{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-0d03e104c80f0608", "name": "Privileged port 13 in use", "shortDescription": {"text": "Privileged port 13 in use"}, "fullDescription": {"text": "Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bfdd551f4ab5145b", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "thewoolleyman/livespec-dev-tooling/.github/workflows/reusable-release-dispatch.yml@v0.14.0 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7c7d25911e6e1e4", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/create-github-app-token@v1 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31fbbdc8ce83e8ee", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d6b44d9c97d92f3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "thewoolleyman/livespec-dev-tooling/.github/workflows/reusable-bump-pin-from-dispatch.yml@v0.14.0 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-578cdf94d20b4c0f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-439f67880be4c9ed", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/create-github-app-token@v1 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e89487642ca0ad8f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61070c77739661be", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "thewoolleyman/livespec-dev-tooling/.github/workflows/reusable-pin-freshness.yml@v0.14.0 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f624c3f9a05b6f9c", "name": "Very large file: tests/livespec/doctor/static/test_out_of_band_edits.py (1856 lines)", "shortDescription": {"text": "Very large file: tests/livespec/doctor/static/test_out_of_band_edits.py (1856 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3aa1faccd706f43b", "name": "Very large file: tests/livespec/doctor/static/test_wiring_completeness_cross_repo.py (1961 lines)", "shortDescription": {"text": "Very large file: tests/livespec/doctor/static/test_wiring_completeness_cross_repo.py (1961 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69c3a0c9a642f465", "name": "Very large file: tests/livespec/commands/test_revise.py (1904 lines)", "shortDescription": {"text": "Very large file: tests/livespec/commands/test_revise.py (1904 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4670221f25c0380b", "name": "Very large file: tests/livespec/commands/test_prune_history.py (2027 lines)", "shortDescription": {"text": "Very large file: tests/livespec/commands/test_prune_history.py (2027 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70352d1485a13fdc", "name": "Very large file: tests/livespec/commands/test_seed.py (1900 lines)", "shortDescription": {"text": "Very large file: tests/livespec/commands/test_seed.py (1900 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f17e2ba14515f590", "name": "Agent authority lacks a verifier contract: dev-tooling/implementation/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: dev-tooling/implementation/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-743d254be06ee805", "name": "Agent authority lacks a verifier contract: archive/AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: archive/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b15820d13017e2c", "name": "Agent authority lacks a verifier contract: archive/brainstorming/approach-2-nlspec-based/AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: archive/brainstorming/approach-2-nlspec-based/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f38dc6ee4a275e5", "name": "Agent authority lacks a verifier contract: archive/bootstrap/AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: archive/bootstrap/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0eb03b255e81323a", "name": "Agent authority lacks a verifier contract: tests/livespec/commands/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tests/livespec/commands/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-19ea32146aab679e", "name": "Agent authority lacks a verifier contract: research/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: research/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ecdeea46ca7e7a0", "name": "Agent authority lacks a verifier contract: research/beads/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: research/beads/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4c9ac71851016bc", "name": "Agent authority lacks a verifier contract: templates/impl-plugin/.claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: templates/impl-plugin/.claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f2c304fbc47cf2b", "name": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/reap_stale_worktrees.py:173", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/reap_stale_worktrees.py:173"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c180bf2dee556551", "name": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/vendor_update.py:60", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/vendor_update.py:60"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-deaa352b89c885b6", "name": "Legacy-named symbol `_run_copier_copy` in dev-tooling/checks/copier_template_smoke.py:122", "shortDescription": {"text": "Legacy-named symbol `_run_copier_copy` in dev-tooling/checks/copier_template_smoke.py:122"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25cddd2448e611da", "name": "Commented-code block (6 lines) in dev-tooling/checks/copier_template_smoke.py:60", "shortDescription": {"text": "Commented-code block (6 lines) in dev-tooling/checks/copier_template_smoke.