{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-1749a79b59881cca", "name": "Possibly dead Python function: reject_constant", "shortDescription": {"text": "Possibly dead Python function: reject_constant"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2483c91bbcc25027", "name": "Possibly dead Python function: stash_code", "shortDescription": {"text": "Possibly dead Python function: stash_code"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-399a9d4f9103b802", "name": "Possibly dead Python function: reject_constant", "shortDescription": {"text": "Possibly dead Python function: reject_constant"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6617fbf80bdeef1e", "name": "Possibly dead Python function: reject_constant", "shortDescription": {"text": "Possibly dead Python function: reject_constant"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-589c315b56364075", "name": "Possibly dead Python function: write_hypothesis", "shortDescription": {"text": "Possibly dead Python function: write_hypothesis"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11f87e37e1d961f5", "name": "Possibly dead Python function: socket_reader", "shortDescription": {"text": "Possibly dead Python function: socket_reader"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d09eb4fd005323d3", "name": "Possibly dead Python function: socket_writer", "shortDescription": {"text": "Possibly dead Python function: socket_writer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15d594b49fc61057", "name": "Possibly dead Python function: model_post_init", "shortDescription": {"text": "Possibly dead Python function: model_post_init"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56a32a6a4d293ce2", "name": "Possibly dead Python function: eventloom_log", "shortDescription": {"text": "Possibly dead Python function: eventloom_log"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4f72b80a8a4e25ff", "name": "Possibly dead Python function: do_GET", "shortDescription": {"text": "Possibly dead Python function: do_GET"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1ff041897dc3494", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76e1fba2b9a77598", "name": "Possibly dead Python function: do_PUT", "shortDescription": {"text": "Possibly dead Python function: do_PUT"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65b0cda4236cd646", "name": "Possibly dead Python function: do_PATCH", "shortDescription": {"text": "Possibly dead Python function: do_PATCH"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85465bc1f8d604bb", "name": "Possibly dead Python function: do_DELETE", "shortDescription": {"text": "Possibly dead Python function: do_DELETE"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0a7ac5d284e2585", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26eff57cc068d139", "name": "Possibly dead Python function: empty_recall_candidate_set", "shortDescription": {"text": "Possibly dead Python function: empty_recall_candidate_set"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8838e484662c522e", "name": "Possibly dead Python function: decorator", "shortDescription": {"text": "Possibly dead Python function: decorator"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b05511801b80b66", "name": "Possibly dead Python function: do_POST", "shortDescription": {"text": "Possibly dead Python function: do_POST"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ba58f59362ef354", "name": "Possibly dead Python function: log_message", "shortDescription": {"text": "Possibly dead Python function: log_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b415e58bf4f10212", "name": "Possibly dead Python function: aggregate_candidate_lines", "shortDescription": {"text": "Possibly dead Python function: aggregate_candidate_lines"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8f315c2d25dac3f", "name": "Possibly dead Python function: default_fabric_factory", "shortDescription": {"text": "Possibly dead Python function: default_fabric_factory"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b7c55e0431a8949", "name": "Possibly dead Python function: zaxy_crewai_memory_step", "shortDescription": {"text": "Possibly dead Python function: zaxy_crewai_memory_step"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7b3a12a0c45ff99", "name": "Possibly dead Python function: zaxy_crewai_memory_checkout_step", "shortDescription": {"text": "Possibly dead Python function: zaxy_crewai_memory_checkout_step"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbe7f172f784e26a", "name": "Possibly dead Python function: zaxy_crewai_coordination_step", "shortDescription": {"text": "Possibly dead Python function: zaxy_crewai_coordination_step"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eec916d8823ffc56", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f1835bac5f5197b", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f5bf600c6b64d7a1", "name": "Possible secret in scripts/setup.sh", "shortDescription": {"text": "Possible secret in scripts/setup.sh"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-0a138c87e63c140e", "name": "Insecure pattern 'direct_innerhtml_assignment' in site/docs/superpowers/plans/2026-06-09-codebase-review-high-value-reme", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in site/docs/superpowers/plans/2026-06-09-codebase-review-high-value-remediation.html:156"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df50e8e9fb24cbcf", "name": "Insecure pattern 'eval_used' in site/docs/research/codebase-review-2026-06-09.html:467", "shortDescription": {"text": "Insecure pattern 'eval_used' in site/docs/research/codebase-review-2026-06-09.html:467"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b9b758c1196f750e", "name": "Insecure pattern 'exec_used' in site/docs/research/codebase-review-2026-06-09.html:467", "shortDescription": {"text": "Insecure pattern 'exec_used' in site/docs/research/codebase-review-2026-06-09.html:467"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-36362b5b7f33b6db", "name": "Insecure pattern 'subprocess_shell_true' in site/docs/research/codebase-review-2026-06-09.html:38", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in site/docs/research/codebase-review-2026-06-09.html:38"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a874ba8049731a3", "name": "Insecure pattern 'direct_innerhtml_assignment' in site/docs/research/codebase-review-2026-06-09.html:52", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in site/docs/research/codebase-review-2026-06-09.html:52"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-324c52eb87a39bc1", "name": "Possible secret in zaxy_benchmarks/longmembench.py", "shortDescription": {"text": "Possible secret in zaxy_benchmarks/longmembench.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-463b618a2b662e2c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4f658c0c00de0d4", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/deploy-pages@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-448d8837178ae57a", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a53bf972e19b52fd", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ffa33751be3d771", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42d84b40579976f6", "name": "Very large file: tests/test_docs_site.py (1334 lines)", "shortDescription": {"text": "Very large file: tests/test_docs_site.py (1334 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-722d3e61cce32349", "name": "Very large file: tests/test_retrieval_plan.py (4762 lines)", "shortDescription": {"text": "Very large file: tests/test_retrieval_plan.py (4762 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc803d58a82dfcdd", "name": "Very large file: tests/test_onboarding.py (1575 lines)", "shortDescription": {"text": "Very large file: tests/test_onboarding.py (1575 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3cbf83bffad865b7", "name": "Very large file: tests/test_dashboard.py (1728 lines)", "shortDescription": {"text": "Very large file: tests/test_dashboard.py (1728 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3f78584a12be870", "name": "Very large file: tests/test_extract.py (2868 lines)", "shortDescription": {"text": "Very large file: tests/test_extract.py (2868 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5a893b1ed02ba59f", "name": "Very large file: tests/test_coordination_benchmark.py (1446 lines)", "shortDescription": {"text": "Very large file: tests/test_coordination_benchmark.py (1446 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab43c2cb4c16364", "name": "Very large file: tests/test_backend_shootout.py (6310 lines)", "shortDescription": {"text": "Very large file: tests/test_backend_shootout.py (6310 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-628a106266360257", "name": "Very large file: tests/test_live_benchmark.py (8407 lines)", "shortDescription": {"text": "Very large file: tests/test_live_benchmark.py (8407 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57c14d543e6dcf47", "name": "Very large file: tests/test_synthesis.py (2905 lines)", "shortDescription": {"text": "Very large file: tests/test_synthesis.py (2905 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-269bc81c11104bff", "name": "Very large file: tests/test_coordination.py (1478 lines)", "shortDescription": {"text": "Very large file: tests/test_coordination.py (1478 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d43c522411328461", "name": "Very large file: tests/test_query.py (2977 lines)", "shortDescription": {"text": "Very large file: tests/test_query.py (2977 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a9057c9f546caa4", "name": "Very large file: tests/test_harvey_lab_benchmark.py (6841 lines)", "shortDescription": {"text": "Very large file: tests/test_harvey_lab_benchmark.py (6841 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3de4eda7ee8e9e6", "name": "Very large file: tests/test_checkout.py (1972 lines)", "shortDescription": {"text": "Very large file: tests/test_checkout.py (1972 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80795c43b48d853d", "name": "Very large file: tests/test_packaging.py (6089 lines)", "shortDescription": {"text": "Very large file: tests/test_packaging.py (6089 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffe1190ad9dcff9f", "name": "Very large file: tests/test_cli.py (8387 lines)", "shortDescription": {"text": "Very large file: tests/test_cli.py (8387 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24372f97a3366192", "name": "Very large file: tests/test_mcp.py (4609 lines)", "shortDescription": {"text": "Very large file: tests/test_mcp.py (4609 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81e0a13a426046a9", "name": "Very large file: tests/test_graph.py (1706 lines)", "shortDescription": {"text": "Very large file: tests/test_graph.py (1706 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67f83966a8028e46", "name": "Very large file: tests/test_longmembench.py (1821 lines)", "shortDescription": {"text": "Very large file: tests/test_longmembench.py (1821 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5a7edce0ecd3dc3", "name": "Very large file: tests/test_core.py (4794 lines)", "shortDescription": {"text": "Very large file: tests/test_core.py (4794 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c70aac56bae2707", "name": "Very large file: tests/test_embedded_graph_store.py (4214 lines)", "shortDescription": {"text": "Very large file: tests/test_embedded_graph_store.py (4214 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3b3d8eef8996d16", "name": "Very large file: scripts/check-backend-shootout.py (1570 lines)", "shortDescription": {"text": "Very large file: scripts/check-backend-shootout.py (1570 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4e969f026a7827b", "name": "Very large file: zaxy_benchmarks/coordination_benchmark.py (1905 lines)", "shortDescription": {"text": "Very large file: zaxy_benchmarks/coordination_benchmark.py (1905 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbfbeaf6e20a9838", "name": "Very large file: zaxy_benchmarks/longmembench.py (3319 lines)", "shortDescription": {"text": "Very large file: zaxy_benchmarks/longmembench.py (3319 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-264432e208cc17b1", "name": "Very large file: zaxy_benchmarks/live_benchmark.py (4084 lines)", "shortDescription": {"text": "Very large file: zaxy_benchmarks/live_benchmark.py (4084 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64ae20e950975e1f", "name": "Very large file: zaxy_benchmarks/harvey_lab_benchmark.py (4694 lines)", "shortDescription": {"text": "Very large file: zaxy_benchmarks/harvey_lab_benchmark.py (4694 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21522632e2752b82", "name": "Very large file: src/zaxy/query.py (1917 lines)", "shortDescription": {"text": "Very large file: src/zaxy/query.py (1917 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-414d9a0adfad0af9", "name": "Very large file: src/zaxy/embedded_graph_store.py (2847 lines)", "shortDescription": {"text": "Very large file: src/zaxy/embedded_graph_store.py (2847 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7251da3a4971157a", "name": "Very large file: src/zaxy/mcp_server.py (4517 lines)", "shortDescription": {"text": "Very large file: src/zaxy/mcp_server.py (4517 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9970f795b7c3c6a6", "name": "Very large file: src/zaxy/checkout.py (2053 lines)", "shortDescription": {"text": "Very large file: src/zaxy/checkout.py (2053 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-784a1a659fb355fe", "name": "Very large file: src/zaxy/dashboard.py (2711 lines)", "shortDescription": {"text": "Very large file: src/zaxy/dashboard.py (2711 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9e9592adbb23ae2", "name": "Very large file: src/zaxy/coordination.py (2307 lines)", "shortDescription": {"text": "Very large file: src/zaxy/coordination.py (2307 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db6ea77e35addd85", "name": "Very large file: src/zaxy/graph.py (1582 lines)", "shortDescription": {"text": "Very large file: src/zaxy/graph.py (1582 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6747b4ad00b23c04", "name": "Very large file: src/zaxy/extract.py (3594 lines)", "shortDescription": {"text": "Very large file: src/zaxy/extract.py (3594 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-583256357f58ba8b", "name": "Very large file: src/zaxy/associative_memory.py (2292 lines)", "shortDescription": {"text": "Very large file: src/zaxy/associative_memory.py (2292 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b9a65c85e48c5a4", "name": "Very large file: src/zaxy/core.py (5372 lines)", "shortDescription": {"text": "Very large file: src/zaxy/core.py (5372 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96f3dd4ad9ccfb72", "name": "Very large file: src/zaxy/evidence_candidates.py (1803 lines)", "shortDescription": {"text": "Very large file: src/zaxy/evidence_candidates.py (1803 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2b0521f0cff7353", "name": "Very large file: src/zaxy/pggraph_store.py (1295 lines)", "shortDescription": {"text": "Very large file: src/zaxy/pggraph_store.py (1295 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3fef0570d3885eb", "name": "Very large file: src/zaxy/release.py (1547 lines)", "shortDescription": {"text": "Very large file: src/zaxy/release.py (1547 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b35b43f1029595c6", "name": "Very large file: src/zaxy/synthesis/operations.py (1544 lines)", "shortDescription": {"text": "Very large file: src/zaxy/synthesis/operations.py (1544 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44e22036eee556d5", "name": "Very large file: src/zaxy/synthesis/labels.py (1509 lines)", "shortDescription": {"text": "Very large file: src/zaxy/synthesis/labels.py (1509 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c959e53ff99c8aa", "name": "Very large file: src/zaxy/synthesis/ledgers.py (1603 lines)", "shortDescription": {"text": "Very large file: src/zaxy/synthesis/ledgers.py (1603 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ee72246e1d3f352", "name": "Very large file: src/zaxy/synthesis/evidence_rows.py (1519 lines)", "shortDescription": {"text": "Very large file: src/zaxy/synthesis/evidence_rows.py (1519 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0035c1ff493f5b52", "name": "Very large file: src/zaxy/cli/benchmarks.py (1637 lines)", "shortDescription": {"text": "Very large file: src/zaxy/cli/benchmarks.py (1637 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bfd293848137471", "name": "Very large file: src/zaxy/cli/workspace.py (1636 lines)", "shortDescription": {"text": "Very large file: src/zaxy/cli/workspace.py (1636 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2380e4b8a057eab4", "name": "Very large file: src/zaxy/cli/serving.py (1533 lines)", "shortDescription": {"text": "Very large file: src/zaxy/cli/serving.py (1533 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02297304476919f0", "name": "Very large file: src/zaxy/cli/evaluation.py (1424 lines)", "shortDescription": {"text": "Very large file: src/zaxy/cli/evaluation.py (1424 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-519c00ba87e4ef19", "name": "Very large file: src/zaxy/cli/runtime.py (1407 lines)", "shortDescription": {"text": "Very large file: src/zaxy/cli/runtime.py (1407 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ce5660ad8f6bf40", "name": "Very large file: src/zaxy/retrieval_plan/fact_queries.py (1574 lines)", "shortDescription": {"text": "Very large file: src/zaxy/retrieval_plan/fact_queries.py (1574 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c3162b7dee37cd8", "name": "Very large file: src/zaxy/retrieval_plan/scalars.py (1572 lines)", "shortDescription": {"text": "Very large file: src/zaxy/retrieval_plan/scalars.py (1572 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce406f78f3dd5705", "name": "Very large file: src/zaxy/retrieval_plan/foundations.py (1651 lines)", "shortDescription": {"text": "Very large file: src/zaxy/retrieval_plan/foundations.py (1651 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-821ab275168fbe3f", "name": "Very large file: src/zaxy/retrieval_plan/bundles.py (1777 lines)", "shortDescription": {"text": "Very large file: src/zaxy/retrieval_plan/bundles.py (1777 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7673f9bb5b7589a", "name": "Very large file: src/zaxy/retrieval_plan/duration_evidence.py (1610 lines)", "shortDescription": {"text": "Very large file: src/zaxy/retrieval_plan/duration_evidence.py (1610 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15936a3c827787d7", "name": "Very large file: src/zaxy/retrieval_plan/ordering.py (1624 lines)", "shortDescription": {"text": "Very large file: src/zaxy/retrieval_plan/ordering.py (1624 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 41 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 21 placeholder/mock markers across 10 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-897ffb2603c96e8a", "name": "Legacy-named symbol `synthesis_packet_v1` in tests/test_retrieval_plan.py:508", "shortDescription": {"text": "Legacy-named symbol `synthesis_packet_v1` in tests/test_retrieval_plan.py:508"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9396310d6e9d549c", "name": "Legacy-named symbol `model_copy` in tests/test_extract.py:114", "shortDescription": {"text": "Legacy-named symbol `model_copy` in tests/test_extract.py:114"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69d570a65c6791ab", "name": "Legacy-named symbol `model_copy` in tests/test_event.py:93", "shortDescription": {"text": "Legacy-named symbol `model_copy` in tests/test_event.py:93"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-018d798f4de968d8", "name": "Legacy-named symbol `event_segment_cluster_v1` in tests/test_causal_benchmark.py:501", "shortDescription": {"text": "Legacy-named symbol `event_segment_cluster_v1` in tests/test_causal_benchmark.py:501"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57bfae59cbd46d3c", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_pggraph_store.py:515", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_pggraph_store.py:515"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-16f9e7b99bbf7fbb", "name": "Legacy-named symbol `evidence_program_v1` in