ba1d71bb3de", "scanner": "scanner-primary", "fingerprint": "1e13e453a2ed2fad", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bbc2a5ab3278ead0", "level": "note", "message": {"text": "Unused endpoint: POST /pin/user_profile"}, "properties": {"repobilityId": "55d7e702503278f3", "scanner": "scanner-primary", "fingerprint": "bbc2a5ab3278ead0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-970eb92d6ec2bfaa", "level": "note", "message": {"text": "Unused endpoint: POST /generate"}, "properties": {"repobilityId": "3caf0b7fda9427d1", "scanner": "scanner-primary", "fingerprint": "970eb92d6ec2bfaa", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2e9b18cf5bf9ea81", "level": "note", "message": {"text": "Unused endpoint: POST /generate_stream"}, "properties": {"repobilityId": "393227414d4a2f12", "scanner": "scanner-primary", "fingerprint": "2e9b18cf5bf9ea81", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a295dade63183f8e", "level": "note", "message": {"text": "Unused endpoint: POST /render_structured"}, "properties": {"repobilityId": "054e4daa21add74a", "scanner": "scanner-primary", "fingerprint": "a295dade63183f8e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f05b18a4041916f", "level": "note", "message": {"text": "Unused endpoint: POST /render"}, "properties": {"repobilityId": "828e6301f8ea0358", "scanner": "scanner-primary", "fingerprint": "0f05b18a4041916f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bc8c76a9bf5aaaf1", "level": "note", "message": {"text": "Unused endpoint: POST /post_response"}, "properties": {"repobilityId": "f45e890ed0a33dec", "scanner": "scanner-primary", "fingerprint": "bc8c76a9bf5aaaf1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7cef893447eab457", "level": "note", "message": {"text": "Unused endpoint: GET /tool_invocations"}, "properties": {"repobilityId": "95fbb2b69c92a556", "scanner": "scanner-primary", "fingerprint": "7cef893447eab457", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-019ecc7be457eba2", "level": "note", "message": {"text": "Unused endpoint: GET /tool_pairs"}, "properties": {"repobilityId": "eb47dce13cd8b904", "scanner": "scanner-primary", "fingerprint": "019ecc7be457eba2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-576bc23d1a5ef269", "level": "note", "message": {"text": "Unused endpoint: GET /tool_invocations/{tool_name}"}, "properties": {"repobilityId": "2914fedafee5326c", "scanner": "scanner-primary", "fingerprint": "576bc23d1a5ef269", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-220838716447142d", "level": "note", "message": {"text": "Unused endpoint: POST /ingest_turn"}, "properties": {"repobilityId": "51abdeb45ca5a388", "scanner": "scanner-primary", "fingerprint": "220838716447142d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}