{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-38861e51e0dc4422", "name": "Possibly dead Python function: inspect_cb", "shortDescription": {"text": "Possibly dead Python function: inspect_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7be4390a4fa8fe6", "name": "Possibly dead Python function: compare_cb", "shortDescription": {"text": "Possibly dead Python function: compare_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-680cd6b3c50e4bb1", "name": "Possibly dead Python function: steer_cb", "shortDescription": {"text": "Possibly dead Python function: steer_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9aad00abc551d5ba", "name": "Possibly dead Python function: save_note_cb", "shortDescription": {"text": "Possibly dead Python function: save_note_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67c655dad1db823e", "name": "Possibly dead Python function: label_cb", "shortDescription": {"text": "Possibly dead Python function: label_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7bf21bd2e172318b", "name": "Possibly dead Python function: bench_cb", "shortDescription": {"text": "Possibly dead Python function: bench_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36a19c5c0e5a8190", "name": "Possibly dead Python function: mark_candidate_cb", "shortDescription": {"text": "Possibly dead Python function: mark_candidate_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ccb2ed11ef5ef1c", "name": "Possibly dead Python function: mark_validated_cb", "shortDescription": {"text": "Possibly dead Python function: mark_validated_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba4c86a145151ed1", "name": "Possibly dead Python function: autopilot_cb", "shortDescription": {"text": "Possibly dead Python function: autopilot_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86c4352995c9053b", "name": "Possibly dead Python function: refresh_library_cb", "shortDescription": {"text": "Possibly dead Python function: refresh_library_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9bb0eec94c2211f7", "name": "Possibly dead Python function: recipe_detail_cb", "shortDescription": {"text": "Possibly dead Python function: recipe_detail_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f9b1093f6820c41", "name": "Possibly dead Python function: export_recipe_cb", "shortDescription": {"text": "Possibly dead Python function: export_recipe_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9f0feaf921bc475c", "name": "Possibly dead Python function: load_recipe_values_cb", "shortDescription": {"text": "Possibly dead Python function: load_recipe_values_cb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d1aa5ffab8b3cd4", "name": "Possibly dead Python function: cmd_run", "shortDescription": {"text": "Possibly dead Python function: cmd_run"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-378d5c87a604abb6", "name": "Possibly dead Python function: cmd_run_v06", "shortDescription": {"text": "Possibly dead Python function: cmd_run_v06"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3811329526dab6fc", "name": "Possibly dead Python function: cmd_synthetic_smoke", "shortDescription": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b57305e7f5c3d1c2", "name": "Possibly dead Python function: cmd_compile", "shortDescription": {"text": "Possibly dead Python function: cmd_compile"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bafa8883440e670d", "name": "Possibly dead Python function: cmd_expand_corpus", "shortDescription": {"text": "Possibly dead Python function: cmd_expand_corpus"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c621a4f9aefb486f", "name": "Possibly dead Python function: cmd_failure_analysis", "shortDescription": {"text": "Possibly dead Python function: cmd_failure_analysis"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa4f3f03bcb4d893", "name": "Possibly dead Python function: cmd_build_paper_data", "shortDescription": {"text": "Possibly dead Python function: cmd_build_paper_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9308583d797f519e", "name": "Possibly dead Python function: cmd_synthetic_smoke", "shortDescription": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dde62f170f5cc17d", "name": "Possibly dead Python function: cmd_train_matrix", "shortDescription": {"text": "Possibly dead Python function: cmd_train_matrix"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d092c8c27a4f1b89", "name": "Possibly dead Python function: cmd_judge_validate", "shortDescription": {"text": "Possibly dead Python function: cmd_judge_validate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45796c20e8115c19", "name": "Possibly dead Python function: cmd_synthetic_smoke", "shortDescription": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cfc6b39ecd96e373", "name": "Possibly dead Python function: cmd_synthetic_smoke", "shortDescription": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a39e8461061e0b4", "name": "Possibly dead Python function: cmd_templated", "shortDescription": {"text": "Possibly dead Python function: cmd_templated"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63220efbda64d747", "name": "Possibly dead Python function: cmd_audit", "shortDescription": {"text": "Possibly dead Python function: cmd_audit"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee4feff02666dd2a", "name": "Possibly dead Python function: cmd_eval", "shortDescription": {"text": "Possibly dead Python function: cmd_eval"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b33f4f3c1388e891", "name": "Possibly dead Python function: cmd_generate", "shortDescription": {"text": "Possibly dead Python function: cmd_generate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28ed84b433ee3cf2", "name": "Possibly dead Python function: kl_loss", "shortDescription": {"text": "Possibly dead Python function: kl_loss"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3196ecb151fd7617", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/steering-field.html:232", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/steering-field.html:232"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c7703453a21c51b8", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/manifold-atlas-3d.html:489", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/manifold-atlas-3d.html:489"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-639fe33ef48f50bf", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/cyclic-ring-steering.html:616", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/cyclic-ring-steering.html:616"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8001efddd7f673d", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/emotion-manifold-centroid-routing.html:653", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/emotion-manifold-centroid-routing.html:653"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b8d84935396778b", "name": "Insecure pattern 'direct_innerhtml_assignment' in web/demo.html:140", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in web/demo.html:140"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-870477720d43e5f6", "name": "Insecure pattern 'direct_innerhtml_assignment' in web/manifold3d.js:45", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in web/manifold3d.js:45"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b910db75cac17f88", "name": "Insecure pattern 'direct_innerhtml_assignment' in web/app.js:135", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in web/app.js:135"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fdac385a5421ed2b", "name": "Very large file: modal_app.py (1932 lines)", "shortDescription": {"text": "Very large file: modal_app.py (1932 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8be6453c96153dec", "name": "Very large file: scripts/truth_holding_distill_v09.py (960 lines)", "shortDescription": {"text": "Very large file: scripts/truth_holding_distill_v09.py (960 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e49f9391a8131b4d", "name": "Very large file: qwen_scope_lab/web_api.py (1181 lines)", "shortDescription": {"text": "Very large file: qwen_scope_lab/web_api.py (1181 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc735f61761534d2", "name": "Very large file: qwen_scope_lab/service.py (1585 lines)", "shortDescription": {"text": "Very large file: qwen_scope_lab/service.py (1585 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-081f7dcc2c13a5c9", "name": "Very large file: qwen_scope_lab/experiments/truth_holding_distill_v09.py (992 lines)", "shortDescription": {"text": "Very large file: qwen_scope_lab/experiments/truth_holding_distill_v09.py (992 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c6435b039f13c2d", "name": "Very large file: qwen_scope_lab/experiments/steering_distill.py (1335 lines)", "shortDescription": {"text": "Very large file: qwen_scope_lab/experiments/steering_distill.py (1335 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9da02f351f70d3e", "name": "Very large file: web/app.js (2023 lines)", "shortDescription": {"text": "Very large file: web/app.js (2023 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 221 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 40 placeholder/mock markers across 6 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c908f50ef61a7398", "name": "Commented-code block (6 lines) in modal_app.py:392", "shortDescription": {"text": "Commented-code block (6 lines) in modal_app.py:392"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0da0d135d230a1dc", "name": "Commented-code block (5 lines) in serve_web.py:24", "shortDescription": {"text": "Commented-code block (5 lines) in serve_web.py:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d168bef28044ce2d", "name": "Legacy-named symbol `concise_answers_l1_f2_v1` in tests/test_steering_distill.py:73", "shortDescription": {"text": "Legacy-named symbol `concise_answers_l1_f2_v1` in tests/test_steering_distill.py:73"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d92b9c5580adfdf9", "name": "Legacy-named symbol `n_kept_v2` in tests/test_distill_quality.py:128", "shortDescription": {"text": "Legacy-named symbol `n_kept_v2` in tests/test_distill_quality.py:128"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4672d7de3660ec04", "name": "Legacy-named symbol `concise_answers_l1_f2_v1` in tests/test_recipe_schema.py:18", "shortDescription": {"text": "Legacy-named symbol `concise_answers_l1_f2_v1` in