tests/test_evidence_program.py:36", "shortDescription": {"text": "Legacy-named symbol `evidence_program_v1` in tests/test_evidence_program.py:36"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-459dad14d28bf3c6", "name": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_causal_checkout.py:23", "shortDescription": {"text": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_causal_checkout.py:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a953147b288f6095", "name": "Legacy-named symbol `accepted_unused` in tests/test_coordination.py:236", "shortDescription": {"text": "Legacy-named symbol `accepted_unused` in tests/test_coordination.py:236"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62966470af591fa4", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_query.py:864", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_query.py:864"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8539406bbf7cd8eb", "name": "Legacy-named symbol `deterministic_token_overlap_v1` in tests/test_metacognition.py:61", "shortDescription": {"text": "Legacy-named symbol `deterministic_token_overlap_v1` in tests/test_metacognition.py:61"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6aee7b7e382461e", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_inference.py:67", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_inference.py:67"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a6f1e3fd30cf645", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_checkout.py:387", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_checkout.py:387"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-000b03c9abbf60d6", "name": "Legacy-named symbol `synthesis_packet_v1` in tests/test_synthesis_packet.py:263", "shortDescription": {"text": "Legacy-named symbol `synthesis_packet_v1` in tests/test_synthesis_packet.py:263"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-707468695d055916", "name": "Legacy-named symbol `deterministic_segment_summary_v1` in tests/test_consolidation_pipeline.py:150", "shortDescription": {"text": "Legacy-named symbol `deterministic_segment_summary_v1` in tests/test_consolidation_pipeline.py:150"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a886383862bde1c", "name": "Legacy-named symbol `slot_plan_v1` in tests/test_synthesis_artifact.py:63", "shortDescription": {"text": "Legacy-named symbol `slot_plan_v1` in tests/test_synthesis_artifact.py:63"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99f940e8eab372fd", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_cli.py:2343", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_cli.py:2343"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6be40400b7dba03b", "name": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_mcp.py:706", "shortDescription": {"text": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_mcp.py:706"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c834b719383f0f3", "name": "Legacy-named symbol `lexical_overlap_v1` in tests/test_graph.py:527", "shortDescription": {"text": "Legacy-named symbol `lexical_overlap_v1` in tests/test_graph.py:527"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-722891247019933d", "name": "Legacy-named symbol `000_old` in tests/test_schema_migrations.py:47", "shortDescription": {"text": "Legacy-named symbol `000_old` in tests/test_schema_migrations.py:47"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f040df070698fed1", "name": "Legacy-named symbol `test_run_doctor_reports_leftover_pre_ladybug_backup` in tests/test_doctor.py:768", "shortDescription": {"text": "Legacy-named symbol `test_run_doctor_reports_leftover_pre_ladybug_backup` in tests/test_doctor.py:768"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d4db9a1be02a2105", "name": "Legacy-named symbol `event_segment_cluster_v1` in tests/test_consolidation.py:27", "shortDescription": {"text": "Legacy-named symbol `event_segment_cluster_v1` in tests/test_consolidation.py:27"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a79f10faaf8d304", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_core.py:597", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_core.py:597"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-049d7c0776a0b9fa", "name": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_causal.py:118", "shortDescription": {"text": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_causal.py:118"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8fd0dfd4ad722e8", "name": "Legacy-named symbol `test_embedded_store_connect_migration_never_overwrites_existing_backup` in tests/test_embedded_grap", "shortDescription": {"text": "Legacy-named symbol `test_embedded_store_connect_migration_never_overwrites_existing_backup` in tests/test_embedded_graph_store.py:4037"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecbae49c49615cdd", "name": "Legacy-named symbol `explicit_outcome_explanation_v1` in tests/test_latticedb_store.py:178", "shortDescription": {"text": "Legacy-named symbol `explicit_outcome_explanation_v1` in tests/test_latticedb_store.py:178"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-453d8faaad3fecf6", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/check-backend-shootout.py:1340", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/check-backend-shootout.py:1340"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59fc6fd39dd6199b", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/check-state-recovery-benchmark.py:138", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/check-state-recovery-benchmark.py:138"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9521465fa449a576", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/generate-release-media.py:182", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/generate-release-media.py:182"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4b1ddbbf323a6c6", "name": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/longmembench.py:437", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/longmembench.py:437"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9b6eb135a197850", "name": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/harvey_lab_benchmark.py:902", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/harvey_lab_benchmark.py:902"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf926a31c6218b0e", "name": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/rc_benchmark_freeze.py:951", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/rc_benchmark_freeze.py:951"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd4e3c11022a1df3", "name": "Legacy-named symbol `deterministic_episode_segment_v1` in src/zaxy/consolidation_pipeline.py:228", "shortDescription": {"text": "Legacy-named symbol `deterministic_episode_segment_v1` in src/zaxy/consolidation_pipeline.py:228"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-29991ebf8316eed4", "name": "Commented-code block (6 lines) in src/zaxy/query.py:30", "shortDescription": {"text": "Commented-code block (6 lines) in src/zaxy/query.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ab201ccd823d7469", "name": "Commented-code block (10 lines) in src/zaxy/embedded_graph_store.py:99", "shortDescription": {"text": "Commented-code block (10 lines) in src/zaxy/embedded_graph_store.py:99"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-024a6e12c4efd212", "name": "Commented-code block (7 lines) in src/zaxy/mcp_server.py:1451", "shortDescription": {"text": "Commented-code block (7 lines) in src/zaxy/mcp_server.py:1451"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-62a68c0c1065128e", "name": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/capture_manager.py:75", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/capture_manager.py:75"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2162e4eae874865a", "name": "Legacy-named symbol `coordinationbench_synthesis_artifact_v1` in src/zaxy/coordinationbench_adapter.py:348", "shortDescription": {"text": "Legacy-named symbol `coordinationbench_synthesis_artifact_v1` in src/zaxy/coordinationbench_adapter.py:348"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6b34c630add1951", "name": "Legacy-named symbol `task_completed_decision_citation_v1` in src/zaxy/inference.py:17", "shortDescription": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in src/zaxy/inference.py:17"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1c92c60e82bbb1b", "name": "Commented-code block (5 lines) in src/zaxy/config.py:261", "shortDescription": {"text": "Commented-code block (5 lines) in src/zaxy/config.py:261"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0672dba8f815e76b", "name": "Legacy-named symbol `synthesis_artifact_v1` in src/zaxy/synthesis_artifact.py:18", "shortDescription": {"text": "Legacy-named symbol `synthesis_artifact_v1` in src/zaxy/synthesis_artifact.py:18"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a56706f07a5ca48a", "name": "Legacy-named symbol `coordination_proof_packet_v1` in src/zaxy/coordination.py:641", "shortDescription": {"text": "Legacy-named symbol `coordination_proof_packet_v1` in src/zaxy/coordination.py:641"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d258f467128bab70", "name": "Legacy-named symbol `write_v1` in src/zaxy/event.py:293", "shortDescription": {"text": "Legacy-named symbol `write_v1` in src/zaxy/event.py:293"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e2e1cf2c94bf3f1", "name": "Legacy-named symbol `_extract_skill_deprecated` in src/zaxy/extract.py:647", "shortDescription": {"text": "Legacy-named symbol `_extract_skill_deprecated` in src/zaxy/extract.py:647"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38da976140bc588b", "name": "Stub function `log_message` (body is just `pass`/`return`) \u2014 src/zaxy/packet_analyzer.py:338", "shortDescription": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 src/zaxy/packet_analyzer.py:338"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a1fdba70d861666", "name": "Legacy-named symbol `deterministic_token_overlap_v1` in src/zaxy/core.py:1016", "shortDescription": {"text": "Legacy-named symbol `deterministic_token_overlap_v1` in