{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "foundry_assumption_check", "name": "Foundry mined assumption checks: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "shortDescription": {"text": "Foundry mined assumption checks: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "fullDescription": {"text": "Comment chain pattern product: assumption_checks\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nOutcome: ambiguous_needs_more_evidence\nThread label: thread_has_human_issue_and_fix_context\nSource graph label: source_artifact_without_verification_graph\nReasons: source_graph_has_real_artifacts, link_quality_weak_supervision\nChain evidence:\nIssue/PR evidence chain: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread label: thread_has_human_issue_and_fix_context\nOutcome: ambiguous_needs_more_evidence\nComment count: 1\nLinked commit count: 1\nLinked CI commit count: 0\nLinked CI labels: {}\nChanged file count: 100\nLabels: {'agent_instruction_gap': 1}\nPolarities: {'bad': 1}\nChanged file labels: {'ui_or_frontend': 17, 'source_or_other': 81, 'api_or_backend': 1, 'security_or_auth': 1}\nExamples:\n[\n  {\n    \"id\": \"github-feedback-comment-41ac059bd7ac8204\","}, "properties": {"scanner": "foundry_dataset", "category": "practices", "severity": "medium", "confidence": 0.62, "cwe": "", "owasp": ""}}, {"id": "foundry_test_ci_gap", "name": "Foundry mined test ci gap after feedback: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "shortDescription": {"text": "Foundry mined test ci gap after feedback: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "fullDescription": {"text": "Graph query export: Feedback exposes missing tests or CI\nQuery id: test_ci_gap_after_feedback\nQuery type: motif_query\nIntent: Hard negatives for feedback/fix chains without adequate guardrails.\nMotif: test_ci_gap_after_feedback\nTraining usage: hard_negative\nGraph gold label: supported_by_verification_signal\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nEvidence:\nGraph motif: Feedback or fix context exposes missing test/CI guardrails\nMotif id: test_ci_gap_after_feedback\nPolarity: bad\nTraining usage: hard_negative\nSeverity: high\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nGraph gold label: supported_by_verification_signal\nThread graph evidence:\nGitHub issue/PR evidence subgraph\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nIssue/PR number: 2\nGraph consiste"}, "properties": {"scanner": "foundry_dataset", "category": "testing", "severity": "high", "confidence": 0.78, "cwe": "", "owasp": ""}}, {"id": "foundry_auth_guardrail_gap", "name": "Foundry mined security auth guardrail gaps: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "shortDescription": {"text": "Foundry mined security auth guardrail gaps: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "fullDescription": {"text": "Graph query export: Security/auth changes without enough guardrails\nQuery id: security_auth_guardrail_gaps\nQuery type: motif_query\nIntent: Assumption-check security/auth examples requiring stronger tests or CI.\nMotif: security_auth_without_guardrails\nTraining usage: assumption_check\nGraph gold label: supported_by_verification_signal\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nEvidence:\nGraph motif: Security/auth change without enough guardrails\nMotif id: security_auth_without_guardrails\nPolarity: bad\nTraining usage: assumption_check\nSeverity: critical\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nGraph gold label: supported_by_verification_signal\nThread graph evidence:\nGitHub issue/PR evidence subgraph\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nIssue/"}, "properties": {"scanner": "foundry_dataset", "category": "auth", "severity": "critical", "confidence": 0.78, "cwe": "", "owasp": ""}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23563"}, "properties": {"repository": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "repoUrl": "https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "branch": "main"}, "results": [{"ruleId": "foundry_assumption_check", "level": "warning", "message": {"text": "Foundry mined assumption checks: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "properties": {"repobilityId": 