tests/test_recipe_schema.py:18"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a09dd858411aaf4a", "name": "Legacy-named symbol `sycophancy_probe_onpolicy_l12_v1` in tests/test_probe_schema.py:18", "shortDescription": {"text": "Legacy-named symbol `sycophancy_probe_onpolicy_l12_v1` in tests/test_probe_schema.py:18"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb83390e883fb761", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/_modal_runner.py:18", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/_modal_runner.py:18"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-551d3a2e92079119", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/truth_holding_distill_v09.py:574", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/truth_holding_distill_v09.py:574"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31d78382c0ac2b82", "name": "Legacy-named symbol `concise_answers_l1_f2_v1` in scripts/steering_to_data_distill.py:18", "shortDescription": {"text": "Legacy-named symbol `concise_answers_l1_f2_v1` in scripts/steering_to_data_distill.py:18"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4160871498b79fe8", "name": "Legacy-named symbol `concise_l12_f29073_v1` in scripts/_concise_mlx_base_vs_instruct.py:6", "shortDescription": {"text": "Legacy-named symbol `concise_l12_f29073_v1` in scripts/_concise_mlx_base_vs_instruct.py:6"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f90ef6f1b8913b32", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/mixture_dial_validate.py:637", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/mixture_dial_validate.py:637"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a40e9ba6ebfaf92", "name": "Commented-code block (6 lines) in qwen_scope_lab/dev_backend.py:215", "shortDescription": {"text": "Commented-code block (6 lines) in qwen_scope_lab/dev_backend.py:215"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ac3bdb68c0b635b1", "name": "Legacy-named symbol `reject_reasons_v2` in qwen_scope_lab/experiments/distill_quality.py:400", "shortDescription": {"text": "Legacy-named symbol `reject_reasons_v2` in qwen_scope_lab/experiments/distill_quality.py:400"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b334d875f2339fa1", "name": "5 env vars used in code but missing from .env.example", "shortDescription": {"text": "5 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `MODAL_TASK_ID`, `OPENROUTER_API_KEY`, `QWEN_JUDGE_CONCURRENCY`, `QWEN_JUDGE_MODEL`, `QWEN_JUDGE_REASONING`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nmodal_app.py:cumdist, modal_app.py:cumdist\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/truth_holding_teacher_showdown.py:main, scripts/mixture_dial_distill.py:main, scripts/truth_holding_distill.py:main, scripts/truth_holding_distill_v07.py:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/agent_boundary_eval.py:main, scripts/addressee_eval.py:main, scripts/jailbreak_wild_eval.py:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/truth_holding_distill_v07.py:render, scripts/truth_holding_distill_v07.py:render, scripts/_tinker_teacher.py:render, scripts/truth_holding_distill_v08.py:render\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9632a8621f661b93", "name": "FastAPI POST `inspect` without auth dependency \u2014 qwen_scope_lab/web_api.py:849", "shortDescription": {"text": "FastAPI POST `inspect` without auth dependency \u2014 qwen_scope_lab/web_api.py:849"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14cf885f68f8d573", "name": "FastAPI POST `compare` without auth dependency \u2014 qwen_scope_lab/web_api.py:853", "shortDescription": {"text": "FastAPI POST `compare` without auth dependency \u2014 qwen_scope_lab/web_api.py:853"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f280aae1cf555c2", "name": "FastAPI POST `atlas` without auth dependency \u2014 qwen_scope_lab/web_api.py:857", "shortDescription": {"text": "FastAPI POST `atlas` without auth dependency \u2014 qwen_scope_lab/web_api.py:857"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b591165cecfa54b0", "name": "FastAPI POST `manifold_fit` without auth dependency \u2014 qwen_scope_lab/web_api.py:865", "shortDescription": {"text": "FastAPI POST `manifold_fit` without auth dependency \u2014 qwen_scope_lab/web_api.py:865"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-441cf64ba86482f6", "name": "FastAPI POST `manifold_steer` without auth dependency \u2014 qwen_scope_lab/web_api.py:869", "shortDescription": {"text": "FastAPI POST `manifold_steer` without auth dependency \u2014 qwen_scope_lab/web_api.py:869"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f873ff8acd0df1cd", "name": "FastAPI POST `manifold_compare` without auth dependency \u2014 qwen_scope_lab/web_api.py:873", "shortDescription": {"text": "FastAPI POST `manifold_compare` without auth dependency \u2014 qwen_scope_lab/web_api.py:873"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e591d29f10c942e", "name": "FastAPI POST `manifold_sae_coverage` without auth dependency \u2014 qwen_scope_lab/web_api.py:877", "shortDescription": {"text": "FastAPI POST `manifold_sae_coverage` without auth dependency \u2014 qwen_scope_lab/web_api.py:877"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7483b327050e829e", "name": "FastAPI POST `manifold_pullback` without auth dependency \u2014 qwen_scope_lab/web_api.py:881", "shortDescription": {"text": "FastAPI POST `manifold_pullback` without auth dependency \u2014 qwen_scope_lab/web_api.py:881"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6ab8d3f077ab5121", "name": "FastAPI POST `monitor_discover` without auth dependency \u2014 qwen_scope_lab/web_api.py:885", "shortDescription": {"text": "FastAPI POST `monitor_discover` without auth dependency \u2014 qwen_scope_lab/web_api.py:885"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23ef9ce97be7d0fe", "name": "FastAPI POST `monitor_score` without auth dependency \u2014 qwen_scope_lab/web_api.py:892", "shortDescription": {"text": "FastAPI POST `monitor_score` without auth dependency \u2014 qwen_scope_lab/web_api.py:892"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fcb66461d53f387f", "name": "FastAPI POST `monitor_shootout` without auth dependency \u2014 qwen_scope_lab/web_api.py:896", "shortDescription": {"text": "FastAPI POST `monitor_shootout` without auth dependency \u2014 qwen_scope_lab/web_api.py:896"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-918bf7b43139f3fb", "name": "FastAPI POST `collateral` without auth dependency \u2014 qwen_scope_lab/web_api.py:903", "shortDescription": {"text": "FastAPI POST `collateral` without auth dependency \u2014 qwen_scope_lab/web_api.py:903"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-345ecc98009ed7bf", "name": "FastAPI POST `control_loop` without auth dependency \u2014 qwen_scope_lab/web_api.py:910", "shortDescription": {"text": "FastAPI POST `control_loop` without auth dependency \u2014 qwen_scope_lab/web_api.py:910"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ae4e9b17c4d2dbab", "name": "FastAPI POST `monitor_robustness` without auth dependency \u2014 qwen_scope_lab/web_api.py:917", "shortDescription": {"text": "FastAPI POST `monitor_robustness` without auth dependency \u2014 qwen_scope_lab/web_api.py:917"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-391ac813d8338c70", "name": "FastAPI POST `probe_discover` without auth dependency \u2014 qwen_scope_lab/web_api.py:924", "shortDescription": {"text": "FastAPI POST `probe_discover` without auth dependency \u2014 qwen_scope_lab/web_api.py:924"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e801a1a8ecc40810", "name": "FastAPI POST `probe_score` without auth dependency \u2014 qwen_scope_lab/web_api.py:931", "shortDescription": {"text": "FastAPI POST `probe_score` without auth dependency \u2014 qwen_scope_lab/web_api.py:931"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d08f7f00911856ad", "name": "FastAPI POST `save_probe` without auth dependency \u2014 qwen_scope_lab/web_api.py:935", "shortDescription": {"text": "FastAPI POST `save_probe` without auth dependency \u2014 qwen_scope_lab/web_api.py:935"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7690945771cca21e", "name": "FastAPI POST `steer_direction` without auth dependency \u2014 qwen_scope_lab/web_api.py:962", "shortDescription": {"text": "FastAPI POST `steer_direction` without auth dependency \u2014 qwen_scope_lab/web_api.py:962"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-578c36bf36495ed4", "name": "FastAPI POST `caa_vs_sae` without auth dependency \u2014 qwen_scope_lab/web_api.py:966", "shortDescription": {"text": "FastAPI POST `caa_vs_sae` without auth dependency \u2014 qwen_scope_lab/web_api.py:966"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0242a5c30c17aac2", "name": "FastAPI POST `method_atlas` without auth dependency \u2014 qwen_scope_lab/web_api.py:973", "shortDescription": {"text": "FastAPI POST `method_atlas` without auth dependency \u2014 qwen_scope_lab/web_api.py:973"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0dfebf43bbf8a6da", "name": "FastAPI POST `emotion_coupling` without auth dependency \u2014 qwen_scope_lab/web_api.py:980", "shortDescription": {"text": "FastAPI POST `emotion_coupling` without auth dependency \u2014 qwen_scope_lab/web_api.py:980"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca671f999c706581", "name": "FastAPI POST `safety_geometry` without auth dependency \u2014 qwen_scope_lab/web_api.py:987", "shortDescription": {"text": "FastAPI POST `safety_geometry` without auth dependency \u2014 qwen_scope_lab/web_api.py:987"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a5d4350ca1f7766f", "name": "FastAPI POST `jailbreak_detection` without auth dependency \u2014 qwen_scope_lab/web_api.py:994", "shortDescription": {"text": "FastAPI POST `jailbreak_detection` without auth dependency \u2014 qwen_scope_lab/web_api.py:994"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-198ff81237ec2467", "name": "FastAPI POST `jailbreak_hardening` without auth dependency \u2014 qwen_scope_lab/web_api.py:1001", "shortDescription": {"text": "FastAPI POST `jailbreak_hardening` without auth dependency \u2014 qwen_scope_lab/web_api.py:1001"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a52ce4edc9fc5f0e", "name": "FastAPI POST `jailbreak_screen` without auth dependency \u2014 qwen_scope_lab/web_api.py:1008", "shortDescription": {"text": "FastAPI POST `jailbreak_screen` without auth dependency \u2014 qwen_scope_lab/web_api.py:1008"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b76b0aae9b9a28b2", "name": "FastAPI POST `distill_summarize` without auth dependency \u2014 qwen_scope_lab/web_api.py:1024", "shortDescription": {"text": "FastAPI POST `distill_summarize` without auth dependency \u2014 qwen_scope_lab/web_api.py:1024"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fa9d464aeeec9e95", "name": "FastAPI POST `distill_compile` without auth dependency \u2014 qwen_scope_lab/web_api.py:1028", "shortDescription": {"text": "FastAPI POST `distill_compile` without auth dependency \u2014 qwen_scope_lab/web_api.py:1028"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-85c18db44265eba0", "name": "FastAPI POST `monitor_stream` without auth dependency \u2014 qwen_scope_lab/web_api.py:1043", "shortDescription": {"text": "FastAPI POST `monitor_stream` without auth dependency \u2014 qwen_scope_lab/web_api.py:1043"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4624ee5acb0be458", "name": "FastAPI POST `steer` without auth dependency \u2014 qwen_scope_lab/web_api.py:1047", "shortDescription": {"text": "FastAPI POST `steer` without auth dependency \u2014 qwen_scope_lab/web_api.py:1047"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-13522f4be2d78bea", "name": "FastAPI POST `sweep` without auth dependency \u2014 qwen_scope_lab/web_api.py:1051", "shortDescription": {"text": "FastAPI POST `sweep` without auth dependency \u2014 qwen_scope_lab/web_api.py:1051"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f8acce74b6fe1ca", "name": "FastAPI POST `benchmark` without auth dependency \u2014 qwen_scope_lab/web_api.py:1055", "shortDescription": {"text": "FastAPI POST `benchmark` without auth dependency \u2014 qwen_scope_lab/web_api.py:1055"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-968485228c08558b", "name": "FastAPI POST `autopilot` without auth dependency \u2014 qwen_scope_lab/web_api.py:1062", "shortDescription": {"text": "FastAPI POST `autopilot` without auth dependency \u2014 qwen_scope_lab/web_api.py:1062"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e5478db8c3a5b30c", "name": "FastAPI POST `save_recipe` without auth dependency \u2014 qwen_scope_lab/web_api.py:1069", "shortDescription": {"text": "FastAPI POST `save_recipe` without auth dependency \u2014 qwen_scope_lab/web_api.py:1069"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9eae3a90abc372ab", "name": "FastAPI POST `save_note` without auth dependency \u2014 qwen_scope_lab/web_api.py:1096", "shortDescription": {"text": "FastAPI POST `save_note` without auth dependency \u2014 qwen_scope_lab/web_api.py:1096"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e6f97f741a5e8051", "name": "FastAPI POST `save_monitor` without auth dependency \u2014 qwen_scope_lab/web_api.py:1117", "shortDescription": {"text": "FastAPI POST `save_monitor` without auth dependency \u2014 qwen_scope_lab/web_api.py:1117"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9ee00721821e26ea", "name": "FastAPI POST `submit_job` without auth dependency \u2014 qwen_scope_lab/web_api.py:1145", "shortDescription": {"text": "FastAPI POST `submit_job` without auth dependency \u2014 qwen_scope_lab/web_api.py:1145"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-963710f42a2c8219", "name": "Unused endpoint: GET /api/status", "shortDescription": {"text": "Unused endpoint: GET /api/status"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ba56dff2b42dd08", "name": "Unused endpoint: POST /api/inspect", "shortDescription": {"text": "Unused endpoint: POST /api/inspect"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/inspect` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4221670861e52f0", "name": "Unused endpoint: POST /api/compare", "shortDescription": {"text": "Unused endpoint: POST /api/compare"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/compare` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7c1c9ba27ebd477", "name": "Unused endpoint: POST /api/atlas", "shortDescription": {"text": "Unused endpoint: POST /api/atlas"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/atlas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7bb2f19fe8f6c9b", "name": "Unused endpoint: GET /api/manifold/presets", "shortDescription": {"text": "Unused endpoint: GET /api/manifold/presets"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/manifold/presets` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a8a70b0bd44d5a70", "name": "Unused endpoint: POST /api/manifold/fit", "shortDescription": {"text": "Unused endpoint: POST /api/manifold/fit"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/manifold/fit` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e9221511d67d5b6", "name": "Unused endpoint: POST /api/manifold/steer", "shortDescription": {"text": "Unused endpoint: POST /api/manifold/steer"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/manifold/steer` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b95bb28aeb6a9d22", "name": "Unused endpoint: POST /api/manifold/compare", "shortDescription": {"text": "Unused endpoint: POST /api/manifold/compare"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/manifold/compare` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4af543943b83485", "name": "Unused endpoint: POST /api/manifold/sae_coverage", "shortDescription": {"text": "Unused endpoint: POST /api/manifold/sae_coverage"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/manifold/sae_coverage` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f2e515d7ef7394b", "name": "Unused endpoint: POST /api/manifold/pullback", "shortDescription": {"text": "Unused endpoint: POST /api/manifold/pullback"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/manifold/pullback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2244373e67c59680", "name": "Unused endpoint: POST /api/monitor/discover", "shortDescription": {"text": "Unused endpoint: POST /api/monitor/discover"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/monitor/discover` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cde6b694bf8dcd97", "name": "Unused endpoint: POST /api/monitor/score", "shortDescription": {"text": "Unused endpoint: POST /api/monitor/score"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/monitor/score` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4c329a200ee4273", "name": "Unused endpoint: POST /api/monitor/shootout", "shortDescription": {"text": "Unused endpoint: POST /api/monitor/shootout"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/monitor/shootout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7f9d4af6010d446", "name": "Unused endpoint: POST /api/collateral", "shortDescription": {"text": "Unused endpoint: POST /api/collateral"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/collateral` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a3c7a9618f1e123", "name": "Unused endpoint: POST /api/control_loop", "shortDescription": {"text": "Unused endpoint: POST /api/control_loop"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/control_loop` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acc689d7469dcf3c", "name": "Unused endpoint: POST /api/monitor/robustness", "shortDescription": {"text": "Unused endpoint: POST /api/monitor/robustness"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/monitor/robustness` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2838d38ef8de96a", "name": "Unused endpoint: POST /api/probe/discover", "shortDescription": {"text": "Unused endpoint: POST /api/probe/discover"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/probe/discover` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31cea87f9d50e439", "name": "Unused endpoint: POST /api/probe/score", "shortDescription": {"text": "Unused endpoint: POST /api/probe/score"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/probe/score` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-130a29b1fbb097d6", "name": "Unused endpoint: POST /api/probes", "shortDescription": {"text": "Unused endpoint: POST /api/probes"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/probes` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2ca9e2cfd4bc4afc", "name": "Unused endpoint: GET /api/probes", "shortDescription": {"text": "Unused endpoint: GET /api/probes"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/probes` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0efdc363f2ebfbf7", "name": "Unused endpoint: GET /api/probes/{probe_id}", "shortDescription": {"text": "Unused endpoint: GET /api/probes/{probe_id}"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/probes/{probe_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-059cdb781cb86da8", "name": "Unused endpoint: POST /api/probe/steer", "shortDescription": {"text": "Unused endpoint: POST /api/probe/steer"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/probe/steer` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8d78c8bafd57831", "name": "Unused endpoint: POST /api/caa_vs_sae", "shortDescription": {"text": "Unused endpoint: POST /api/caa_vs_sae"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/caa_vs_sae` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3b1bb3210490945", "name": "Unused endpoint: POST /api/method_atlas", "shortDescription": {"text": "Unused endpoint: POST /api/method_atlas"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/method_atlas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e43a9702ba6dff2f", "name": "Unused endpoint: POST /api/emotion_coupling", "shortDescription": {"text": "Unused endpoint: POST /api/emotion_coupling"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/emotion_coupling` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc3c042c01453550", "name": "Unused endpoint: POST /api/safety_geometry", "shortDescription": {"text": "Unused endpoint: POST /api/safety_geometry"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/safety_geometry` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b13de4ce91ba5f", "name": "Unused endpoint: POST /api/jailbreak_detection", "shortDescription": {"text": "Unused endpoint: POST /api/jailbreak_detection"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/jailbreak_detection` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9119a704ba686c0", "name": "Unused endpoint: POST /api/jailbreak_hardening", "shortDescription": {"text": "Unused endpoint: POST /api/jailbreak_hardening"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/jailbreak_hardening` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-960f303b513b3b5b", "name": "Unused endpoint: POST /api/jailbreak_screen", "shortDescription": {"text": "Unused endpoint: POST /api/jailbreak_screen"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/jailbreak_screen` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e468ad7f3fce0d4a", "name": "Unused endpoint: GET /api/distill/examples", "shortDescription": {"text": "Unused endpoint: GET /api/distill/examples"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/distill/examples` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c34c560764ab33b", "name": "Unused endpoint: GET /api/distill/examples/{example_id}", "shortDescription": {"text": "Unused endpoint: GET /api/distill/examples/{example_id}"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/distill/examples/{example_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8433b8b4b762769", "name": "Unused endpoint: POST /api/distill/summarize", "shortDescription": {"text": "Unused endpoint: POST /api/distill/summarize"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/distill/summarize` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ec8c825f079085f", "name": "Unused endpoint: POST /api/distill/compile", "shortDescription": {"text": "Unused endpoint: POST /api/distill/compile"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/distill/compile` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-157604b431902532", "name": "Unused endpoint: GET /demo", "shortDescription": {"text": "Unused endpoint: GET /demo"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /demo` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed1648a1ecfb043b", "name": "Unused endpoint: POST /api/monitor/stream", "shortDescription": {"text": "Unused endpoint: POST /api/monitor/stream"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/monitor/stream` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8da19bc15537e4b4", "name": "Unused endpoint: POST /api/steer", "shortDescription": {"text": "Unused endpoint: POST /api/steer"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/steer` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ebe60743c328c14", "name": "Unused endpoint: POST /api/sweep", "shortDescription": {"text": "Unused endpoint: POST /api/sweep"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/sweep` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0945aa37a6d809a7", "name": "Unused endpoint: POST /api/benchmark", "shortDescription": {"text": "Unused endpoint: POST /api/benchmark"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/benchmark` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0cf9e015a6758944", "name": "Unused endpoint: POST /api/autopilot", "shortDescription": {"text": "Unused endpoint: POST /api/autopilot"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/autopilot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ba245984703d91b", "name": "Unused endpoint: POST /api/recipes", "shortDescription": {"text": "Unused endpoint: POST /api/recipes"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/recipes` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-957c32d01dba817d", "name": "Unused endpoint: GET /api/notebook", "shortDescription": {"text": "Unused endpoint: GET /api/notebook"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/notebook` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-015b8efcdb2976ae", "name": "Unused endpoint: POST /api/notebook", "shortDescription": {"text": "Unused endpoint: POST /api/notebook"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/notebook` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d509f3e5486abe3", "name": "Unused endpoint: GET /api/recipes", "shortDescription": {"text": "Unused endpoint: GET /api/recipes"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/recipes` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-809995c0fb2f4c8f", "name": "Unused endpoint: GET /api/recipes/{recipe_id}", "shortDescription": {"text": "Unused endpoint: GET /api/recipes/{recipe_id}"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/recipes/{recipe_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e617b6ce767ace9", "name": "Unused endpoint: POST /api/monitors", "shortDescription": {"text": "Unused endpoint: POST /api/monitors"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/monitors` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5aeeeacc9cc2956f", "name": "Unused endpoint: GET /api/monitors", "shortDescription": {"text": "Unused endpoint: GET /api/monitors"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/monitors` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92ef27e4d4821a41", "name": "Unused endpoint: GET /api/monitors/{monitor_id}", "shortDescription": {"text": "Unused endpoint: GET /api/monitors/{monitor_id}"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/monitors/{monitor_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c586ecddaab4dfd3", "name": "Unused endpoint: POST /api/jobs", "shortDescription": {"text": "Unused endpoint: POST /api/jobs"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `POST /api/jobs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31fb330b2ba4ab69", "name": "Unused endpoint: GET /api/jobs", "shortDescription": {"text": "Unused endpoint: GET /api/jobs"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/jobs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a35b7568de1cc4e", "name": "Unused endpoint: GET /api/jobs/{job_id}", "shortDescription": {"text": "Unused endpoint: GET /api/jobs/{job_id}"}, "fullDescription": {"text": "`qwen_scope_lab/web_api.py` declares `GET /api/jobs/{job_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/19050"}, "properties": {"repository": "scasella/qwen-scope-lab", "repoUrl": "https://github.com/scasella/qwen-scope-lab", "branch": "main"}, "results": [{"ruleId": "scanner-38861e51e0dc4422", "level": "note", "message": {"text": "Possibly dead Python function: inspect_cb"}, "properties": {"repobilityId": "f1cbcf711d5c8be9", "scanner": "scanner-primary", "fingerprint": "38861e51e0dc4422", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7be4390a4fa8fe6", "level": "note", "message": {"text": "Possibly dead Python function: compare_cb"}, "properties": {"repobilityId": "e6737e1314f941d8", "scanner": "scanner-primary", "fingerprint": "a7be4390a4fa8fe6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:89"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-680cd6b3c50e4bb1", "level": "note", "message": {"text": "Possibly dead Python function: steer_cb"}, "properties": {"repobilityId": "72999374ab3d8765", "scanner": "scanner-primary", "fingerprint": "680cd6b3c50e4bb1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:110"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9aad00abc551d5ba", "level": "note", "message": {"text": "Possibly dead Python function: save_note_cb"}, "properties": {"repobilityId": "bb345ca4438533d0", "scanner": "scanner-primary", "fingerprint": "9aad00abc551d5ba", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:121"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67c655dad1db823e", "level": "note", "message": {"text": "Possibly dead Python function: label_cb"}, "properties": {"repobilityId": "f8974dcaf0a6a2af", "scanner": "scanner-primary", "fingerprint": "67c655dad1db823e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:133"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7bf21bd2e172318b", "level": "note", "message": {"text": "Possibly dead Python function: bench_cb"}, "properties": {"repobilityId": "3dadee1e1648eb49", "scanner": "scanner-primary", "fingerprint": "7bf21bd2e172318b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:143"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-36a19c5c0e5a8190", "level": "note", "message": {"text": "Possibly dead Python function: mark_candidate_cb"}, "properties": {"repobilityId": "69f72cb2b854f307", "scanner": "scanner-primary", "fingerprint": "36a19c5c0e5a8190", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:198"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ccb2ed11ef5ef1c", "level": "note", "message": {"text": "Possibly dead Python function: mark_validated_cb"}, "properties": {"repobilityId": "4dc6931847b177b1", "scanner": "scanner-primary", "fingerprint": "6ccb2ed11ef5ef1c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:204"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ba4c86a145151ed1", "level": "note", "message": {"text": "Possibly dead Python function: autopilot_cb"}, "properties": {"repobilityId": "411dc6c4ba00536e", "scanner": "scanner-primary", "fingerprint": "ba4c86a145151ed1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:210"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86c4352995c9053b", "level": "note", "message": {"text": "Possibly dead Python function: refresh_library_cb"}, "properties": {"repobilityId": "da1ca94eb8500b9f", "scanner": "scanner-primary", "fingerprint": "86c4352995c9053b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:267"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9bb0eec94c2211f7", "level": "note", "message": {"text": "Possibly dead Python function: recipe_detail_cb"}, "properties": {"repobilityId": "ba0cf8f3b5d17fa6", "scanner": "scanner-primary", "fingerprint": "9bb0eec94c2211f7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:270"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f9b1093f6820c41", "level": "note", "message": {"text": "Possibly dead Python function: export_recipe_cb"}, "properties": {"repobilityId": "48666d513dc5228e", "scanner": "scanner-primary", "fingerprint": "0f9b1093f6820c41", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:280"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f0feaf921bc475c", "level": "note", "message": {"text": "Possibly dead Python function: load_recipe_values_cb"}, "properties": {"repobilityId": "bf6e00927a124537", "scanner": "scanner-primary", "fingerprint": "9f0feaf921bc475c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app.py:283"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d1aa5ffab8b3cd4", "level": "note", "message": {"text": "Possibly dead Python function: cmd_run"}, "properties": {"repobilityId": "4b31cb2b86d846cc", "scanner": "scanner-primary", "fingerprint": "6d1aa5ffab8b3cd4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_teacher_showdown.py:133"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-378d5c87a604abb6", "level": "note", "message": {"text": "Possibly dead Python function: cmd_run_v06"}, "properties": {"repobilityId": "d2a3ea06053e7f9a", "scanner": "scanner-primary", "fingerprint": "378d5c87a604abb6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_teacher_showdown.py:274"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3811329526dab6fc", "level": "note", "message": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "properties": {"repobilityId": "24d41880193b29c1", "scanner": "scanner-primary", "fingerprint": "3811329526dab6fc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_teacher_showdown.py:320"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b57305e7f5c3d1c2", "level": "note", "message": {"text": "Possibly dead Python function: cmd_compile"}, "properties": {"repobilityId": "24dfa8e87982e279", "scanner": "scanner-primary", "fingerprint": "b57305e7f5c3d1c2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/mixture_dial_distill.py:19"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bafa8883440e670d", "level": "note", "message": {"text": "Possibly dead Python function: cmd_expand_corpus"}, "properties": {"repobilityId": "2ab64e13bd9fa8c6", "scanner": "scanner-primary", "fingerprint": "bafa8883440e670d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v10.py:82"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c621a4f9aefb486f", "level": "note", "message": {"text": "Possibly dead Python function: cmd_failure_analysis"}, "properties": {"repobilityId": "4a482ddb35286bfa", "scanner": "scanner-primary", "fingerprint": "c621a4f9aefb486f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v10.py:195"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa4f3f03bcb4d893", "level": "note", "message": {"text": "Possibly dead Python function: cmd_build_paper_data"}, "properties": {"repobilityId": "cad108b4b3c44a59", "scanner": "scanner-primary", "fingerprint": "aa4f3f03bcb4d893", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v10.py:283"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9308583d797f519e", "level": "note", "message": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "properties": {"repobilityId": "24d41880193b29c1", "scanner": "scanner-primary", "fingerprint": "9308583d797f519e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v10.py:308"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dde62f170f5cc17d", "level": "note", "message": {"text": "Possibly dead Python function: cmd_train_matrix"}, "properties": {"repobilityId": "d907b2a9319b9f1e", "scanner": "scanner-primary", "fingerprint": "dde62f170f5cc17d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v09.py:280"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d092c8c27a4f1b89", "level": "note", "message": {"text": "Possibly dead Python function: cmd_judge_validate"}, "properties": {"repobilityId": "bc905f823d59b120", "scanner": "scanner-primary", "fingerprint": "d092c8c27a4f1b89", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v09.py:537"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45796c20e8115c19", "level": "note", "message": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "properties": {"repobilityId": "24d41880193b29c1", "scanner": "scanner-primary", "fingerprint": "45796c20e8115c19", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill_v09.py:856"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cfc6b39ecd96e373", "level": "note", "message": {"text": "Possibly dead Python function: cmd_synthetic_smoke"}, "properties": {"repobilityId": "24d41880193b29c1", "scanner": "scanner-primary", "fingerprint": "cfc6b39ecd96e373", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a39e8461061e0b4", "level": "note", "message": {"text": "Possibly dead Python function: cmd_templated"}, "properties": {"repobilityId": "9185136e84f4c52f", "scanner": "scanner-primary", "fingerprint": "2a39e8461061e0b4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill.py:109"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63220efbda64d747", "level": "note", "message": {"text": "Possibly dead Python function: cmd_audit"}, "properties": {"repobilityId": "51ac11579de8cd34", "scanner": "scanner-primary", "fingerprint": "63220efbda64d747", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill.py:119"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ee4feff02666dd2a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_eval"}, "properties": {"repobilityId": "8b4e265ef0074900", "scanner": "scanner-primary", "fingerprint": "ee4feff02666dd2a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill.py:142"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b33f4f3c1388e891", "level": "note", "message": {"text": "Possibly dead Python function: cmd_generate"}, "properties": {"repobilityId": "75ff4e241b80a970", "scanner": "scanner-primary", "fingerprint": "b33f4f3c1388e891", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/truth_holding_distill.py:160"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28ed84b433ee3cf2", "level": "note", "message": {"text": "Possibly dead Python function: kl_loss"}, "properties": {"repobilityId": "468312d582c489a8", "scanner": "scanner-primary", "fingerprint": "28ed84b433ee3cf2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/_c09_distill_train.py:84"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-3196ecb151fd7617", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/steering-field.html:232"}, "properties": {"repobilityId": "7feb7181e44cfc10", "scanner": "scanner-primary", "fingerprint": "3196ecb151fd7617", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/writeups/steering-field.html"}, "region": {"startLine": 232}}}]}, {"ruleId": "scanner-c7703453a21c51b8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/manifold-atlas-3d.html:489"}, "properties": {"repobilityId": "f83861fee1e21385", "scanner": "scanner-primary", "fingerprint": "c7703453a21c51b8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/writeups/manifold-atlas-3d.html"}, "region": {"startLine": 489}}}]}, {"ruleId": "scanner-639fe33ef48f50bf", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/cyclic-ring-steering.html:616"}, "properties": {"repobilityId": "bd577816340f2398", "scanner": "scanner-primary", "fingerprint": "639fe33ef48f50bf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/writeups/cyclic-ring-steering.html"}, "region": {"startLine": 616}}}]}, {"ruleId": "scanner-d8001efddd7f673d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/writeups/emotion-manifold-centroid-routing.html:653"}, "properties": {"repobilityId": "915c2c4e02552c05", "scanner": "scanner-primary", "fingerprint": "d8001efddd7f673d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/writeups/emotion-manifold-centroid-routing.html"}, "region": {"startLine": 653}}}]}, {"ruleId": "scanner-1b8d84935396778b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in web/demo.html:140"}, "properties": {"repobilityId": "2b1f29ec752f295e", "scanner": "scanner-primary", "fingerprint": "1b8d84935396778b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web/demo.html"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-870477720d43e5f6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in web/manifold3d.js:45"}, "properties": {"repobilityId": "8810c9351cf01366", "scanner": "scanner-primary", "fingerprint": "870477720d43e5f6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web/manifold3d.js"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-b910db75cac17f88", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in web/app.js:135"}, "properties": {"repobilityId": "e4462fe8cf185da3", "scanner": "scanner-primary", "fingerprint": "b910db75cac17f88", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "web/app.js"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-fdac385a5421ed2b", "level": "note", "message": {"text": "Very large file: modal_app.py (1932 lines)"}, "properties": {"repobilityId": "099b6ac03d69e4c5", "scanner": "scanner-primary", "fingerprint": "fdac385a5421ed2b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8be6453c96153dec", "level": "note", "message": {"text": "Very large file: scripts/truth_holding_distill_v09.py (960 lines)"}, "properties": {"repobilityId": "377b420b746c28bf", "scanner": "scanner-primary", "fingerprint": "8be6453c96153dec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e49f9391a8131b4d", "level": "note", "message": {"text": "Very large file: qwen_scope_lab/web_api.py (1181 lines)"}, "properties": {"repobilityId": "b01a01220491fdd0", "scanner": "scanner-primary", "fingerprint": "e49f9391a8131b4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-dc735f61761534d2", "level": "note", "message": {"text": "Very large file: qwen_scope_lab/service.py (1585 lines)"}, "properties": {"repobilityId": "0af351bffc4a9902", "scanner": "scanner-primary", "fingerprint": "dc735f61761534d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-081f7dcc2c13a5c9", "level": "note", "message": {"text": "Very large file: qwen_scope_lab/experiments/truth_holding_distill_v09.py (992 lines)"}, "properties": {"repobilityId": "b17d737d416a523d", "scanner": "scanner-primary", "fingerprint": "081f7dcc2c13a5c9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1c6435b039f13c2d", "level": "note", "message": {"text": "Very large file: qwen_scope_lab/experiments/steering_distill.py (1335 lines)"}, "properties": {"repobilityId": "ed9d008aa05b1e3c", "scanner": "scanner-primary", "fingerprint": "1c6435b039f13c2d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d9da02f351f70d3e", "level": "note", "message": {"text": "Very large file: web/app.js (2023 lines)"}, "properties": {"repobilityId": "bad24ad0481ad1ae", "scanner": "scanner-primary", "fingerprint": "d9da02f351f70d3e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "cee4614711f43590", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "4b18d48a7305e45b", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "c7a66417fe6e6eb2", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "2fedd6196fa2e3f1", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "8f6de23770822524", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-c908f50ef61a7398", "level": "none", "message": {"text": "Commented-code block (6 lines) in