{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-87693b8e08d6f70a", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-652b6f92a25bc6ff", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1e9bbd600617154", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b38889cc3d413f9", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1852a4b885b9dac1", "name": "Possibly dead Python function: noise_fwd", "shortDescription": {"text": "Possibly dead Python function: noise_fwd"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99eb8893577a43c6", "name": "Possibly dead Python function: snake1d_fwd", "shortDescription": {"text": "Possibly dead Python function: snake1d_fwd"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fdd839cf0cdaae1b", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1209adb514d70cd7", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c79d01cd9d00ba73", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d486a42732b23c7", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ef4c7fc1189e127", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-065eee91639feb20", "name": "Possibly dead Python function: cache_resolve", "shortDescription": {"text": "Possibly dead Python function: cache_resolve"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3399f8bcf3a24a81", "name": "Possibly dead Python function: kv_resolve", "shortDescription": {"text": "Possibly dead Python function: kv_resolve"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6516800e9b2bd48", "name": "Possibly dead Python function: graph_resolve", "shortDescription": {"text": "Possibly dead Python function: graph_resolve"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b434c9568a9a95ed", "name": "Possibly dead Python function: neural_resolve", "shortDescription": {"text": "Possibly dead Python function: neural_resolve"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dab72001c4cc562b", "name": "Possibly dead Python function: respond", "shortDescription": {"text": "Possibly dead Python function: respond"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c00b9e1eabaa8e27", "name": "Stray `console.log` in TS/JS \u2014 aac/aac-rs/crates/aac-web/src/bindings/mediapipe_init.js:49", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 aac/aac-rs/crates/aac-web/src/bindings/mediapipe_init.js:49"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d208b16d66342ab3", "name": "Insecure pattern 'eval_used' in joule-code/joule-code-rs/crates/joule-code-reviewer/src/llm.rs:355", "shortDescription": {"text": "Insecure pattern 'eval_used' in joule-code/joule-code-rs/crates/joule-code-reviewer/src/llm.rs:355"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-21770ca87fdcae41", "name": "Insecure pattern 'eval_used' in proof/proof-rs/crates/proof-solvers/src/prop.rs:60", "shortDescription": {"text": "Insecure pattern 'eval_used' in proof/proof-rs/crates/proof-solvers/src/prop.rs:60"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9752fd592abda10", "name": "Insecure pattern 'direct_innerhtml_assignment' in joule-ui/joule-ui-rs/crates/joule-ui-render/src/lib.rs:143", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in joule-ui/joule-ui-rs/crates/joule-ui-render/src/lib.rs:143"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-569b2da27837a802", "name": "Insecure pattern 'insert_adjacent_html' in wai/wai-web/demo/world.js:45", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in wai/wai-web/demo/world.js:45"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6727f01ec992b45", "name": "Insecure pattern 'eval_used' in eoc/eoc-rs/crates/eoc-safety/src/injection.rs:56", "shortDescription": {"text": "Insecure pattern 'eval_used' in eoc/eoc-rs/crates/eoc-safety/src/injection.rs:56"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7c6e2043fc82f4d1", "name": "Possible secret in jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs", "shortDescription": {"text": "Possible secret in jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d0399dfc3c4aade4", "name": "Insecure pattern 'exec_used' in jouleclaw/jouleclaw-rs/crates/jouleclaw-sandbox-tier/README.md:15", "shortDescription": {"text": "Insecure pattern 'exec_used' in jouleclaw/jouleclaw-rs/crates/jouleclaw-sandbox-tier/README.md:15"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a2b5d355d5303acb", "name": "Possible secret in jouleclaw/jouleclaw-rs/crates/jouleclaw-verify/src/regex_verifier.rs", "shortDescription": {"text": "Possible secret in jouleclaw/jouleclaw-rs/crates/jouleclaw-verify/src/regex_verifier.rs"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-4e152175c0adb274", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "dtolnay/rust-toolchain@stable can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f73cc94a2aebb38", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "dtolnay/rust-toolchain@stable can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2cbca45bcf7f4b9f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c5021430c0f386f5", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffaf185995805f2b", "name": "GitHub Action tracks a moving branch", "shortDescription": {"text": "GitHub Action tracks a moving branch"}, "fullDescription": {"text": "dtolnay/rust-toolchain@master can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "high", "confidence": 1.0}}, {"id": "scanner-50b9e17948e303af", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-daa8029a606b9733", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30654eb1376ea3be", "name": "Very large file: aac/aac-rs/crates/aac-web/src/defaults.rs (1130 lines)", "shortDescription": {"text": "Very large file: aac/aac-rs/crates/aac-web/src/defaults.rs (1130 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36cb8448faf2654d", "name": "Very large file: aac/aac-rs/crates/aac-core/src/vocabulary.rs (856 lines)", "shortDescription": {"text": "Very large file: aac/aac-rs/crates/aac-core/src/vocabulary.rs (856 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14299e860b8c7ce3", "name": "Very large file: joulecontract/joulecontract-rs/crates/joulecontract-receipt/src/lib.rs (1555 lines)", "shortDescription": {"text": "Very large file: joulecontract/joulecontract-rs/crates/joulecontract-receipt/src/lib.rs (1555 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a192109f67cda780", "name": "Very large file: joule-code/joule-code-rs/crates/jwp/src/frame.rs (1831 lines)", "shortDescription": {"text": "Very large file: joule-code/joule-code-rs/crates/jwp/src/frame.rs (1831 