301444, "scanner": "foundry_dataset", "fingerprint": "5abaeaf46962361f0039cc10b51cd010427e16c8c7e805c4121cc34e1f62c63c", "category": "practices", "severity": "medium", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Imported from mined Foundry/Fable5 evidence with real GitHub/source provenance. Review source_id before acting.", "evidence": {"meta": {"kind": "comment_chain_pattern_product", "source": "comment_chain_pattern_miner", "product": "assumption_checks", "synthetic": false, "thread_key": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1", "human_labels": ["agent_instruction_gap", "api_or_backend", "security_or_auth", "source_or_other", "ui_or_frontend"], "issue_number": "1", "thread_label": "thread_has_human_issue_and_fix_context", "outcome_label": "ambiguous_needs_more_evidence", "source_backed": true, "max_confidence": 0.708, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "training_usage": "weak_supervision", "confidence_tier": "weak_supervision", "source_chain_id": "evidence-chain-issue_chain-9e4289d306128554", "helicopter_views": {}, "artifact_families": {"docs": 1}, "source_chain_kind": "issue_chain", "changed_file_count": 100, "source_graph_label": "source_artifact_without_verification_graph", "changed_file_labels": {"api_or_backend": 1, "ui_or_frontend": 17, "source_or_other": 81, "security_or_auth": 1}, "linked_commit_count": 1, "helicopter_view_count": 0, "source_artifact_count": 1, "classification_reasons": ["source_graph_has_real_artifacts", "link_quality_weak_supervision"], "linked_ci_commit_count": 0, "verification_artifact_count": 0, "design_schema_api_artifact_count": 0}, "text": "Comment chain pattern product: assumption_checks\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nOutcome: ambiguous_needs_more_evidence\nThread label: thread_has_human_issue_and_fix_context\nSource graph label: source_artifact_without_verification_graph\nReasons: source_graph_has_real_artifacts, link_quality_weak_supervision\nChain evidence:\nIssue/PR evidence chain: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread label: thread_has_human_issue_and_fix_context\nOutcome: ambiguous_needs_more_evidence\nComment count: 1\nLinked commit count: 1\nLinked CI commit count: 0\nLinked CI labels: {}\nChanged file count: 100\nLabels: {'agent_instruction_gap': 1}\nPolarities: {'bad': 1}\nChanged file labels: {'ui_or_frontend': 17, 'source_or_other': 81, 'api_or_backend': 1, 'security_or_auth': 1}\nExamples:\n[\n  {\n    \"id\": \"github-feedback-comment-41ac059bd7ac8204\",\n    \"kind\": \"pull_request_body\",\n    \"label\": \"agent_instruction_gap\",\n    \"polarity\": \"bad\",\n    \"url\": \"https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App/pull/1\",\n    \"text\": \"GitHub feedback: agent_instruction_gap\\nPolarity: bad\\nKind: pull_request_body\\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\\nAuthor: ZeekrBaha (User)\\nURL: https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App/pull/1\\nTitle: UIKit MVVM-C implementation (T0\u2013T21)\\nBody:\\nUIKit sibling of the SwiftUI prototype, built with **MVVM-C**.\\n\\n## Summary\\n- **Model/Service:** Hashable models + `SampleData` behind `ProductRepository` (DI seam; SampleData referenced only by the repository).\\n- **ViewModels:** 5 plain classes (no UIKit); `HomeViewModel` owns the carousel index + 3s Combine auto-advance.\\n- **Coordinators:** `AppCoordinator` composition root builds repo + VMs + `UITabBarController` + 5 `TabCoordinator`s (one `UINavigationController` each); pushes `ProductDetailViewController` via `AppRoute`. No VC pushes another VC.\\n- **Views:** `UIViewController`s composing reusable `UIView` components; keystone `ProductCardView` on every product surface; product tap \u2192 coordinator \u2192 detail.\\n\\n## Verification\\n- Build SUCCEEDED, 0 warnings.\\n- **14/14 XCUITests green** (8 functional + 6 layout red-line frame assertions).