modal_app.py:392"}, "properties": {"repobilityId": "aa6dce617cb9614e", "scanner": "scanner-primary", "fingerprint": "c908f50ef61a7398", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0da0d135d230a1dc", "level": "none", "message": {"text": "Commented-code block (5 lines) in serve_web.py:24"}, "properties": {"repobilityId": "4f01744ab309dfee", "scanner": "scanner-primary", "fingerprint": "0da0d135d230a1dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d168bef28044ce2d", "level": "note", "message": {"text": "Legacy-named symbol `concise_answers_l1_f2_v1` in tests/test_steering_distill.py:73"}, "properties": {"repobilityId": "c09bc45bb8198e11", "scanner": "scanner-primary", "fingerprint": "d168bef28044ce2d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d92b9c5580adfdf9", "level": "note", "message": {"text": "Legacy-named symbol `n_kept_v2` in tests/test_distill_quality.py:128"}, "properties": {"repobilityId": "39709bd3390f1996", "scanner": "scanner-primary", "fingerprint": "d92b9c5580adfdf9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4672d7de3660ec04", "level": "note", "message": {"text": "Legacy-named symbol `concise_answers_l1_f2_v1` in tests/test_recipe_schema.py:18"}, "properties": {"repobilityId": "0a9b31932cd919b0", "scanner": "scanner-primary", "fingerprint": "4672d7de3660ec04", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a09dd858411aaf4a", "level": "note", "message": {"text": "Legacy-named symbol `sycophancy_probe_onpolicy_l12_v1` in tests/test_probe_schema.py:18"}, "properties": {"repobilityId": "e01e0ed922fae11d", "scanner": "scanner-primary", "fingerprint": "a09dd858411aaf4a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cb83390e883fb761", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/_modal_runner.py:18"}, "properties": {"repobilityId": "a744c6a40b4f3280", "scanner": "scanner-primary", "fingerprint": "cb83390e883fb761", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-551d3a2e92079119", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/truth_holding_distill_v09.py:574"}, "properties": {"repobilityId": "30a799c045401e65", "scanner": "scanner-primary", "fingerprint": "551d3a2e92079119", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-31d78382c0ac2b82", "level": "note", "message": {"text": "Legacy-named symbol `concise_answers_l1_f2_v1` in scripts/steering_to_data_distill.py:18"}, "properties": {"repobilityId": "0e387d8a5a47203b", "scanner": "scanner-primary", "fingerprint": "31d78382c0ac2b82", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4160871498b79fe8", "level": "note", "message": {"text": "Legacy-named symbol `concise_l12_f29073_v1` in scripts/_concise_mlx_base_vs_instruct.py:6"}, "properties": {"repobilityId": "34250e39ea924469", "scanner": "scanner-primary", "fingerprint": "4160871498b79fe8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f90ef6f1b8913b32", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/mixture_dial_validate.py:637"}, "properties": {"repobilityId": "024b9689d4d25256", "scanner": "scanner-primary", "fingerprint": "f90ef6f1b8913b32", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8a40e9ba6ebfaf92", "level": "none", "message": {"text": "Commented-code block (6 lines) in qwen_scope_lab/dev_backend.py:215"}, "properties": {"repobilityId": "fde1599a02cfebe9", "scanner": "scanner-primary", "fingerprint": "8a40e9ba6ebfaf92", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ac3bdb68c0b635b1", "level": "note", "message": {"text": "Legacy-named symbol `reject_reasons_v2` in qwen_scope_lab/experiments/distill_quality.py:400"}, "properties": {"repobilityId": "cb0b78ab5a8ee649", "scanner": "scanner-primary", "fingerprint": "ac3bdb68c0b635b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b334d875f2339fa1", "level": "note", "message": {"text": "5 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "faa38682016f5d53", "scanner": "scanner-primary", "fingerprint": "b334d875f2339fa1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "21ab673594b7f253", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "73a3d30952bdc2f5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6a2cdfeaac83edca", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "09f4d4de79847bd1", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1269fce9a4743a7e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3832cd0dfb7805dc", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "0500e046ec8dfe3f", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "eb784f9a2a6c7959", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "db71db7e158d88e8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0b3af811403b942f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2e9d0bc70551890a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8f4ff71983906d40", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2f5a5ac9adfd6346", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "0385b5f57cee3ac1", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "dc52c2a2a0df5c83", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2c435b5306216f0e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d40150613b509205", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "532c2a5f2e4b59eb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "5d1dc8765d808de3", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "76374728133c29cf", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-9632a8621f661b93", "level": "error", "message": {"text": "FastAPI POST `inspect` without auth dependency \u2014 qwen_scope_lab/web_api.py:849"}, "properties": {"repobilityId": "f15a0994fcb87399", "scanner": "scanner-primary", "fingerprint": "9632a8621f661b93", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 849}}}]}, {"ruleId": "scanner-14cf885f68f8d573", "level": "error", "message": {"text": "FastAPI POST `compare` without auth dependency \u2014 qwen_scope_lab/web_api.py:853"}, "properties": {"repobilityId": "b7161825027bcbbb", "scanner": "scanner-primary", "fingerprint": "14cf885f68f8d573", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 853}}}]}, {"ruleId": "scanner-9f280aae1cf555c2", "level": "error", "message": {"text": "FastAPI POST `atlas` without auth dependency \u2014 qwen_scope_lab/web_api.py:857"}, "properties": {"repobilityId": "e0e934b0659e1e51", "scanner": "scanner-primary", "fingerprint": "9f280aae1cf555c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 857}}}]}, {"ruleId": "scanner-b591165cecfa54b0", "level": "error", "message": {"text": "FastAPI POST `manifold_fit` without auth dependency \u2014 qwen_scope_lab/web_api.py:865"}, "properties": {"repobilityId": "022f0f975d5fb3f9", "scanner": "scanner-primary", "fingerprint": "b591165cecfa54b0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 865}}}]}, {"ruleId": "scanner-441cf64ba86482f6", "level": "error", "message": {"text": "FastAPI POST `manifold_steer` without auth dependency \u2014 qwen_scope_lab/web_api.py:869"}, "properties": {"repobilityId": "3b4b88470d4259af", "scanner": "scanner-primary", "fingerprint": "441cf64ba86482f6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 869}}}]}, {"ruleId": "scanner-f873ff8acd0df1cd", "level": "error", "message": {"text": "FastAPI POST `manifold_compare` without auth dependency \u2014 qwen_scope_lab/web_api.py:873"}, "properties": {"repobilityId": "1149793e19d56398", "scanner": "scanner-primary", "fingerprint": "f873ff8acd0df1cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 873}}}]}, {"ruleId": "scanner-5e591d29f10c942e", "level": "error", "message": {"text": "FastAPI POST `manifold_sae_coverage` without auth dependency \u2014 qwen_scope_lab/web_api.py:877"}, "properties": {"repobilityId": "710e7515636e02ad", "scanner": "scanner-primary", "fingerprint": "5e591d29f10c942e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 877}}}]}, {"ruleId": "scanner-7483b327050e829e", "level": "error", "message": {"text": "FastAPI POST `manifold_pullback` without auth dependency \u2014 qwen_scope_lab/web_api.py:881"}, "properties": {"repobilityId": "4eb88a041825d207", "scanner": "scanner-primary", "fingerprint": "7483b327050e829e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 881}}}]}, {"ruleId": "scanner-6ab8d3f077ab5121", "level": "error", "message": {"text": "FastAPI POST `monitor_discover` without auth dependency \u2014 qwen_scope_lab/web_api.py:885"}, "properties": {"repobilityId": "5321dcc6ab3ba9cd", "scanner": "scanner-primary", "fingerprint": "6ab8d3f077ab5121", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 885}}}]}, {"ruleId": "scanner-23ef9ce97be7d0fe", "level": "error", "message": {"text": "FastAPI POST `monitor_score` without auth dependency \u2014 qwen_scope_lab/web_api.py:892"}, "properties": {"repobilityId": "94fa5ffaba606cde", "scanner": "scanner-primary", "fingerprint": "23ef9ce97be7d0fe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 892}}}]}, {"ruleId": "scanner-fcb66461d53f387f", "level": "error", "message": {"text": "FastAPI POST `monitor_shootout` without auth dependency \u2014 qwen_scope_lab/web_api.py:896"}, "properties": {"repobilityId": "fed0999968004b0b", "scanner": "scanner-primary", "fingerprint": "fcb66461d53f387f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 896}}}]}, {"ruleId": "scanner-918bf7b43139f3fb", "level": "error", "message": {"text": "FastAPI POST `collateral` without auth dependency \u2014 qwen_scope_lab/web_api.py:903"}, "properties": {"repobilityId": "a28d16f58d8196bd", "scanner": "scanner-primary", "fingerprint": "918bf7b43139f3fb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 903}}}]}, {"ruleId": "scanner-345ecc98009ed7bf", "level": "error", "message": {"text": "FastAPI POST `control_loop` without auth dependency \u2014 qwen_scope_lab/web_api.py:910"}, "properties": {"repobilityId": "cfb154c0706485c9", "scanner": "scanner-primary", "fingerprint": "345ecc98009ed7bf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 910}}}]}, {"ruleId": "scanner-ae4e9b17c4d2dbab", "level": "error", "message": {"text": "FastAPI POST `monitor_robustness` without auth dependency \u2014 qwen_scope_lab/web_api.py:917"}, "properties": {"repobilityId": "5f024dcd4df3230c", "scanner": "scanner-primary", "fingerprint": "ae4e9b17c4d2dbab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 917}}}]}, {"ruleId": "scanner-391ac813d8338c70", "level": "error", "message": {"text": "FastAPI POST `probe_discover` without auth dependency \u2014 