src/zaxy/core.py:1016"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb8cd55d31a254c2", "name": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/coordination_git.py:148", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/coordination_git.py:148"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b376a988e6e8939c", "name": "Legacy-named symbol `evidence_program_v1` in src/zaxy/evidence_program.py:126", "shortDescription": {"text": "Legacy-named symbol `evidence_program_v1` in src/zaxy/evidence_program.py:126"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c1ec2ec7242f050", "name": "Commented-code block (5 lines) in src/zaxy/metacognition.py:298", "shortDescription": {"text": "Commented-code block (5 lines) in src/zaxy/metacognition.py:298"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5cc2187b37cb317b", "name": "Legacy-named symbol `model_copy` in src/zaxy/retrieval_profile.py:151", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/zaxy/retrieval_profile.py:151"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44ba88926f215681", "name": "Commented-code block (6 lines) in src/zaxy/retrieval_profile.py:74", "shortDescription": {"text": "Commented-code block (6 lines) in src/zaxy/retrieval_profile.py:74"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f400c867acee4555", "name": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/release.py:1157", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/release.py:1157"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bc6a653c8dd9789", "name": "Legacy-named symbol `model_copy` in src/zaxy/cli/workspace.py:1008", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/zaxy/cli/workspace.py:1008"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68133aec376a02cf", "name": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/cli/evaluation.py:1417", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/cli/evaluation.py:1417"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c81e6e128fceed46", "name": "Legacy-named symbol `slot_plan_v1` in src/zaxy/retrieval_plan/foundations.py:403", "shortDescription": {"text": "Legacy-named symbol `slot_plan_v1` in src/zaxy/retrieval_plan/foundations.py:403"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bac93b1daa008190", "name": "Legacy-named symbol `synthesis_packet_v1` in src/zaxy/retrieval_plan/bundles.py:1680", "shortDescription": {"text": "Legacy-named symbol `synthesis_packet_v1` in src/zaxy/retrieval_plan/bundles.py:1680"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b334d875f2339fa1", "name": "5 env vars used in code but missing from .env.example", "shortDescription": {"text": "5 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `CODEX_HOME`, `HERMES_HOME`, `OPENAI_API_KEY`, `PATH`, `RETRIEVAL_PROFILE`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/backend-shootout.py:observe, scripts/backend-shootout.py:observe\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nzaxy_benchmarks/coordination_benchmark.py:from_dict, zaxy_benchmarks/coordination_benchmark.py:from_dict, zaxy_benchmarks/coordination_benchmark.py:from_dict\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9dad557909b86499", "name": "Near-duplicate function bodies in 10 places", "shortDescription": {"text": "Near-duplicate function bodies in 10 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nzaxy_benchmarks/coordination_benchmark.py:to_dict, zaxy_benchmarks/coordination_benchmark.py:to_dict, zaxy_benchmarks/coordination_benchmark.py:to_dict, zaxy_benchmarks/coordination_benchmark.py:to_dict\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-122053f21232d80c", "name": "Near-duplicate function bodies in 14 places", "shortDescription": {"text": "Near-duplicate function bodies in 14 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nzaxy_benchmarks/live_benchmark.py:query, zaxy_benchmarks/live_benchmark.py:query_async, zaxy_benchmarks/live_benchmark.py:query, zaxy_benchmarks/live_benchmark.py:query\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/zaxy/query.py:rerank, src/zaxy/query.py:rerank, src/zaxy/query.py:rerank, src/zaxy/query.py:rerank\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/zaxy/embedded_graph_store.py:matrix_bytes, src/zaxy/embedded_graph_store.py:matrix_bytes, src/zaxy/embedded_graph_store.py:matrix_bytes, src/zaxy/embedded_graph_store.py:matrix_bytes\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/20664"}, "properties": {"repository": "syndicalt/zaxy", "repoUrl": "https://github.com/syndicalt/zaxy", "branch": "main"}, "results": [{"ruleId": "scanner-1749a79b59881cca", "level": "note", "message": {"text": "Possibly dead Python function: reject_constant"}, "properties": {"repobilityId": "61afdc86564ac343", "scanner": "scanner-primary", "fingerprint": "1749a79b59881cca", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-backend-shootout.py:566"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2483c91bbcc25027", "level": "note", "message": {"text": "Possibly dead Python function: stash_code"}, "properties": {"repobilityId": "92aa2556d3918527", "scanner": "scanner-primary", "fingerprint": "2483c91bbcc25027", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/build-site-docs.py:353"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-399a9d4f9103b802", "level": "note", "message": {"text": "Possibly dead Python function: reject_constant"}, "properties": {"repobilityId": "61afdc86564ac343", "scanner": "scanner-primary", "fingerprint": "399a9d4f9103b802", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/backend-shootout.py:739"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6617fbf80bdeef1e", "level": "note", "message": {"text": "Possibly dead Python function: reject_constant"}, "properties": {"repobilityId": "61afdc86564ac343", "scanner": "scanner-primary", "fingerprint": "6617fbf80bdeef1e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/build-backend-shootout-workload.py:74"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-589c315b56364075", "level": "note", "message": {"text": "Possibly dead Python function: write_hypothesis"}, "properties": {"repobilityId": "a880eb0502822851", "scanner": "scanner-primary", "fingerprint": "589c315b56364075", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "reports/archive/benchmarks/longmembench-adapter-kit/zaxy_longmembench_runner.py:14"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11f87e37e1d961f5", "level": "note", "message": {"text": "Possibly dead Python function: socket_reader"}, "properties": {"repobilityId": "07382768d2f0a7c3", "scanner": "scanner-primary", "fingerprint": "11f87e37e1d961f5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/mcp_server.py:4204"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d09eb4fd005323d3", "level": "note", "message": {"text": "Possibly dead Python function: socket_writer"}, "properties": {"repobilityId": "de1b912934ad9d5b", "scanner": "scanner-primary", "fingerprint": "d09eb4fd005323d3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/mcp_server.py:4217"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15d594b49fc61057", "level": "note", "message": {"text": "Possibly dead Python function: model_post_init"}, "properties": {"repobilityId": "92fde611a57364a6", "scanner": "scanner-primary", "fingerprint": "15d594b49fc61057", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/config.py:547"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56a32a6a4d293ce2", "level": "note", "message": {"text": "Possibly dead Python function: eventloom_log"}, "properties": {"repobilityId": "d48f08f3c2f7eae6", "scanner": "scanner-primary", "fingerprint": "56a32a6a4d293ce2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/config.py:620"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4f72b80a8a4e25ff", "level": "note", "message": {"text": "Possibly dead Python function: do_GET"}, "properties": {"repobilityId": "2d943bb45e4f13bd", "scanner": "scanner-primary", "fingerprint": "4f72b80a8a4e25ff", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/dashboard.py:2622"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1ff041897dc3494", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "e1ff041897dc3494", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/dashboard.py:2639"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76e1fba2b9a77598", "level": "note", "message": {"text": "Possibly dead Python function: do_PUT"}, "properties": {"repobilityId": "f9a37cbbb16037bf", "scanner": "scanner-primary", "fingerprint": "76e1fba2b9a77598", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/dashboard.py:2662"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65b0cda4236cd646", "level": "note", "message": {"text": "Possibly dead Python function: do_PATCH"}, "properties": {"repobilityId": "0d74622de2ba1ee7", "scanner": "scanner-primary", "fingerprint": "65b0cda4236cd646", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/dashboard.py:2665"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85465bc1f8d604bb", "level": "note", "message": {"text": "Possibly dead Python function: do_DELETE"}, "properties": {"repobilityId": "f3eb582f191adaea", "scanner": "scanner-primary", "fingerprint": "85465bc1f8d604bb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/dashboard.py:2668"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0a7ac5d284e2585", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "f0a7ac5d284e2585", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/dashboard.py:2671"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26eff57cc068d139", "level": "note", "message": {"text": "Possibly dead Python function: empty_recall_candidate_set"}, "properties": {"repobilityId": "d23c4d9cf58fcbc4", "scanner": "scanner-primary", "fingerprint": "26eff57cc068d139", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/recall.