\\n- All 5 screens screenshot-verified against the referenc\"\n  }\n]\nChanged files:\n[\n  {\n    \"id\": \"github-pr-file-file-1fb3147bce451ed0\",\n    \"filename\": \"OzonStyle/App/AppDelegate.swift\",\n    \"label\": \"ui_or_frontend\",\n    \"status\": \"added\",\n    \"additions\": 27,\n    \"deletions\": 0,\n    \"changes\": 27,\n    \"blob_url\": \"https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App/blob/7179b4b2b02e233d62975dca77bd408678fbe98e/OzonStyle%2FApp%2FAppDelegate.swift\"\n  },\n  {\n    \"id\": \"github-pr-file-file-fdb4fc7b1229d83d\",\n    \"filename\": \"OzonStyle/Components/AppLogoHeaderView.swift\",\n    \"la\n[truncated by importer]", "source": "foundry_mined_dataset", "repo_url": "https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_id": "comment-chain-pattern-assumption_checks-36edf6a347bd0940", "synthetic": false, "gold_label": "", "graph_label": "source_artifact_without_verification_graph", "source_path": "/data/distillate/foundry_data/comment_chain_patterns/assumption_checks/shard-0.jsonl", "bundle_label": "", "priority_band": "", "priority_score": 0, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_dataset": "comment_chain_patterns/assumption_checks", "training_usage": "weak_supervision"}}}, {"ruleId": "foundry_test_ci_gap", "level": "error", "message": {"text": "Foundry mined test ci gap after feedback: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "properties": {"repobilityId": 336979, "scanner": "foundry_dataset", "fingerprint": "6b25dd90736cb16a716a69f7dd7a9927cf714fb926eefe468547b19d96676651", "category": "testing", "severity": "high", "confidence": 0.78, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Imported from mined Foundry/Fable5 evidence with real GitHub/source provenance. Review source_id before acting.", "evidence": {"meta": {"kind": "graph_query_record", "title": "Feedback exposes missing tests or CI", "intent": "Hard negatives for feedback/fix chains without adequate guardrails.", "labels": {"bug_fix": 1, "api_or_backend": 1, "docs_or_claims": 1, "ui_or_frontend": 1, "source_or_other": 7, "security_auth_secret": 1, "verification_or_tests": 1, "ci_pending_or_incomplete": 1, "issue_or_pull_request_thread": 1, "thread_has_human_issue_and_fix_context": 2, "claimed_resolved_with_verification_signal": 3, "human_reported_issue_then_verified_fix_attempt": 1}, "source": "graph_query_export", "motif_id": "test_ci_gap_after_feedback", "outcomes": {"claimed_resolved_with_verification_signal": 6}, "polarity": "bad", "query_id": "test_ci_gap_after_feedback", "severity": "high", "ci_labels": {"ci_pending_or_incomplete": 2}, "synthetic": false, "edge_count": 44, "edge_types": {"repo_has_thread": 1, "comment_has_chain": 1, "thread_has_comment": 1, "thread_touches_file": 10, "comment_chain_has_ci": 1, "chain_has_link_quality": 3, "thread_has_fix_outcome": 1, "thread_has_issue_chain": 1, "issue_chain_touches_file": 10, "thread_has_comment_chain": 1, "comment_chain_links_commit": 2, "comment_chain_touches_file": 10, "issue_chain_has_fix_outcome": 1, "issue_chain_has_comment_chain": 1}, "node_count": 22, "node_types": {"repo": 1, "commit": 2, "thread": 1, "comment": 1, "pr_file": 10, "ci_summary": 1, "fix_outcome": 1, "issue_chain": 1, "link_quality": 3, "comment_chain": 1}, "query_type": "motif_query", "thread_key": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2", "issue_number": "2", "quality_tiers": {"high_confidence": 3}, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "training_usage": "hard_negative", "source_motif_id": "graph-pattern-motif-thread-80f7da6c616a892a", "graph_gold_label": "supported_by_verification_signal", "changed_file_labels": {"api_or_backend": 4, "docs_or_claims": 4, "ui_or_frontend": 4, "source_or_other": 28}}, "text": "Graph query export: Feedback exposes missing tests or CI\nQuery id: test_ci_gap_after_feedback\nQuery type: motif_query\nIntent: Hard negatives for feedback/fix chains without adequate guardrails.\nMotif: test_ci_gap_after_feedback\nTraining usage: hard_negative\nGraph gold label: supported_by_verification_signal\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nEvidence:\nGraph motif: Feedback or fix context exposes missing test/CI guardrails\nMotif id: test_ci_gap_after_feedback\nPolarity: bad\nTraining usage: hard_negative\nSeverity: high\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nGraph gold label: supported_by_verification_signal\nThread graph evidence:\nGitHub issue/PR evidence subgraph\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nIssue/PR number: 2\nGraph consistency label: supported_by_verification_signal\nNodes: 