Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

bobisme/maw

https://github.com/bobisme/maw · scanned 2026-06-17 01:43 UTC (1 month, 2 weeks ago)

61 raw signals (0 security + 61 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ -25.3 (diff) · 55 actionable findings from 1 signal source. 6 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

55.6% cov · 55 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 0 Medium 7 Low 46 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 55 Crowd 0 Layer: Software 11 Security 3 Cicd 1 Quality 40

Exclude dismissed / FP Exclude test files

All 1492 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`Cargo.toml`	software	healthy	`Cargo.toml`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`TUI_SPEC.md`	software	healthy	`TUI_SPEC.md`
`README.md`	software	healthy	`README.md`
`LICENSE`	software	healthy	`LICENSE`
`.edict.toml`	software	healthy	`.edict.toml`
`Cargo.lock`	software	healthy	`Cargo.lock`
`submodule.rs`	software	healthy	`tests/submodule.rs`
`merge_gitattributes.rs`	software	healthy	`tests/merge_gitattributes.rs`
`diff.rs`	software	healthy	`tests/diff.rs`
`recovery_capture.rs`	software	healthy	`tests/recovery_capture.rs`
`workspace_isolation.rs`	software	healthy	`tests/workspace_isolation.rs`
`search_schema_compliance.rs`	software	healthy	`tests/search_schema_compliance.rs`
`action_workflow_dst.rs`	software	healthy	`tests/action_workflow_dst.rs`
`conflict_state_truth.rs`	software	healthy	`tests/conflict_state_truth.rs`
`phase0_integration.rs`	software	healthy	`tests/phase0_integration.rs`
`recovery_contract.rs`	software	healthy	`tests/recovery_contract.rs`
`concurrent_safety.rs`	software	healthy	`tests/concurrent_safety.rs`
`auto_rebase_siblings.rs`	software	healthy	`tests/auto_rebase_siblings.rs`
`restore.rs`	software	healthy	`tests/restore.rs`
`merge_events_consolidated_bn_1lj2.rs`	software	healthy	`tests/merge_events_consolidated_bn_1lj2.rs`
`lifecycle_properties.rs`	software	healthy	`tests/lifecycle_properties.rs`
`epoch_ref_desync.rs`	software	healthy	`tests/epoch_ref_desync.rs`
`rebase_sanity.rs`	software	healthy	`tests/rebase_sanity.rs`
`merge_rebase_reconcile.rs`	software	healthy	`tests/merge_rebase_reconcile.rs`
`merge_scenarios.rs`	software	healthy	`tests/merge_scenarios.rs`
`crash_recovery.rs`	software	healthy	`tests/crash_recovery.rs`
`merge_ff_absorb.rs`	software	healthy	`tests/merge_ff_absorb.rs`
`consolidated_default_ws_bn_1s8d_21qy.rs`	software	healthy	`tests/consolidated_default_ws_bn_1s8d_21qy.rs`
`advance_orphan_regression_bn_8flz.rs`	software	healthy	`tests/advance_orphan_regression_bn_8flz.rs`
`rebase_never_abandon_bn_20sa.rs`	software	healthy	`tests/rebase_never_abandon_bn_20sa.rs`
`workspace_undo.rs`	software	healthy	`tests/workspace_undo.rs`
`concurrency_assurance.rs`	software	healthy	`tests/concurrency_assurance.rs`
`destroy_vs_merge_head_ref.rs`	software	healthy	`tests/destroy_vs_merge_head_ref.rs`
`workspace_validation.rs`	software	healthy	`tests/workspace_validation.rs`
`config_and_status.rs`	software	healthy	`tests/config_and_status.rs`
`transport.rs`	software	healthy	`tests/transport.rs`
`sync_proptest.rs`	software	healthy	`tests/sync_proptest.rs`
`status_output_discoverability.rs`	software	healthy	`tests/status_output_discoverability.rs`
`merge_gate_sidecar.rs`	software	healthy	`tests/merge_gate_sidecar.rs`
`doctor.rs`	software	healthy	`tests/doctor.rs`
`sync_rebase_semantics.rs`	software	healthy	`tests/sync_rebase_semantics.rs`
`sync.rs`	software	healthy	`tests/sync.rs`
`search_assurance.rs`	software	healthy	`tests/search_assurance.rs`
`git_compatibility.rs`	software	healthy	`tests/git_compatibility.rs`
`rewrite_safety.rs`	software	healthy	`tests/rewrite_safety.rs`
`migrate.rs`	software	healthy	`tests/migrate.rs`
`push.rs`	software	healthy	`tests/push.rs`
`merge_resilience_bn_yyx.rs`	software	healthy	`tests/merge_resilience_bn_yyx.rs`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`corpus`	software	healthy	`tests/corpus`
`dst`	software	healthy	`tests/corpus/dst`
`dst_support`	software	healthy	`tests/dst_support`
`manifold_common`	software	healthy	`tests/manifold_common`
`scripts`	software	healthy	`scripts`
`sg1-soak`	software	healthy	`scripts/sg1-soak`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`spike`	software	healthy	`spike`
`scenario`	software	healthy	`spike/scenario`
`src`	software	healthy	`spike/src`
`arms`	software	healthy	`spike/arms`
`notes`	software	healthy	`notes`
`assurance`	software	healthy	`notes/assurance`
`eval-real-2026-05-26`	software	healthy	`notes/eval-real-2026-05-26`
`sg2`	software	healthy	`notes/eval-real-2026-05-26/sg2`
`C0-T0`	software	healthy	`notes/eval-real-2026-05-26/sg2/C0-T0`
`C4-T0`	software	healthy	`notes/eval-real-2026-05-26/sg2/C4-T0`
`sg3`	software	healthy	`notes/eval-real-2026-05-26/sg3`
`maw-old-layout`	software	healthy	`notes/eval-real-2026-05-26/sg3/maw-old-layout`
`C0-T0`	software	healthy	`notes/eval-real-2026-05-26/sg3/maw-old-layout/C0-T0`
`C2-T0`	software	healthy	`notes/eval-real-2026-05-26/sg3/maw-old-layout/C2-T0`
`maw-new-layout`	software	healthy	`notes/eval-real-2026-05-26/sg3/maw-new-layout`
`C0-T0`	software	healthy	`notes/eval-real-2026-05-26/sg3/maw-new-layout/C0-T0`