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8838e484662c522e", "level": "note", "message": {"text": "Possibly dead Python function: decorator"}, "properties": {"repobilityId": "ffbcbc9bc189af1c", "scanner": "scanner-primary", "fingerprint": "8838e484662c522e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/extract.py:103"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b05511801b80b66", "level": "note", "message": {"text": "Possibly dead Python function: do_POST"}, "properties": {"repobilityId": "53357410ca9379a9", "scanner": "scanner-primary", "fingerprint": "8b05511801b80b66", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/packet_analyzer.py:323"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ba58f59362ef354", "level": "note", "message": {"text": "Possibly dead Python function: log_message"}, "properties": {"repobilityId": "965f3150b4af5b2e", "scanner": "scanner-primary", "fingerprint": "7ba58f59362ef354", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/packet_analyzer.py:338"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b415e58bf4f10212", "level": "note", "message": {"text": "Possibly dead Python function: aggregate_candidate_lines"}, "properties": {"repobilityId": "6c55db9a5adf97eb", "scanner": "scanner-primary", "fingerprint": "b415e58bf4f10212", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/evidence_candidates.py:1801"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8f315c2d25dac3f", "level": "note", "message": {"text": "Possibly dead Python function: default_fabric_factory"}, "properties": {"repobilityId": "e92238cb7e04c057", "scanner": "scanner-primary", "fingerprint": "b8f315c2d25dac3f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/adapters/_common.py:107"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b7c55e0431a8949", "level": "note", "message": {"text": "Possibly dead Python function: zaxy_crewai_memory_step"}, "properties": {"repobilityId": "4ab64040d00edcad", "scanner": "scanner-primary", "fingerprint": "6b7c55e0431a8949", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/adapters/crewai.py:262"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7b3a12a0c45ff99", "level": "note", "message": {"text": "Possibly dead Python function: zaxy_crewai_memory_checkout_step"}, "properties": {"repobilityId": "ce49fd6f697ac4cc", "scanner": "scanner-primary", "fingerprint": "b7b3a12a0c45ff99", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/adapters/crewai.py:288"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbe7f172f784e26a", "level": "note", "message": {"text": "Possibly dead Python function: zaxy_crewai_coordination_step"}, "properties": {"repobilityId": "4a102390c16fc440", "scanner": "scanner-primary", "fingerprint": "bbe7f172f784e26a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/zaxy/adapters/crewai.py:304"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eec916d8823ffc56", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "eec916d8823ffc56", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/release-check.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f1835bac5f5197b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "fc7127199f6e2100", "scanner": "scanner-primary", "fingerprint": "3f1835bac5f5197b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-3f1835bac5f5197b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "ad9317c1e931b91a", "scanner": "scanner-primary", "fingerprint": "3f1835bac5f5197b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-f5bf600c6b64d7a1", "level": "error", "message": {"text": "Possible secret in scripts/setup.sh"}, "properties": {"repobilityId": "427194e4c8baf880", "scanner": "scanner-primary", "fingerprint": "f5bf600c6b64d7a1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/setup.sh"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-0a138c87e63c140e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in site/docs/superpowers/plans/2026-06-09-codebase-review-high-value-remediation.html:156"}, "properties": {"repobilityId": "a12d973102163285", "scanner": "scanner-primary", "fingerprint": "0a138c87e63c140e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/docs/superpowers/plans/2026-06-09-codebase-review-high-value-remediation.html"}, "region": {"startLine": 156}}}]}, {"ruleId": "scanner-df50e8e9fb24cbcf", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in site/docs/research/codebase-review-2026-06-09.html:467"}, "properties": {"repobilityId": "45ef702550cccac9", "scanner": "scanner-primary", "fingerprint": "df50e8e9fb24cbcf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/docs/research/codebase-review-2026-06-09.html"}, "region": {"startLine": 467}}}]}, {"ruleId": "scanner-b9b758c1196f750e", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in site/docs/research/codebase-review-2026-06-09.html:467"}, "properties": {"repobilityId": "87ebdee756d8a03c", "scanner": "scanner-primary", "fingerprint": "b9b758c1196f750e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/docs/research/codebase-review-2026-06-09.html"}, "region": {"startLine": 467}}}]}, {"ruleId": "scanner-36362b5b7f33b6db", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in site/docs/research/codebase-review-2026-06-09.html:38"}, "properties": {"repobilityId": "8e3abbbefd519312", "scanner": "scanner-primary", "fingerprint": "36362b5b7f33b6db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/docs/research/codebase-review-2026-06-09.html"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-5a874ba8049731a3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in site/docs/research/codebase-review-2026-06-09.html:52"}, "properties": {"repobilityId": "6d9025fcac8d6136", "scanner": "scanner-primary", "fingerprint": "5a874ba8049731a3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "site/docs/research/codebase-review-2026-06-09.html"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-324c52eb87a39bc1", "level": "error", "message": {"text": "Possible secret in zaxy_benchmarks/longmembench.py"}, "properties": {"repobilityId": "2f706bcbb2b372b0", "scanner": "scanner-primary", "fingerprint": "324c52eb87a39bc1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "zaxy_benchmarks/longmembench.py"}, "region": {"startLine": 891}}}]}, {"ruleId": "scanner-324c52eb87a39bc1", "level": "error", "message": {"text": "Possible secret in zaxy_benchmarks/longmembench.py"}, "properties": {"repobilityId": "2f706bcbb2b372b0", "scanner": "scanner-primary", "fingerprint": "324c52eb87a39bc1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "zaxy_benchmarks/longmembench.py"}, "region": {"startLine": 904}}}]}, {"ruleId": "scanner-463b618a2b662e2c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b4d1e61a4ecd1a70", "scanner": "scanner-primary", "fingerprint": "463b618a2b662e2c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish-mcp.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a3c03147ef1f40b5", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-e4f658c0c00de0d4", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "25e1fa3783e7cb32", "scanner": "scanner-primary", "fingerprint": "e4f658c0c00de0d4", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pages.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-448d8837178ae57a", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "13af6451e15656fc", "scanner": "scanner-primary", "fingerprint": "448d8837178ae57a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pages.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3ff29596dff0eef0", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0fde4c5793055812", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "26eca5024249c767", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-7ffa33751be3d771", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "491a3ad29cbaf189", "scanner": "scanner-primary", "fingerprint": "7ffa33751be3d771", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42d84b40579976f6", "level": "note", "message": {"text": "Very large file: tests/test_docs_site.py (1334 lines)"}, "properties": {"repobilityId": "90ebb9495d3ce528", "scanner": "scanner-primary", "fingerprint": "42d84b40579976f6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-722d3e61cce32349", "level": "note", "message": {"text": "Very large file: tests/test_retrieval_plan.py (4762 lines)"}, "properties": {"repobilityId": "15bad51709721a88", "scanner": "scanner-primary", "fingerprint": "722d3e61cce32349", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bc803d58a82dfcdd", "level": "note", "message": {"text": "Very large file: tests/test_onboarding.py (1575 lines)"}, "properties": {"repobilityId": "75a8ad63c93a270a", "scanner": "scanner-primary", "fingerprint": "bc803d58a82dfcdd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3cbf83bffad865b7", "level": "note", "message": {"text": "Very large file: tests/test_dashboard.py (1728 lines)"}, "properties": {"repobilityId": "55cd48f794a884e8", "scanner": "scanner-primary", "fingerprint": "3cbf83bffad865b7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e3f78584a12be870", "level": "note", "message": {"text": "Very large file: tests/test_extract.py (2868 lines)"}, "properties": {"repobilityId": "97cfc1c5659b25da", "scanner": "scanner-primary", "fingerprint": "e3f78584a12be870", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5a893b1ed02ba59f", "level": "note", "message": {"text": "Very large file: tests/test_coordination_benchmark.py (1446 lines)"}, "properties": {"repobilityId": "5e1ba98f433f3d51", "scanner": "scanner-primary", "fingerprint": "5a893b1ed02ba59f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab43c2cb4c16364", "level": "note", "message": {"text": "Very large file: tests/test_backend_shootout.py (6310 lines)"}, "properties": {"repobilityId": "158b53debea1efd8", "scanner": "scanner-primary", "fingerprint": "3ab43c2cb4c16364", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-628a106266360257", "level": "note", "message": {"text": "Very large file: tests/test_live_benchmark.py (8407 lines)"}, "properties": {"repobilityId": "4369d1841b8ed726", "scanner": "scanner-primary", "fingerprint": "628a106266360257", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-57c14d543e6dcf47", "level": "note", "message": {"text": "Very large file: tests/test_synthesis.py (2905 lines)"}, "properties": {"repobilityId": "5669e8b9e05ed96a", "scanner": "scanner-primary", "fingerprint": "57c14d543e6dcf47", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-269bc81c11104bff", "level": "note", "message": {"text": "Very large file: tests/test_coordination.py (1478 