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f035ff834a27187", "name": "Very large file: joule-code/joule-code-rs/crates/joule-code-remediate/src/lib.rs (1537 lines)", "shortDescription": {"text": "Very large file: joule-code/joule-code-rs/crates/joule-code-remediate/src/lib.rs (1537 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c42be38d886100e", "name": "Very large file: openpay/crates/op-graph/src/ledger_store.rs (1501 lines)", "shortDescription": {"text": "Very large file: openpay/crates/op-graph/src/ledger_store.rs (1501 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f24ef4efc2d215e0", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/src/lib.rs (1332 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/src/lib.rs (1332 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fac4449f44b3a62", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-graph/src/lib.rs (1954 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-graph/src/lib.rs (1954 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee208afb7cb94d24", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-backend-apple/src/mps_matmul.rs (4578 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-backend-apple/src/mps_matmul.rs (4578 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4f15937ece79dd8", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs (24121 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs (24121 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1ce8ef74a891cc6", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/src/lib.rs (1523 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/src/lib.rs (1523 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b75529cc2a40f20", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-prov/src/lib.rs (1430 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-prov/src/lib.rs (1430 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1169f827126b6ffb", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/lib.rs (1530 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/lib.rs (1530 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-29b855695d51c341", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/granite_h.rs (1309 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/granite_h.rs (1309 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-107234d83a804b56", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/fabric_dispatch.rs (1409 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/fabric_dispatch.rs (1409 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e63782678c06479a", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/kv_cache_inplace.rs (1499 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/kv_cache_inplace.rs (1499 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41322b76e2b44503", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/dequant.rs (1850 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/dequant.rs (1850 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ede79a2c0068ccc9", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-policy/src/lib.rs (1363 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-policy/src/lib.rs (1363 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a88698e35593137c", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-ledger/src/lib.rs (1458 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-ledger/src/lib.rs (1458 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b34be244ceb1486", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/shader.rs (4565 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/shader.rs (4565 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9bc9342c2689f2d", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/ops.rs (1475 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/ops.rs (1475 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb2bddde1450ed75", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/lazy_load.rs (1639 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/lazy_load.rs (1639 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-494bf18450a7bbe4", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/tensor/ops.rs (2280 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/tensor/ops.rs (2280 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f156c20cd0abef48", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/diffusion.rs (5026 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/diffusion.rs (5026 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7b1e9e77cbe9048", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/llm.rs (2258 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/llm.rs (2258 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d7fac8d3cf5c15b", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/whisper.rs (1465 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/whisper.rs (1465 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c88300e5c1fa0d0f", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/ggml_graph.rs (2435 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/ggml_graph.rs (2435 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8acd2c5bb0fa8ca3", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/musicgen.rs (1261 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/musicgen.rs (1261 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a74f0f63fb2aad9", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/hunyuanvideo.rs (1311 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/hunyuanvideo.rs (1311 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f46920f3b8296c3", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/audiogen.rs (2056 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/audiogen.rs (2056 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0beb98eab79e23a7", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/florence2.rs (2429 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/florence2.rs (2429 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53464cb3d8ee21cb", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/hunyuan3d.rs (2086 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/hunyuan3d.rs (2086 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-427720bd2b0be79d", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/t5.rs (1069 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/t5.rs (1069 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2925bf1d4dcdcdbc", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/bark.rs (1207 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/bark.rs (1207 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5b69aa7cc3f264c", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/instantmesh.rs (1283 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/instantmesh.rs (1283 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b18ab63d7338beff", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/unet.rs (2139 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/unet.rs (2139 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-398cd68b4b116117", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/sana_wm.rs (4824 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/sana_wm.rs (4824 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3984a99f1304c02d", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/sam2.rs (1379 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/sam2.rs (1379 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90a16f92b42868eb", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/canary.rs (1441 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/canary.rs (1441 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-962efb65aebe46a7", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/flux.rs (1193 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/flux.rs (1193 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4075cf108fe248f2", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/worldmirror_forward.rs (2933 li", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/worldmirror_forward.rs (2933 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-babc1882bc342280", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/chatterbox.rs (1890 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/chatterbox.rs (1890 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-506d80bec21be424", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/wan.rs (1586 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/wan.rs (1586 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44e26e31af4c3ede", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/trellis.rs (1400 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/trellis.rs (1400 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd3f8e09238e8c40", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/server/mod.rs (2437 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/server/mod.rs (2437 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d04e0258c98cdef7", "name": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/modalities/three_d.rs (2540 lines)", "shortDescription": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/modalities/three_d.rs (2540 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "273 tests / 1965 src (ratio 0.14)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 182 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 439 placeholder/mock markers across 168 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f5244c669faf9e00", "name": "Agent authority lacks a verifier contract: jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/examples/AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/examples/AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e30db256ed3f937", "name": "Commented-code block (9 lines) in wai/wai-web/demo/world.js:4", "shortDescription": {"text": "Commented-code block (9 lines) in wai/wai-web/demo/world.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-14a1c2cd8c0de9cf", "name": "`fetch()` without try/.catch or AbortSignal \u2014 wai/wai-web/demo/world.js:405", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 wai/wai-web/demo/world.js:405"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-895d2de7c6b82b5c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 wai/wai-web/demo/audio.js:17", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 wai/wai-web/demo/audio.js:17"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90ec19112301c503", "name": "Commented-code block (5 lines) in wai/tools/wai_encodec_export_onnx.py:79", "shortDescription": {"text": "Commented-code block (5 lines) in wai/tools/wai_encodec_export_onnx.py:79"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4c5ed1fee201466f", "name": "Stub function `_const_none` (body is just `pass`/`return`) \u2014 wai/tools/wai_mimi_export_onnx.py:31", "shortDescription": {"text": "Stub function `_const_none` (body is just `pass`/`return`) \u2014 wai/tools/wai_mimi_export_onnx.py:31"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b716a1ab757edc5b", "name": "Commented-code block (5 lines) in wai/tools/wai_encodec_encode.py:72", "shortDescription": {"text": "Commented-code block (5 lines) in wai/tools/wai_encodec_encode.py:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-277c5bfad14c206e", "name": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_encodec_encode.py:39", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_encodec_encode.py:39"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4b02ee0571a1724", "name": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_dac_encode.py:42", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_dac_encode.py:42"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ce0c5d6ae99dda9", "name": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_mimi_encode.py:37", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_mimi_encode.py:37"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9794be5cc1d556cd", "name": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_video_bmshj2018_encode.py:53", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_video_bmshj2018_encode.py:53"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b78dfd4588a8e37", "name": "Commented-code block (6 lines) in wai/tools/wai_wavtokenizer_export_onnx.py:66", "shortDescription": {"text": "Commented-code block (6 lines) in wai/tools/wai_wavtokenizer_export_onnx.py:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4b25ba1de49b0a56", "name": "Commented-code block (6 lines) in wai/tools/wai_int_synth_qat.py:58", "shortDescription": {"text": "Commented-code block (6 lines) in wai/tools/wai_int_synth_qat.py:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d115695ae1d9ed8c", "name": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_wavtokenizer_encode.py:53", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_wavtokenizer_encode.py:53"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76a587a8cf949bfa", "name": "Commented-code block (5 lines) in jouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_tokenizer.py:32", "shortDescription": {"text": "Commented-code block (5 lines) in jouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_tokenizer.