22\nEdges: 44\nNode types: {'pr_file': 10, 'link_quality': 3, 'commit': 2, 'thread': 1, 'repo': 1, 'comment': 1, 'comment_chain': 1, 'ci_summary': 1, 'issue_chain': 1, 'fix_outcome': 1}\nEdge types: {'thread_touches_file': 10, 'comment_chain_touches_file': 10, 'issue_chain_touches_file': 10, 'chain_has_link_quality': 3, 'comment_chain_links_commit': 2, 'repo_has_thread': 1, 'thread_has_comment': 1, 'thread_has_comment_chain': 1, 'comment_has_chain': 1, 'comment_chain_has_ci': 1, 'thread_has_issue_chain': 1, 'issue_chain_has_comment_chain': 1, 'thread_has_fix_outcome': 1, 'issue_chain_has_fix_outcome': 1}\nLabels: {'source_or_other': 7, 'claimed_resolved_with_verification_signal': 3, 'thread_has_human_issue_and_fix_context': 2, 'issue_or_pull_request_thread': 1, 'security_auth_secret': 1, 'ui_or_frontend': 1, 'api_or_backend': 1, 'docs_or_claims': 1, 'human_reported_issue_then_verified_fix_attempt': 1, 'verification_or_tests': 1, 'ci_pending_or_incomplete': 1, 'bug_fix': 1}\nOutcomes: {'claimed_resolved_with_verification_signal': 6}\nQuality tiers: {'high_confidence': 3}\nCI labels: {'ci_pending_or_incomplete': 2}\nCurriculum targets:\n- Turn human feedback into regression tests and CI gates.\n- Penalize fixes that do not add or exercise verification for affected workflows.\nAssumption checks:\n- Did the fix add tests for the exact complaint?\n- Does CI run those tests, or is verification only implied?", "source": "foundry_mined_dataset", "repo_url": "https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_id": "graph-query-motif_query-ab9b04e54d0a8c61", "synthetic": false, "gold_label": "", "graph_label": "", "source_path": "/data/distillate/foundry_data/graph_queries/test_ci_gap_after_feedback/shard-0.jsonl", "bundle_label": "", "priority_band": "", "priority_score": 0, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_dataset": "graph_queries/test_ci_gap_after_feedback", "training_usage": "hard_negative"}}}, {"ruleId": "foundry_auth_guardrail_gap", "level": "error", "message": {"text": "Foundry mined security auth guardrail gaps: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "properties": {"repobilityId": 332323, "scanner": "foundry_dataset", "fingerprint": "336348646cb61dc4d5b1ca73c86c5c541a84f189c34fe83fc9bd6abd4f04eb3e", "category": "auth", "severity": "critical", "confidence": 0.78, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Imported from mined Foundry/Fable5 evidence with real GitHub/source provenance. Review source_id before acting.", "evidence": {"meta": {"kind": "graph_query_record", "title": "Security/auth changes without enough guardrails", "intent": "Assumption-check security/auth examples requiring stronger tests or CI.", "labels": {"bug_fix": 1, "api_or_backend": 1, "docs_or_claims": 1, "ui_or_frontend": 1, "source_or_other": 7, "security_auth_secret": 1, "verification_or_tests": 1, "ci_pending_or_incomplete": 1, "issue_or_pull_request_thread": 1, "thread_has_human_issue_and_fix_context": 2, "claimed_resolved_with_verification_signal": 3, "human_reported_issue_then_verified_fix_attempt": 1}, "source": "graph_query_export", "motif_id": "security_auth_without_guardrails", "outcomes": {"claimed_resolved_with_verification_signal": 6}, "polarity": "bad", "query_id": "security_auth_guardrail_gaps", "severity": "critical", "ci_labels": {"ci_pending_or_incomplete": 2}, "synthetic": false, "edge_count": 44, "edge_types": {"repo_has_thread": 1, "comment_has_chain": 1, "thread_has_comment": 1, "thread_touches_file": 10, "comment_chain_has_ci": 1, "chain_has_link_quality": 3, "thread_has_fix_outcome": 1, "thread_has_issue_chain": 1, "issue_chain_touches_file": 10, "thread_has_comment_chain": 1, "comment_chain_links_commit": 2, "comment_chain_touches_file": 10, "issue_chain_has_fix_outcome": 1, "issue_chain_has_comment_chain": 1}, "node_count": 22, "node_types": {"repo": 1, "commit": 2, "thread": 1, "comment": 1, "pr_file": 10, "ci_summary": 1, "fix_outcome": 1, "issue_chain": 1, "link_quality": 3, "comment_chain": 1}, "query_type": "motif_query", "thread_key": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2", "issue_number": "2", "quality_tiers": {"high_confidence": 3}, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "training_usage": "assumption_check", "source_motif_id": "graph-pattern-motif-thread-c1d61787575cd262", "graph_gold_label": "supported_by_verification_signal", "changed_file_labels": {"api_or_backend": 4, "docs_or_claims": 4, "ui_or_frontend": 4, "source_or_other": 28}}, "text": "Graph query export: Security/auth changes without enough guardrails\nQuery id: security_auth_guardrail_gaps\nQuery type: motif_query\nIntent: Assumption-check security/auth examples requiring stronger tests or CI.