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8854d87def69f8e1", "name": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/checks/copier_template_smoke.py:134", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/checks/copier_template_smoke.py:134"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f38b3321a9f8700", "name": "Commented-code block (10 lines) in tests/dev-tooling/test_git_hook_wrapper.py:85", "shortDescription": {"text": "Commented-code block (10 lines) in tests/dev-tooling/test_git_hook_wrapper.py:85"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d5fe2d1b82f77f1", "name": "Commented-code block (5 lines) in tests/dev-tooling/checks/test_copier_template_smoke.py:243", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dev-tooling/checks/test_copier_template_smoke.py:243"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-98ecd8b40454277c", "name": "Commented-code block (6 lines) in tests/livespec/doctor/test_run_static.py:265", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/doctor/test_run_static.py:265"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e4208815a2347517", "name": "Commented-code block (18 lines) in tests/livespec/doctor/static/test_out_of_band_edits.py:746", "shortDescription": {"text": "Commented-code block (18 lines) in tests/livespec/doctor/static/test_out_of_band_edits.py:746"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc7075a452ec7bf9", "name": "Commented-code block (5 lines) in tests/livespec/doctor/static/test_wiring_completeness_cross_repo.py:284", "shortDescription": {"text": "Commented-code block (5 lines) in tests/livespec/doctor/static/test_wiring_completeness_cross_repo.py:284"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c2b64638fbcb86e", "name": "Commented-code block (6 lines) in tests/livespec/doctor/static/test___init__.py:191", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/doctor/static/test___init__.py:191"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b6b190f3b8a52550", "name": "Legacy-named symbol `nOld` in tests/livespec/commands/test_revise.py:578", "shortDescription": {"text": "Legacy-named symbol `nOld` in tests/livespec/commands/test_revise.py:578"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06fba74ff634b2da", "name": "Legacy-named symbol `nOld` in tests/livespec/commands/test_revise_render.py:73", "shortDescription": {"text": "Legacy-named symbol `nOld` in tests/livespec/commands/test_revise_render.py:73"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ad6c8a84f8d4268", "name": "Commented-code block (12 lines) in tests/livespec/commands/test_propose_change.py:656", "shortDescription": {"text": "Commented-code block (12 lines) in tests/livespec/commands/test_propose_change.py:656"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-966db9238f52e061", "name": "Commented-code block (5 lines) in tests/livespec/commands/test_prune_history.py:728", "shortDescription": {"text": "Commented-code block (5 lines) in tests/livespec/commands/test_prune_history.py:728"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c78de3df6b5ca267", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_sub_spec_payload.py:38", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_sub_spec_payload.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-28a929789cacccd6", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_doctor_findings.py:35", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_doctor_findings.py:35"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e39cb295fdd60eb4", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_proposed_change_front_matter.py:43", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_proposed_change_front_matter.py:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2b483b9089df98a9", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_revision_front_matter.py:40", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_revision_front_matter.py:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cdb8cf64ec6885a6", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_livespec_config.py:55", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_livespec_config.py:55"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-46436a2b1ce0d7cb", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_finding.py:33", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_finding.py:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cd20d70d6ea36129", "name": "Commented-code block (10 lines) in tests/livespec/validate/test_proposal_findings.py:41", "shortDescription": {"text": "Commented-code block (10 lines) in tests/livespec/validate/test_proposal_findings.py:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4f040ffebaf8dd01", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_revise_input.py:38", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_revise_input.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fdcf05c718a664aa", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_template_config.py:45", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_template_config.py:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-27b0a12465d3d471", "name": "Commented-code block (6 lines) in tests/livespec/validate/test_seed_input.py:35", "shortDescription": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_seed_input.py:35"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-907b2d0d2faf32b4", "name": "Commented-code block (6 lines) in tests/e2e/test_retry_on_exit_4.py:34", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/test_retry_on_exit_4.py:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-349adbc79e734149", "name": "Commented-code block (6 lines) in tests/e2e/test_doctor_fail_then_fix.py:76", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/test_doctor_fail_then_fix.py:76"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a290771134dc0f4", "name": "Commented-code block (6 lines) in tests/e2e/test_prune_history_noop.py:33", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/test_prune_history_noop.py:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7abf5698c87e4e55", "name": "Commented-code block (7 lines) in tests/e2e/real_claude.py:37", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/real_claude.