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nwai/tools/wai_elic_encode.py:log2_exact, wai/tools/wai_mlicpp_encode.py:log2_exact\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nwai/tools/wai_validate_synthetic.py:forward, wai/tools/wai_validate_synthetic.py:forward, wai/tools/wai_validate_synthetic.py:forward\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\njouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/conformance/verify_coding_window.py:canonicalise, jouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/conformance/verify_event_log.py:canonicalise, jouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/conformance/verify_stream_window.py:canonicalise, jouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/conformance/verify_ui_output.py:canonicalise\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\njouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_full_forward.py:main, jouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_embedding.py:main, jouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_tokenizer.py:main, jouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_layer0_attention.py:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21714"}, "properties": {"repository": "Transaction-Science/open-standards", "repoUrl": "https://github.com/Transaction-Science/open-standards", "branch": "main"}, "results": [{"ruleId": "scanner-87693b8e08d6f70a", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "87693b8e08d6f70a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_encodec_export_onnx.py:41"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-652b6f92a25bc6ff", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "652b6f92a25bc6ff", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_bmshj2018_export_onnx.py:32"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1e9bbd600617154", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "b1e9bbd600617154", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_mimi_export_onnx.py:45"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b38889cc3d413f9", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "1b38889cc3d413f9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_mbt2018_mean_export.py:50"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1852a4b885b9dac1", "level": "note", "message": {"text": "Possibly dead Python function: noise_fwd"}, "properties": {"repobilityId": "861fd2c3798c9385", "scanner": "scanner-primary", "fingerprint": "1852a4b885b9dac1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_snac_export.py:33"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-99eb8893577a43c6", "level": "note", "message": {"text": "Possibly dead Python function: snake1d_fwd"}, "properties": {"repobilityId": "e7a70b5941465867", "scanner": "scanner-primary", "fingerprint": "99eb8893577a43c6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_snac_export.py:37"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fdd839cf0cdaae1b", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "fdd839cf0cdaae1b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_snac_export.py:44"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1209adb514d70cd7", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "1209adb514d70cd7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_dac_export_onnx.py:37"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c79d01cd9d00ba73", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "c79d01cd9d00ba73", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_wavtokenizer_export_onnx.py:124"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d486a42732b23c7", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "7d486a42732b23c7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_validate_synthetic.py:335"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ef4c7fc1189e127", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "7ef4c7fc1189e127", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/tools/wai_int_synth_qat.py:53"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-065eee91639feb20", "level": "note", "message": {"text": "Possibly dead Python function: cache_resolve"}, "properties": {"repobilityId": "ce51c41c8e1f41bc", "scanner": "scanner-primary", "fingerprint": "065eee91639feb20", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eoc/cookbook/eoc-cascade.py:87"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3399f8bcf3a24a81", "level": "note", "message": {"text": "Possibly dead Python function: kv_resolve"}, "properties": {"repobilityId": "9fb870fcf91b8b7e", "scanner": "scanner-primary", "fingerprint": "3399f8bcf3a24a81", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eoc/cookbook/eoc-cascade.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6516800e9b2bd48", "level": "note", "message": {"text": "Possibly dead Python function: graph_resolve"}, "properties": {"repobilityId": "5e0a1a893a04f9be", "scanner": "scanner-primary", "fingerprint": "a6516800e9b2bd48", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eoc/cookbook/eoc-cascade.py:138"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b434c9568a9a95ed", "level": "note", "message": {"text": "Possibly dead Python function: neural_resolve"}, "properties": {"repobilityId": "9dde4ee7425d15b9", "scanner": "scanner-primary", "fingerprint": "b434c9568a9a95ed", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eoc/cookbook/eoc-cascade.py:156"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dab72001c4cc562b", "level": "note", "message": {"text": "Possibly dead Python function: respond"}, "properties": {"repobilityId": "fdb128d991099665", "scanner": "scanner-primary", "fingerprint": "dab72001c4cc562b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jouleclaw/jouleclaw-rs/crates/jouleclaw-hydra-client/clients/python/jclaw_hydra/client.py:56"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c00b9e1eabaa8e27", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 aac/aac-rs/crates/aac-web/src/bindings/mediapipe_init.js:49"}, "properties": {"repobilityId": "907a17db4248d73d", "scanner": "scanner-primary", "fingerprint": "c00b9e1eabaa8e27", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-d208b16d66342ab3", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in