\nMotif: security_auth_without_guardrails\nTraining usage: assumption_check\nGraph gold label: supported_by_verification_signal\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nEvidence:\nGraph motif: Security/auth change without enough guardrails\nMotif id: security_auth_without_guardrails\nPolarity: bad\nTraining usage: assumption_check\nSeverity: critical\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nGraph gold label: supported_by_verification_signal\nThread graph evidence:\nGitHub issue/PR evidence subgraph\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#2\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nIssue/PR number: 2\nGraph consistency label: supported_by_verification_signal\nNodes: 22\nEdges: 44\nNode types: {'pr_file': 10, 'link_quality': 3, 'commit': 2, 'thread': 1, 'repo': 1, 'comment': 1, 'comment_chain': 1, 'ci_summary': 1, 'issue_chain': 1, 'fix_outcome': 1}\nEdge types: {'thread_touches_file': 10, 'comment_chain_touches_file': 10, 'issue_chain_touches_file': 10, 'chain_has_link_quality': 3, 'comment_chain_links_commit': 2, 'repo_has_thread': 1, 'thread_has_comment': 1, 'thread_has_comment_chain': 1, 'comment_has_chain': 1, 'comment_chain_has_ci': 1, 'thread_has_issue_chain': 1, 'issue_chain_has_comment_chain': 1, 'thread_has_fix_outcome': 1, 'issue_chain_has_fix_outcome': 1}\nLabels: {'source_or_other': 7, 'claimed_resolved_with_verification_signal': 3, 'thread_has_human_issue_and_fix_context': 2, 'issue_or_pull_request_thread': 1, 'security_auth_secret': 1, 'ui_or_frontend': 1, 'api_or_backend': 1, 'docs_or_claims': 1, 'human_reported_issue_then_verified_fix_attempt': 1, 'verification_or_tests': 1, 'ci_pending_or_incomplete': 1, 'bug_fix': 1}\nOutcomes: {'claimed_resolved_with_verification_signal': 6}\nQuality tiers: {'high_confidence': 3}\nCI labels: {'ci_pending_or_incomplete': 2}\nCurriculum targets:\n- Train auth boundary repair with tests, permission matrices, and secret-handling checks.\n- Keep risky auth changes separate from ordinary bug-fix examples.\nAssumption checks:\n- Are auth/permission paths covered by tests?\n- Are secrets, CORS, or access rules verified rather than summarized?", "source": "foundry_mined_dataset", "repo_url": "https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_id": "graph-query-motif_query-2b3804e673e71263", "synthetic": false, "gold_label": "", "graph_label": "", "source_path": "/data/distillate/foundry_data/graph_queries/security_auth_guardrail_gaps/shard-0.jsonl", "bundle_label": "", "priority_band": "", "priority_score": 0, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_dataset": "graph_queries/security_auth_guardrail_gaps", "training_usage": "assumption_check"}}}, {"ruleId": "foundry_auth_guardrail_gap", "level": "error", "message": {"text": "Foundry mined security auth guardrail gaps: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App"}, "properties": {"repobilityId": 332322, "scanner": "foundry_dataset", "fingerprint": "9ea1446b733c71be325fd1d1a51a5f459c45dca268391d5656168748c17fce1b", "category": "auth", "severity": "critical", "confidence": 0.78, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Imported from mined Foundry/Fable5 evidence with real GitHub/source provenance. Review source_id before acting.", "evidence": {"meta": {"kind": "graph_query_record", "title": "Security/auth changes without enough guardrails", "intent": "Assumption-check security/auth examples requiring stronger tests or CI.", "labels": {"feature": 1, "api_or_backend": 1, "ui_or_frontend": 17, "source_or_other": 81, "security_or_auth": 1, "agent_instruction_gap": 1, "issue_or_pull_request_thread": 1, "ambiguous_needs_more_evidence": 3, "comment_has_related_commit_context": 1, "thread_has_human_issue_and_fix_context": 