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ndev-tooling/vendor_update.py:main, dev-tooling/checks/schema_dataclass_pairing.py:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21228"}, "properties": {"repository": "thewoolleyman/livespec", "repoUrl": "https://github.com/thewoolleyman/livespec", "branch": "main"}, "results": [{"ruleId": "scanner-0d03e104c80f0608", "level": "warning", "message": {"text": "Privileged port 13 in use"}, "properties": {"repobilityId": "79d721e4d6f64798", "scanner": "scanner-primary", "fingerprint": "0d03e104c80f0608", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pin-freshness.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-bfdd551f4ab5145b", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b1db60b4cb34680a", "scanner": "scanner-primary", "fingerprint": "bfdd551f4ab5145b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-dispatch.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-f7c7d25911e6e1e4", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "851b58f92a898a8e", "scanner": "scanner-primary", "fingerprint": "f7c7d25911e6e1e4", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-update-branches.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-31fbbdc8ce83e8ee", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "6311de3c5fe9d5eb", "scanner": "scanner-primary", "fingerprint": "31fbbdc8ce83e8ee", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-update-branches.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d6b44d9c97d92f3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a011cab08acbc62", "scanner": "scanner-primary", "fingerprint": "1d6b44d9c97d92f3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bump-pin-from-dispatch.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae16880318b99912", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae16880318b99912", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9ad4c3f023525f19", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae16880318b99912", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 162}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9ad4c3f023525f19", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 221}}}]}, {"ruleId": "scanner-578cdf94d20b4c0f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "536af93b3d37594c", "scanner": "scanner-primary", "fingerprint": "578cdf94d20b4c0f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-tag.yml"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-578cdf94d20b4c0f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e9255933f63c2ced", "scanner": "scanner-primary", "fingerprint": "578cdf94d20b4c0f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-tag.yml"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-439f67880be4c9ed", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "dcb55af0330e9946", "scanner": "scanner-primary", "fingerprint": "439f67880be4c9ed", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-enable-merge.yml"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-e89487642ca0ad8f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "113fbcd78051e09d", "scanner": "scanner-primary", "fingerprint": "e89487642ca0ad8f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e-real.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-e89487642ca0ad8f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ec428ca6c59621dc", "scanner": "scanner-primary", "fingerprint": "e89487642ca0ad8f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e-real.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-e89487642ca0ad8f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "81ec469eff009bd4", "scanner": "scanner-primary", "fingerprint": "e89487642ca0ad8f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e-real.yml"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-61070c77739661be", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ab6d6bea3e7decfe", "scanner": "scanner-primary", "fingerprint": "61070c77739661be", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pin-freshness.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-f624c3f9a05b6f9c", "level": "note", "message": {"text": "Very large file: tests/livespec/doctor/static/test_out_of_band_edits.py (1856 lines)"}, "properties": {"repobilityId": "57b8532b7e758e3b", "scanner": "scanner-primary", "fingerprint": "f624c3f9a05b6f9c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3aa1faccd706f43b", "level": "note", "message": {"text": "Very large file: tests/livespec/doctor/static/test_wiring_completeness_cross_repo.py (1961 lines)"}, "properties": {"repobilityId": "2ae496497d43821b", "scanner": "scanner-primary", "fingerprint": "3aa1faccd706f43b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-69c3a0c9a642f465", "level": "note", "message": {"text": "Very large file: tests/livespec/commands/test_revise.py (1904 lines)"}, "properties": {"repobilityId": "b0b37369c23a66ca", "scanner": "scanner-primary", "fingerprint": "69c3a0c9a642f465", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4670221f25c0380b", "level": "note", "message": {"text": "Very large file: tests/livespec/commands/test_prune_history.py (2027 lines)"}, "properties": {"repobilityId": "1b57d68eed608f61", "scanner": "scanner-primary", "fingerprint": "4670221f25c0380b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-70352d1485a13fdc", "level": "note", "message": {"text": "Very large file: tests/livespec/commands/test_seed.py (1900 lines)"}, "properties": {"repobilityId": "f65d698aea9c9f87", "scanner": "scanner-primary", "fingerprint": "70352d1485a13fdc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "f771e4af24b200b3", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "3c2cb762e737d070", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "7ab6f794ca7fdb15", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "ec8c48e6a147b9d9", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-f17e2ba14515f590", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: dev-tooling/implementation/CLAUDE.md"}, "properties": {"repobilityId": "981c66f967591e1a", "scanner": "scanner-primary", "fingerprint": "f17e2ba14515f590", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dev-tooling/implementation/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-743d254be06ee805", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: archive/AGENTS.md"}, "properties": {"repobilityId": "ef83f33ee7447aaf", "scanner": "scanner-primary", "fingerprint": "743d254be06ee805", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b15820d13017e2c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: archive/brainstorming/approach-2-nlspec-based/AGENTS.md"}, "properties": {"repobilityId": "ae936506c9115940", "scanner": "scanner-primary", "fingerprint": "2b15820d13017e2c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/brainstorming/approach-2-nlspec-based/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f38dc6ee4a275e5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: archive/bootstrap/AGENTS.md"}, "properties": {"repobilityId": "034f44823ca07e9d", "scanner": "scanner-primary", "fingerprint": "6f38dc6ee4a275e5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "archive/bootstrap/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0eb03b255e81323a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tests/livespec/commands/CLAUDE.md"}, "properties": {"repobilityId": "fb127180c93495db", "scanner": "scanner-primary", "fingerprint": "0eb03b255e81323a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/livespec/commands/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-19ea32146aab679e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: research/CLAUDE.md"}, "properties": {"repobilityId": "35e462d1eeaada9b", "scanner": "scanner-primary", "fingerprint": "19ea32146aab679e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "research/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ecdeea46ca7e7a0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: research/beads/CLAUDE.md"}, "properties": {"repobilityId": "cb1e77ecc2f6523f", "scanner": "scanner-primary", "fingerprint": "8ecdeea46ca7e7a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "research/beads/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4c9ac71851016bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: templates/impl-plugin/.claude/settings.json"}, "properties": {"repobilityId": "865e6a2d16547c9b", "scanner": "scanner-primary", "fingerprint": "e4c9ac71851016bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "templates/impl-plugin/.claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f2c304fbc47cf2b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/reap_stale_worktrees.py:173"}, "properties": {"repobilityId": "647467a2da047ad1", "scanner": "scanner-primary", "fingerprint": "6f2c304fbc47cf2b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c180bf2dee556551", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/vendor_update.py:60"}, "properties": {"repobilityId": "c0386dc057e53e9d", "scanner": "scanner-primary", "fingerprint": "c180bf2dee556551", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-deaa352b89c885b6", "level": "note", "message": {"text": "Legacy-named symbol `_run_copier_copy` in dev-tooling/checks/copier_template_smoke.py:122"}, "properties": {"repobilityId": "8be1effcbd9cf572", "scanner": "scanner-primary", "fingerprint": "deaa352b89c885b6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-25cddd2448e611da", "level": "none", "message": {"text": "Commented-code block (6 lines) in dev-tooling/checks/copier_template_smoke.py:60"}, "properties": {"repobilityId": "3941034746b64462", "scanner": "scanner-primary", "fingerprint": "25cddd2448e611da", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8854d87def69f8e1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 dev-tooling/checks/copier_template_smoke.py:134"}, "properties": {"repobilityId": "01b47818445c850e", "scanner": "scanner-primary", "fingerprint": "8854d87def69f8e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4f38b3321a9f8700", "level": "none", "message": {"text": "Commented-code block (10 lines) in tests/dev-tooling/test_git_hook_wrapper.py:85"}, "properties": {"repobilityId": "a201d7888fc58166", "scanner": "scanner-primary", "fingerprint": "4f38b3321a9f8700", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8d5fe2d1b82f77f1", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dev-tooling/checks/test_copier_template_smoke.py:243"}, "properties": {"repobilityId": "6e54c51858cc6248", "scanner": "scanner-primary", "fingerprint": "8d5fe2d1b82f77f1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-98ecd8b40454277c", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/doctor/test_run_static.py:265"}, "properties": {"repobilityId": "a146f8baf48c4b17", "scanner": "scanner-primary", "fingerprint": "98ecd8b40454277c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e4208815a2347517", "level": "none", "message": {"text": "Commented-code block (18 lines) in