joule-code/joule-code-rs/crates/joule-code-reviewer/src/llm.rs:355"}, "properties": {"repobilityId": "446ac99bb350ee42", "scanner": "scanner-primary", "fingerprint": "d208b16d66342ab3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "joule-code/joule-code-rs/crates/joule-code-reviewer/src/llm.rs"}, "region": {"startLine": 355}}}]}, {"ruleId": "scanner-21770ca87fdcae41", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in proof/proof-rs/crates/proof-solvers/src/prop.rs:60"}, "properties": {"repobilityId": "d4eeac49a4d75fc3", "scanner": "scanner-primary", "fingerprint": "21770ca87fdcae41", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "proof/proof-rs/crates/proof-solvers/src/prop.rs"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-d9752fd592abda10", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in joule-ui/joule-ui-rs/crates/joule-ui-render/src/lib.rs:143"}, "properties": {"repobilityId": "13422683cb1fcfe0", "scanner": "scanner-primary", "fingerprint": "d9752fd592abda10", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "joule-ui/joule-ui-rs/crates/joule-ui-render/src/lib.rs"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-569b2da27837a802", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in wai/wai-web/demo/world.js:45"}, "properties": {"repobilityId": "159b911b490b1cf8", "scanner": "scanner-primary", "fingerprint": "569b2da27837a802", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/wai-web/demo/world.js"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-c6727f01ec992b45", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in eoc/eoc-rs/crates/eoc-safety/src/injection.rs:56"}, "properties": {"repobilityId": "d119261faa9ad69d", "scanner": "scanner-primary", "fingerprint": "c6727f01ec992b45", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eoc/eoc-rs/crates/eoc-safety/src/injection.rs"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-7c6e2043fc82f4d1", "level": "error", "message": {"text": "Possible secret in jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs"}, "properties": {"repobilityId": "0e358e07cb30d75f", "scanner": "scanner-primary", "fingerprint": "7c6e2043fc82f4d1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs"}, "region": {"startLine": 23488}}}]}, {"ruleId": "scanner-d0399dfc3c4aade4", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in jouleclaw/jouleclaw-rs/crates/jouleclaw-sandbox-tier/README.md:15"}, "properties": {"repobilityId": "28c91fc522b5b28b", "scanner": "scanner-primary", "fingerprint": "d0399dfc3c4aade4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jouleclaw/jouleclaw-rs/crates/jouleclaw-sandbox-tier/README.md"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-a2b5d355d5303acb", "level": "error", "message": {"text": "Possible secret in jouleclaw/jouleclaw-rs/crates/jouleclaw-verify/src/regex_verifier.rs"}, "properties": {"repobilityId": "fce0904a2cb872bb", "scanner": "scanner-primary", "fingerprint": "a2b5d355d5303acb", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jouleclaw/jouleclaw-rs/crates/jouleclaw-verify/src/regex_verifier.rs"}, "region": {"startLine": 125}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2683266edbddb550", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "46bb5751b209160d", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2683266edbddb550", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "46bb5751b209160d", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2683266edbddb550", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "46bb5751b209160d", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2683266edbddb550", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-4e152175c0adb274", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "46bb5751b209160d", "scanner": "scanner-primary", "fingerprint": "4e152175c0adb274", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "openpay/.github/workflows/ci.yml"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-5f73cc94a2aebb38", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bfecc538c15150ad", "scanner": "scanner-primary", "fingerprint": "5f73cc94a2aebb38", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/.github/workflows/ci.yml"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-5f73cc94a2aebb38", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b4eaa39d413ddab7", "scanner": "scanner-primary", "fingerprint": "5f73cc94a2aebb38", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/.github/workflows/ci.yml"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-5f73cc94a2aebb38", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bfecc538c15150ad", "scanner": "scanner-primary", "fingerprint": "5f73cc94a2aebb38", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/.github/workflows/ci.yml"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-5f73cc94a2aebb38", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "22d35b2bc71be0f5", "scanner": "scanner-primary", "fingerprint": "5f73cc94a2aebb38", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wai/.github/workflows/ci.yml"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-2cbca45bcf7f4b9f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "80f7f7bd93d70ca4", "scanner": "scanner-primary", "fingerprint": "2cbca45bcf7f4b9f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/conformance.yml"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-2cbca45bcf7f4b9f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "80f7f7bd93d70ca4", "scanner": "scanner-primary", "fingerprint": "2cbca45bcf7f4b9f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/conformance.yml"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-2cbca45bcf7f4b9f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "80f7f7bd93d70ca4", "scanner": "scanner-primary", "fingerprint": "2cbca45bcf7f4b9f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/conformance.yml"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-c5021430c0f386f5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1aae335c1c963122", "scanner": "scanner-primary", "fingerprint": "c5021430c0f386f5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/joule-code-conformance.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-ffaf185995805f2b", "level": "error", "message": {"text": "GitHub Action tracks a moving branch"}, "properties": {"repobilityId": "91d6ceec9bfa0612", "scanner": "scanner-primary", "fingerprint": "ffaf185995805f2b", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/joule-code-conformance.