`C2-T0`	software	healthy	`notes/eval-real-2026-05-26/sg3/maw-new-layout/C2-T0`
`eval-real-2026-05-27`	software	healthy	`notes/eval-real-2026-05-27`
`chaos-smoke-v3`	software	healthy	`notes/eval-real-2026-05-27/chaos-smoke-v3`
`C0-T0`	software	healthy	`notes/eval-real-2026-05-27/chaos-smoke-v3/C0-T0`
`C4-T0`	software	healthy	`notes/eval-real-2026-05-27/chaos-smoke-v3/C4-T0`
`plan-d-sonnet`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet`
`C2-T4`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C2-T4`
`C2-T5`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C2-T5`
`C0-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C0-T0`
`C4-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C4-T0`
`C2-T2`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C2-T2`
`C2-T1`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C2-T1`
`C2-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C2-T0`
`C3-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C3-T0`
`C2-T3`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C2-T3`
`C1-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-sonnet/C1-T0`
`plan-d-haiku`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku`
`C2-T4`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C2-T4`
`C2-T5`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C2-T5`
`C0-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C0-T0`
`C4-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C4-T0`
`C2-T2`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C2-T2`
`C2-T1`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C2-T1`
`C2-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C2-T0`
`C3-T0`	software	healthy	`notes/eval-real-2026-05-27/plan-d-haiku/C3-T0`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`workflow_command`	software	healthy	`scripts/dst.py:20`
`action_command`	software	healthy	`scripts/dst.py:27`
`workflow_replay`	software	healthy	`scripts/dst.py:34`
`action_replay`	software	healthy	`scripts/dst.py:41`
`latest_artifact`	software	healthy	`scripts/dst.py:48`
`load_bundle`	software	healthy	`scripts/dst.py:84`
`bundle_command`	software	healthy	`scripts/dst.py:88`
`action_seed_steps_from_bundle`	software	healthy	`scripts/dst.py:99`
`run_shell`	software	healthy	`scripts/dst.py:115`
`cmd_run`	software	dead	`scripts/dst.py:119`
`cmd_replay`	software	dead	`scripts/dst.py:149`
`cmd_shrink`	software	dead	`scripts/dst.py:163`
`cmd_inspect`	software	dead	`scripts/dst.py:181`
`cmd_open_latest`	software	dead	`scripts/dst.py:203`
`parser`	software	healthy	`scripts/dst.py:220`
`git`	software	healthy	`spike/oracle_ab_harness.py:39`
`maw`	software	healthy	`spike/oracle_ab_harness.py:50`
`all_refs`	software	healthy	`spike/oracle_ab_harness.py:61`
`obj_type`	software	healthy	`spike/oracle_ab_harness.py:72`
`is_ancestor`	software	dead	`spike/oracle_ab_harness.py:76`
`workspace_dirs`	software	healthy	`spike/oracle_ab_harness.py:84`
`ws_head`	software	healthy	`spike/oracle_ab_harness.py:95`
`read_merge_state`	software	healthy	`spike/oracle_ab_harness.py:108`
`tip_blobs`	software	healthy	`spike/oracle_ab_harness.py:121`
`observe_ws_tips`	software	healthy	`spike/oracle_ab_harness.py:147`
`frontier_root_oids`	software	healthy	`spike/oracle_ab_harness.py:184`
`reachable_blobs`	software	healthy	`spike/oracle_ab_harness.py:200`
`oracle_a`	software	healthy	`spike/oracle_ab_harness.py:212`
`live_merge_sources`	software	healthy	`spike/oracle_ab_harness.py:251`
`oracle_b`	software	healthy	`spike/oracle_ab_harness.py:275`
`dangling`	software	healthy	`spike/oracle_ab_harness.py:280`
`fresh_repo`	software	healthy	`spike/oracle_ab_harness.py:343`
`ws_commit`	software	healthy	`spike/oracle_ab_harness.py:358`
`run_step`	software	healthy	`spike/oracle_ab_harness.py:369`
`check`	software	healthy	`spike/oracle_ab_harness.py:375`
`main`	software	healthy	`spike/oracle_ab_harness.py:414`
`S`	software	healthy	`spike/oracle_ab_harness.py:421`
`plant_work_loss`	software	dead	`spike/oracle_ab_harness.py:455`
`heal_work_loss`	software	dead	`spike/oracle_ab_harness.py:488`
`plant_cm63`	software	dead	`spike/oracle_ab_harness.py:512`
`heal_cm63`	software	dead	`spike/oracle_ab_harness.py:542`
`g`	software	healthy	`spike/cost_scaling.py:28`
`main`	software	healthy	`spike/cost_scaling.py:33`
`wilson`	software	healthy	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`
`strip_quotes`	software	healthy	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`
`expand_vars`	software	healthy	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`
`repl`	software	dead	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`
`extract_bash_writes`	software	healthy	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`
`find_root`	software	healthy	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`
`classify`	software	healthy	`notes/eval-real-2026-05-28/sg3-final/classify_contamination…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`failpoints-clippy`	cicd	healthy	`.github/workflows/dst-faithful.yml`
`publish`	cicd	healthy	`.github/workflows/publish.yml`
`sg3-prereg-check`	cicd	healthy	`.github/workflows/dst.yml`
`sg1-per-commit`	cicd	healthy	`.github/workflows/dst.yml`
`legacy-sim`	cicd	healthy	`.github/workflows/dst.yml`
`sg1-nightly-soak`	cicd	healthy	`.github/workflows/dst-soak.yml`