lines)"}, "properties": {"repobilityId": "bd6fba33c7eb1099", "scanner": "scanner-primary", "fingerprint": "269bc81c11104bff", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d43c522411328461", "level": "note", "message": {"text": "Very large file: tests/test_query.py (2977 lines)"}, "properties": {"repobilityId": "67bf2bad9aec77e2", "scanner": "scanner-primary", "fingerprint": "d43c522411328461", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2a9057c9f546caa4", "level": "note", "message": {"text": "Very large file: tests/test_harvey_lab_benchmark.py (6841 lines)"}, "properties": {"repobilityId": "d4a9f9dd1bbe6e27", "scanner": "scanner-primary", "fingerprint": "2a9057c9f546caa4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d3de4eda7ee8e9e6", "level": "note", "message": {"text": "Very large file: tests/test_checkout.py (1972 lines)"}, "properties": {"repobilityId": "ca5807ce59e7cf7a", "scanner": "scanner-primary", "fingerprint": "d3de4eda7ee8e9e6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-80795c43b48d853d", "level": "note", "message": {"text": "Very large file: tests/test_packaging.py (6089 lines)"}, "properties": {"repobilityId": "5988d0a2d9ca5e85", "scanner": "scanner-primary", "fingerprint": "80795c43b48d853d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ffe1190ad9dcff9f", "level": "note", "message": {"text": "Very large file: tests/test_cli.py (8387 lines)"}, "properties": {"repobilityId": "2121c5b297f0116c", "scanner": "scanner-primary", "fingerprint": "ffe1190ad9dcff9f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-24372f97a3366192", "level": "note", "message": {"text": "Very large file: tests/test_mcp.py (4609 lines)"}, "properties": {"repobilityId": "80fc65a1af03fb7e", "scanner": "scanner-primary", "fingerprint": "24372f97a3366192", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-81e0a13a426046a9", "level": "note", "message": {"text": "Very large file: tests/test_graph.py (1706 lines)"}, "properties": {"repobilityId": "d1b393bb14079a1c", "scanner": "scanner-primary", "fingerprint": "81e0a13a426046a9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-67f83966a8028e46", "level": "note", "message": {"text": "Very large file: tests/test_longmembench.py (1821 lines)"}, "properties": {"repobilityId": "502fa6724dc77b54", "scanner": "scanner-primary", "fingerprint": "67f83966a8028e46", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e5a7edce0ecd3dc3", "level": "note", "message": {"text": "Very large file: tests/test_core.py (4794 lines)"}, "properties": {"repobilityId": "d36141da7781bff1", "scanner": "scanner-primary", "fingerprint": "e5a7edce0ecd3dc3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0c70aac56bae2707", "level": "note", "message": {"text": "Very large file: tests/test_embedded_graph_store.py (4214 lines)"}, "properties": {"repobilityId": "e4a162ed52f1c347", "scanner": "scanner-primary", "fingerprint": "0c70aac56bae2707", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d3b3d8eef8996d16", "level": "note", "message": {"text": "Very large file: scripts/check-backend-shootout.py (1570 lines)"}, "properties": {"repobilityId": "abe5ba67c7d24e4d", "scanner": "scanner-primary", "fingerprint": "d3b3d8eef8996d16", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c4e969f026a7827b", "level": "note", "message": {"text": "Very large file: zaxy_benchmarks/coordination_benchmark.py (1905 lines)"}, "properties": {"repobilityId": "a61d9e0e2f1cf4a9", "scanner": "scanner-primary", "fingerprint": "c4e969f026a7827b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cbfbeaf6e20a9838", "level": "note", "message": {"text": "Very large file: zaxy_benchmarks/longmembench.py (3319 lines)"}, "properties": {"repobilityId": "e9eeec33f4e5d62a", "scanner": "scanner-primary", "fingerprint": "cbfbeaf6e20a9838", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-264432e208cc17b1", "level": "note", "message": {"text": "Very large file: zaxy_benchmarks/live_benchmark.py (4084 lines)"}, "properties": {"repobilityId": "8028d3f5237f244b", "scanner": "scanner-primary", "fingerprint": "264432e208cc17b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-64ae20e950975e1f", "level": "note", "message": {"text": "Very large file: zaxy_benchmarks/harvey_lab_benchmark.py (4694 lines)"}, "properties": {"repobilityId": "491ceacb7f81aeac", "scanner": "scanner-primary", "fingerprint": "64ae20e950975e1f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-21522632e2752b82", "level": "note", "message": {"text": "Very large file: src/zaxy/query.py (1917 lines)"}, "properties": {"repobilityId": "e483bdc11ed792fa", "scanner": "scanner-primary", "fingerprint": "21522632e2752b82", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-414d9a0adfad0af9", "level": "note", "message": {"text": "Very large file: src/zaxy/embedded_graph_store.py (2847 lines)"}, "properties": {"repobilityId": "50f7e352e0c9496f", "scanner": "scanner-primary", "fingerprint": "414d9a0adfad0af9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7251da3a4971157a", "level": "note", "message": {"text": "Very large file: src/zaxy/mcp_server.py (4517 lines)"}, "properties": {"repobilityId": "5e2316f86a79eb38", "scanner": "scanner-primary", "fingerprint": "7251da3a4971157a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9970f795b7c3c6a6", "level": "note", "message": {"text": "Very large file: src/zaxy/checkout.py (2053 lines)"}, "properties": {"repobilityId": "a2cd0cfc2c154e7f", "scanner": "scanner-primary", "fingerprint": "9970f795b7c3c6a6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-784a1a659fb355fe", "level": "note", "message": {"text": "Very large file: src/zaxy/dashboard.py (2711 lines)"}, "properties": {"repobilityId": "75e39a0a500c3d44", "scanner": "scanner-primary", "fingerprint": "784a1a659fb355fe", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a9e9592adbb23ae2", "level": "note", "message": {"text": "Very large file: src/zaxy/coordination.py (2307 lines)"}, "properties": {"repobilityId": "ca0e81dbf831d805", "scanner": "scanner-primary", "fingerprint": "a9e9592adbb23ae2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-db6ea77e35addd85", "level": "note", "message": {"text": "Very large file: src/zaxy/graph.py (1582 lines)"}, "properties": {"repobilityId": "052842b0c8bc9696", "scanner": "scanner-primary", "fingerprint": "db6ea77e35addd85", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6747b4ad00b23c04", "level": "note", "message": {"text": "Very large file: src/zaxy/extract.py (3594 lines)"}, "properties": {"repobilityId": "279c71f36c979d44", "scanner": "scanner-primary", "fingerprint": "6747b4ad00b23c04", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-583256357f58ba8b", "level": "note", "message": {"text": "Very large file: src/zaxy/associative_memory.py (2292 lines)"}, "properties": {"repobilityId": "6a46e767f9cc8965", "scanner": "scanner-primary", "fingerprint": "583256357f58ba8b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9b9a65c85e48c5a4", "level": "note", "message": {"text": "Very large file: src/zaxy/core.py (5372 lines)"}, "properties": {"repobilityId": "38ccf14570b7ac08", "scanner": "scanner-primary", "fingerprint": "9b9a65c85e48c5a4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-96f3dd4ad9ccfb72", "level": "note", "message": {"text": "Very large file: src/zaxy/evidence_candidates.py (1803 lines)"}, "properties": {"repobilityId": "30da4e5e01b0b9ba", "scanner": "scanner-primary", "fingerprint": "96f3dd4ad9ccfb72", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c2b0521f0cff7353", "level": "note", "message": {"text": "Very large file: src/zaxy/pggraph_store.py (1295 lines)"}, "properties": {"repobilityId": "594c63a637ecd6c0", "scanner": "scanner-primary", "fingerprint": "c2b0521f0cff7353", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b3fef0570d3885eb", "level": "note", "message": {"text": "Very large file: src/zaxy/release.py (1547 lines)"}, "properties": {"repobilityId": "9d8e1027d4b5339f", "scanner": "scanner-primary", "fingerprint": "b3fef0570d3885eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b35b43f1029595c6", "level": "note", "message": {"text": "Very large file: src/zaxy/synthesis/operations.py (1544 lines)"}, "properties": {"repobilityId": "fcd3dfd30233cc28", "scanner": "scanner-primary", "fingerprint": "b35b43f1029595c6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-44e22036eee556d5", "level": "note", "message": {"text": "Very large file: src/zaxy/synthesis/labels.py (1509 lines)"}, "properties": {"repobilityId": "3150637f3f980a49", "scanner": "scanner-primary", "fingerprint": "44e22036eee556d5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5c959e53ff99c8aa", "level": "note", "message": {"text": "Very large file: src/zaxy/synthesis/ledgers.py (1603 lines)"}, "properties": {"repobilityId": "4e93286ef7fea4cc", "scanner": "scanner-primary", "fingerprint": "5c959e53ff99c8aa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0ee72246e1d3f352", "level": "note", "message": {"text": "Very large file: src/zaxy/synthesis/evidence_rows.py (1519 lines)"}, "properties": {"repobilityId": "88123b97aa999f9d", "scanner": "scanner-primary", "fingerprint": "0ee72246e1d3f352", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0035c1ff493f5b52", "level": "note", "message": {"text": "Very large file: src/zaxy/cli/benchmarks.py (1637 lines)"}, "properties": {"repobilityId": "a16667d6a41e1104", "scanner": "scanner-primary", "fingerprint": "0035c1ff493f5b52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0bfd293848137471", "level": "note", "message": {"text": "Very large file: src/zaxy/cli/workspace.py (1636 lines)"}, "properties": {"repobilityId": "d4e764ab2c250b36", "scanner": "scanner-primary", "fingerprint": "0bfd293848137471", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2380e4b8a057eab4", "level": "note", "message": {"text": "Very large file: src/zaxy/cli/serving.py (1533 lines)"}, "properties": {"repobilityId": "36e28ab7ee54df39", "scanner": "scanner-primary", "fingerprint": "2380e4b8a057eab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-02297304476919f0", "level": "note", "message": {"text": "Very large file: src/zaxy/cli/evaluation.py (1424 