2}, "source": "graph_query_export", "motif_id": "security_auth_without_guardrails", "outcomes": {"ambiguous_needs_more_evidence": 6}, "polarity": "bad", "query_id": "security_auth_guardrail_gaps", "severity": "critical", "ci_labels": {}, "synthetic": false, "edge_count": 136, "edge_types": {"repo_has_thread": 1, "comment_has_chain": 1, "thread_has_comment": 1, "thread_touches_file": 100, "chain_has_link_quality": 3, "thread_has_fix_outcome": 1, "thread_has_issue_chain": 1, "issue_chain_touches_file": 12, "thread_has_comment_chain": 1, "comment_chain_links_commit": 1, "comment_chain_touches_file": 12, "issue_chain_has_fix_outcome": 1, "issue_chain_has_comment_chain": 1}, "node_count": 110, "node_types": {"repo": 1, "commit": 1, "thread": 1, "comment": 1, "pr_file": 100, "fix_outcome": 1, "issue_chain": 1, "link_quality": 3, "comment_chain": 1}, "query_type": "motif_query", "thread_key": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1", "issue_number": "1", "quality_tiers": {"weak_supervision": 3}, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "training_usage": "assumption_check", "source_motif_id": "graph-pattern-motif-thread-ff57c832d8103243", "graph_gold_label": "weak_supervision_needs_review", "changed_file_labels": {"api_or_backend": 4, "ui_or_frontend": 68, "source_or_other": 324, "security_or_auth": 4}}, "text": "Graph query export: Security/auth changes without enough guardrails\nQuery id: security_auth_guardrail_gaps\nQuery type: motif_query\nIntent: Assumption-check security/auth examples requiring stronger tests or CI.\nMotif: security_auth_without_guardrails\nTraining usage: assumption_check\nGraph gold label: weak_supervision_needs_review\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nEvidence:\nGraph motif: Security/auth change without enough guardrails\nMotif id: security_auth_without_guardrails\nPolarity: bad\nTraining usage: assumption_check\nSeverity: critical\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nGraph gold label: weak_supervision_needs_review\nThread graph evidence:\nGitHub issue/PR evidence subgraph\nThread: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App#1\nRepo: ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App\nIssue/PR number: 1\nGraph consistency label: weak_supervision_needs_review\nNodes: 110\nEdges: 136\nNode types: {'pr_file': 100, 'link_quality': 3, 'thread': 1, 'repo': 1, 'comment': 1, 'comment_chain': 1, 'commit': 1, 'issue_chain': 1, 'fix_outcome': 1}\nEdge types: {'thread_touches_file': 100, 'comment_chain_touches_file': 12, 'issue_chain_touches_file': 12, 'chain_has_link_quality': 3, 'repo_has_thread': 1, 'thread_has_comment': 1, 'thread_has_comment_chain': 1, 'comment_has_chain': 1, 'comment_chain_links_commit': 1, 'thread_has_issue_chain': 1, 'issue_chain_has_comment_chain': 1, 'thread_has_fix_outcome': 1, 'issue_chain_has_fix_outcome': 1}\nLabels: {'source_or_other': 81, 'ui_or_frontend': 17, 'ambiguous_needs_more_evidence': 3, 'thread_has_human_issue_and_fix_context': 2, 'issue_or_pull_request_thread': 1, 'agent_instruction_gap': 1, 'api_or_backend': 1, 'security_or_auth': 1, 'comment_has_related_commit_context': 1, 'feature': 1}\nOutcomes: {'ambiguous_needs_more_evidence': 6}\nQuality tiers: {'weak_supervision': 3}\nCI labels: {}\nCurriculum targets:\n- Train auth boundary repair with tests, permission matrices, and secret-handling checks.\n- Keep risky auth changes separate from ordinary bug-fix examples.\nAssumption checks:\n- Are auth/permission paths covered by tests?\n- Are secrets, CORS, or access rules verified rather than summarized?", "source": "foundry_mined_dataset", "repo_url": "https://github.com/ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_id": "graph-query-motif_query-ff2b6ea93eb18f9b", "synthetic": false, "gold_label": "", "graph_label": "", "source_path": "/data/distillate/foundry_data/graph_queries/security_auth_guardrail_gaps/shard-0.jsonl", "bundle_label": "", "priority_band": "", "priority_score": 0, "repo_full_name": "ZeekrBaha/Ozon-UIKit-iOS-Russian-Ecommerce-Market-App", "source_dataset": "graph_queries/security_auth_guardrail_gaps", "training_usage": "assumption_check"}}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "e2f01aea7b17c2a2", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}]}]}