qwen_scope_lab/web_api.py:924"}, "properties": {"repobilityId": "5abd9e662b1beeb7", "scanner": "scanner-primary", "fingerprint": "391ac813d8338c70", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 924}}}]}, {"ruleId": "scanner-e801a1a8ecc40810", "level": "error", "message": {"text": "FastAPI POST `probe_score` without auth dependency \u2014 qwen_scope_lab/web_api.py:931"}, "properties": {"repobilityId": "fe0419462ed80bfe", "scanner": "scanner-primary", "fingerprint": "e801a1a8ecc40810", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 931}}}]}, {"ruleId": "scanner-d08f7f00911856ad", "level": "error", "message": {"text": "FastAPI POST `save_probe` without auth dependency \u2014 qwen_scope_lab/web_api.py:935"}, "properties": {"repobilityId": "b07b717413dfe6f6", "scanner": "scanner-primary", "fingerprint": "d08f7f00911856ad", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 935}}}]}, {"ruleId": "scanner-7690945771cca21e", "level": "error", "message": {"text": "FastAPI POST `steer_direction` without auth dependency \u2014 qwen_scope_lab/web_api.py:962"}, "properties": {"repobilityId": "e1cdeceff2322fa9", "scanner": "scanner-primary", "fingerprint": "7690945771cca21e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 962}}}]}, {"ruleId": "scanner-578c36bf36495ed4", "level": "error", "message": {"text": "FastAPI POST `caa_vs_sae` without auth dependency \u2014 qwen_scope_lab/web_api.py:966"}, "properties": {"repobilityId": "845d266645232555", "scanner": "scanner-primary", "fingerprint": "578c36bf36495ed4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 966}}}]}, {"ruleId": "scanner-0242a5c30c17aac2", "level": "error", "message": {"text": "FastAPI POST `method_atlas` without auth dependency \u2014 qwen_scope_lab/web_api.py:973"}, "properties": {"repobilityId": "216784c613748c04", "scanner": "scanner-primary", "fingerprint": "0242a5c30c17aac2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 973}}}]}, {"ruleId": "scanner-0dfebf43bbf8a6da", "level": "error", "message": {"text": "FastAPI POST `emotion_coupling` without auth dependency \u2014 qwen_scope_lab/web_api.py:980"}, "properties": {"repobilityId": "008ea404752b4272", "scanner": "scanner-primary", "fingerprint": "0dfebf43bbf8a6da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 980}}}]}, {"ruleId": "scanner-ca671f999c706581", "level": "error", "message": {"text": "FastAPI POST `safety_geometry` without auth dependency \u2014 qwen_scope_lab/web_api.py:987"}, "properties": {"repobilityId": "154ef7e1b9948d8d", "scanner": "scanner-primary", "fingerprint": "ca671f999c706581", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 987}}}]}, {"ruleId": "scanner-a5d4350ca1f7766f", "level": "error", "message": {"text": "FastAPI POST `jailbreak_detection` without auth dependency \u2014 qwen_scope_lab/web_api.py:994"}, "properties": {"repobilityId": "0a5273a7a58565c2", "scanner": "scanner-primary", "fingerprint": "a5d4350ca1f7766f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 994}}}]}, {"ruleId": "scanner-198ff81237ec2467", "level": "error", "message": {"text": "FastAPI POST `jailbreak_hardening` without auth dependency \u2014 qwen_scope_lab/web_api.py:1001"}, "properties": {"repobilityId": "a9774159193d13cb", "scanner": "scanner-primary", "fingerprint": "198ff81237ec2467", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1001}}}]}, {"ruleId": "scanner-a52ce4edc9fc5f0e", "level": "error", "message": {"text": "FastAPI POST `jailbreak_screen` without auth dependency \u2014 qwen_scope_lab/web_api.py:1008"}, "properties": {"repobilityId": "eccfa4cdcdae7605", "scanner": "scanner-primary", "fingerprint": "a52ce4edc9fc5f0e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1008}}}]}, {"ruleId": "scanner-b76b0aae9b9a28b2", "level": "error", "message": {"text": "FastAPI POST `distill_summarize` without auth dependency \u2014 qwen_scope_lab/web_api.py:1024"}, "properties": {"repobilityId": "5cb6a4bfd73f3963", "scanner": "scanner-primary", "fingerprint": "b76b0aae9b9a28b2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1024}}}]}, {"ruleId": "scanner-fa9d464aeeec9e95", "level": "error", "message": {"text": "FastAPI POST `distill_compile` without auth dependency \u2014 qwen_scope_lab/web_api.py:1028"}, "properties": {"repobilityId": "ec89db2d5552e3cf", "scanner": "scanner-primary", "fingerprint": "fa9d464aeeec9e95", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1028}}}]}, {"ruleId": "scanner-85c18db44265eba0", "level": "error", "message": {"text": "FastAPI POST `monitor_stream` without auth dependency \u2014 qwen_scope_lab/web_api.py:1043"}, "properties": {"repobilityId": "56e8a9dbea902cff", "scanner": "scanner-primary", "fingerprint": "85c18db44265eba0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1043}}}]}, {"ruleId": "scanner-4624ee5acb0be458", "level": "error", "message": {"text": "FastAPI POST `steer` without auth dependency \u2014 qwen_scope_lab/web_api.py:1047"}, "properties": {"repobilityId": "362ad45979491de0", "scanner": "scanner-primary", "fingerprint": "4624ee5acb0be458", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1047}}}]}, {"ruleId": "scanner-13522f4be2d78bea", "level": "error", "message": {"text": "FastAPI POST `sweep` without auth dependency \u2014 qwen_scope_lab/web_api.py:1051"}, "properties": {"repobilityId": "ecc11380e34a9651", "scanner": "scanner-primary", "fingerprint": "13522f4be2d78bea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1051}}}]}, {"ruleId": "scanner-3f8acce74b6fe1ca", "level": "error", "message": {"text": "FastAPI POST `benchmark` without auth dependency \u2014 qwen_scope_lab/web_api.py:1055"}, "properties": {"repobilityId": "77d9092bafa82d01", "scanner": "scanner-primary", "fingerprint": "3f8acce74b6fe1ca", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1055}}}]}, {"ruleId": "scanner-968485228c08558b", "level": "error", "message": {"text": "FastAPI POST `autopilot` without auth dependency \u2014 qwen_scope_lab/web_api.py:1062"}, "properties": {"repobilityId": "791469df9e7b55ef", "scanner": "scanner-primary", "fingerprint": "968485228c08558b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1062}}}]}, {"ruleId": "scanner-e5478db8c3a5b30c", "level": "error", "message": {"text": "FastAPI POST `save_recipe` without auth dependency \u2014 qwen_scope_lab/web_api.py:1069"}, "properties": {"repobilityId": "06f667045fdcd8af", "scanner": "scanner-primary", "fingerprint": "e5478db8c3a5b30c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1069}}}]}, {"ruleId": "scanner-9eae3a90abc372ab", "level": "error", "message": {"text": "FastAPI POST `save_note` without auth dependency \u2014 qwen_scope_lab/web_api.py:1096"}, "properties": {"repobilityId": "5ba69e23302ca349", "scanner": "scanner-primary", "fingerprint": "9eae3a90abc372ab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1096}}}]}, {"ruleId": "scanner-e6f97f741a5e8051", "level": "error", "message": {"text": "FastAPI POST `save_monitor` without auth dependency \u2014 qwen_scope_lab/web_api.py:1117"}, "properties": {"repobilityId": "b0c34c836d5f64fa", "scanner": "scanner-primary", "fingerprint": "e6f97f741a5e8051", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1117}}}]}, {"ruleId": "scanner-9ee00721821e26ea", "level": "error", "message": {"text": "FastAPI POST `submit_job` without auth dependency \u2014 qwen_scope_lab/web_api.py:1145"}, "properties": {"repobilityId": "1d1f20bbe60c24fd", "scanner": "scanner-primary", "fingerprint": "9ee00721821e26ea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "qwen_scope_lab/web_api.py"}, "region": {"startLine": 1145}}}]}, {"ruleId": "scanner-963710f42a2c8219", "level": "note", "message": {"text": "Unused endpoint: GET /api/status"}, "properties": {"repobilityId": "89f76ef7d63c533c", "scanner": "scanner-primary", "fingerprint": "963710f42a2c8219", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4ba56dff2b42dd08", "level": "note", "message": {"text": "Unused endpoint: POST /api/inspect"}, "properties": {"repobilityId": "dc0202343f6a15e4", "scanner": "scanner-primary", "fingerprint": "4ba56dff2b42dd08", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c4221670861e52f0", "level": "note", "message": {"text": "Unused endpoint: POST /api/compare"}, "properties": {"repobilityId": "27c7f132d120ebf1", "scanner": "scanner-primary", "fingerprint": "c4221670861e52f0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e7c1c9ba27ebd477", "level": "note", "message": {"text": "Unused endpoint: POST /api/atlas"}, "properties": {"repobilityId": "fe9e94849b3582b0", "scanner": "scanner-primary", "fingerprint": "e7c1c9ba27ebd477", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b7bb2f19fe8f6c9b", "level": "note", "message": {"text": "Unused endpoint: GET /api/manifold/presets"}, "properties": {"repobilityId": "763170b709d8737a", "scanner": "scanner-primary", "fingerprint": "b7bb2f19fe8f6c9b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a8a70b0bd44d5a70", "level": "note", "message": {"text": "Unused endpoint: POST /api/manifold/fit"}, "properties": {"repobilityId": "b9d474890e995308", "scanner": "scanner-primary", "fingerprint": "a8a70b0bd44d5a70", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3e9221511d67d5b6", "level": "note", "message": {"text": "Unused endpoint: POST /api/manifold/steer"}, "properties": {"repobilityId": "73b4d0a1dd1aa653", "scanner": "scanner-primary", "fingerprint": "3e9221511d67d5b6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b95bb28aeb6a9d22", "level": "note", "message": {"text": "Unused endpoint: POST /api/manifold/compare"}, "properties": {"repobilityId": "5cd45e63bd3babcb", "scanner": "scanner-primary", "fingerprint": "b95bb28aeb6a9d22", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f4af543943b83485", "level": "note", "message": {"text": "Unused endpoint: POST /api/manifold/sae_coverage"}, "properties": {"repobilityId": "4004674d02212057", "scanner": "scanner-primary", "fingerprint": "f4af543943b83485", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f2e515d7ef7394b", "level": "note", "message": {"text": "Unused endpoint: POST /api/manifold/pullback"}, "properties": {"repobilityId": "a5377cd9a52eccd3", "scanner": "scanner-primary", "fingerprint": "0f2e515d7ef7394b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2244373e67c59680", "level": "note", "message": {"text": "Unused endpoint: POST /api/monitor/discover"}, "properties": {"repobilityId": "0df01b6973c9786a", "scanner": "scanner-primary", "fingerprint": "2244373e67c59680", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cde6b694bf8dcd97", "level": "note", "message": {"text": "Unused