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-c5021430c0f386f5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fd923ce7caa8effc", "scanner": "scanner-primary", "fingerprint": "c5021430c0f386f5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/joule-code-conformance.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-50b9e17948e303af", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2508eb55a503d2b9", "scanner": "scanner-primary", "fingerprint": "50b9e17948e303af", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/jouleclaw-public-surface-documented.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-50b9e17948e303af", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5f9da84ad5d4b98b", "scanner": "scanner-primary", "fingerprint": "50b9e17948e303af", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/jouleclaw-public-surface-documented.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-50b9e17948e303af", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "eb3d7b22d24715d6", "scanner": "scanner-primary", "fingerprint": "50b9e17948e303af", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/jouleclaw-public-surface-documented.yml"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-daa8029a606b9733", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ffc73ef1ea2ab51f", "scanner": "scanner-primary", "fingerprint": "daa8029a606b9733", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/no-vanity-metrics.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-30654eb1376ea3be", "level": "note", "message": {"text": "Very large file: aac/aac-rs/crates/aac-web/src/defaults.rs (1130 lines)"}, "properties": {"repobilityId": "4434f6da80254c53", "scanner": "scanner-primary", "fingerprint": "30654eb1376ea3be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-36cb8448faf2654d", "level": "note", "message": {"text": "Very large file: aac/aac-rs/crates/aac-core/src/vocabulary.rs (856 lines)"}, "properties": {"repobilityId": "218b75ca0207e2c7", "scanner": "scanner-primary", "fingerprint": "36cb8448faf2654d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-14299e860b8c7ce3", "level": "note", "message": {"text": "Very large file: joulecontract/joulecontract-rs/crates/joulecontract-receipt/src/lib.rs (1555 lines)"}, "properties": {"repobilityId": "38742669c99441d3", "scanner": "scanner-primary", "fingerprint": "14299e860b8c7ce3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a192109f67cda780", "level": "note", "message": {"text": "Very large file: joule-code/joule-code-rs/crates/jwp/src/frame.rs (1831 lines)"}, "properties": {"repobilityId": "fd9e9662dfcceca4", "scanner": "scanner-primary", "fingerprint": "a192109f67cda780", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7f035ff834a27187", "level": "note", "message": {"text": "Very large file: joule-code/joule-code-rs/crates/joule-code-remediate/src/lib.rs (1537 lines)"}, "properties": {"repobilityId": "4258f583f89b4d84", "scanner": "scanner-primary", "fingerprint": "7f035ff834a27187", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9c42be38d886100e", "level": "note", "message": {"text": "Very large file: openpay/crates/op-graph/src/ledger_store.rs (1501 lines)"}, "properties": {"repobilityId": "28f66836ee838b95", "scanner": "scanner-primary", "fingerprint": "9c42be38d886100e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f24ef4efc2d215e0", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/src/lib.rs (1332 lines)"}, "properties": {"repobilityId": "4816253c721b4197", "scanner": "scanner-primary", "fingerprint": "f24ef4efc2d215e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4fac4449f44b3a62", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-graph/src/lib.rs (1954 lines)"}, "properties": {"repobilityId": "024f6e4723a665a8", "scanner": "scanner-primary", "fingerprint": "4fac4449f44b3a62", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ee208afb7cb94d24", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-backend-apple/src/mps_matmul.rs (4578 lines)"}, "properties": {"repobilityId": "5d95d25a0651f361", "scanner": "scanner-primary", "fingerprint": "ee208afb7cb94d24", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e4f15937ece79dd8", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-tools/src/tools.rs (24121 lines)"}, "properties": {"repobilityId": "b9d32a31102b7ab8", "scanner": "scanner-primary", "fingerprint": "e4f15937ece79dd8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f1ce8ef74a891cc6", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-jcr1/src/lib.rs (1523 lines)"}, "properties": {"repobilityId": "24d983a73d404d88", "scanner": "scanner-primary", "fingerprint": "f1ce8ef74a891cc6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3b75529cc2a40f20", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-prov/src/lib.rs (1430 lines)"}, "properties": {"repobilityId": "357cca8699e4bda1", "scanner": "scanner-primary", "fingerprint": "3b75529cc2a40f20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1169f827126b6ffb", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/lib.rs (1530 lines)"}, "properties": {"repobilityId": "e837190606242a97", "scanner": "scanner-primary", "fingerprint": "1169f827126b6ffb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-29b855695d51c341", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/granite_h.rs (1309 lines)"}, "properties": {"repobilityId": "63355d8d0a606163", "scanner": "scanner-primary", "fingerprint": "29b855695d51c341", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-107234d83a804b56", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/fabric_dispatch.rs (1409 lines)"}, "properties": {"repobilityId": "c6fe82f76eedcf8b", "scanner": "scanner-primary", "fingerprint": "107234d83a804b56", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e63782678c06479a", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/kv_cache_inplace.rs (1499 lines)"}, "properties": {"repobilityId": "206931714e1a79da", "scanner": "scanner-primary", "fingerprint": "e63782678c06479a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-41322b76e2b44503", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf/src/dequant.rs (1850 lines)"}, "properties": {"repobilityId": "0fb8a904ff70f445", "scanner": "scanner-primary", "fingerprint": "41322b76e2b44503", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ede79a2c0068ccc9", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-policy/src/lib.rs (1363 