tests/livespec/doctor/static/test_out_of_band_edits.py:746"}, "properties": {"repobilityId": "38316c2fe7452c7d", "scanner": "scanner-primary", "fingerprint": "e4208815a2347517", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cc7075a452ec7bf9", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/livespec/doctor/static/test_wiring_completeness_cross_repo.py:284"}, "properties": {"repobilityId": "ad0256beacf42882", "scanner": "scanner-primary", "fingerprint": "cc7075a452ec7bf9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0c2b64638fbcb86e", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/doctor/static/test___init__.py:191"}, "properties": {"repobilityId": "39435bd3e8f4161d", "scanner": "scanner-primary", "fingerprint": "0c2b64638fbcb86e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b6b190f3b8a52550", "level": "note", "message": {"text": "Legacy-named symbol `nOld` in tests/livespec/commands/test_revise.py:578"}, "properties": {"repobilityId": "eadeb2882536b2ae", "scanner": "scanner-primary", "fingerprint": "b6b190f3b8a52550", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-06fba74ff634b2da", "level": "note", "message": {"text": "Legacy-named symbol `nOld` in tests/livespec/commands/test_revise_render.py:73"}, "properties": {"repobilityId": "ca57b5a9bc701707", "scanner": "scanner-primary", "fingerprint": "06fba74ff634b2da", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6ad6c8a84f8d4268", "level": "none", "message": {"text": "Commented-code block (12 lines) in tests/livespec/commands/test_propose_change.py:656"}, "properties": {"repobilityId": "5e8f1295d0cedf28", "scanner": "scanner-primary", "fingerprint": "6ad6c8a84f8d4268", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-966db9238f52e061", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/livespec/commands/test_prune_history.py:728"}, "properties": {"repobilityId": "c24e6b3ade5facef", "scanner": "scanner-primary", "fingerprint": "966db9238f52e061", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c78de3df6b5ca267", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_sub_spec_payload.py:38"}, "properties": {"repobilityId": "5b5093e4c1b92523", "scanner": "scanner-primary", "fingerprint": "c78de3df6b5ca267", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-28a929789cacccd6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_doctor_findings.py:35"}, "properties": {"repobilityId": "8a386330e9e3bacf", "scanner": "scanner-primary", "fingerprint": "28a929789cacccd6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e39cb295fdd60eb4", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_proposed_change_front_matter.py:43"}, "properties": {"repobilityId": "66151e1f00ff75ee", "scanner": "scanner-primary", "fingerprint": "e39cb295fdd60eb4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2b483b9089df98a9", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_revision_front_matter.py:40"}, "properties": {"repobilityId": "580c41f3e9f47dcb", "scanner": "scanner-primary", "fingerprint": "2b483b9089df98a9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cdb8cf64ec6885a6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_livespec_config.py:55"}, "properties": {"repobilityId": "12ec3f8cbf2f6395", "scanner": "scanner-primary", "fingerprint": "cdb8cf64ec6885a6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-46436a2b1ce0d7cb", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_finding.py:33"}, "properties": {"repobilityId": "e0fa8c8fa7e44c80", "scanner": "scanner-primary", "fingerprint": "46436a2b1ce0d7cb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cd20d70d6ea36129", "level": "none", "message": {"text": "Commented-code block (10 lines) in tests/livespec/validate/test_proposal_findings.py:41"}, "properties": {"repobilityId": "5253ee332631795e", "scanner": "scanner-primary", "fingerprint": "cd20d70d6ea36129", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4f040ffebaf8dd01", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_revise_input.py:38"}, "properties": {"repobilityId": "0c8a65d25490062d", "scanner": "scanner-primary", "fingerprint": "4f040ffebaf8dd01", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fdcf05c718a664aa", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_template_config.py:45"}, "properties": {"repobilityId": "1af978f4bbdb1e2b", "scanner": "scanner-primary", "fingerprint": "fdcf05c718a664aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-27b0a12465d3d471", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/livespec/validate/test_seed_input.py:35"}, "properties": {"repobilityId": "57572b3bd7c1defc", "scanner": "scanner-primary", "fingerprint": "27b0a12465d3d471", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-907b2d0d2faf32b4", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/test_retry_on_exit_4.py:34"}, "properties": {"repobilityId": "957e0c581d4aa96d", "scanner": "scanner-primary", "fingerprint": "907b2d0d2faf32b4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-349adbc79e734149", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/test_doctor_fail_then_fix.py:76"}, "properties": {"repobilityId": "9e62636f6e622cf4", "scanner": "scanner-primary", "fingerprint": "349adbc79e734149", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7a290771134dc0f4", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/test_prune_history_noop.py:33"}, "properties": {"repobilityId": "095fc0049ad037b1", "scanner": "scanner-primary", "fingerprint": "7a290771134dc0f4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7abf5698c87e4e55", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/real_claude.py:37"}, "properties": {"repobilityId": "b2d922adb02f53c1", "scanner": "scanner-primary", "fingerprint": "7abf5698c87e4e55", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f48d4174dc1f5130", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}