lines)"}, "properties": {"repobilityId": "38fda2fa17345ca6", "scanner": "scanner-primary", "fingerprint": "02297304476919f0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-519c00ba87e4ef19", "level": "note", "message": {"text": "Very large file: src/zaxy/cli/runtime.py (1407 lines)"}, "properties": {"repobilityId": "5c4b4df6e791a753", "scanner": "scanner-primary", "fingerprint": "519c00ba87e4ef19", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9ce5660ad8f6bf40", "level": "note", "message": {"text": "Very large file: src/zaxy/retrieval_plan/fact_queries.py (1574 lines)"}, "properties": {"repobilityId": "6b032e58fb01e32d", "scanner": "scanner-primary", "fingerprint": "9ce5660ad8f6bf40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1c3162b7dee37cd8", "level": "note", "message": {"text": "Very large file: src/zaxy/retrieval_plan/scalars.py (1572 lines)"}, "properties": {"repobilityId": "4246e68cdcc93dfc", "scanner": "scanner-primary", "fingerprint": "1c3162b7dee37cd8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ce406f78f3dd5705", "level": "note", "message": {"text": "Very large file: src/zaxy/retrieval_plan/foundations.py (1651 lines)"}, "properties": {"repobilityId": "4018e7352c447dc5", "scanner": "scanner-primary", "fingerprint": "ce406f78f3dd5705", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-821ab275168fbe3f", "level": "note", "message": {"text": "Very large file: src/zaxy/retrieval_plan/bundles.py (1777 lines)"}, "properties": {"repobilityId": "20d5c4e85ed59b3a", "scanner": "scanner-primary", "fingerprint": "821ab275168fbe3f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f7673f9bb5b7589a", "level": "note", "message": {"text": "Very large file: src/zaxy/retrieval_plan/duration_evidence.py (1610 lines)"}, "properties": {"repobilityId": "f3f7dc4359c91cf9", "scanner": "scanner-primary", "fingerprint": "f7673f9bb5b7589a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-15936a3c827787d7", "level": "note", "message": {"text": "Very large file: src/zaxy/retrieval_plan/ordering.py (1624 lines)"}, "properties": {"repobilityId": "c4b70419dbb58d31", "scanner": "scanner-primary", "fingerprint": "15936a3c827787d7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "55bd53ff09cafa8d", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ed55ea974b67704b", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "4643e81442d5d2fe", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "52b0d28e424fad70", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "d4d18cb39d58d595", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-897ffb2603c96e8a", "level": "note", "message": {"text": "Legacy-named symbol `synthesis_packet_v1` in tests/test_retrieval_plan.py:508"}, "properties": {"repobilityId": "53870c8e598410b3", "scanner": "scanner-primary", "fingerprint": "897ffb2603c96e8a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9396310d6e9d549c", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in tests/test_extract.py:114"}, "properties": {"repobilityId": "d48b62947ba60f1c", "scanner": "scanner-primary", "fingerprint": "9396310d6e9d549c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-69d570a65c6791ab", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in tests/test_event.py:93"}, "properties": {"repobilityId": "77efb9505dc133c6", "scanner": "scanner-primary", "fingerprint": "69d570a65c6791ab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-018d798f4de968d8", "level": "note", "message": {"text": "Legacy-named symbol `event_segment_cluster_v1` in tests/test_causal_benchmark.py:501"}, "properties": {"repobilityId": "d68a06c07b50071c", "scanner": "scanner-primary", "fingerprint": "018d798f4de968d8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-57bfae59cbd46d3c", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_pggraph_store.py:515"}, "properties": {"repobilityId": "5bf62ed461bcc556", "scanner": "scanner-primary", "fingerprint": "57bfae59cbd46d3c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-16f9e7b99bbf7fbb", "level": "note", "message": {"text": "Legacy-named symbol `evidence_program_v1` in tests/test_evidence_program.py:36"}, "properties": {"repobilityId": "f1f549e86eb4c0df", "scanner": "scanner-primary", "fingerprint": "16f9e7b99bbf7fbb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-459dad14d28bf3c6", "level": "note", "message": {"text": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_causal_checkout.py:23"}, "properties": {"repobilityId": "f3d747eb7df237b2", "scanner": "scanner-primary", "fingerprint": "459dad14d28bf3c6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a953147b288f6095", "level": "note", "message": {"text": "Legacy-named symbol `accepted_unused` in tests/test_coordination.py:236"}, "properties": {"repobilityId": "b476ac8673531347", "scanner": "scanner-primary", "fingerprint": "a953147b288f6095", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-62966470af591fa4", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_query.py:864"}, "properties": {"repobilityId": "a081548df2ac30c9", "scanner": "scanner-primary", "fingerprint": "62966470af591fa4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8539406bbf7cd8eb", "level": "note", "message": {"text": "Legacy-named symbol `deterministic_token_overlap_v1` in tests/test_metacognition.py:61"}, "properties": {"repobilityId": "6cffb88a2e6f6d10", "scanner": "scanner-primary", "fingerprint": "8539406bbf7cd8eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a6aee7b7e382461e", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_inference.py:67"}, "properties": {"repobilityId": "c6a1e3ca327f3d62", "scanner": "scanner-primary", "fingerprint": "a6aee7b7e382461e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4a6f1e3fd30cf645", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_checkout.py:387"}, "properties": {"repobilityId": "6ecf1df7068745df", "scanner": "scanner-primary", "fingerprint": "4a6f1e3fd30cf645", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-000b03c9abbf60d6", "level": "note", "message": {"text": "Legacy-named symbol `synthesis_packet_v1` in tests/test_synthesis_packet.py:263"}, "properties": {"repobilityId": "9403074d2a9d3ce1", "scanner": "scanner-primary", "fingerprint": "000b03c9abbf60d6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-707468695d055916", "level": "note", "message": {"text": "Legacy-named symbol `deterministic_segment_summary_v1` in tests/test_consolidation_pipeline.py:150"}, "properties": {"repobilityId": "f2451c48a7407adb", "scanner": "scanner-primary", "fingerprint": "707468695d055916", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6a886383862bde1c", "level": "note", "message": {"text": "Legacy-named symbol `slot_plan_v1` in tests/test_synthesis_artifact.py:63"}, "properties": {"repobilityId": "d70726e98d436739", "scanner": "scanner-primary", "fingerprint": "6a886383862bde1c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-99f940e8eab372fd", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_cli.py:2343"}, "properties": {"repobilityId": "e26ccd17ca9d14ad", "scanner": "scanner-primary", "fingerprint": "99f940e8eab372fd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6be40400b7dba03b", "level": "note", "message": {"text": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_mcp.py:706"}, "properties": {"repobilityId": "7ad480d6c12df6e1", "scanner": "scanner-primary", "fingerprint": "6be40400b7dba03b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7c834b719383f0f3", "level": "note", "message": {"text": "Legacy-named symbol `lexical_overlap_v1` in tests/test_graph.py:527"}, "properties": {"repobilityId": "7438b2e3b7a4fcda", "scanner": "scanner-primary", "fingerprint": "7c834b719383f0f3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-722891247019933d", "level": "note", "message": {"text": "Legacy-named symbol `000_old` in tests/test_schema_migrations.py:47"}, "properties": {"repobilityId": "99c3e80f452d9dd5", "scanner": "scanner-primary", "fingerprint": "722891247019933d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f040df070698fed1", "level": "note", "message": {"text": "Legacy-named symbol `test_run_doctor_reports_leftover_pre_ladybug_backup` in tests/test_doctor.py:768"}, "properties": {"repobilityId": "c768de96fe7c8de0", "scanner": "scanner-primary", "fingerprint": "f040df070698fed1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d4db9a1be02a2105", "level": "note", "message": {"text": "Legacy-named symbol `event_segment_cluster_v1` in tests/test_consolidation.py:27"}, "properties": {"repobilityId": "981a83f941f42536", "scanner": "scanner-primary", "fingerprint": "d4db9a1be02a2105", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1a79f10faaf8d304", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in tests/test_core.py:597"}, "properties": {"repobilityId": "1ca26f19e38fe2b2", "scanner": "scanner-primary", "fingerprint": "1a79f10faaf8d304", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-049d7c0776a0b9fa", "level": "note", "message": {"text": "Legacy-named symbol `explicit_outcome_citation_v1` in tests/test_causal.py:118"}, "properties": {"repobilityId": "a43f20c0c457acdd", "scanner": "scanner-primary", "fingerprint": "049d7c0776a0b9fa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b8fd0dfd4ad722e8", "level": "note", "message": {"text": "Legacy-named symbol `test_embedded_store_connect_migration_never_overwrites_existing_backup` in tests/test_embedded_graph_store.py:4037"}, "properties": {"repobilityId": "4966aad67d3bd6f6", "scanner": "scanner-primary", "fingerprint": "b8fd0dfd4ad722e8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ecbae49c49615cdd", "level": "note", "message": {"text": "Legacy-named symbol `explicit_outcome_explanation_v1` in