Label	Layer	Status	Path
`password_literal::crates/maw-lfs/src/creds.rs`	security	healthy	`crates/maw-lfs/src/creds.rs`
`password_literal::crates/maw-lfs/src/creds.rs`	security	healthy	`crates/maw-lfs/src/creds.rs`
`password_literal::crates/maw-lfs/src/creds.rs`	security	healthy	`crates/maw-lfs/src/creds.rs`
`password_literal::crates/maw-lfs/src/creds.rs`	security	healthy	`crates/maw-lfs/src/creds.rs`
`password_literal::crates/maw-lfs/src/creds.rs`	security	healthy	`crates/maw-lfs/src/creds.rs`

Label	Layer	Status	Path
`auth::crates/maw-bench/tests/claude_backend_smoke.rs`	security	healthy	`crates/maw-bench/tests/claude_backend_smoke.rs`
`auth::crates/maw-bench-sweep/src/real_runtime.rs`	security	healthy	`crates/maw-bench-sweep/src/real_runtime.rs`
`auth::crates/maw-bench/src/claude.rs`	security	healthy	`crates/maw-bench/src/claude.rs`
`auth::spike/drive_agent.sh`	security	healthy	`spike/drive_agent.sh`

Label	Layer	Status	Path
`gha::dst-faithful`	cicd	healthy	`.github/workflows/dst-faithful.yml`
`gha::publish`	cicd	healthy	`.github/workflows/publish.yml`
`gha::dst`	cicd	healthy	`.github/workflows/dst.yml`
`gha::dst-soak`	cicd	healthy	`.github/workflows/dst-soak.yml`

Label	Layer	Status	Path
`DST_ARTIFACT_DIR`	cicd	healthy	`—`
`CARGO_REGISTRY_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`bobisme__maw`	software	healthy	`/data/fable5_failed_archive/bobisme__maw`

Label	Layer	Status	Path
`Witnesses`	software	healthy	`spike/oracle_ab_harness.py:136`

Label	Layer	Status	Path
`port:02`	network	healthy	`.github/workflows/dst-soak.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/7094b103-b029-477d-a916-c29b7637474e/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/7094b103-b029-477d-a916-c29b7637474e/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

bobisme/maw

Complete repo analysis

file 50+

directory 50+

function 50+

job 6

secret 5

auth 4

pipeline 4

env_var 2

repo 1

class 1

port 1