endpoint: POST /api/monitor/score"}, "properties": {"repobilityId": "b7d318e6882a7a24", "scanner": "scanner-primary", "fingerprint": "cde6b694bf8dcd97", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b4c329a200ee4273", "level": "note", "message": {"text": "Unused endpoint: POST /api/monitor/shootout"}, "properties": {"repobilityId": "0120610a7e9208ca", "scanner": "scanner-primary", "fingerprint": "b4c329a200ee4273", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e7f9d4af6010d446", "level": "note", "message": {"text": "Unused endpoint: POST /api/collateral"}, "properties": {"repobilityId": "0404f49058b27f4b", "scanner": "scanner-primary", "fingerprint": "e7f9d4af6010d446", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8a3c7a9618f1e123", "level": "note", "message": {"text": "Unused endpoint: POST /api/control_loop"}, "properties": {"repobilityId": "b844d450dda15478", "scanner": "scanner-primary", "fingerprint": "8a3c7a9618f1e123", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-acc689d7469dcf3c", "level": "note", "message": {"text": "Unused endpoint: POST /api/monitor/robustness"}, "properties": {"repobilityId": "b8dbbe4d184e2c8c", "scanner": "scanner-primary", "fingerprint": "acc689d7469dcf3c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c2838d38ef8de96a", "level": "note", "message": {"text": "Unused endpoint: POST /api/probe/discover"}, "properties": {"repobilityId": "4d2c73005dc2481e", "scanner": "scanner-primary", "fingerprint": "c2838d38ef8de96a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-31cea87f9d50e439", "level": "note", "message": {"text": "Unused endpoint: POST /api/probe/score"}, "properties": {"repobilityId": "05b7f01c149105e7", "scanner": "scanner-primary", "fingerprint": "31cea87f9d50e439", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-130a29b1fbb097d6", "level": "note", "message": {"text": "Unused endpoint: POST /api/probes"}, "properties": {"repobilityId": "6c00283dd8a8f72d", "scanner": "scanner-primary", "fingerprint": "130a29b1fbb097d6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2ca9e2cfd4bc4afc", "level": "note", "message": {"text": "Unused endpoint: GET /api/probes"}, "properties": {"repobilityId": "bfadf825294b3a46", "scanner": "scanner-primary", "fingerprint": "2ca9e2cfd4bc4afc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0efdc363f2ebfbf7", "level": "note", "message": {"text": "Unused endpoint: GET /api/probes/{probe_id}"}, "properties": {"repobilityId": "1d56e62d36cb51fb", "scanner": "scanner-primary", "fingerprint": "0efdc363f2ebfbf7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-059cdb781cb86da8", "level": "note", "message": {"text": "Unused endpoint: POST /api/probe/steer"}, "properties": {"repobilityId": "033ba6a92369d973", "scanner": "scanner-primary", "fingerprint": "059cdb781cb86da8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d8d78c8bafd57831", "level": "note", "message": {"text": "Unused endpoint: POST /api/caa_vs_sae"}, "properties": {"repobilityId": "cf5efa7af9d673af", "scanner": "scanner-primary", "fingerprint": "d8d78c8bafd57831", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b3b1bb3210490945", "level": "note", "message": {"text": "Unused endpoint: POST /api/method_atlas"}, "properties": {"repobilityId": "d4b8e431b6f99f06", "scanner": "scanner-primary", "fingerprint": "b3b1bb3210490945", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e43a9702ba6dff2f", "level": "note", "message": {"text": "Unused endpoint: POST /api/emotion_coupling"}, "properties": {"repobilityId": "3a31991b000b5be0", "scanner": "scanner-primary", "fingerprint": "e43a9702ba6dff2f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fc3c042c01453550", "level": "note", "message": {"text": "Unused endpoint: POST /api/safety_geometry"}, "properties": {"repobilityId": "b08dc1ffa7983054", "scanner": "scanner-primary", "fingerprint": "fc3c042c01453550", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-72b13de4ce91ba5f", "level": "note", "message": {"text": "Unused endpoint: POST /api/jailbreak_detection"}, "properties": {"repobilityId": "b99fdc4522ed643b", "scanner": "scanner-primary", "fingerprint": "72b13de4ce91ba5f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e9119a704ba686c0", "level": "note", "message": {"text": "Unused endpoint: POST /api/jailbreak_hardening"}, "properties": {"repobilityId": "7a1aa47cb35c6b39", "scanner": "scanner-primary", "fingerprint": "e9119a704ba686c0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-960f303b513b3b5b", "level": "note", "message": {"text": "Unused endpoint: POST /api/jailbreak_screen"}, "properties": {"repobilityId": "c3f1c5dfda38cd17", "scanner": "scanner-primary", "fingerprint": "960f303b513b3b5b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e468ad7f3fce0d4a", "level": "note", "message": {"text": "Unused endpoint: GET /api/distill/examples"}, "properties": {"repobilityId": "c510f93ed374ed7c", "scanner": "scanner-primary", "fingerprint": "e468ad7f3fce0d4a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6c34c560764ab33b", "level": "note", "message": {"text": "Unused endpoint: GET /api/distill/examples/{example_id}"}, "properties": {"repobilityId": "846bb9e3e864dadf", "scanner": "scanner-primary", "fingerprint": "6c34c560764ab33b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c8433b8b4b762769", "level": "note", "message": {"text": "Unused endpoint: POST /api/distill/summarize"}, "properties": {"repobilityId": "57216d067c3b7e8a", "scanner": "scanner-primary", "fingerprint": "c8433b8b4b762769", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1ec8c825f079085f", "level": "note", "message": {"text": "Unused endpoint: POST /api/distill/compile"}, "properties": {"repobilityId": "3dca86ea1c9d6ce0", "scanner": "scanner-primary", "fingerprint": "1ec8c825f079085f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-157604b431902532", "level": "note", "message": {"text": "Unused endpoint: GET /demo"}, "properties": {"repobilityId": "96b13d2c665a4df0", "scanner": "scanner-primary", "fingerprint": "157604b431902532", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ed1648a1ecfb043b", "level": "note", "message": {"text": "Unused endpoint: POST /api/monitor/stream"}, "properties": {"repobilityId": "20f7e53a5ae89503", "scanner": "scanner-primary", "fingerprint": "ed1648a1ecfb043b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8da19bc15537e4b4", "level": "note", "message": {"text": "Unused endpoint: POST /api/steer"}, "properties": {"repobilityId": "40bcc53ba362a3e7", "scanner": "scanner-primary", "fingerprint": "8da19bc15537e4b4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4ebe60743c328c14", "level": "note", "message": {"text": "Unused endpoint: POST /api/sweep"}, "properties": {"repobilityId": "65b1872f3af7e87a", "scanner": "scanner-primary", "fingerprint": "4ebe60743c328c14", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0945aa37a6d809a7", "level": "note", "message": {"text": "Unused endpoint: POST /api/benchmark"}, "properties": {"repobilityId": "400d6367ee219d7c", "scanner": "scanner-primary", "fingerprint": "0945aa37a6d809a7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0cf9e015a6758944", "level": "note", "message": {"text": "Unused endpoint: POST /api/autopilot"}, "properties": {"repobilityId": "a4ab5351c15680ec", "scanner": "scanner-primary", "fingerprint": "0cf9e015a6758944", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1ba245984703d91b", "level": "note", "message": {"text": "Unused endpoint: POST /api/recipes"}, "properties": {"repobilityId": "861f5ac6739b251a", "scanner": "scanner-primary", "fingerprint": "1ba245984703d91b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-957c32d01dba817d", "level": "note", "message": {"text": "Unused endpoint: GET /api/notebook"}, "properties": {"repobilityId": "683416129076dba9", "scanner": "scanner-primary", "fingerprint": "957c32d01dba817d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-015b8efcdb2976ae", "level": "note", "message": {"text": "Unused endpoint: POST /api/notebook"}, "properties": {"repobilityId": "f08a6a6482446b76", "scanner": "scanner-primary", "fingerprint": "015b8efcdb2976ae", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8d509f3e5486abe3", "level": "note", "message": {"text": "Unused endpoint: GET /api/recipes"}, "properties": {"repobilityId": "1736001738db4ae7", "scanner": "scanner-primary", "fingerprint": "8d509f3e5486abe3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-809995c0fb2f4c8f", "level": "note", "message": {"text": "Unused endpoint: GET /api/recipes/{recipe_id}"}, "properties": {"repobilityId": "802aff4d270f5eac", "scanner": "scanner-primary", "fingerprint": "809995c0fb2f4c8f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4e617b6ce767ace9", "level": "note", "message": {"text": "Unused endpoint: POST /api/monitors"}, "properties": {"repobilityId": "ebbfd0aede24af0f", "scanner": "scanner-primary", "fingerprint": "4e617b6ce767ace9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5aeeeacc9cc2956f", "level": "note", "message": {"text": "Unused endpoint: GET /api/monitors"}, "properties": {"repobilityId": "1a84581b899df34f", "scanner": "scanner-primary", "fingerprint": "5aeeeacc9cc2956f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-92ef27e4d4821a41", "level": "note", "message": {"text": "Unused endpoint: GET /api/monitors/{monitor_id}"}, "properties": {"repobilityId": "3922c39c94de89f0", "scanner": "scanner-primary", "fingerprint": "92ef27e4d4821a41", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c586ecddaab4dfd3", "level": "note", "message": {"text": "Unused endpoint: POST /api/jobs"}, "properties": {"repobilityId": "13cbb64216a90c2a", "scanner": "scanner-primary", "fingerprint": "c586ecddaab4dfd3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-31fb330b2ba4ab69", "level": "note", "message": {"text": "Unused endpoint: GET /api/jobs"}, "properties": {"repobilityId": "93631c176b72a611", "scanner": "scanner-primary", "fingerprint": "31fb330b2ba4ab69", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a35b7568de1cc4e", "level": "note", "message": {"text": "Unused endpoint: GET /api/jobs/{job_id}"}, "properties": {"repobilityId": "66c8140c7454d65e", "scanner": "scanner-primary", "fingerprint": "7a35b7568de1cc4e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}