tests/test_latticedb_store.py:178"}, "properties": {"repobilityId": "cf62f22f69216b3f", "scanner": "scanner-primary", "fingerprint": "ecbae49c49615cdd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-453d8faaad3fecf6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/check-backend-shootout.py:1340"}, "properties": {"repobilityId": "b99cb185391d1d44", "scanner": "scanner-primary", "fingerprint": "453d8faaad3fecf6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-59fc6fd39dd6199b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/check-state-recovery-benchmark.py:138"}, "properties": {"repobilityId": "1ec2389fe8677520", "scanner": "scanner-primary", "fingerprint": "59fc6fd39dd6199b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9521465fa449a576", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/generate-release-media.py:182"}, "properties": {"repobilityId": "434146d5659a4b74", "scanner": "scanner-primary", "fingerprint": "9521465fa449a576", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a4b1ddbbf323a6c6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/longmembench.py:437"}, "properties": {"repobilityId": "f72cb2bbd1aca673", "scanner": "scanner-primary", "fingerprint": "a4b1ddbbf323a6c6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a9b6eb135a197850", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/harvey_lab_benchmark.py:902"}, "properties": {"repobilityId": "4cd042e2fe42fa9e", "scanner": "scanner-primary", "fingerprint": "a9b6eb135a197850", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cf926a31c6218b0e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 zaxy_benchmarks/rc_benchmark_freeze.py:951"}, "properties": {"repobilityId": "f540a8610a512f69", "scanner": "scanner-primary", "fingerprint": "cf926a31c6218b0e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dd4e3c11022a1df3", "level": "note", "message": {"text": "Legacy-named symbol `deterministic_episode_segment_v1` in src/zaxy/consolidation_pipeline.py:228"}, "properties": {"repobilityId": "ad8237e36d0ee3a7", "scanner": "scanner-primary", "fingerprint": "dd4e3c11022a1df3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-29991ebf8316eed4", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/zaxy/query.py:30"}, "properties": {"repobilityId": "7d5df5123294672c", "scanner": "scanner-primary", "fingerprint": "29991ebf8316eed4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ab201ccd823d7469", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/zaxy/embedded_graph_store.py:99"}, "properties": {"repobilityId": "1dd9907322008423", "scanner": "scanner-primary", "fingerprint": "ab201ccd823d7469", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-024a6e12c4efd212", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/zaxy/mcp_server.py:1451"}, "properties": {"repobilityId": "ad2afb25576b97b3", "scanner": "scanner-primary", "fingerprint": "024a6e12c4efd212", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-62a68c0c1065128e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/capture_manager.py:75"}, "properties": {"repobilityId": "03700b232a5317c3", "scanner": "scanner-primary", "fingerprint": "62a68c0c1065128e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2162e4eae874865a", "level": "note", "message": {"text": "Legacy-named symbol `coordinationbench_synthesis_artifact_v1` in src/zaxy/coordinationbench_adapter.py:348"}, "properties": {"repobilityId": "d773c66ed0b9364f", "scanner": "scanner-primary", "fingerprint": "2162e4eae874865a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a6b34c630add1951", "level": "note", "message": {"text": "Legacy-named symbol `task_completed_decision_citation_v1` in src/zaxy/inference.py:17"}, "properties": {"repobilityId": "ccd5139c136037ff", "scanner": "scanner-primary", "fingerprint": "a6b34c630add1951", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b1c92c60e82bbb1b", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/zaxy/config.py:261"}, "properties": {"repobilityId": "253aef4a2ddc6ea1", "scanner": "scanner-primary", "fingerprint": "b1c92c60e82bbb1b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0672dba8f815e76b", "level": "note", "message": {"text": "Legacy-named symbol `synthesis_artifact_v1` in src/zaxy/synthesis_artifact.py:18"}, "properties": {"repobilityId": "e0f14598931d13f1", "scanner": "scanner-primary", "fingerprint": "0672dba8f815e76b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a56706f07a5ca48a", "level": "note", "message": {"text": "Legacy-named symbol `coordination_proof_packet_v1` in src/zaxy/coordination.py:641"}, "properties": {"repobilityId": "e4640e1ea7f93017", "scanner": "scanner-primary", "fingerprint": "a56706f07a5ca48a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d258f467128bab70", "level": "note", "message": {"text": "Legacy-named symbol `write_v1` in src/zaxy/event.py:293"}, "properties": {"repobilityId": "71c0b19bef1538e6", "scanner": "scanner-primary", "fingerprint": "d258f467128bab70", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6e2e1cf2c94bf3f1", "level": "note", "message": {"text": "Legacy-named symbol `_extract_skill_deprecated` in src/zaxy/extract.py:647"}, "properties": {"repobilityId": "d11b7face84c6ea5", "scanner": "scanner-primary", "fingerprint": "6e2e1cf2c94bf3f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-38da976140bc588b", "level": "note", "message": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 src/zaxy/packet_analyzer.py:338"}, "properties": {"repobilityId": "4cc3ffed19ef6ee2", "scanner": "scanner-primary", "fingerprint": "38da976140bc588b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-9a1fdba70d861666", "level": "note", "message": {"text": "Legacy-named symbol `deterministic_token_overlap_v1` in src/zaxy/core.py:1016"}, "properties": {"repobilityId": "8d6692cd25b8d3b4", "scanner": "scanner-primary", "fingerprint": "9a1fdba70d861666", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-eb8cd55d31a254c2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/coordination_git.py:148"}, "properties": {"repobilityId": "f87e36dfbecc6c21", "scanner": "scanner-primary", "fingerprint": "eb8cd55d31a254c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b376a988e6e8939c", "level": "note", "message": {"text": "Legacy-named symbol `evidence_program_v1` in src/zaxy/evidence_program.py:126"}, "properties": {"repobilityId": "bb6473303aa44050", "scanner": "scanner-primary", "fingerprint": "b376a988e6e8939c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6c1ec2ec7242f050", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/zaxy/metacognition.py:298"}, "properties": {"repobilityId": "6491fa7b16467b50", "scanner": "scanner-primary", "fingerprint": "6c1ec2ec7242f050", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5cc2187b37cb317b", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/zaxy/retrieval_profile.py:151"}, "properties": {"repobilityId": "78bfe5f87eec73fa", "scanner": "scanner-primary", "fingerprint": "5cc2187b37cb317b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-44ba88926f215681", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/zaxy/retrieval_profile.py:74"}, "properties": {"repobilityId": "969fb4693f1a1387", "scanner": "scanner-primary", "fingerprint": "44ba88926f215681", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f400c867acee4555", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/release.py:1157"}, "properties": {"repobilityId": "af6d014f810f19ad", "scanner": "scanner-primary", "fingerprint": "f400c867acee4555", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4bc6a653c8dd9789", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/zaxy/cli/workspace.py:1008"}, "properties": {"repobilityId": "c8e506b5d612515e", "scanner": "scanner-primary", "fingerprint": "4bc6a653c8dd9789", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-68133aec376a02cf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/zaxy/cli/evaluation.py:1417"}, "properties": {"repobilityId": "dc5d697b90ba368d", "scanner": "scanner-primary", "fingerprint": "68133aec376a02cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c81e6e128fceed46", "level": "note", "message": {"text": "Legacy-named symbol `slot_plan_v1` in src/zaxy/retrieval_plan/foundations.py:403"}, "properties": {"repobilityId": "faabed5ba51bb5cc", "scanner": "scanner-primary", "fingerprint": "c81e6e128fceed46", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-bac93b1daa008190", "level": "note", "message": {"text": "Legacy-named symbol `synthesis_packet_v1` in src/zaxy/retrieval_plan/bundles.py:1680"}, "properties": {"repobilityId": "028489a582787604", "scanner": "scanner-primary", "fingerprint": "bac93b1daa008190", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b334d875f2339fa1", "level": "note", "message": {"text": "5 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "faa38682016f5d53", "scanner": "scanner-primary", "fingerprint": "b334d875f2339fa1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "91ad4af0b9285c48", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "77761f952391b6cc", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-9dad557909b86499", "level": "note", "message": {"text": "Near-duplicate function bodies in 10 places"}, "properties": {"repobilityId": "f7d77e42113a40e3", "scanner": "scanner-primary", "fingerprint": "9dad557909b86499", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bcacdd4ef16eed0b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-122053f21232d80c", "level": "note", "message": {"text": "Near-duplicate function bodies in 14 places"}, "properties": {"repobilityId": "c4f057084c566558", "scanner": "scanner-primary", "fingerprint": "122053f21232d80c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e6f3f7d91f0b2cd0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0e51ae101d318d66", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "801c658c1d48ace7", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b9a6f9eee4f7717c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0635456ee5b167e3", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "519c2623e4f454bd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "599212b334f0413e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "390c971dd0e2d51d", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "b72457a1f6044454", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "fba2a64117d584cf", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "23f2e4490eaafe14", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "fb1d4ec9656466ad", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "dc47ddcc65ecaf1f", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "5e6fc4e86ae8773c", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "3f02e3d8776ad578", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}