lines)"}, "properties": {"repobilityId": "6626329376e9341f", "scanner": "scanner-primary", "fingerprint": "ede79a2c0068ccc9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a88698e35593137c", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-ledger/src/lib.rs (1458 lines)"}, "properties": {"repobilityId": "c9110e5ea9f5b958", "scanner": "scanner-primary", "fingerprint": "a88698e35593137c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5b34be244ceb1486", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/shader.rs (4565 lines)"}, "properties": {"repobilityId": "6c4babac26b62cf3", "scanner": "scanner-primary", "fingerprint": "5b34be244ceb1486", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a9bc9342c2689f2d", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/ops.rs (1475 lines)"}, "properties": {"repobilityId": "826392832894a92f", "scanner": "scanner-primary", "fingerprint": "a9bc9342c2689f2d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-eb2bddde1450ed75", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/hal/metal/lazy_load.rs (1639 lines)"}, "properties": {"repobilityId": "3705c503753fbe61", "scanner": "scanner-primary", "fingerprint": "eb2bddde1450ed75", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-494bf18450a7bbe4", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/tensor/ops.rs (2280 lines)"}, "properties": {"repobilityId": "328e4491bdbc7829", "scanner": "scanner-primary", "fingerprint": "494bf18450a7bbe4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f156c20cd0abef48", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/diffusion.rs (5026 lines)"}, "properties": {"repobilityId": "c5aac736d975e590", "scanner": "scanner-primary", "fingerprint": "f156c20cd0abef48", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b7b1e9e77cbe9048", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/llm.rs (2258 lines)"}, "properties": {"repobilityId": "cdc3039093d55883", "scanner": "scanner-primary", "fingerprint": "b7b1e9e77cbe9048", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6d7fac8d3cf5c15b", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/whisper.rs (1465 lines)"}, "properties": {"repobilityId": "cd4e4321ce8163e5", "scanner": "scanner-primary", "fingerprint": "6d7fac8d3cf5c15b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c88300e5c1fa0d0f", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/ggml_graph.rs (2435 lines)"}, "properties": {"repobilityId": "5fe9be76efe0c413", "scanner": "scanner-primary", "fingerprint": "c88300e5c1fa0d0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8acd2c5bb0fa8ca3", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/musicgen.rs (1261 lines)"}, "properties": {"repobilityId": "4ede06ca0b64d1cb", "scanner": "scanner-primary", "fingerprint": "8acd2c5bb0fa8ca3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7a74f0f63fb2aad9", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/hunyuanvideo.rs (1311 lines)"}, "properties": {"repobilityId": "b6cd34779ea92c89", "scanner": "scanner-primary", "fingerprint": "7a74f0f63fb2aad9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2f46920f3b8296c3", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/audiogen.rs (2056 lines)"}, "properties": {"repobilityId": "1ee686c476150279", "scanner": "scanner-primary", "fingerprint": "2f46920f3b8296c3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0beb98eab79e23a7", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/florence2.rs (2429 lines)"}, "properties": {"repobilityId": "e486d6edb03a411e", "scanner": "scanner-primary", "fingerprint": "0beb98eab79e23a7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-53464cb3d8ee21cb", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/hunyuan3d.rs (2086 lines)"}, "properties": {"repobilityId": "f1a7a0717b872143", "scanner": "scanner-primary", "fingerprint": "53464cb3d8ee21cb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-427720bd2b0be79d", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/t5.rs (1069 lines)"}, "properties": {"repobilityId": "4d315108ac22c980", "scanner": "scanner-primary", "fingerprint": "427720bd2b0be79d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2925bf1d4dcdcdbc", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/bark.rs (1207 lines)"}, "properties": {"repobilityId": "769dcd4d3a3804d1", "scanner": "scanner-primary", "fingerprint": "2925bf1d4dcdcdbc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e5b69aa7cc3f264c", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/instantmesh.rs (1283 lines)"}, "properties": {"repobilityId": "962ebcc585beb986", "scanner": "scanner-primary", "fingerprint": "e5b69aa7cc3f264c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b18ab63d7338beff", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/unet.rs (2139 lines)"}, "properties": {"repobilityId": "ea3e295c10235cab", "scanner": "scanner-primary", "fingerprint": "b18ab63d7338beff", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-398cd68b4b116117", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/sana_wm.rs (4824 lines)"}, "properties": {"repobilityId": "764dc68b5b74536a", "scanner": "scanner-primary", "fingerprint": "398cd68b4b116117", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3984a99f1304c02d", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/sam2.rs (1379 lines)"}, "properties": {"repobilityId": "08c61274d3d7e760", "scanner": "scanner-primary", "fingerprint": "3984a99f1304c02d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-90a16f92b42868eb", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/canary.rs (1441 lines)"}, "properties": {"repobilityId": "dc56d1c4aba4dfa9", "scanner": "scanner-primary", "fingerprint": "90a16f92b42868eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-962efb65aebe46a7", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/flux.rs (1193 lines)"}, "properties": {"repobilityId": "bb1b8f2cb4006706", "scanner": "scanner-primary", "fingerprint": "962efb65aebe46a7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4075cf108fe248f2", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/worldmirror_forward.rs (2933 lines)"}, "properties": {"repobilityId": "f2ba058a1a519bd4", "scanner": "scanner-primary", "fingerprint": "4075cf108fe248f2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-babc1882bc342280", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/chatterbox.rs (1890 lines)"}, "properties": {"repobilityId": "bb28b22973a677ae", "scanner": "scanner-primary", "fingerprint": "babc1882bc342280", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-506d80bec21be424", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/wan.rs (1586 lines)"}, "properties": {"repobilityId": "a1cefbb69966cc79", "scanner": "scanner-primary", "fingerprint": "506d80bec21be424", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-44e26e31af4c3ede", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/inference/architecture/trellis.rs (1400 lines)"}, "properties": {"repobilityId": "7883948cabfab15f", "scanner": "scanner-primary", "fingerprint": "44e26e31af4c3ede", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-dd3f8e09238e8c40", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/server/mod.rs (2437 lines)"}, "properties": {"repobilityId": "002be27a13cac892", "scanner": "scanner-primary", "fingerprint": "dd3f8e09238e8c40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d04e0258c98cdef7", "level": "note", "message": {"text": "Very large file: jouleclaw/jouleclaw-rs/crates/jouleclaw-omni/src/modalities/three_d.rs (2540 lines)"}, "properties": {"repobilityId": "a816ceb789d222d3", "scanner": "scanner-primary", "fingerprint": "d04e0258c98cdef7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "f3b7cbce27146dad", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "54becf35db8de583", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "8d41bf4a74fc14c6", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "0b9820d5c9ae179c", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "6a3786ec061fe52f", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-f5244c669faf9e00", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/examples/AGENTS.md"}, "properties": {"repobilityId": "9519883897055cd5", "scanner": "scanner-primary", "fingerprint": "f5244c669faf9e00", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "jouleclaw/jouleclaw-rs/crates/jouleclaw-stack/examples/AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e30db256ed3f937", "level": "none", "message": {"text": "Commented-code block (9 lines) in wai/wai-web/demo/world.js:4"}, "properties": {"repobilityId": "6b9ed1cf10471fa2", "scanner": "scanner-primary", "fingerprint": "4e30db256ed3f937", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-14a1c2cd8c0de9cf", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 wai/wai-web/demo/world.js:405"}, "properties": {"repobilityId": "776ff85e57628019", "scanner": "scanner-primary", "fingerprint": "14a1c2cd8c0de9cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-895d2de7c6b82b5c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 wai/wai-web/demo/audio.js:17"}, "properties": {"repobilityId": "6c50e7c489d67db2", "scanner": "scanner-primary", "fingerprint": "895d2de7c6b82b5c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-90ec19112301c503", "level": "none", "message": {"text": "Commented-code block (5 lines) in wai/tools/wai_encodec_export_onnx.py:79"}, "properties": {"repobilityId": "8f5a06adb6b27f3f", "scanner": "scanner-primary", "fingerprint": "90ec19112301c503", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4c5ed1fee201466f", "level": "note", "message": {"text": "Stub function `_const_none` (body is just `pass`/`return`) \u2014 wai/tools/wai_mimi_export_onnx.py:31"}, "properties": {"repobilityId": "f1782641b8d6a3b1", "scanner": "scanner-primary", "fingerprint": "4c5ed1fee201466f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-b716a1ab757edc5b", "level": "none", "message": {"text": "Commented-code block (5 lines) in wai/tools/wai_encodec_encode.py:72"}, "properties": {"repobilityId": "8c605f92f984f6b9", "scanner": "scanner-primary", "fingerprint": "b716a1ab757edc5b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-277c5bfad14c206e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_encodec_encode.py:39"}, "properties": {"repobilityId": "89d4e864a75a11fa", "scanner": "scanner-primary", "fingerprint": "277c5bfad14c206e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a4b02ee0571a1724", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_dac_encode.py:42"}, "properties": {"repobilityId": "c12be316a1e60603", "scanner": "scanner-primary", "fingerprint": "a4b02ee0571a1724", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2ce0c5d6ae99dda9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_mimi_encode.py:37"}, "properties": {"repobilityId": "ecb097834b34f20b", "scanner": "scanner-primary", "fingerprint": "2ce0c5d6ae99dda9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9794be5cc1d556cd", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_video_bmshj2018_encode.py:53"}, "properties": {"repobilityId": "6fec2bbf02fc64ff", "scanner": "scanner-primary", "fingerprint": "9794be5cc1d556cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5b78dfd4588a8e37", "level": "none", "message": {"text": "Commented-code block (6 lines) in wai/tools/wai_wavtokenizer_export_onnx.py:66"}, "properties": {"repobilityId": "8d57e5d40e041a1c", "scanner": "scanner-primary", "fingerprint": "5b78dfd4588a8e37", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4b25ba1de49b0a56", "level": "none", "message": {"text": "Commented-code block (6 lines) in wai/tools/wai_int_synth_qat.py:58"}, "properties": {"repobilityId": "6f98ee2546cb87c1", "scanner": "scanner-primary", "fingerprint": "4b25ba1de49b0a56", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d115695ae1d9ed8c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 wai/tools/wai_wavtokenizer_encode.py:53"}, "properties": {"repobilityId": "ff00da8200d2d48e", "scanner": "scanner-primary", "fingerprint": "d115695ae1d9ed8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-76a587a8cf949bfa", "level": "none", "message": {"text": "Commented-code block (5 lines) in jouleclaw/jouleclaw-rs/crates/jouleclaw-deberta/scripts/hf_reference_tokenizer.py:32"}, "properties": {"repobilityId": "0854c16c23f06793", "scanner": "scanner-primary", "fingerprint": "76a587a8cf949bfa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b041d08824df6514", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "161baabd600652a8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "583ab561decf3a09", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "1e0333fbbdc0f60b", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "508ff6c94a8a5322", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d253b7b8b15773f7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "bccefbe2497c1d27", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "7aa59bd00b49a3c1", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}